4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.343166] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1546.344671] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1546.346091] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1546.347534] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1546.348956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1546.350366] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1546.351817] CPU: 0 PID: 8898 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1546.353383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.355264] Call Trace: [ 1546.355872] dump_stack+0x107/0x167 [ 1546.356693] should_fail.cold+0x5/0xa [ 1546.357557] should_failslab+0x5/0x20 [ 1546.358425] __kmalloc_track_caller+0x79/0x370 [ 1546.359459] ? parse_opts.part.0+0x8e/0x340 [ 1546.360272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1546.360437] kstrdup+0x36/0x70 [ 1546.360460] parse_opts.part.0+0x8e/0x340 [ 1546.363780] ? p9_fd_show_options+0x1c0/0x1c0 [ 1546.364816] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1546.366006] ? quarantine_put+0x8b/0x1a0 [ 1546.366958] ? trace_hardirqs_on+0x5b/0x180 [ 1546.367936] ? kfree+0xd7/0x340 [ 1546.368691] p9_fd_create+0x98/0x4a0 [ 1546.369533] ? p9_conn_create+0x510/0x510 [ 1546.370468] ? p9_client_create+0x798/0x1230 [ 1546.371474] ? kfree+0xd7/0x340 [ 1546.372218] ? do_raw_spin_unlock+0x4f/0x220 [ 1546.373220] p9_client_create+0x7ff/0x1230 [ 1546.374189] ? p9_client_flush+0x430/0x430 [ 1546.375163] ? trace_hardirqs_on+0x5b/0x180 [ 1546.376148] ? lockdep_init_map_type+0x2c7/0x780 [ 1546.377224] ? __raw_spin_lock_init+0x36/0x110 [ 1546.378265] v9fs_session_init+0x1dd/0x1680 [ 1546.379261] ? lock_release+0x680/0x680 [ 1546.380169] ? kmem_cache_alloc_trace+0x151/0x320 [ 1546.381258] ? v9fs_show_options+0x690/0x690 [ 1546.382263] ? trace_hardirqs_on+0x5b/0x180 [ 1546.383258] ? kasan_unpoison_shadow+0x33/0x50 [ 1546.384293] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.385438] v9fs_mount+0x79/0x8f0 [ 1546.386244] ? v9fs_write_inode+0x60/0x60 [ 1546.387188] legacy_get_tree+0x105/0x220 [ 1546.388104] vfs_get_tree+0x8e/0x300 [ 1546.389076] path_mount+0x1490/0x21e0 [ 1546.390222] ? strncpy_from_user+0x9e/0x470 [ 1546.391505] ? finish_automount+0xa90/0xa90 [ 1546.392767] ? getname_flags.part.0+0x1dd/0x4f0 [ 1546.394121] ? _copy_from_user+0xfb/0x1b0 [ 1546.395338] __x64_sys_mount+0x282/0x300 [ 1546.396522] ? copy_mnt_ns+0xa00/0xa00 [ 1546.397669] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1546.399199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1546.400699] do_syscall_64+0x33/0x40 [ 1546.401736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.402958] RIP: 0033:0x7ff9c58eab19 [ 1546.403868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.408314] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1546.410047] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1546.411690] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1546.413317] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1546.414939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1546.416554] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 [ 1546.420725] 9pnet: Insufficient options for proto=fd [ 1546.436749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1546.441186] FAULT_INJECTION: forcing a failure. [ 1546.441186] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.443814] CPU: 0 PID: 8916 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1546.445374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.447272] Call Trace: [ 1546.447872] dump_stack+0x107/0x167 [ 1546.448704] should_fail.cold+0x5/0xa [ 1546.449566] should_failslab+0x5/0x20 [ 1546.450428] __kmalloc_track_caller+0x79/0x370 [ 1546.451462] ? p9_client_create+0x51e/0x1230 [ 1546.452462] kmemdup_nul+0x2d/0xa0 [ 1546.453265] p9_client_create+0x51e/0x1230 [ 1546.454225] ? p9_client_flush+0x430/0x430 [ 1546.455193] ? trace_hardirqs_on+0x5b/0x180 [ 1546.456169] ? lockdep_init_map_type+0x2c7/0x780 [ 1546.457244] ? __raw_spin_lock_init+0x36/0x110 [ 1546.458284] v9fs_session_init+0x1dd/0x1680 [ 1546.459274] ? lock_release+0x680/0x680 [ 1546.460187] ? kmem_cache_alloc_trace+0x151/0x320 [ 1546.461276] ? v9fs_show_options+0x690/0x690 [ 1546.462278] ? trace_hardirqs_on+0x5b/0x180 [ 1546.463272] ? kasan_unpoison_shadow+0x33/0x50 [ 1546.464302] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.465449] v9fs_mount+0x79/0x8f0 [ 1546.466251] ? v9fs_write_inode+0x60/0x60 [ 1546.467234] legacy_get_tree+0x105/0x220 [ 1546.468168] vfs_get_tree+0x8e/0x300 [ 1546.469015] path_mount+0x1490/0x21e0 [ 1546.469896] ? strncpy_from_user+0x9e/0x470 [ 1546.470887] ? finish_automount+0xa90/0xa90 [ 1546.471872] ? getname_flags.part.0+0x1dd/0x4f0 [ 1546.472934] ? _copy_from_user+0xfb/0x1b0 [ 1546.473884] __x64_sys_mount+0x282/0x300 [ 1546.474817] ? copy_mnt_ns+0xa00/0xa00 [ 1546.475712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1546.476916] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1546.478094] do_syscall_64+0x33/0x40 [ 1546.478960] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.480125] RIP: 0033:0x7f644830fb19 [ 1546.480974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.485162] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1546.486901] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1546.488513] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1546.490124] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1546.492005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1546.494081] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 11:39:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 20) [ 1546.522933] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1546.546394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.547903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:39:02 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 29) [ 1546.583256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1546.587850] FAULT_INJECTION: forcing a failure. [ 1546.587850] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.590150] CPU: 1 PID: 8920 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1546.591505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.593139] Call Trace: [ 1546.593660] dump_stack+0x107/0x167 [ 1546.594375] should_fail.cold+0x5/0xa [ 1546.595131] ? p9_client_create+0xaf/0x1230 [ 1546.595984] should_failslab+0x5/0x20 [ 1546.596736] kmem_cache_alloc_trace+0x55/0x320 [ 1546.597636] ? find_held_lock+0x2c/0x110 [ 1546.598436] p9_client_create+0xaf/0x1230 [ 1546.599267] ? lock_downgrade+0x6d0/0x6d0 [ 1546.600083] ? p9_client_flush+0x430/0x430 [ 1546.600922] ? trace_hardirqs_on+0x5b/0x180 [ 1546.601678] ? lockdep_init_map_type+0x2c7/0x780 [ 1546.602475] ? __raw_spin_lock_init+0x36/0x110 [ 1546.603261] v9fs_session_init+0x1dd/0x1680 [ 1546.603992] ? lock_release+0x680/0x680 [ 1546.604666] ? kmem_cache_alloc_trace+0x151/0x320 [ 1546.605470] ? v9fs_show_options+0x690/0x690 [ 1546.606223] ? trace_hardirqs_on+0x5b/0x180 [ 1546.606954] ? kasan_unpoison_shadow+0x33/0x50 [ 1546.607729] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.608569] v9fs_mount+0x79/0x8f0 [ 1546.609174] ? v9fs_write_inode+0x60/0x60 [ 1546.609865] legacy_get_tree+0x105/0x220 [ 1546.610570] vfs_get_tree+0x8e/0x300 [ 1546.611190] path_mount+0x1490/0x21e0 [ 1546.611840] ? strncpy_from_user+0x9e/0x470 [ 1546.612563] ? finish_automount+0xa90/0xa90 [ 1546.613292] ? getname_flags.part.0+0x1dd/0x4f0 [ 1546.614079] ? _copy_from_user+0xfb/0x1b0 [ 1546.614794] __x64_sys_mount+0x282/0x300 [ 1546.615472] ? copy_mnt_ns+0xa00/0xa00 [ 1546.616133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1546.617012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1546.617876] do_syscall_64+0x33/0x40 [ 1546.618515] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.619381] RIP: 0033:0x7f2d92adab19 [ 1546.620004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.623135] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1546.624419] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1546.625626] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1546.626506] FAULT_INJECTION: forcing a failure. [ 1546.626506] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.626849] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1546.626867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1546.631893] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1546.633125] CPU: 0 PID: 8922 Comm: syz-executor.6 Not tainted 5.10.246 #1 11:39:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 27) [ 1546.634759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.636933] Call Trace: [ 1546.637573] dump_stack+0x107/0x167 [ 1546.638418] should_fail.cold+0x5/0xa [ 1546.639265] ? create_object.isra.0+0x3a/0xa30 [ 1546.640350] should_failslab+0x5/0x20 [ 1546.641271] kmem_cache_alloc+0x5b/0x310 [ 1546.642234] create_object.isra.0+0x3a/0xa30 [ 1546.643285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.644494] __kmalloc_track_caller+0x177/0x370 [ 1546.645594] ? p9_client_create+0x51e/0x1230 [ 1546.646650] kmemdup_nul+0x2d/0xa0 [ 1546.647491] p9_client_create+0x51e/0x1230 [ 1546.648487] ? p9_client_flush+0x430/0x430 [ 1546.649413] ? trace_hardirqs_on+0x5b/0x180 [ 1546.650446] ? lockdep_init_map_type+0x2c7/0x780 [ 1546.651579] ? __raw_spin_lock_init+0x36/0x110 [ 1546.652668] v9fs_session_init+0x1dd/0x1680 [ 1546.653699] ? lock_release+0x680/0x680 [ 1546.654662] ? kmem_cache_alloc_trace+0x151/0x320 [ 1546.655813] ? v9fs_show_options+0x690/0x690 [ 1546.656795] ? trace_hardirqs_on+0x5b/0x180 [ 1546.657707] ? kasan_unpoison_shadow+0x33/0x50 [ 1546.658804] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.660023] v9fs_mount+0x79/0x8f0 [ 1546.660873] ? v9fs_write_inode+0x60/0x60 [ 1546.661801] legacy_get_tree+0x105/0x220 [ 1546.662738] vfs_get_tree+0x8e/0x300 [ 1546.663634] path_mount+0x1490/0x21e0 [ 1546.664524] ? strncpy_from_user+0x9e/0x470 [ 1546.665471] ? finish_automount+0xa90/0xa90 [ 1546.666512] ? getname_flags.part.0+0x1dd/0x4f0 [ 1546.667626] ? _copy_from_user+0xfb/0x1b0 [ 1546.668592] __x64_sys_mount+0x282/0x300 [ 1546.669451] ? copy_mnt_ns+0xa00/0xa00 [ 1546.670351] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1546.671463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1546.672566] do_syscall_64+0x33/0x40 [ 1546.673359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.674463] RIP: 0033:0x7f644830fb19 [ 1546.675260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.679201] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1546.680820] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1546.682335] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1546.683863] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1546.685393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1546.686924] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1546.692150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.693492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.696699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.697952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.699260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1546.705359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1546.740346] FAULT_INJECTION: forcing a failure. [ 1546.740346] name failslab, interval 1, probability 0, space 0, times 0 11:39:02 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1546.742555] CPU: 1 PID: 8924 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1546.744039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.745425] Call Trace: [ 1546.745884] dump_stack+0x107/0x167 [ 1546.746515] should_fail.cold+0x5/0xa [ 1546.747171] ? create_object.isra.0+0x3a/0xa30 [ 1546.747950] should_failslab+0x5/0x20 [ 1546.748599] kmem_cache_alloc+0x5b/0x310 [ 1546.749287] ? legacy_get_tree+0x105/0x220 [ 1546.750020] ? vfs_get_tree+0x8e/0x300 [ 1546.750694] create_object.isra.0+0x3a/0xa30 [ 1546.751436] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.752300] __kmalloc_track_caller+0x177/0x370 [ 1546.753093] ? parse_opts.part.0+0x8e/0x340 [ 1546.753832] kstrdup+0x36/0x70 [ 1546.754375] parse_opts.part.0+0x8e/0x340 [ 1546.755084] ? p9_fd_show_options+0x1c0/0x1c0 [ 1546.755857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1546.756744] ? quarantine_put+0x8b/0x1a0 [ 1546.757440] ? trace_hardirqs_on+0x5b/0x180 [ 1546.758171] ? kfree+0xd7/0x340 [ 1546.758739] p9_fd_create+0x98/0x4a0 [ 1546.759368] ? p9_conn_create+0x510/0x510 [ 1546.760065] ? p9_client_create+0x798/0x1230 [ 1546.760813] ? kfree+0xd7/0x340 11:39:03 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1546.761502] ? do_raw_spin_unlock+0x4f/0x220 [ 1546.762503] p9_client_create+0x7ff/0x1230 [ 1546.763231] ? p9_client_flush+0x430/0x430 [ 1546.763956] ? trace_hardirqs_on+0x5b/0x180 [ 1546.764687] ? lockdep_init_map_type+0x2c7/0x780 [ 1546.765485] ? __raw_spin_lock_init+0x36/0x110 11:39:03 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 21) [ 1546.766273] v9fs_session_init+0x1dd/0x1680 [ 1546.767149] ? lock_release+0x680/0x680 [ 1546.767828] ? kmem_cache_alloc_trace+0x151/0x320 [ 1546.768650] ? v9fs_show_options+0x690/0x690 [ 1546.769403] ? trace_hardirqs_on+0x5b/0x180 [ 1546.770131] ? kasan_unpoison_shadow+0x33/0x50 [ 1546.770919] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.771793] v9fs_mount+0x79/0x8f0 [ 1546.772395] ? v9fs_write_inode+0x60/0x60 [ 1546.773093] legacy_get_tree+0x105/0x220 [ 1546.773784] vfs_get_tree+0x8e/0x300 [ 1546.774414] path_mount+0x1490/0x21e0 [ 1546.775085] ? strncpy_from_user+0x9e/0x470 [ 1546.775807] ? finish_automount+0xa90/0xa90 [ 1546.776540] ? getname_flags.part.0+0x1dd/0x4f0 [ 1546.777322] ? _copy_from_user+0xfb/0x1b0 [ 1546.778027] __x64_sys_mount+0x282/0x300 [ 1546.778722] ? copy_mnt_ns+0xa00/0xa00 [ 1546.779383] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1546.780272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1546.781144] do_syscall_64+0x33/0x40 [ 1546.781777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.782649] RIP: 0033:0x7ff9c58eab19 [ 1546.783278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.786410] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1546.787712] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1546.788923] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1546.790130] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1546.791348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1546.792549] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 11:39:03 executing program 7: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1546.829331] FAULT_INJECTION: forcing a failure. [ 1546.829331] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.831773] CPU: 0 PID: 8930 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1546.833246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.835011] Call Trace: [ 1546.835577] dump_stack+0x107/0x167 [ 1546.836360] should_fail.cold+0x5/0xa [ 1546.837170] ? p9_client_create+0xaf/0x1230 [ 1546.838083] should_failslab+0x5/0x20 [ 1546.838898] kmem_cache_alloc_trace+0x55/0x320 [ 1546.839867] ? find_held_lock+0x2c/0x110 [ 1546.840732] p9_client_create+0xaf/0x1230 [ 1546.841609] ? lock_downgrade+0x6d0/0x6d0 [ 1546.842498] ? p9_client_flush+0x430/0x430 [ 1546.843403] ? trace_hardirqs_on+0x5b/0x180 [ 1546.844313] ? lockdep_init_map_type+0x2c7/0x780 [ 1546.845345] ? __raw_spin_lock_init+0x36/0x110 [ 1546.846326] v9fs_session_init+0x1dd/0x1680 [ 1546.847247] ? lock_release+0x680/0x680 [ 1546.848089] ? kmem_cache_alloc_trace+0x151/0x320 [ 1546.849114] ? v9fs_show_options+0x690/0x690 [ 1546.850058] ? trace_hardirqs_on+0x5b/0x180 [ 1546.850985] ? kasan_unpoison_shadow+0x33/0x50 [ 1546.851956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.853035] v9fs_mount+0x79/0x8f0 [ 1546.853789] ? v9fs_write_inode+0x60/0x60 [ 1546.854670] legacy_get_tree+0x105/0x220 [ 1546.855533] vfs_get_tree+0x8e/0x300 [ 1546.856321] path_mount+0x1490/0x21e0 [ 1546.857135] ? strncpy_from_user+0x9e/0x470 [ 1546.858049] ? finish_automount+0xa90/0xa90 [ 1546.858979] ? getname_flags.part.0+0x1dd/0x4f0 [ 1546.859969] ? _copy_from_user+0xfb/0x1b0 [ 1546.860652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1546.860849] __x64_sys_mount+0x282/0x300 [ 1546.862905] ? copy_mnt_ns+0xa00/0xa00 [ 1546.863740] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1546.864855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1546.865952] do_syscall_64+0x33/0x40 [ 1546.866754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.867835] RIP: 0033:0x7f2d92adab19 [ 1546.868626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.872543] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1546.874147] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1546.875666] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1546.877173] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1546.878708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1546.880210] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1546.908749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:39:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1546.948312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:39:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 28) [ 1546.972094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.973189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.974218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1546.975566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.977188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.980355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.981303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.982619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1546.999909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1547.057901] FAULT_INJECTION: forcing a failure. [ 1547.057901] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.060330] CPU: 0 PID: 8943 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1547.061784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1547.063550] Call Trace: [ 1547.064114] dump_stack+0x107/0x167 [ 1547.064889] should_fail.cold+0x5/0xa [ 1547.065707] should_failslab+0x5/0x20 [ 1547.066529] __kmalloc_track_caller+0x79/0x370 [ 1547.067499] ? match_number+0xaf/0x1d0 [ 1547.068334] kmemdup_nul+0x2d/0xa0 [ 1547.069090] match_number+0xaf/0x1d0 [ 1547.069879] ? match_u64+0x190/0x190 [ 1547.070681] ? __kmalloc_track_caller+0x2c6/0x370 [ 1547.071712] ? memcpy+0x39/0x60 [ 1547.072418] parse_opts.part.0+0x1f3/0x340 [ 1547.073317] ? p9_fd_show_options+0x1c0/0x1c0 [ 1547.074276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1547.075401] ? trace_hardirqs_on+0x5b/0x180 [ 1547.076319] ? kfree+0xd7/0x340 [ 1547.077025] p9_fd_create+0x98/0x4a0 [ 1547.077815] ? p9_conn_create+0x510/0x510 [ 1547.078707] ? p9_client_create+0x798/0x1230 [ 1547.079638] ? kfree+0xd7/0x340 [ 1547.080170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1547.080340] ? do_raw_spin_unlock+0x4f/0x220 [ 1547.080364] p9_client_create+0x7ff/0x1230 [ 1547.083234] ? p9_client_flush+0x430/0x430 [ 1547.084137] ? trace_hardirqs_on+0x5b/0x180 [ 1547.085051] ? lockdep_init_map_type+0x2c7/0x780 [ 1547.086059] ? __raw_spin_lock_init+0x36/0x110 [ 1547.087044] v9fs_session_init+0x1dd/0x1680 [ 1547.087960] ? lock_release+0x680/0x680 [ 1547.088811] ? kmem_cache_alloc_trace+0x151/0x320 [ 1547.089833] ? v9fs_show_options+0x690/0x690 [ 1547.090785] ? trace_hardirqs_on+0x5b/0x180 [ 1547.091699] ? kasan_unpoison_shadow+0x33/0x50 [ 1547.092664] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1547.093737] v9fs_mount+0x79/0x8f0 [ 1547.094489] ? v9fs_write_inode+0x60/0x60 [ 1547.095377] legacy_get_tree+0x105/0x220 [ 1547.096238] vfs_get_tree+0x8e/0x300 [ 1547.097030] path_mount+0x1490/0x21e0 [ 1547.097845] ? strncpy_from_user+0x9e/0x470 [ 1547.098772] ? finish_automount+0xa90/0xa90 [ 1547.099685] ? getname_flags.part.0+0x1dd/0x4f0 [ 1547.100667] ? _copy_from_user+0xfb/0x1b0 [ 1547.101550] __x64_sys_mount+0x282/0x300 [ 1547.102415] ? copy_mnt_ns+0xa00/0xa00 [ 1547.103250] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1547.104361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1547.105455] do_syscall_64+0x33/0x40 [ 1547.106244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1547.107337] RIP: 0033:0x7ff9c58eab19 [ 1547.108123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1547.112027] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1547.113634] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1547.115151] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1547.116660] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1547.118169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1547.119688] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 11:39:03 executing program 7: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:03 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 22) [ 1547.145923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.147511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.152789] FAULT_INJECTION: forcing a failure. [ 1547.152789] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.154125] CPU: 1 PID: 8948 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1547.154901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1547.155850] Call Trace: [ 1547.156155] dump_stack+0x107/0x167 [ 1547.156569] should_fail.cold+0x5/0xa [ 1547.157005] ? create_object.isra.0+0x3a/0xa30 [ 1547.157522] should_failslab+0x5/0x20 [ 1547.157963] kmem_cache_alloc+0x5b/0x310 [ 1547.158426] ? kernel_text_address+0xf2/0x120 [ 1547.158938] create_object.isra.0+0x3a/0xa30 [ 1547.159434] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1547.160008] kmem_cache_alloc_trace+0x151/0x320 [ 1547.160533] p9_client_create+0xaf/0x1230 [ 1547.161004] ? lock_downgrade+0x6d0/0x6d0 [ 1547.161468] ? p9_client_flush+0x430/0x430 [ 1547.161943] ? trace_hardirqs_on+0x5b/0x180 [ 1547.162430] ? lockdep_init_map_type+0x2c7/0x780 [ 1547.162969] ? __raw_spin_lock_init+0x36/0x110 [ 1547.163492] v9fs_session_init+0x1dd/0x1680 [ 1547.163977] ? lock_release+0x680/0x680 [ 1547.164435] ? kmem_cache_alloc_trace+0x151/0x320 [ 1547.164977] ? v9fs_show_options+0x690/0x690 [ 1547.165477] ? trace_hardirqs_on+0x5b/0x180 [ 1547.165964] ? kasan_unpoison_shadow+0x33/0x50 [ 1547.166481] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1547.167058] v9fs_mount+0x79/0x8f0 [ 1547.167460] ? v9fs_write_inode+0x60/0x60 [ 1547.167925] legacy_get_tree+0x105/0x220 [ 1547.168387] vfs_get_tree+0x8e/0x300 [ 1547.168809] path_mount+0x1490/0x21e0 [ 1547.169242] ? strncpy_from_user+0x9e/0x470 [ 1547.169728] ? finish_automount+0xa90/0xa90 [ 1547.170218] ? getname_flags.part.0+0x1dd/0x4f0 [ 1547.170750] ? _copy_from_user+0xfb/0x1b0 [ 1547.171226] __x64_sys_mount+0x282/0x300 [ 1547.171680] ? copy_mnt_ns+0xa00/0xa00 [ 1547.172119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1547.172710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1547.173290] do_syscall_64+0x33/0x40 [ 1547.173708] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1547.174283] RIP: 0033:0x7f2d92adab19 [ 1547.174707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1547.176776] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1547.177634] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1547.178441] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1547.179254] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1547.180062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1547.180865] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1547.189801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:39:03 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:03 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1547.248129] 9pnet: Insufficient options for proto=fd [ 1547.456241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1547.470008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1547.491461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.493003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.495905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1547.519875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.521594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.523296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:39:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 30) [ 1560.644790] FAULT_INJECTION: forcing a failure. [ 1560.644790] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.647993] CPU: 1 PID: 8959 Comm: syz-executor.6 Not tainted 5.10.246 #1 11:39:16 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b53a79c01949d4f220c7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:16 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:39:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:39:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:39:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 29) 11:39:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 23) [ 1560.650102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1560.652499] Call Trace: [ 1560.653178] dump_stack+0x107/0x167 [ 1560.654112] should_fail.cold+0x5/0xa [ 1560.655099] should_failslab+0x5/0x20 [ 1560.656087] __kmalloc_track_caller+0x79/0x370 [ 1560.657262] ? parse_opts.part.0+0x8e/0x340 [ 1560.658365] kstrdup+0x36/0x70 [ 1560.659191] parse_opts.part.0+0x8e/0x340 [ 1560.660253] ? p9_fd_show_options+0x1c0/0x1c0 [ 1560.661401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1560.662748] ? quarantine_put+0x8b/0x1a0 [ 1560.663796] ? trace_hardirqs_on+0x5b/0x180 [ 1560.664905] ? kfree+0xd7/0x340 [ 1560.665770] p9_fd_create+0x98/0x4a0 [ 1560.666725] ? p9_conn_create+0x510/0x510 [ 1560.667798] ? p9_client_create+0x798/0x1230 [ 1560.668944] ? kfree+0xd7/0x340 [ 1560.669792] ? do_raw_spin_unlock+0x4f/0x220 [ 1560.670941] p9_client_create+0x7ff/0x1230 [ 1560.672036] ? p9_client_flush+0x430/0x430 [ 1560.673115] ? trace_hardirqs_on+0x5b/0x180 [ 1560.674225] ? lockdep_init_map_type+0x2c7/0x780 [ 1560.675439] ? __raw_spin_lock_init+0x36/0x110 [ 1560.676616] v9fs_session_init+0x1dd/0x1680 [ 1560.677714] ? lock_release+0x680/0x680 [ 1560.678755] ? kmem_cache_alloc_trace+0x151/0x320 [ 1560.679979] ? v9fs_show_options+0x690/0x690 [ 1560.681130] ? trace_hardirqs_on+0x5b/0x180 [ 1560.682241] ? kasan_unpoison_shadow+0x33/0x50 [ 1560.683426] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1560.684738] v9fs_mount+0x79/0x8f0 [ 1560.685656] ? v9fs_write_inode+0x60/0x60 [ 1560.686734] legacy_get_tree+0x105/0x220 [ 1560.687782] vfs_get_tree+0x8e/0x300 [ 1560.688734] path_mount+0x1490/0x21e0 [ 1560.689714] ? strncpy_from_user+0x9e/0x470 [ 1560.690839] ? finish_automount+0xa90/0xa90 [ 1560.691948] ? getname_flags.part.0+0x1dd/0x4f0 [ 1560.693156] ? _copy_from_user+0xfb/0x1b0 [ 1560.694236] __x64_sys_mount+0x282/0x300 [ 1560.695281] ? copy_mnt_ns+0xa00/0xa00 [ 1560.696284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1560.697642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1560.698980] do_syscall_64+0x33/0x40 [ 1560.699894] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1560.700975] RIP: 0033:0x7f644830fb19 [ 1560.701767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1560.705677] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1560.707299] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1560.708816] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1560.709321] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1560.710321] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1560.710333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1560.710344] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1560.710471] 9pnet: Insufficient options for proto=fd [ 1560.748138] FAULT_INJECTION: forcing a failure. [ 1560.748138] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.750611] CPU: 1 PID: 8971 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1560.752048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1560.753809] Call Trace: [ 1560.754363] dump_stack+0x107/0x167 [ 1560.755141] should_fail.cold+0x5/0xa [ 1560.755943] ? create_object.isra.0+0x3a/0xa30 [ 1560.756905] should_failslab+0x5/0x20 [ 1560.757722] kmem_cache_alloc+0x5b/0x310 [ 1560.758587] create_object.isra.0+0x3a/0xa30 [ 1560.759519] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1560.759783] FAULT_INJECTION: forcing a failure. [ 1560.759783] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.760589] __kmalloc_track_caller+0x177/0x370 [ 1560.760609] ? match_number+0xaf/0x1d0 [ 1560.760631] kmemdup_nul+0x2d/0xa0 [ 1560.760657] match_number+0xaf/0x1d0 [ 1560.766286] ? match_u64+0x190/0x190 [ 1560.767072] ? __kmalloc_track_caller+0x2c6/0x370 [ 1560.768087] ? memcpy+0x39/0x60 [ 1560.768779] parse_opts.part.0+0x1f3/0x340 [ 1560.769670] ? p9_fd_show_options+0x1c0/0x1c0 [ 1560.770620] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1560.771730] ? trace_hardirqs_on+0x5b/0x180 [ 1560.772642] ? kfree+0xd7/0x340 [ 1560.773345] p9_fd_create+0x98/0x4a0 [ 1560.774128] ? p9_conn_create+0x510/0x510 [ 1560.775001] ? p9_client_create+0x798/0x1230 [ 1560.775925] ? kfree+0xd7/0x340 [ 1560.776618] ? do_raw_spin_unlock+0x4f/0x220 [ 1560.777548] p9_client_create+0x7ff/0x1230 [ 1560.778440] ? p9_client_flush+0x430/0x430 [ 1560.779337] ? trace_hardirqs_on+0x5b/0x180 [ 1560.780240] ? lockdep_init_map_type+0x2c7/0x780 [ 1560.781237] ? __raw_spin_lock_init+0x36/0x110 [ 1560.782197] v9fs_session_init+0x1dd/0x1680 [ 1560.783111] ? lock_release+0x680/0x680 [ 1560.783950] ? kmem_cache_alloc_trace+0x151/0x320 [ 1560.784954] ? v9fs_show_options+0x690/0x690 [ 1560.785882] ? trace_hardirqs_on+0x5b/0x180 [ 1560.786791] ? kasan_unpoison_shadow+0x33/0x50 [ 1560.787746] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1560.788810] v9fs_mount+0x79/0x8f0 [ 1560.789557] ? v9fs_write_inode+0x60/0x60 [ 1560.790429] legacy_get_tree+0x105/0x220 [ 1560.791292] vfs_get_tree+0x8e/0x300 [ 1560.792076] path_mount+0x1490/0x21e0 [ 1560.792874] ? strncpy_from_user+0x9e/0x470 [ 1560.793776] ? finish_automount+0xa90/0xa90 [ 1560.794700] ? getname_flags.part.0+0x1dd/0x4f0 [ 1560.795676] ? _copy_from_user+0xfb/0x1b0 [ 1560.796561] __x64_sys_mount+0x282/0x300 [ 1560.797408] ? copy_mnt_ns+0xa00/0xa00 [ 1560.798228] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1560.799332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1560.800415] do_syscall_64+0x33/0x40 [ 1560.801194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1560.802265] RIP: 0033:0x7ff9c58eab19 [ 1560.803062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1560.806946] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1560.808543] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1560.810048] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1560.811560] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1560.813058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1560.814572] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 [ 1560.816103] CPU: 0 PID: 8973 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1560.817564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1560.819347] Call Trace: [ 1560.819912] dump_stack+0x107/0x167 [ 1560.820687] should_fail.cold+0x5/0xa [ 1560.821503] ? create_object.isra.0+0x3a/0xa30 [ 1560.822471] should_failslab+0x5/0x20 [ 1560.823289] kmem_cache_alloc+0x5b/0x310 [ 1560.824160] ? lock_downgrade+0x6d0/0x6d0 [ 1560.825058] create_object.isra.0+0x3a/0xa30 [ 1560.825987] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1560.827078] __kmalloc_track_caller+0x177/0x370 [ 1560.828057] ? p9_client_create+0x41d/0x1230 [ 1560.829001] kstrdup+0x36/0x70 [ 1560.829682] p9_client_create+0x41d/0x1230 [ 1560.830579] ? lock_downgrade+0x6d0/0x6d0 [ 1560.831468] ? p9_client_flush+0x430/0x430 [ 1560.832371] ? trace_hardirqs_on+0x5b/0x180 [ 1560.833296] ? lockdep_init_map_type+0x2c7/0x780 [ 1560.834302] ? __raw_spin_lock_init+0x36/0x110 [ 1560.835294] v9fs_session_init+0x1dd/0x1680 [ 1560.836223] ? lock_release+0x680/0x680 [ 1560.837078] ? kmem_cache_alloc_trace+0x151/0x320 [ 1560.838101] ? v9fs_show_options+0x690/0x690 [ 1560.839052] ? trace_hardirqs_on+0x5b/0x180 [ 1560.839978] ? kasan_unpoison_shadow+0x33/0x50 [ 1560.840956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1560.842034] v9fs_mount+0x79/0x8f0 [ 1560.842793] ? v9fs_write_inode+0x60/0x60 [ 1560.843668] legacy_get_tree+0x105/0x220 [ 1560.844548] vfs_get_tree+0x8e/0x300 [ 1560.845339] path_mount+0x1490/0x21e0 [ 1560.846154] ? strncpy_from_user+0x9e/0x470 [ 1560.847082] ? finish_automount+0xa90/0xa90 [ 1560.847990] ? getname_flags.part.0+0x1dd/0x4f0 [ 1560.848985] ? _copy_from_user+0xfb/0x1b0 [ 1560.849865] __x64_sys_mount+0x282/0x300 [ 1560.850733] ? copy_mnt_ns+0xa00/0xa00 [ 1560.851563] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1560.852670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1560.853768] do_syscall_64+0x33/0x40 [ 1560.854565] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1560.855669] RIP: 0033:0x7f2d92adab19 [ 1560.856452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1560.860375] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1560.861985] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1560.863508] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1560.865019] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1560.866535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1560.868058] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1560.892572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1560.915596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.917231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.918833] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1560.952238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.953828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.955562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:39:17 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 31) 11:39:17 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1561.090833] FAULT_INJECTION: forcing a failure. [ 1561.090833] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.093315] CPU: 0 PID: 8982 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1561.094771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1561.096533] Call Trace: [ 1561.097099] dump_stack+0x107/0x167 [ 1561.097879] should_fail.cold+0x5/0xa [ 1561.098695] ? create_object.isra.0+0x3a/0xa30 [ 1561.099663] should_failslab+0x5/0x20 [ 1561.100463] kmem_cache_alloc+0x5b/0x310 [ 1561.101311] ? legacy_get_tree+0x105/0x220 [ 1561.102196] ? vfs_get_tree+0x8e/0x300 [ 1561.103031] create_object.isra.0+0x3a/0xa30 [ 1561.103955] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1561.105036] __kmalloc_track_caller+0x177/0x370 [ 1561.106007] ? parse_opts.part.0+0x8e/0x340 [ 1561.106937] kstrdup+0x36/0x70 [ 1561.107608] parse_opts.part.0+0x8e/0x340 [ 1561.108479] ? p9_fd_show_options+0x1c0/0x1c0 [ 1561.109437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1561.110536] ? quarantine_put+0x8b/0x1a0 [ 1561.111395] ? trace_hardirqs_on+0x5b/0x180 [ 1561.112304] ? kfree+0xd7/0x340 [ 1561.113005] p9_fd_create+0x98/0x4a0 [ 1561.113791] ? p9_conn_create+0x510/0x510 [ 1561.114668] ? p9_client_create+0x798/0x1230 [ 1561.115599] ? kfree+0xd7/0x340 [ 1561.116295] ? do_raw_spin_unlock+0x4f/0x220 [ 1561.117222] p9_client_create+0x7ff/0x1230 [ 1561.118115] ? p9_client_flush+0x430/0x430 [ 1561.119014] ? trace_hardirqs_on+0x5b/0x180 [ 1561.119921] ? lockdep_init_map_type+0x2c7/0x780 [ 1561.120922] ? __raw_spin_lock_init+0x36/0x110 [ 1561.121891] v9fs_session_init+0x1dd/0x1680 [ 1561.122811] ? lock_release+0x680/0x680 [ 1561.123661] ? kmem_cache_alloc_trace+0x151/0x320 [ 1561.124681] ? v9fs_show_options+0x690/0x690 [ 1561.125614] ? trace_hardirqs_on+0x5b/0x180 [ 1561.126517] ? kasan_unpoison_shadow+0x33/0x50 [ 1561.127487] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1561.128558] v9fs_mount+0x79/0x8f0 [ 1561.129305] ? v9fs_write_inode+0x60/0x60 [ 1561.130174] legacy_get_tree+0x105/0x220 [ 1561.131039] vfs_get_tree+0x8e/0x300 [ 1561.131831] path_mount+0x1490/0x21e0 [ 1561.132640] ? strncpy_from_user+0x9e/0x470 [ 1561.133550] ? finish_automount+0xa90/0xa90 [ 1561.134449] ? getname_flags.part.0+0x1dd/0x4f0 [ 1561.135446] ? _copy_from_user+0xfb/0x1b0 [ 1561.136332] __x64_sys_mount+0x282/0x300 [ 1561.137179] ? copy_mnt_ns+0xa00/0xa00 [ 1561.138003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1561.139126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1561.140216] do_syscall_64+0x33/0x40 [ 1561.141008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1561.142087] RIP: 0033:0x7f644830fb19 [ 1561.142881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1561.146781] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1561.148389] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1561.149884] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1561.151402] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1561.152907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1561.154407] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1561.208269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1561.310108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.311673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.315274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:39:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) 11:39:31 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 32) 11:39:31 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 30) [ 1575.448501] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1575.455680] FAULT_INJECTION: forcing a failure. [ 1575.455680] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.458615] CPU: 1 PID: 8994 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1575.460385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1575.462829] Call Trace: 11:39:31 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 24) 11:39:31 executing program 7: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1575.463528] dump_stack+0x107/0x167 [ 1575.464649] should_fail.cold+0x5/0xa [ 1575.465649] should_failslab+0x5/0x20 [ 1575.466628] __kmalloc_track_caller+0x79/0x370 [ 1575.467808] ? match_number+0xaf/0x1d0 [ 1575.468810] kmemdup_nul+0x2d/0xa0 [ 1575.469730] match_number+0xaf/0x1d0 [ 1575.470693] ? match_u64+0x190/0x190 [ 1575.471661] ? __kmalloc_track_caller+0x2c6/0x370 [ 1575.472916] ? memcpy+0x39/0x60 [ 1575.473787] parse_opts.part.0+0x1f3/0x340 [ 1575.474915] ? p9_fd_show_options+0x1c0/0x1c0 [ 1575.476086] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.477465] ? trace_hardirqs_on+0x5b/0x180 [ 1575.478590] ? kfree+0xd7/0x340 [ 1575.479456] p9_fd_create+0x98/0x4a0 [ 1575.480414] ? p9_conn_create+0x510/0x510 [ 1575.481487] ? p9_client_create+0x798/0x1230 [ 1575.482627] ? kfree+0xd7/0x340 [ 1575.483481] ? do_raw_spin_unlock+0x4f/0x220 [ 1575.484632] p9_client_create+0x7ff/0x1230 [ 1575.485728] ? p9_client_flush+0x430/0x430 [ 1575.486843] ? trace_hardirqs_on+0x5b/0x180 [ 1575.487963] ? lockdep_init_map_type+0x2c7/0x780 [ 1575.489183] ? __raw_spin_lock_init+0x36/0x110 [ 1575.490358] v9fs_session_init+0x1dd/0x1680 [ 1575.491479] ? lock_release+0x680/0x680 [ 1575.492509] ? kmem_cache_alloc_trace+0x151/0x320 [ 1575.493754] ? v9fs_show_options+0x690/0x690 [ 1575.494899] ? trace_hardirqs_on+0x5b/0x180 [ 1575.495951] ? kasan_unpoison_shadow+0x33/0x50 [ 1575.496982] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1575.498144] v9fs_mount+0x79/0x8f0 [ 1575.498960] ? v9fs_write_inode+0x60/0x60 [ 1575.499902] legacy_get_tree+0x105/0x220 [ 1575.500827] vfs_get_tree+0x8e/0x300 [ 1575.501673] path_mount+0x1490/0x21e0 [ 1575.502628] ? strncpy_from_user+0x9e/0x470 [ 1575.503914] ? finish_automount+0xa90/0xa90 [ 1575.505175] ? getname_flags.part.0+0x1dd/0x4f0 [ 1575.506523] ? _copy_from_user+0xfb/0x1b0 [ 1575.507756] __x64_sys_mount+0x282/0x300 [ 1575.508943] ? copy_mnt_ns+0xa00/0xa00 [ 1575.510076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.511656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1575.513179] do_syscall_64+0x33/0x40 [ 1575.514174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1575.515460] RIP: 0033:0x7f644830fb19 [ 1575.516437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.520703] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1575.522452] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1575.524099] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1575.525733] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1575.527362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1575.528972] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1575.529260] FAULT_INJECTION: forcing a failure. [ 1575.529260] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.532054] CPU: 0 PID: 9005 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1575.532840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1575.533792] Call Trace: [ 1575.534098] dump_stack+0x107/0x167 [ 1575.534517] should_fail.cold+0x5/0xa [ 1575.534960] should_failslab+0x5/0x20 [ 1575.535396] __kmalloc_track_caller+0x79/0x370 [ 1575.535931] ? match_number+0xaf/0x1d0 [ 1575.536373] ? kfree+0xd7/0x340 [ 1575.536752] kmemdup_nul+0x2d/0xa0 [ 1575.537160] match_number+0xaf/0x1d0 [ 1575.537584] ? match_u64+0x190/0x190 [ 1575.538009] ? __kmalloc_track_caller+0x2c6/0x370 [ 1575.538560] ? memcpy+0x39/0x60 [ 1575.538948] parse_opts.part.0+0x1f3/0x340 [ 1575.539433] ? p9_fd_show_options+0x1c0/0x1c0 [ 1575.539946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.540543] ? trace_hardirqs_on+0x5b/0x180 [ 1575.541033] ? kfree+0xd7/0x340 [ 1575.541410] p9_fd_create+0x98/0x4a0 [ 1575.541833] ? p9_conn_create+0x510/0x510 [ 1575.542305] ? p9_client_create+0x798/0x1230 [ 1575.542802] ? kfree+0xd7/0x340 [ 1575.543184] ? do_raw_spin_unlock+0x4f/0x220 [ 1575.543685] p9_client_create+0x7ff/0x1230 [ 1575.544164] ? p9_client_flush+0x430/0x430 [ 1575.544644] ? trace_hardirqs_on+0x5b/0x180 [ 1575.545137] ? lockdep_init_map_type+0x2c7/0x780 [ 1575.545676] ? __raw_spin_lock_init+0x36/0x110 [ 1575.546200] v9fs_session_init+0x1dd/0x1680 [ 1575.546697] ? lock_release+0x680/0x680 [ 1575.547163] ? kmem_cache_alloc_trace+0x151/0x320 [ 1575.547711] ? v9fs_show_options+0x690/0x690 [ 1575.548213] ? trace_hardirqs_on+0x5b/0x180 [ 1575.548704] ? kasan_unpoison_shadow+0x33/0x50 [ 1575.549225] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1575.549804] v9fs_mount+0x79/0x8f0 [ 1575.550212] ? v9fs_write_inode+0x60/0x60 [ 1575.550687] legacy_get_tree+0x105/0x220 [ 1575.551163] vfs_get_tree+0x8e/0x300 [ 1575.551590] path_mount+0x1490/0x21e0 [ 1575.552027] ? strncpy_from_user+0x9e/0x470 [ 1575.552523] ? finish_automount+0xa90/0xa90 [ 1575.553018] ? getname_flags.part.0+0x1dd/0x4f0 [ 1575.553553] ? _copy_from_user+0xfb/0x1b0 [ 1575.554030] __x64_sys_mount+0x282/0x300 [ 1575.554493] ? copy_mnt_ns+0xa00/0xa00 [ 1575.554946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.555545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1575.556133] do_syscall_64+0x33/0x40 [ 1575.556560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1575.557160] RIP: 0033:0x7ff9c58eab19 [ 1575.557587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.559689] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1575.560557] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1575.561368] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1575.562178] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1575.562997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1575.563808] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 [ 1575.564684] 9pnet: Insufficient options for proto=fd [ 1575.569240] 9pnet: Insufficient options for proto=fd [ 1575.574198] FAULT_INJECTION: forcing a failure. [ 1575.574198] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.576206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1575.576878] CPU: 1 PID: 9006 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1575.579378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1575.581297] Call Trace: [ 1575.581914] dump_stack+0x107/0x167 [ 1575.582753] should_fail.cold+0x5/0xa [ 1575.583658] should_failslab+0x5/0x20 [ 1575.584540] __kmalloc_track_caller+0x79/0x370 [ 1575.585625] ? p9_client_create+0x51e/0x1230 [ 1575.586634] kmemdup_nul+0x2d/0xa0 [ 1575.587455] p9_client_create+0x51e/0x1230 [ 1575.588435] ? p9_client_flush+0x430/0x430 [ 1575.589402] ? trace_hardirqs_on+0x5b/0x180 [ 1575.590391] ? lockdep_init_map_type+0x2c7/0x780 [ 1575.591489] ? __raw_spin_lock_init+0x36/0x110 [ 1575.592541] v9fs_session_init+0x1dd/0x1680 [ 1575.593525] ? lock_release+0x680/0x680 [ 1575.594453] ? kmem_cache_alloc_trace+0x151/0x320 [ 1575.595585] ? v9fs_show_options+0x690/0x690 [ 1575.596609] ? trace_hardirqs_on+0x5b/0x180 [ 1575.597626] ? kasan_unpoison_shadow+0x33/0x50 [ 1575.598679] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1575.599870] v9fs_mount+0x79/0x8f0 [ 1575.600689] ? v9fs_write_inode+0x60/0x60 [ 1575.601654] legacy_get_tree+0x105/0x220 [ 1575.602624] vfs_get_tree+0x8e/0x300 [ 1575.603505] path_mount+0x1490/0x21e0 [ 1575.604390] ? strncpy_from_user+0x9e/0x470 [ 1575.605607] ? finish_automount+0xa90/0xa90 [ 1575.606930] ? getname_flags.part.0+0x1dd/0x4f0 [ 1575.608335] ? _copy_from_user+0xfb/0x1b0 [ 1575.609604] __x64_sys_mount+0x282/0x300 [ 1575.610836] ? copy_mnt_ns+0xa00/0xa00 [ 1575.612047] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.613642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1575.615175] do_syscall_64+0x33/0x40 [ 1575.616071] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1575.617337] RIP: 0033:0x7f2d92adab19 [ 1575.618456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.622889] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1575.624707] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1575.626389] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1575.628097] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1575.629801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1575.631434] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1575.649719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1575.659261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.660100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.663969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1575.674965] FAULT_INJECTION: forcing a failure. [ 1575.674965] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.677430] CPU: 1 PID: 9013 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1575.678904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1575.680693] Call Trace: [ 1575.681264] dump_stack+0x107/0x167 [ 1575.682107] should_fail.cold+0x5/0xa [ 1575.682950] ? create_object.isra.0+0x3a/0xa30 [ 1575.683921] should_failslab+0x5/0x20 [ 1575.684748] kmem_cache_alloc+0x5b/0x310 [ 1575.685617] create_object.isra.0+0x3a/0xa30 [ 1575.686549] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1575.687633] __kmalloc_track_caller+0x177/0x370 [ 1575.688625] ? match_number+0xaf/0x1d0 [ 1575.689459] kmemdup_nul+0x2d/0xa0 [ 1575.690216] match_number+0xaf/0x1d0 [ 1575.691019] ? match_u64+0x190/0x190 [ 1575.691822] ? __kmalloc_track_caller+0x2c6/0x370 [ 1575.692844] ? memcpy+0x39/0x60 [ 1575.693580] parse_opts.part.0+0x1f3/0x340 [ 1575.694502] ? p9_fd_show_options+0x1c0/0x1c0 [ 1575.695515] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.696625] ? trace_hardirqs_on+0x5b/0x180 [ 1575.697537] ? kfree+0xd7/0x340 [ 1575.698236] p9_fd_create+0x98/0x4a0 [ 1575.699031] ? p9_conn_create+0x510/0x510 [ 1575.699907] ? p9_client_create+0x798/0x1230 [ 1575.700839] ? kfree+0xd7/0x340 [ 1575.701534] ? do_raw_spin_unlock+0x4f/0x220 [ 1575.702464] p9_client_create+0x7ff/0x1230 [ 1575.703401] ? p9_client_flush+0x430/0x430 [ 1575.704344] ? trace_hardirqs_on+0x5b/0x180 [ 1575.705290] ? lockdep_init_map_type+0x2c7/0x780 [ 1575.706312] ? __raw_spin_lock_init+0x36/0x110 [ 1575.707378] v9fs_session_init+0x1dd/0x1680 [ 1575.708559] ? lock_release+0x680/0x680 [ 1575.709666] ? kmem_cache_alloc_trace+0x151/0x320 [ 1575.711001] ? v9fs_show_options+0x690/0x690 [ 1575.712215] ? trace_hardirqs_on+0x5b/0x180 [ 1575.713393] ? kasan_unpoison_shadow+0x33/0x50 [ 1575.714645] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1575.716055] v9fs_mount+0x79/0x8f0 [ 1575.716895] ? v9fs_write_inode+0x60/0x60 [ 1575.717953] legacy_get_tree+0x105/0x220 [ 1575.718873] vfs_get_tree+0x8e/0x300 [ 1575.719799] path_mount+0x1490/0x21e0 [ 1575.720631] ? strncpy_from_user+0x9e/0x470 [ 1575.721546] ? finish_automount+0xa90/0xa90 [ 1575.722464] ? getname_flags.part.0+0x1dd/0x4f0 [ 1575.723458] ? _copy_from_user+0xfb/0x1b0 [ 1575.724340] __x64_sys_mount+0x282/0x300 [ 1575.725201] ? copy_mnt_ns+0xa00/0xa00 [ 1575.726029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.726146] FAULT_INJECTION: forcing a failure. [ 1575.726146] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.727157] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1575.727179] do_syscall_64+0x33/0x40 [ 1575.727204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1575.731433] RIP: 0033:0x7f644830fb19 [ 1575.732223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.736137] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1575.737752] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1575.739264] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1575.740767] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1575.742280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1575.743815] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1575.745347] CPU: 0 PID: 9012 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1575.746139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1575.747102] Call Trace: [ 1575.747416] dump_stack+0x107/0x167 [ 1575.747830] should_fail.cold+0x5/0xa [ 1575.748270] ? create_object.isra.0+0x3a/0xa30 [ 1575.748789] should_failslab+0x5/0x20 [ 1575.749223] kmem_cache_alloc+0x5b/0x310 [ 1575.749706] create_object.isra.0+0x3a/0xa30 [ 1575.750212] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1575.750795] __kmalloc_track_caller+0x177/0x370 [ 1575.751339] ? match_number+0xaf/0x1d0 [ 1575.751781] kmemdup_nul+0x2d/0xa0 [ 1575.752187] match_number+0xaf/0x1d0 [ 1575.752612] ? match_u64+0x190/0x190 [ 1575.753039] ? __kmalloc_track_caller+0x2c6/0x370 [ 1575.753589] ? memcpy+0x39/0x60 [ 1575.753961] parse_opts.part.0+0x1f3/0x340 [ 1575.754440] ? p9_fd_show_options+0x1c0/0x1c0 [ 1575.754959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.755559] ? trace_hardirqs_on+0x5b/0x180 [ 1575.756052] ? kfree+0xd7/0x340 [ 1575.756433] p9_fd_create+0x98/0x4a0 [ 1575.756855] ? p9_conn_create+0x510/0x510 [ 1575.757325] ? p9_client_create+0x798/0x1230 [ 1575.757823] ? kfree+0xd7/0x340 [ 1575.758200] ? do_raw_spin_unlock+0x4f/0x220 [ 1575.758700] p9_client_create+0x7ff/0x1230 [ 1575.759194] ? p9_client_flush+0x430/0x430 [ 1575.759680] ? trace_hardirqs_on+0x5b/0x180 [ 1575.760174] ? lockdep_init_map_type+0x2c7/0x780 [ 1575.760714] ? __raw_spin_lock_init+0x36/0x110 [ 1575.761234] v9fs_session_init+0x1dd/0x1680 [ 1575.761721] ? lock_release+0x680/0x680 [ 1575.762183] ? kmem_cache_alloc_trace+0x151/0x320 [ 1575.762730] ? v9fs_show_options+0x690/0x690 [ 1575.763246] ? trace_hardirqs_on+0x5b/0x180 [ 1575.763735] ? kasan_unpoison_shadow+0x33/0x50 [ 1575.764256] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1575.764832] v9fs_mount+0x79/0x8f0 [ 1575.765252] ? v9fs_write_inode+0x60/0x60 [ 1575.765722] legacy_get_tree+0x105/0x220 [ 1575.766185] vfs_get_tree+0x8e/0x300 [ 1575.766606] path_mount+0x1490/0x21e0 [ 1575.767049] ? strncpy_from_user+0x9e/0x470 [ 1575.767540] ? finish_automount+0xa90/0xa90 [ 1575.768032] ? getname_flags.part.0+0x1dd/0x4f0 [ 1575.768563] ? _copy_from_user+0xfb/0x1b0 [ 1575.769043] __x64_sys_mount+0x282/0x300 [ 1575.769503] ? copy_mnt_ns+0xa00/0xa00 [ 1575.769948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.770548] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1575.771139] do_syscall_64+0x33/0x40 [ 1575.771564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1575.772144] RIP: 0033:0x7ff9c58eab19 [ 1575.772569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.774639] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1575.775508] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1575.776313] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1575.777115] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1575.777918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1575.778728] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 [ 1575.783885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.785456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.789139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.790697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.795681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1575.807167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:39:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 31) 11:39:31 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 33) 11:39:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:39:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 25) [ 1575.809411] FAULT_INJECTION: forcing a failure. [ 1575.809411] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.812920] CPU: 1 PID: 9018 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1575.814731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1575.816964] Call Trace: [ 1575.817693] dump_stack+0x107/0x167 [ 1575.818687] should_fail.cold+0x5/0xa [ 1575.819750] ? create_object.isra.0+0x3a/0xa30 [ 1575.820835] should_failslab+0x5/0x20 [ 1575.821749] kmem_cache_alloc+0x5b/0x310 [ 1575.822639] create_object.isra.0+0x3a/0xa30 [ 1575.823645] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1575.824736] __kmalloc_track_caller+0x177/0x370 [ 1575.825740] ? p9_client_create+0x51e/0x1230 11:39:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) 11:39:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1575.826695] kmemdup_nul+0x2d/0xa0 [ 1575.827661] p9_client_create+0x51e/0x1230 [ 1575.828608] ? p9_client_flush+0x430/0x430 [ 1575.829520] ? trace_hardirqs_on+0x5b/0x180 [ 1575.830459] ? lockdep_init_map_type+0x2c7/0x780 [ 1575.831478] ? __raw_spin_lock_init+0x36/0x110 [ 1575.832454] v9fs_session_init+0x1dd/0x1680 [ 1575.833380] ? lock_release+0x680/0x680 [ 1575.834229] ? kmem_cache_alloc_trace+0x151/0x320 [ 1575.835275] ? v9fs_show_options+0x690/0x690 [ 1575.836217] ? trace_hardirqs_on+0x5b/0x180 [ 1575.837132] ? kasan_unpoison_shadow+0x33/0x50 [ 1575.838098] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1575.839187] v9fs_mount+0x79/0x8f0 [ 1575.839941] ? v9fs_write_inode+0x60/0x60 [ 1575.840818] legacy_get_tree+0x105/0x220 [ 1575.841686] vfs_get_tree+0x8e/0x300 [ 1575.842476] path_mount+0x1490/0x21e0 [ 1575.843300] ? strncpy_from_user+0x9e/0x470 [ 1575.844214] ? finish_automount+0xa90/0xa90 [ 1575.845132] ? getname_flags.part.0+0x1dd/0x4f0 [ 1575.846118] ? _copy_from_user+0xfb/0x1b0 [ 1575.847009] __x64_sys_mount+0x282/0x300 [ 1575.847860] ? copy_mnt_ns+0xa00/0xa00 [ 1575.848692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.849804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1575.850908] do_syscall_64+0x33/0x40 [ 1575.851701] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1575.852806] RIP: 0033:0x7f2d92adab19 [ 1575.853604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.857525] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1575.859155] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1575.860674] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1575.862189] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1575.863719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1575.865233] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 11:39:32 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1575.980693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:39:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:39:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) 11:39:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 32) [ 1576.097388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.099749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.102919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1576.163999] FAULT_INJECTION: forcing a failure. [ 1576.163999] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.165426] CPU: 0 PID: 9035 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1576.166205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1576.167149] Call Trace: [ 1576.167453] dump_stack+0x107/0x167 [ 1576.167873] should_fail.cold+0x5/0xa [ 1576.168308] should_failslab+0x5/0x20 [ 1576.168736] __kmalloc_track_caller+0x79/0x370 [ 1576.169252] ? match_number+0xaf/0x1d0 [ 1576.169692] kmemdup_nul+0x2d/0xa0 [ 1576.170142] match_number+0xaf/0x1d0 [ 1576.170567] ? match_u64+0x190/0x190 [ 1576.170999] ? __kmalloc_track_caller+0x2c6/0x370 [ 1576.171550] ? memcpy+0x39/0x60 [ 1576.171927] parse_opts.part.0+0x1f3/0x340 [ 1576.172410] ? p9_fd_show_options+0x1c0/0x1c0 [ 1576.172923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1576.173517] ? trace_hardirqs_on+0x5b/0x180 [ 1576.174012] ? kfree+0xd7/0x340 [ 1576.174391] p9_fd_create+0x98/0x4a0 [ 1576.174810] ? p9_conn_create+0x510/0x510 [ 1576.175284] ? p9_client_create+0x798/0x1230 [ 1576.175785] ? kfree+0xd7/0x340 [ 1576.176155] ? do_raw_spin_unlock+0x4f/0x220 [ 1576.176655] p9_client_create+0x7ff/0x1230 [ 1576.177138] ? p9_client_flush+0x430/0x430 [ 1576.177615] ? trace_hardirqs_on+0x5b/0x180 [ 1576.178106] ? lockdep_init_map_type+0x2c7/0x780 [ 1576.178641] ? __raw_spin_lock_init+0x36/0x110 [ 1576.179169] v9fs_session_init+0x1dd/0x1680 [ 1576.179657] ? lock_release+0x680/0x680 [ 1576.180122] ? kmem_cache_alloc_trace+0x151/0x320 [ 1576.180667] ? v9fs_show_options+0x690/0x690 [ 1576.181167] ? trace_hardirqs_on+0x5b/0x180 [ 1576.181662] ? kasan_unpoison_shadow+0x33/0x50 [ 1576.182175] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1576.182750] v9fs_mount+0x79/0x8f0 [ 1576.183163] ? v9fs_write_inode+0x60/0x60 [ 1576.183629] legacy_get_tree+0x105/0x220 [ 1576.184088] vfs_get_tree+0x8e/0x300 [ 1576.184527] path_mount+0x1490/0x21e0 [ 1576.184958] ? strncpy_from_user+0x9e/0x470 [ 1576.185472] ? finish_automount+0xa90/0xa90 [ 1576.185960] ? getname_flags.part.0+0x1dd/0x4f0 [ 1576.186482] ? _copy_from_user+0xfb/0x1b0 [ 1576.186968] __x64_sys_mount+0x282/0x300 [ 1576.187427] ? copy_mnt_ns+0xa00/0xa00 [ 1576.187868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1576.188461] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1576.189049] do_syscall_64+0x33/0x40 [ 1576.189469] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1576.190051] RIP: 0033:0x7ff9c58eab19 [ 1576.190473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1576.192552] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1576.193411] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1576.194217] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1576.195032] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1576.195846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1576.196648] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 [ 1576.219255] 9pnet: Insufficient options for proto=fd 11:39:47 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 34) 11:39:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 33) [ 1591.010805] FAULT_INJECTION: forcing a failure. [ 1591.010805] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.012164] CPU: 0 PID: 9053 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1591.012954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.013900] Call Trace: [ 1591.014205] dump_stack+0x107/0x167 [ 1591.014618] should_fail.cold+0x5/0xa [ 1591.015065] should_failslab+0x5/0x20 [ 1591.015510] __kmalloc_track_caller+0x79/0x370 [ 1591.016044] ? parse_opts.part.0+0x8e/0x340 [ 1591.016541] kstrdup+0x36/0x70 [ 1591.016780] FAULT_INJECTION: forcing a failure. [ 1591.016780] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.016902] parse_opts.part.0+0x8e/0x340 [ 1591.016921] ? p9_fd_show_options+0x1c0/0x1c0 [ 1591.020436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.021029] ? quarantine_put+0x8b/0x1a0 [ 1591.021497] ? trace_hardirqs_on+0x5b/0x180 [ 1591.021993] ? kfree+0xd7/0x340 [ 1591.022377] p9_fd_create+0x98/0x4a0 [ 1591.022807] ? p9_conn_create+0x510/0x510 [ 1591.023290] ? p9_client_create+0x798/0x1230 [ 1591.023782] ? kfree+0xd7/0x340 [ 1591.024154] ? do_raw_spin_unlock+0x4f/0x220 [ 1591.024657] p9_client_create+0x7ff/0x1230 [ 1591.025136] ? p9_client_flush+0x430/0x430 [ 1591.025615] ? trace_hardirqs_on+0x5b/0x180 [ 1591.026112] ? lockdep_init_map_type+0x2c7/0x780 [ 1591.026652] ? __raw_spin_lock_init+0x36/0x110 [ 1591.027182] v9fs_session_init+0x1dd/0x1680 [ 1591.027673] ? lock_release+0x680/0x680 [ 1591.028126] ? kmem_cache_alloc_trace+0x151/0x320 [ 1591.028669] ? v9fs_show_options+0x690/0x690 [ 1591.029179] ? trace_hardirqs_on+0x5b/0x180 [ 1591.029669] ? kasan_unpoison_shadow+0x33/0x50 [ 1591.030182] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.030757] v9fs_mount+0x79/0x8f0 [ 1591.031168] ? v9fs_write_inode+0x60/0x60 [ 1591.031637] legacy_get_tree+0x105/0x220 [ 1591.032109] vfs_get_tree+0x8e/0x300 [ 1591.032535] path_mount+0x1490/0x21e0 [ 1591.032981] ? strncpy_from_user+0x9e/0x470 [ 1591.033474] ? finish_automount+0xa90/0xa90 [ 1591.033968] ? getname_flags.part.0+0x1dd/0x4f0 [ 1591.034505] ? _copy_from_user+0xfb/0x1b0 [ 1591.034984] __x64_sys_mount+0x282/0x300 [ 1591.035486] ? copy_mnt_ns+0xa00/0xa00 [ 1591.035939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.036544] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1591.037139] do_syscall_64+0x33/0x40 [ 1591.037560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1591.038151] RIP: 0033:0x7f2d92adab19 [ 1591.038579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.040701] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1591.041567] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1591.042370] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1591.043191] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1591.044008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.044836] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1591.045681] CPU: 1 PID: 9054 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1591.046742] 9pnet: Insufficient options for proto=fd [ 1591.047279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.047286] Call Trace: [ 1591.047315] dump_stack+0x107/0x167 [ 1591.047337] should_fail.cold+0x5/0xa [ 1591.047361] ? create_object.isra.0+0x3a/0xa30 [ 1591.047379] should_failslab+0x5/0x20 [ 1591.047399] kmem_cache_alloc+0x5b/0x310 [ 1591.047416] ? p9_fd_show_options+0x1c0/0x1c0 [ 1591.047440] create_object.isra.0+0x3a/0xa30 [ 1591.049358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1591.049929] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.059900] kmem_cache_alloc_trace+0x151/0x320 11:39:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:39:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:39:47 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:39:47 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b53a79c01949d4f220c7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 26) [ 1591.061101] p9_fd_create+0x161/0x4a0 [ 1591.062179] ? p9_conn_create+0x510/0x510 [ 1591.063128] ? p9_client_create+0x798/0x1230 [ 1591.064137] ? kfree+0xd7/0x340 [ 1591.064885] ? do_raw_spin_unlock+0x4f/0x220 [ 1591.065897] p9_client_create+0x7ff/0x1230 [ 1591.066870] ? p9_client_flush+0x430/0x430 [ 1591.067849] ? trace_hardirqs_on+0x5b/0x180 [ 1591.068841] ? lockdep_init_map_type+0x2c7/0x780 [ 1591.069935] ? __raw_spin_lock_init+0x36/0x110 [ 1591.070991] v9fs_session_init+0x1dd/0x1680 [ 1591.071989] ? lock_release+0x680/0x680 [ 1591.072906] ? kmem_cache_alloc_trace+0x151/0x320 [ 1591.073997] ? v9fs_show_options+0x690/0x690 [ 1591.075008] ? trace_hardirqs_on+0x5b/0x180 [ 1591.076007] ? kasan_unpoison_shadow+0x33/0x50 [ 1591.077039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.078199] v9fs_mount+0x79/0x8f0 [ 1591.079017] ? v9fs_write_inode+0x60/0x60 [ 1591.079972] legacy_get_tree+0x105/0x220 [ 1591.080894] vfs_get_tree+0x8e/0x300 [ 1591.081746] path_mount+0x1490/0x21e0 [ 1591.082627] ? strncpy_from_user+0x9e/0x470 [ 1591.083619] ? finish_automount+0xa90/0xa90 [ 1591.084595] ? getname_flags.part.0+0x1dd/0x4f0 [ 1591.085650] ? _copy_from_user+0xfb/0x1b0 [ 1591.086604] __x64_sys_mount+0x282/0x300 [ 1591.087531] ? copy_mnt_ns+0xa00/0xa00 [ 1591.088429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.089614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1591.090788] do_syscall_64+0x33/0x40 [ 1591.091639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1591.092808] RIP: 0033:0x7ff9c58eab19 [ 1591.093666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.097888] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1591.099624] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1591.101267] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1591.102892] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1591.104525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.106150] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 11:39:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 27) [ 1591.113499] FAULT_INJECTION: forcing a failure. [ 1591.113499] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.116094] CPU: 1 PID: 9041 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1591.117650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.119547] Call Trace: [ 1591.120152] dump_stack+0x107/0x167 [ 1591.120982] should_fail.cold+0x5/0xa [ 1591.121852] should_failslab+0x5/0x20 [ 1591.122722] __kmalloc_track_caller+0x79/0x370 [ 1591.123771] ? match_number+0xaf/0x1d0 [ 1591.124665] ? kfree+0xd7/0x340 [ 1591.125421] kmemdup_nul+0x2d/0xa0 [ 1591.126243] match_number+0xaf/0x1d0 [ 1591.127110] ? match_u64+0x190/0x190 [ 1591.127960] ? __kmalloc_track_caller+0x2c6/0x370 [ 1591.129080] ? memcpy+0x39/0x60 [ 1591.129844] parse_opts.part.0+0x1f3/0x340 [ 1591.130811] ? p9_fd_show_options+0x1c0/0x1c0 [ 1591.131842] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.133049] ? trace_hardirqs_on+0x5b/0x180 [ 1591.134040] ? kfree+0xd7/0x340 [ 1591.134811] p9_fd_create+0x98/0x4a0 [ 1591.135670] ? p9_conn_create+0x510/0x510 [ 1591.136627] ? p9_client_create+0x798/0x1230 [ 1591.137635] ? kfree+0xd7/0x340 [ 1591.138392] ? do_raw_spin_unlock+0x4f/0x220 [ 1591.139415] p9_client_create+0x7ff/0x1230 [ 1591.140391] ? p9_client_flush+0x430/0x430 [ 1591.141371] ? trace_hardirqs_on+0x5b/0x180 [ 1591.142367] ? lockdep_init_map_type+0x2c7/0x780 [ 1591.143463] ? __raw_spin_lock_init+0x36/0x110 [ 1591.144523] v9fs_session_init+0x1dd/0x1680 [ 1591.145516] ? lock_release+0x680/0x680 [ 1591.146431] ? kmem_cache_alloc_trace+0x151/0x320 [ 1591.147557] ? v9fs_show_options+0x690/0x690 [ 1591.148569] ? trace_hardirqs_on+0x5b/0x180 [ 1591.149559] ? kasan_unpoison_shadow+0x33/0x50 [ 1591.150597] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.151773] v9fs_mount+0x79/0x8f0 [ 1591.152585] ? v9fs_write_inode+0x60/0x60 [ 1591.153540] legacy_get_tree+0x105/0x220 [ 1591.154465] vfs_get_tree+0x8e/0x300 [ 1591.155340] path_mount+0x1490/0x21e0 [ 1591.156221] ? strncpy_from_user+0x9e/0x470 [ 1591.157218] ? finish_automount+0xa90/0xa90 [ 1591.158208] ? getname_flags.part.0+0x1dd/0x4f0 [ 1591.159279] ? _copy_from_user+0xfb/0x1b0 [ 1591.160236] __x64_sys_mount+0x282/0x300 [ 1591.161176] ? copy_mnt_ns+0xa00/0xa00 [ 1591.162062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.163279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1591.164461] do_syscall_64+0x33/0x40 [ 1591.165320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1591.166490] RIP: 0033:0x7f644830fb19 [ 1591.167346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.171544] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1591.173286] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1591.174914] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1591.176540] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1591.178184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.179802] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1591.181602] 9pnet: Insufficient options for proto=fd [ 1591.208166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1591.208659] FAULT_INJECTION: forcing a failure. [ 1591.208659] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.212097] CPU: 1 PID: 9061 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1591.213657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.215553] Call Trace: [ 1591.216158] dump_stack+0x107/0x167 [ 1591.216977] should_fail.cold+0x5/0xa [ 1591.217843] ? create_object.isra.0+0x3a/0xa30 [ 1591.218876] should_failslab+0x5/0x20 [ 1591.219759] kmem_cache_alloc+0x5b/0x310 [ 1591.220682] ? legacy_get_tree+0x105/0x220 [ 1591.221638] ? vfs_get_tree+0x8e/0x300 [ 1591.222531] create_object.isra.0+0x3a/0xa30 [ 1591.223534] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.224697] __kmalloc_track_caller+0x177/0x370 [ 1591.225753] ? parse_opts.part.0+0x8e/0x340 [ 1591.226731] kstrdup+0x36/0x70 [ 1591.227468] parse_opts.part.0+0x8e/0x340 [ 1591.228406] ? p9_fd_show_options+0x1c0/0x1c0 [ 1591.229434] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.230631] ? quarantine_put+0x8b/0x1a0 [ 1591.231564] ? trace_hardirqs_on+0x5b/0x180 [ 1591.232544] ? kfree+0xd7/0x340 [ 1591.233298] p9_fd_create+0x98/0x4a0 [ 1591.234140] ? p9_conn_create+0x510/0x510 [ 1591.235078] ? p9_client_create+0x798/0x1230 [ 1591.236090] ? kfree+0xd7/0x340 [ 1591.236837] ? do_raw_spin_unlock+0x4f/0x220 [ 1591.237844] p9_client_create+0x7ff/0x1230 [ 1591.238809] ? p9_client_flush+0x430/0x430 [ 1591.239788] ? trace_hardirqs_on+0x5b/0x180 11:39:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 34) [ 1591.240774] ? lockdep_init_map_type+0x2c7/0x780 [ 1591.242060] ? __raw_spin_lock_init+0x36/0x110 [ 1591.243122] v9fs_session_init+0x1dd/0x1680 [ 1591.244103] ? lock_release+0x680/0x680 [ 1591.245018] ? kmem_cache_alloc_trace+0x151/0x320 [ 1591.246118] ? v9fs_show_options+0x690/0x690 [ 1591.247129] ? trace_hardirqs_on+0x5b/0x180 [ 1591.248106] ? kasan_unpoison_shadow+0x33/0x50 [ 1591.249140] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.250293] v9fs_mount+0x79/0x8f0 [ 1591.251108] ? v9fs_write_inode+0x60/0x60 [ 1591.252040] legacy_get_tree+0x105/0x220 [ 1591.252964] vfs_get_tree+0x8e/0x300 [ 1591.253818] path_mount+0x1490/0x21e0 [ 1591.254693] ? strncpy_from_user+0x9e/0x470 [ 1591.255682] ? finish_automount+0xa90/0xa90 [ 1591.256590] FAULT_INJECTION: forcing a failure. [ 1591.256590] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.256659] ? getname_flags.part.0+0x1dd/0x4f0 [ 1591.258958] ? _copy_from_user+0xfb/0x1b0 [ 1591.259913] __x64_sys_mount+0x282/0x300 [ 1591.260827] ? copy_mnt_ns+0xa00/0xa00 [ 1591.261712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.262895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1591.264083] do_syscall_64+0x33/0x40 [ 1591.264926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1591.266083] RIP: 0033:0x7f2d92adab19 [ 1591.266930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.271126] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1591.272865] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1591.274473] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1591.276095] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1591.277710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.279336] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1591.280975] CPU: 0 PID: 9064 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1591.281761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.282716] Call Trace: [ 1591.283025] dump_stack+0x107/0x167 [ 1591.283457] should_fail.cold+0x5/0xa [ 1591.283887] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 1591.284476] should_failslab+0x5/0x20 [ 1591.284903] kmem_cache_alloc+0x5b/0x310 [ 1591.285364] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1591.285939] p9_client_rpc+0x220/0x1370 [ 1591.286397] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.286987] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1591.287606] ? pipe_poll+0x21b/0x800 [ 1591.288030] ? p9_fd_close+0x4a0/0x4a0 [ 1591.288468] ? wait_for_partner+0x3c0/0x3c0 [ 1591.288953] ? p9_fd_poll+0x1e0/0x2c0 [ 1591.289385] ? p9_fd_create+0x357/0x4a0 [ 1591.289834] ? p9_conn_create+0x510/0x510 [ 1591.290298] ? p9_client_create+0x798/0x1230 [ 1591.290793] ? kfree+0xd7/0x340 [ 1591.291171] ? do_raw_spin_unlock+0x4f/0x220 [ 1591.291679] p9_client_create+0xa76/0x1230 [ 1591.292162] ? p9_client_flush+0x430/0x430 [ 1591.292651] ? trace_hardirqs_on+0x5b/0x180 [ 1591.293138] ? lockdep_init_map_type+0x2c7/0x780 [ 1591.293679] ? __raw_spin_lock_init+0x36/0x110 [ 1591.294197] v9fs_session_init+0x1dd/0x1680 [ 1591.294680] ? lock_release+0x680/0x680 [ 1591.295137] ? kmem_cache_alloc_trace+0x151/0x320 [ 1591.295674] ? v9fs_show_options+0x690/0x690 [ 1591.296178] ? trace_hardirqs_on+0x5b/0x180 [ 1591.296666] ? kasan_unpoison_shadow+0x33/0x50 [ 1591.297192] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.297776] v9fs_mount+0x79/0x8f0 [ 1591.298176] ? v9fs_write_inode+0x60/0x60 [ 1591.298651] legacy_get_tree+0x105/0x220 [ 1591.299126] vfs_get_tree+0x8e/0x300 [ 1591.299555] path_mount+0x1490/0x21e0 [ 1591.299993] ? strncpy_from_user+0x9e/0x470 [ 1591.300484] ? finish_automount+0xa90/0xa90 [ 1591.300974] ? getname_flags.part.0+0x1dd/0x4f0 [ 1591.301499] ? _copy_from_user+0xfb/0x1b0 [ 1591.301965] __x64_sys_mount+0x282/0x300 [ 1591.302423] ? copy_mnt_ns+0xa00/0xa00 [ 1591.302872] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.303485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1591.304076] do_syscall_64+0x33/0x40 [ 1591.304496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1591.305081] RIP: 0033:0x7ff9c58eab19 [ 1591.305503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.307568] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1591.308438] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1591.309242] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1591.310056] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1591.310872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.311692] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 11:39:47 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 35) [ 1591.328776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.330499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.332335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1591.354569] FAULT_INJECTION: forcing a failure. [ 1591.354569] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.357298] CPU: 1 PID: 9066 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1591.358851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.360755] Call Trace: [ 1591.361368] dump_stack+0x107/0x167 [ 1591.362204] should_fail.cold+0x5/0xa [ 1591.363081] ? create_object.isra.0+0x3a/0xa30 [ 1591.364138] should_failslab+0x5/0x20 [ 1591.365010] kmem_cache_alloc+0x5b/0x310 [ 1591.365942] create_object.isra.0+0x3a/0xa30 [ 1591.366934] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.368113] __kmalloc_track_caller+0x177/0x370 [ 1591.369171] ? match_number+0xaf/0x1d0 [ 1591.370059] kmemdup_nul+0x2d/0xa0 [ 1591.370871] match_number+0xaf/0x1d0 [ 1591.371727] ? match_u64+0x190/0x190 [ 1591.372579] ? __kmalloc_track_caller+0x2c6/0x370 [ 1591.373665] ? memcpy+0x39/0x60 [ 1591.374415] parse_opts.part.0+0x1f3/0x340 11:39:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 35) [ 1591.375393] ? p9_fd_show_options+0x1c0/0x1c0 [ 1591.376577] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.377768] ? trace_hardirqs_on+0x5b/0x180 [ 1591.378747] ? kfree+0xd7/0x340 [ 1591.379516] p9_fd_create+0x98/0x4a0 [ 1591.380351] ? p9_conn_create+0x510/0x510 [ 1591.381306] ? p9_client_create+0x798/0x1230 [ 1591.382300] ? kfree+0xd7/0x340 [ 1591.383041] ? do_raw_spin_unlock+0x4f/0x220 [ 1591.384046] p9_client_create+0x7ff/0x1230 [ 1591.385013] ? p9_client_flush+0x430/0x430 [ 1591.385970] ? trace_hardirqs_on+0x5b/0x180 [ 1591.386948] ? lockdep_init_map_type+0x2c7/0x780 [ 1591.388030] ? __raw_spin_lock_init+0x36/0x110 [ 1591.389062] v9fs_session_init+0x1dd/0x1680 [ 1591.390038] ? lock_release+0x680/0x680 [ 1591.390942] ? kmem_cache_alloc_trace+0x151/0x320 [ 1591.392046] ? v9fs_show_options+0x690/0x690 [ 1591.393051] ? trace_hardirqs_on+0x5b/0x180 [ 1591.394022] ? kasan_unpoison_shadow+0x33/0x50 [ 1591.395059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.396228] v9fs_mount+0x79/0x8f0 [ 1591.397034] ? v9fs_write_inode+0x60/0x60 [ 1591.397965] legacy_get_tree+0x105/0x220 [ 1591.398882] vfs_get_tree+0x8e/0x300 [ 1591.399731] path_mount+0x1490/0x21e0 [ 1591.400602] ? strncpy_from_user+0x9e/0x470 [ 1591.401584] ? finish_automount+0xa90/0xa90 [ 1591.402557] ? getname_flags.part.0+0x1dd/0x4f0 [ 1591.403624] ? _copy_from_user+0xfb/0x1b0 [ 1591.404564] __x64_sys_mount+0x282/0x300 [ 1591.405475] ? copy_mnt_ns+0xa00/0xa00 [ 1591.406365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1591.407549] do_syscall_64+0x33/0x40 [ 1591.408389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1591.409540] RIP: 0033:0x7f644830fb19 [ 1591.410377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.414534] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1591.416258] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1591.417875] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1591.419499] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1591.421106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.422712] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1591.448123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.448981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.449716] FAULT_INJECTION: forcing a failure. [ 1591.449716] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.449738] CPU: 1 PID: 9068 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1591.449749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.449755] Call Trace: [ 1591.449780] dump_stack+0x107/0x167 [ 1591.449803] should_fail.cold+0x5/0xa [ 1591.449826] ? create_object.isra.0+0x3a/0xa30 [ 1591.449844] should_failslab+0x5/0x20 [ 1591.449864] kmem_cache_alloc+0x5b/0x310 [ 1591.449889] create_object.isra.0+0x3a/0xa30 [ 1591.449906] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.449930] kmem_cache_alloc+0x159/0x310 [ 1591.449956] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1591.449980] p9_client_rpc+0x220/0x1370 [ 1591.450002] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.450038] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1591.450064] ? pipe_poll+0x21b/0x800 [ 1591.450083] ? p9_fd_close+0x4a0/0x4a0 [ 1591.455719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1591.456204] ? wait_for_partner+0x3c0/0x3c0 [ 1591.456225] ? p9_fd_poll+0x1e0/0x2c0 [ 1591.471832] ? p9_fd_create+0x357/0x4a0 [ 1591.472728] ? p9_conn_create+0x510/0x510 [ 1591.473669] ? p9_client_create+0x798/0x1230 [ 1591.474662] ? kfree+0xd7/0x340 [ 1591.475421] ? do_raw_spin_unlock+0x4f/0x220 [ 1591.476429] p9_client_create+0xa76/0x1230 [ 1591.477402] ? p9_client_flush+0x430/0x430 [ 1591.478361] ? trace_hardirqs_on+0x5b/0x180 [ 1591.479360] ? lockdep_init_map_type+0x2c7/0x780 [ 1591.480449] ? __raw_spin_lock_init+0x36/0x110 [ 1591.481490] v9fs_session_init+0x1dd/0x1680 [ 1591.482468] ? lock_release+0x680/0x680 [ 1591.483390] ? kmem_cache_alloc_trace+0x151/0x320 [ 1591.484479] ? v9fs_show_options+0x690/0x690 [ 1591.485481] ? trace_hardirqs_on+0x5b/0x180 11:39:47 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1591.486465] ? kasan_unpoison_shadow+0x33/0x50 [ 1591.487850] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.489008] v9fs_mount+0x79/0x8f0 [ 1591.489819] ? v9fs_write_inode+0x60/0x60 [ 1591.490759] legacy_get_tree+0x105/0x220 [ 1591.491688] vfs_get_tree+0x8e/0x300 [ 1591.492539] path_mount+0x1490/0x21e0 [ 1591.493413] ? strncpy_from_user+0x9e/0x470 [ 1591.494389] ? finish_automount+0xa90/0xa90 [ 1591.495376] ? getname_flags.part.0+0x1dd/0x4f0 [ 1591.496436] ? _copy_from_user+0xfb/0x1b0 [ 1591.497390] __x64_sys_mount+0x282/0x300 [ 1591.498314] ? copy_mnt_ns+0xa00/0xa00 [ 1591.499221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.500417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1591.501587] do_syscall_64+0x33/0x40 [ 1591.502440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1591.503616] RIP: 0033:0x7ff9c58eab19 [ 1591.504476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.508679] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1591.510418] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1591.512039] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 11:39:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 28) [ 1591.513661] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1591.515411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.517037] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 [ 1591.553794] FAULT_INJECTION: forcing a failure. [ 1591.553794] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.556621] CPU: 1 PID: 9070 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1591.558183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.560077] Call Trace: [ 1591.560678] dump_stack+0x107/0x167 [ 1591.561509] should_fail.cold+0x5/0xa [ 1591.562372] should_failslab+0x5/0x20 [ 1591.563244] __kmalloc_track_caller+0x79/0x370 [ 1591.564281] ? match_number+0xaf/0x1d0 [ 1591.565167] kmemdup_nul+0x2d/0xa0 [ 1591.565973] match_number+0xaf/0x1d0 [ 1591.566834] ? match_u64+0x190/0x190 [ 1591.567702] ? __kmalloc_track_caller+0x2c6/0x370 [ 1591.567745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1591.568793] ? memcpy+0x39/0x60 [ 1591.568817] parse_opts.part.0+0x1f3/0x340 [ 1591.568839] ? p9_fd_show_options+0x1c0/0x1c0 [ 1591.572520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.573711] ? trace_hardirqs_on+0x5b/0x180 [ 1591.574688] ? kfree+0xd7/0x340 [ 1591.575447] p9_fd_create+0x98/0x4a0 [ 1591.576295] ? p9_conn_create+0x510/0x510 [ 1591.577239] ? p9_client_create+0x798/0x1230 [ 1591.578244] ? kfree+0xd7/0x340 [ 1591.579002] ? do_raw_spin_unlock+0x4f/0x220 [ 1591.580020] p9_client_create+0x7ff/0x1230 [ 1591.580995] ? p9_client_flush+0x430/0x430 [ 1591.581963] ? trace_hardirqs_on+0x5b/0x180 [ 1591.582944] ? lockdep_init_map_type+0x2c7/0x780 [ 1591.584029] ? __raw_spin_lock_init+0x36/0x110 [ 1591.585073] v9fs_session_init+0x1dd/0x1680 [ 1591.586053] ? lock_release+0x680/0x680 [ 1591.586966] ? kmem_cache_alloc_trace+0x151/0x320 [ 1591.588056] ? v9fs_show_options+0x690/0x690 [ 1591.589060] ? trace_hardirqs_on+0x5b/0x180 [ 1591.590041] ? kasan_unpoison_shadow+0x33/0x50 [ 1591.591072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1591.592235] v9fs_mount+0x79/0x8f0 [ 1591.593042] ? v9fs_write_inode+0x60/0x60 [ 1591.593977] legacy_get_tree+0x105/0x220 [ 1591.594897] vfs_get_tree+0x8e/0x300 [ 1591.595746] path_mount+0x1490/0x21e0 [ 1591.596614] ? strncpy_from_user+0x9e/0x470 [ 1591.597594] ? finish_automount+0xa90/0xa90 [ 1591.598575] ? getname_flags.part.0+0x1dd/0x4f0 [ 1591.599638] ? _copy_from_user+0xfb/0x1b0 [ 1591.600581] __x64_sys_mount+0x282/0x300 [ 1591.601507] ? copy_mnt_ns+0xa00/0xa00 [ 1591.602388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.603581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1591.604758] do_syscall_64+0x33/0x40 [ 1591.605588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1591.606745] RIP: 0033:0x7f2d92adab19 [ 1591.607602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.611779] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1591.613521] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1591.615130] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1591.616752] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1591.618381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.620011] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 11:39:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:39:47 executing program 7: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:39:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1591.661785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1591.663317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.664158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.681217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1591.708649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.709577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.710448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1591.754119] 9pnet: Insufficient options for proto=fd 11:40:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:40:00 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:40:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:40:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 36) 11:40:00 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 1) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1604.234808] FAULT_INJECTION: forcing a failure. [ 1604.234808] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.235850] FAULT_INJECTION: forcing a failure. [ 1604.235850] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.236285] CPU: 0 PID: 9094 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1604.239396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1604.240403] Call Trace: [ 1604.240730] dump_stack+0x107/0x167 [ 1604.241177] should_fail.cold+0x5/0xa [ 1604.241642] should_failslab+0x5/0x20 [ 1604.242110] __kmalloc_track_caller+0x79/0x370 [ 1604.242667] ? match_number+0xaf/0x1d0 [ 1604.243137] ? kfree+0xd7/0x340 [ 1604.243551] kmemdup_nul+0x2d/0xa0 [ 1604.243982] match_number+0xaf/0x1d0 [ 1604.244437] ? match_u64+0x190/0x190 [ 1604.244891] ? __kmalloc_track_caller+0x2c6/0x370 [ 1604.245478] ? memcpy+0x39/0x60 [ 1604.245883] parse_opts.part.0+0x1f3/0x340 [ 1604.246399] ? p9_fd_show_options+0x1c0/0x1c0 [ 1604.246966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1604.247613] ? trace_hardirqs_on+0x5b/0x180 [ 1604.248139] ? kfree+0xd7/0x340 [ 1604.248542] p9_fd_create+0x98/0x4a0 [ 1604.248994] ? p9_conn_create+0x510/0x510 [ 1604.249498] ? p9_client_create+0x798/0x1230 [ 1604.250037] ? kfree+0xd7/0x340 [ 1604.250438] ? do_raw_spin_unlock+0x4f/0x220 [ 1604.250974] p9_client_create+0x7ff/0x1230 [ 1604.251497] ? p9_client_flush+0x430/0x430 [ 1604.252009] ? trace_hardirqs_on+0x5b/0x180 [ 1604.252535] ? lockdep_init_map_type+0x2c7/0x780 [ 1604.253111] ? __raw_spin_lock_init+0x36/0x110 [ 1604.253668] v9fs_session_init+0x1dd/0x1680 [ 1604.254191] ? lock_release+0x680/0x680 [ 1604.254695] ? kmem_cache_alloc_trace+0x151/0x320 [ 1604.255313] ? v9fs_show_options+0x690/0x690 [ 1604.255875] ? trace_hardirqs_on+0x5b/0x180 [ 1604.256417] ? kasan_unpoison_shadow+0x33/0x50 [ 1604.256971] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1604.257619] v9fs_mount+0x79/0x8f0 [ 1604.258050] ? v9fs_write_inode+0x60/0x60 [ 1604.258567] legacy_get_tree+0x105/0x220 [ 1604.259077] vfs_get_tree+0x8e/0x300 [ 1604.259557] path_mount+0x1490/0x21e0 [ 1604.260048] ? strncpy_from_user+0x9e/0x470 [ 1604.260609] ? finish_automount+0xa90/0xa90 [ 1604.261130] ? getname_flags.part.0+0x1dd/0x4f0 [ 1604.261705] ? _copy_from_user+0xfb/0x1b0 [ 1604.262231] __x64_sys_mount+0x282/0x300 [ 1604.262741] ? copy_mnt_ns+0xa00/0xa00 [ 1604.263223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1604.263890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1604.264515] do_syscall_64+0x33/0x40 [ 1604.264966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1604.265587] RIP: 0033:0x7f644830fb19 [ 1604.266057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1604.268310] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1604.269248] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1604.270130] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1604.271026] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1604.271939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1604.272837] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1604.273779] CPU: 1 PID: 9089 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1604.273801] 9pnet: Insufficient options for proto=fd [ 1604.275588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1604.275595] Call Trace: [ 1604.275625] dump_stack+0x107/0x167 [ 1604.279312] should_fail.cold+0x5/0xa [ 1604.280125] should_failslab+0x5/0x20 [ 1604.280946] __kmalloc_track_caller+0x79/0x370 [ 1604.281920] ? strndup_user+0x74/0xe0 [ 1604.282725] memdup_user+0x22/0xd0 [ 1604.283488] strndup_user+0x74/0xe0 [ 1604.284261] __x64_sys_mount+0x133/0x300 [ 1604.285051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1604.285120] ? copy_mnt_ns+0xa00/0xa00 [ 1604.286961] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1604.288075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1604.289155] do_syscall_64+0x33/0x40 [ 1604.289929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1604.291013] RIP: 0033:0x7fa3b8173b19 11:40:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 1) 11:40:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 29) 11:40:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 36) [ 1604.291827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1604.295893] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1604.297505] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1604.299008] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1604.300532] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1604.302034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1604.303560] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1604.310672] FAULT_INJECTION: forcing a failure. [ 1604.310672] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.313081] CPU: 1 PID: 9099 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1604.314527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1604.316289] Call Trace: [ 1604.316852] dump_stack+0x107/0x167 [ 1604.317625] should_fail.cold+0x5/0xa [ 1604.318441] ? p9_fcall_init+0x97/0x290 [ 1604.319291] should_failslab+0x5/0x20 [ 1604.320114] __kmalloc+0x72/0x390 [ 1604.320852] p9_fcall_init+0x97/0x290 [ 1604.321662] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1604.322778] p9_client_rpc+0x220/0x1370 [ 1604.323638] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1604.324790] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1604.325934] ? pipe_poll+0x21b/0x800 [ 1604.326740] ? p9_fd_close+0x4a0/0x4a0 [ 1604.327599] ? wait_for_partner+0x3c0/0x3c0 [ 1604.328543] ? p9_fd_poll+0x1e0/0x2c0 [ 1604.329379] ? p9_fd_create+0x357/0x4a0 [ 1604.330244] ? p9_conn_create+0x510/0x510 [ 1604.331140] ? p9_client_create+0x798/0x1230 [ 1604.332100] ? kfree+0xd7/0x340 [ 1604.332809] ? do_raw_spin_unlock+0x4f/0x220 [ 1604.333764] p9_client_create+0xa76/0x1230 [ 1604.334681] ? p9_client_flush+0x430/0x430 [ 1604.335616] ? trace_hardirqs_on+0x5b/0x180 [ 1604.336563] ? lockdep_init_map_type+0x2c7/0x780 [ 1604.337603] ? __raw_spin_lock_init+0x36/0x110 [ 1604.338610] v9fs_session_init+0x1dd/0x1680 [ 1604.339536] ? lock_release+0x680/0x680 [ 1604.340386] ? kmem_cache_alloc_trace+0x151/0x320 [ 1604.341402] ? v9fs_show_options+0x690/0x690 [ 1604.342362] ? trace_hardirqs_on+0x5b/0x180 [ 1604.343286] ? kasan_unpoison_shadow+0x33/0x50 [ 1604.344269] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1604.345342] v9fs_mount+0x79/0x8f0 [ 1604.346099] ? v9fs_write_inode+0x60/0x60 [ 1604.346992] legacy_get_tree+0x105/0x220 [ 1604.347889] vfs_get_tree+0x8e/0x300 [ 1604.348686] path_mount+0x1490/0x21e0 [ 1604.349503] ? strncpy_from_user+0x9e/0x470 [ 1604.350422] ? finish_automount+0xa90/0xa90 [ 1604.351351] ? getname_flags.part.0+0x1dd/0x4f0 [ 1604.352345] ? _copy_from_user+0xfb/0x1b0 [ 1604.353223] __x64_sys_mount+0x282/0x300 [ 1604.354085] ? copy_mnt_ns+0xa00/0xa00 [ 1604.354911] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1604.356029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1604.357115] do_syscall_64+0x33/0x40 [ 1604.357914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1604.359007] RIP: 0033:0x7ff9c58eab19 [ 1604.359802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1604.363695] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1604.365298] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1604.366803] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1604.368316] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1604.369829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1604.371345] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 [ 1604.371665] FAULT_INJECTION: forcing a failure. [ 1604.371665] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.374250] CPU: 0 PID: 9102 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1604.375063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1604.376040] Call Trace: [ 1604.376352] dump_stack+0x107/0x167 [ 1604.376781] should_fail.cold+0x5/0xa [ 1604.377232] ? create_object.isra.0+0x3a/0xa30 [ 1604.377783] should_failslab+0x5/0x20 [ 1604.378235] kmem_cache_alloc+0x5b/0x310 [ 1604.378711] create_object.isra.0+0x3a/0xa30 [ 1604.379222] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1604.379836] __kmalloc_track_caller+0x177/0x370 [ 1604.380413] ? match_number+0xaf/0x1d0 [ 1604.380896] kmemdup_nul+0x2d/0xa0 [ 1604.381337] match_number+0xaf/0x1d0 [ 1604.381804] ? match_u64+0x190/0x190 [ 1604.382241] ? __kmalloc_track_caller+0x2c6/0x370 [ 1604.382799] ? memcpy+0x39/0x60 [ 1604.383192] parse_opts.part.0+0x1f3/0x340 [ 1604.383692] ? p9_fd_show_options+0x1c0/0x1c0 [ 1604.384215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1604.384827] ? trace_hardirqs_on+0x5b/0x180 [ 1604.385333] ? kfree+0xd7/0x340 [ 1604.385715] p9_fd_create+0x98/0x4a0 [ 1604.386148] ? p9_conn_create+0x510/0x510 [ 1604.386625] ? p9_client_create+0x798/0x1230 [ 1604.387130] ? kfree+0xd7/0x340 [ 1604.387526] ? do_raw_spin_unlock+0x4f/0x220 [ 1604.388039] p9_client_create+0x7ff/0x1230 [ 1604.388532] ? p9_client_flush+0x430/0x430 [ 1604.389020] ? trace_hardirqs_on+0x5b/0x180 [ 1604.389522] ? lockdep_init_map_type+0x2c7/0x780 [ 1604.390072] ? __raw_spin_lock_init+0x36/0x110 [ 1604.390604] v9fs_session_init+0x1dd/0x1680 [ 1604.391105] ? lock_release+0x680/0x680 [ 1604.391574] ? kmem_cache_alloc_trace+0x151/0x320 [ 1604.392138] ? v9fs_show_options+0x690/0x690 [ 1604.392651] ? trace_hardirqs_on+0x5b/0x180 [ 1604.393196] ? kasan_unpoison_shadow+0x33/0x50 [ 1604.393772] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1604.394364] v9fs_mount+0x79/0x8f0 [ 1604.394780] ? v9fs_write_inode+0x60/0x60 [ 1604.395259] legacy_get_tree+0x105/0x220 [ 1604.395742] vfs_get_tree+0x8e/0x300 [ 1604.396173] path_mount+0x1490/0x21e0 [ 1604.396615] ? strncpy_from_user+0x9e/0x470 [ 1604.397123] ? finish_automount+0xa90/0xa90 [ 1604.397637] ? getname_flags.part.0+0x1dd/0x4f0 [ 1604.398175] ? _copy_from_user+0xfb/0x1b0 [ 1604.398694] __x64_sys_mount+0x282/0x300 [ 1604.399166] ? copy_mnt_ns+0xa00/0xa00 [ 1604.399643] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1604.400285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1604.400936] do_syscall_64+0x33/0x40 [ 1604.401369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1604.401964] RIP: 0033:0x7f2d92adab19 [ 1604.402405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1604.404595] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1604.405476] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1604.406317] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1604.407182] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 11:40:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 37) [ 1604.408013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1604.409050] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1604.421826] FAULT_INJECTION: forcing a failure. [ 1604.421826] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.423120] CPU: 0 PID: 9105 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1604.423917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1604.424878] Call Trace: [ 1604.425191] dump_stack+0x107/0x167 [ 1604.425611] should_fail.cold+0x5/0xa [ 1604.426057] ? sock_alloc_inode+0x18/0x1c0 [ 1604.426564] should_failslab+0x5/0x20 [ 1604.427029] kmem_cache_alloc+0x5b/0x310 [ 1604.427525] ? selinux_ipv6_output+0x180/0x180 [ 1604.428076] ? sock_free_inode+0x20/0x20 [ 1604.428575] sock_alloc_inode+0x18/0x1c0 [ 1604.429039] ? sock_free_inode+0x20/0x20 [ 1604.429524] alloc_inode+0x63/0x240 [ 1604.429968] new_inode_pseudo+0x14/0xe0 [ 1604.430452] sock_alloc+0x3c/0x270 [ 1604.430888] __sock_create+0xbd/0x7f0 [ 1604.431345] ? wait_for_completion_io+0x270/0x270 [ 1604.431919] __sys_socket+0xef/0x200 [ 1604.432345] ? fput_many+0x2f/0x1a0 [ 1604.432777] ? move_addr_to_kernel+0x70/0x70 [ 1604.433298] ? ksys_write+0x1a9/0x260 [ 1604.433746] ? __ia32_sys_read+0xb0/0xb0 [ 1604.434229] __x64_sys_socket+0x6f/0xb0 [ 1604.434720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1604.435320] do_syscall_64+0x33/0x40 [ 1604.435748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1604.436340] RIP: 0033:0x7f4930b3f197 [ 1604.436768] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1604.438889] RSP: 002b:00007f492e091098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1604.439774] RAX: ffffffffffffffda RBX: 00007f4930c51020 RCX: 00007f4930b3f197 [ 1604.440600] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1604.441420] RBP: 00007f492e0921d0 R08: 0000000000000000 R09: 0000000000000000 [ 1604.442246] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1604.443069] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1604.444075] socket: no more sockets [ 1604.456906] FAULT_INJECTION: forcing a failure. [ 1604.456906] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.458358] CPU: 0 PID: 9106 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1604.459147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1604.460115] Call Trace: [ 1604.460425] dump_stack+0x107/0x167 [ 1604.460845] should_fail.cold+0x5/0xa [ 1604.461281] ? create_object.isra.0+0x3a/0xa30 [ 1604.461804] should_failslab+0x5/0x20 [ 1604.462241] kmem_cache_alloc+0x5b/0x310 [ 1604.462713] ? p9_fd_show_options+0x1c0/0x1c0 [ 1604.463229] create_object.isra.0+0x3a/0xa30 [ 1604.463743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1604.464330] kmem_cache_alloc_trace+0x151/0x320 [ 1604.464865] p9_fd_create+0x161/0x4a0 [ 1604.465305] ? p9_conn_create+0x510/0x510 [ 1604.465771] ? p9_client_create+0x798/0x1230 [ 1604.466280] ? kfree+0xd7/0x340 [ 1604.466662] ? do_raw_spin_unlock+0x4f/0x220 [ 1604.467166] p9_client_create+0x7ff/0x1230 [ 1604.467660] ? p9_client_flush+0x430/0x430 [ 1604.468176] ? trace_hardirqs_on+0x5b/0x180 [ 1604.468695] ? lockdep_init_map_type+0x2c7/0x780 [ 1604.469269] ? __raw_spin_lock_init+0x36/0x110 [ 1604.469825] v9fs_session_init+0x1dd/0x1680 [ 1604.470344] ? lock_release+0x680/0x680 [ 1604.470834] ? kmem_cache_alloc_trace+0x151/0x320 [ 1604.471422] ? v9fs_show_options+0x690/0x690 [ 1604.471960] ? trace_hardirqs_on+0x5b/0x180 [ 1604.472477] ? kasan_unpoison_shadow+0x33/0x50 [ 1604.472993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1604.473608] v9fs_mount+0x79/0x8f0 [ 1604.474039] ? v9fs_write_inode+0x60/0x60 [ 1604.474534] legacy_get_tree+0x105/0x220 [ 1604.475027] vfs_get_tree+0x8e/0x300 [ 1604.475482] path_mount+0x1490/0x21e0 [ 1604.475952] ? strncpy_from_user+0x9e/0x470 [ 1604.476474] ? finish_automount+0xa90/0xa90 [ 1604.477013] ? getname_flags.part.0+0x1dd/0x4f0 [ 1604.477592] ? _copy_from_user+0xfb/0x1b0 [ 1604.478106] __x64_sys_mount+0x282/0x300 [ 1604.478604] ? copy_mnt_ns+0xa00/0xa00 [ 1604.479092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1604.479732] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1604.480364] do_syscall_64+0x33/0x40 [ 1604.480822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1604.481444] RIP: 0033:0x7f644830fb19 [ 1604.481891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1604.484165] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1604.485087] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1604.485935] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1604.486798] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1604.487652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1604.488483] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1604.489727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1604.497840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.498689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.499606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1617.153580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1617.156834] FAULT_INJECTION: forcing a failure. [ 1617.156834] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.158303] CPU: 0 PID: 9126 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1617.159143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.160174] Call Trace: [ 1617.160507] dump_stack+0x107/0x167 [ 1617.160963] should_fail.cold+0x5/0xa [ 1617.161437] ? create_object.isra.0+0x3a/0xa30 [ 1617.161997] should_failslab+0x5/0x20 [ 1617.162474] kmem_cache_alloc+0x5b/0x310 [ 1617.162969] ? legacy_get_tree+0x105/0x220 [ 1617.163492] ? vfs_get_tree+0x8e/0x300 [ 1617.163784] FAULT_INJECTION: forcing a failure. [ 1617.163784] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.163976] create_object.isra.0+0x3a/0xa30 [ 1617.167197] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.167837] __kmalloc_track_caller+0x177/0x370 [ 1617.168404] ? parse_opts.part.0+0x8e/0x340 [ 1617.168935] kstrdup+0x36/0x70 [ 1617.169330] parse_opts.part.0+0x8e/0x340 [ 1617.169840] ? p9_fd_show_options+0x1c0/0x1c0 [ 1617.170398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.171043] ? quarantine_put+0x8b/0x1a0 [ 1617.171553] ? trace_hardirqs_on+0x5b/0x180 [ 1617.172084] ? kfree+0xd7/0x340 [ 1617.172490] p9_fd_create+0x98/0x4a0 [ 1617.172942] ? p9_conn_create+0x510/0x510 [ 1617.173447] ? p9_client_create+0x798/0x1230 [ 1617.173982] ? kfree+0xd7/0x340 [ 1617.174383] ? do_raw_spin_unlock+0x4f/0x220 [ 1617.174919] p9_client_create+0x7ff/0x1230 [ 1617.175443] ? p9_client_flush+0x430/0x430 [ 1617.175943] ? trace_hardirqs_on+0x5b/0x180 [ 1617.176449] ? lockdep_init_map_type+0x2c7/0x780 [ 1617.177002] ? __raw_spin_lock_init+0x36/0x110 [ 1617.177553] v9fs_session_init+0x1dd/0x1680 [ 1617.178061] ? lock_release+0x680/0x680 [ 1617.178546] ? kmem_cache_alloc_trace+0x151/0x320 [ 1617.179111] ? v9fs_show_options+0x690/0x690 [ 1617.179647] ? trace_hardirqs_on+0x5b/0x180 [ 1617.180152] ? kasan_unpoison_shadow+0x33/0x50 [ 1617.180697] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.181295] v9fs_mount+0x79/0x8f0 [ 1617.181721] ? v9fs_write_inode+0x60/0x60 [ 1617.182208] legacy_get_tree+0x105/0x220 [ 1617.182691] vfs_get_tree+0x8e/0x300 [ 1617.183129] path_mount+0x1490/0x21e0 [ 1617.183597] ? strncpy_from_user+0x9e/0x470 [ 1617.184102] ? finish_automount+0xa90/0xa90 [ 1617.184615] ? getname_flags.part.0+0x1dd/0x4f0 [ 1617.185173] ? _copy_from_user+0xfb/0x1b0 [ 1617.185665] __x64_sys_mount+0x282/0x300 [ 1617.186147] ? copy_mnt_ns+0xa00/0xa00 [ 1617.186604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.187231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.187848] do_syscall_64+0x33/0x40 [ 1617.188296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.188897] RIP: 0033:0x7f2d92adab19 [ 1617.189349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.191512] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1617.192404] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1617.193245] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1617.194077] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1617.194928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.195769] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 11:40:13 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 2) 11:40:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) 11:40:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 30) 11:40:13 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 38) 11:40:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:40:13 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:40:13 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 2) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:40:13 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 37) [ 1617.196634] CPU: 1 PID: 9120 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1617.198536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.200516] Call Trace: [ 1617.200852] FAULT_INJECTION: forcing a failure. [ 1617.200852] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.201151] dump_stack+0x107/0x167 [ 1617.201177] should_fail.cold+0x5/0xa [ 1617.204189] ? create_object.isra.0+0x3a/0xa30 [ 1617.205253] should_failslab+0x5/0x20 [ 1617.206142] kmem_cache_alloc+0x5b/0x310 [ 1617.207103] create_object.isra.0+0x3a/0xa30 [ 1617.208141] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.209344] __kmalloc_track_caller+0x177/0x370 [ 1617.210428] ? strndup_user+0x74/0xe0 [ 1617.211317] memdup_user+0x22/0xd0 [ 1617.212155] strndup_user+0x74/0xe0 [ 1617.213012] __x64_sys_mount+0x133/0x300 [ 1617.213954] ? copy_mnt_ns+0xa00/0xa00 [ 1617.214874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.216112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.217316] do_syscall_64+0x33/0x40 [ 1617.218177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.219370] RIP: 0033:0x7fa3b8173b19 [ 1617.220243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.224537] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1617.226319] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1617.227979] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1617.229653] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1617.231310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.232975] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1617.234646] CPU: 0 PID: 9128 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1617.235432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.236383] Call Trace: [ 1617.236683] dump_stack+0x107/0x167 [ 1617.237098] should_fail.cold+0x5/0xa [ 1617.237533] ? create_object.isra.0+0x3a/0xa30 [ 1617.238045] should_failslab+0x5/0x20 [ 1617.238478] kmem_cache_alloc+0x5b/0x310 [ 1617.238943] create_object.isra.0+0x3a/0xa30 [ 1617.239466] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.240057] kmem_cache_alloc+0x159/0x310 [ 1617.240535] ? sock_free_inode+0x20/0x20 [ 1617.241012] sock_alloc_inode+0x18/0x1c0 [ 1617.241474] ? sock_free_inode+0x20/0x20 [ 1617.241936] alloc_inode+0x63/0x240 [ 1617.242352] new_inode_pseudo+0x14/0xe0 [ 1617.242808] sock_alloc+0x3c/0x270 [ 1617.243216] __sock_create+0xbd/0x7f0 [ 1617.243658] ? wait_for_completion_io+0x270/0x270 [ 1617.244211] __sys_socket+0xef/0x200 [ 1617.244631] ? fput_many+0x2f/0x1a0 [ 1617.245048] ? move_addr_to_kernel+0x70/0x70 [ 1617.245547] ? ksys_write+0x1a9/0x260 [ 1617.245980] ? __ia32_sys_read+0xb0/0xb0 [ 1617.246448] __x64_sys_socket+0x6f/0xb0 [ 1617.246904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.247499] do_syscall_64+0x33/0x40 [ 1617.247919] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.248501] RIP: 0033:0x7f4930b3f197 [ 1617.248921] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.251013] RSP: 002b:00007f492e091098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1617.251878] RAX: ffffffffffffffda RBX: 00007f4930c51020 RCX: 00007f4930b3f197 [ 1617.252617] FAULT_INJECTION: forcing a failure. [ 1617.252617] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.252684] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1617.252700] RBP: 00007f492e0921d0 R08: 0000000000000000 R09: 0000000000000000 [ 1617.256867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1617.257670] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1617.258498] CPU: 1 PID: 9130 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1617.260093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.262021] Call Trace: [ 1617.262636] dump_stack+0x107/0x167 [ 1617.263493] should_fail.cold+0x5/0xa [ 1617.264377] ? create_object.isra.0+0x3a/0xa30 [ 1617.265437] should_failslab+0x5/0x20 [ 1617.266318] kmem_cache_alloc+0x5b/0x310 [ 1617.267262] create_object.isra.0+0x3a/0xa30 [ 1617.268290] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.269467] __kmalloc+0x16e/0x390 [ 1617.270305] p9_fcall_init+0x97/0x290 [ 1617.271244] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1617.272430] p9_client_rpc+0x220/0x1370 [ 1617.273342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.274563] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1617.275776] ? pipe_poll+0x21b/0x800 [ 1617.276638] ? p9_fd_close+0x4a0/0x4a0 [ 1617.277534] ? wait_for_partner+0x3c0/0x3c0 [ 1617.278529] ? p9_fd_poll+0x1e0/0x2c0 [ 1617.279403] ? p9_fd_create+0x357/0x4a0 [ 1617.280302] ? p9_conn_create+0x510/0x510 [ 1617.281277] ? p9_client_create+0x798/0x1230 [ 1617.282289] ? kfree+0xd7/0x340 [ 1617.283042] ? do_raw_spin_unlock+0x4f/0x220 [ 1617.284081] p9_client_create+0xa76/0x1230 [ 1617.285087] ? p9_client_flush+0x430/0x430 [ 1617.286079] ? trace_hardirqs_on+0x5b/0x180 [ 1617.287072] ? lockdep_init_map_type+0x2c7/0x780 [ 1617.288191] ? __raw_spin_lock_init+0x36/0x110 [ 1617.289272] v9fs_session_init+0x1dd/0x1680 [ 1617.290263] ? lock_release+0x680/0x680 [ 1617.291179] ? kmem_cache_alloc_trace+0x151/0x320 [ 1617.292335] ? v9fs_show_options+0x690/0x690 [ 1617.293343] ? trace_hardirqs_on+0x5b/0x180 [ 1617.294339] ? kasan_unpoison_shadow+0x33/0x50 [ 1617.295370] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.296564] v9fs_mount+0x79/0x8f0 [ 1617.297363] ? v9fs_write_inode+0x60/0x60 [ 1617.298317] legacy_get_tree+0x105/0x220 [ 1617.299258] vfs_get_tree+0x8e/0x300 [ 1617.300129] path_mount+0x1490/0x21e0 [ 1617.301001] ? strncpy_from_user+0x9e/0x470 [ 1617.301991] ? finish_automount+0xa90/0xa90 [ 1617.302983] ? getname_flags.part.0+0x1dd/0x4f0 [ 1617.304068] ? _copy_from_user+0xfb/0x1b0 [ 1617.305046] __x64_sys_mount+0x282/0x300 [ 1617.305996] ? copy_mnt_ns+0xa00/0xa00 [ 1617.306928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.308167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.309325] do_syscall_64+0x33/0x40 [ 1617.310165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.311320] RIP: 0033:0x7ff9c58eab19 [ 1617.312211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.316372] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1617.318079] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1617.319682] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1617.321282] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1617.322874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.324468] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 [ 1617.332143] FAULT_INJECTION: forcing a failure. [ 1617.332143] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.334692] CPU: 1 PID: 9119 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1617.336248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.338130] Call Trace: [ 1617.338743] dump_stack+0x107/0x167 [ 1617.339571] should_fail.cold+0x5/0xa [ 1617.340431] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 1617.341602] should_failslab+0x5/0x20 [ 1617.342459] kmem_cache_alloc+0x5b/0x310 [ 1617.343368] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1617.344518] p9_client_rpc+0x220/0x1370 [ 1617.345410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.346590] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1617.347788] ? pipe_poll+0x21b/0x800 [ 1617.348620] ? p9_fd_close+0x4a0/0x4a0 [ 1617.349505] ? wait_for_partner+0x3c0/0x3c0 [ 1617.350476] ? p9_fd_poll+0x1e0/0x2c0 [ 1617.351335] ? p9_fd_create+0x357/0x4a0 [ 1617.352227] ? p9_conn_create+0x510/0x510 [ 1617.353146] ? p9_client_create+0x798/0x1230 [ 1617.354134] ? kfree+0xd7/0x340 [ 1617.354871] ? do_raw_spin_unlock+0x4f/0x220 [ 1617.355868] p9_client_create+0xa76/0x1230 [ 1617.356828] ? p9_client_flush+0x430/0x430 [ 1617.357769] ? trace_hardirqs_on+0x5b/0x180 [ 1617.358742] ? lockdep_init_map_type+0x2c7/0x780 [ 1617.359821] ? __raw_spin_lock_init+0x36/0x110 [ 1617.360848] v9fs_session_init+0x1dd/0x1680 [ 1617.361817] ? lock_release+0x680/0x680 [ 1617.362707] ? kmem_cache_alloc_trace+0x151/0x320 [ 1617.363800] ? v9fs_show_options+0x690/0x690 [ 1617.364790] ? trace_hardirqs_on+0x5b/0x180 [ 1617.365762] ? kasan_unpoison_shadow+0x33/0x50 [ 1617.366786] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.367930] v9fs_mount+0x79/0x8f0 [ 1617.368721] ? v9fs_write_inode+0x60/0x60 [ 1617.369647] legacy_get_tree+0x105/0x220 [ 1617.370567] vfs_get_tree+0x8e/0x300 [ 1617.371394] path_mount+0x1490/0x21e0 [ 1617.372264] ? strncpy_from_user+0x9e/0x470 [ 1617.373225] ? finish_automount+0xa90/0xa90 [ 1617.374187] ? getname_flags.part.0+0x1dd/0x4f0 [ 1617.375228] ? _copy_from_user+0xfb/0x1b0 [ 1617.376174] __x64_sys_mount+0x282/0x300 [ 1617.377084] ? copy_mnt_ns+0xa00/0xa00 [ 1617.377983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.379160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.380323] do_syscall_64+0x33/0x40 [ 1617.381157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.382299] RIP: 0033:0x7f644830fb19 [ 1617.383126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.387272] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1617.388984] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1617.390583] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1617.392203] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1617.393808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.395416] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1617.405920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1617.408611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.409466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.410997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1617.414712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.416450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.418473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:40:13 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 3) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:40:13 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1617.496527] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1617.508881] FAULT_INJECTION: forcing a failure. [ 1617.508881] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.511668] CPU: 1 PID: 9139 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1617.513217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.515082] Call Trace: [ 1617.515688] dump_stack+0x107/0x167 [ 1617.516509] should_fail.cold+0x5/0xa [ 1617.517388] ? security_inode_alloc+0x34/0x160 [ 1617.518415] should_failslab+0x5/0x20 [ 1617.519266] kmem_cache_alloc+0x5b/0x310 11:40:13 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 3) [ 1617.520203] security_inode_alloc+0x34/0x160 [ 1617.521286] inode_init_always+0xa4e/0xd10 [ 1617.522256] alloc_inode+0x84/0x240 [ 1617.523082] new_inode_pseudo+0x14/0xe0 [ 1617.524002] sock_alloc+0x3c/0x270 [ 1617.524796] __sock_create+0xbd/0x7f0 [ 1617.525670] ? wait_for_completion_io+0x270/0x270 [ 1617.526751] __sys_socket+0xef/0x200 [ 1617.527605] ? fput_many+0x2f/0x1a0 [ 1617.528438] ? move_addr_to_kernel+0x70/0x70 [ 1617.529424] ? ksys_write+0x1a9/0x260 [ 1617.530285] ? __ia32_sys_read+0xb0/0xb0 [ 1617.531221] __x64_sys_socket+0x6f/0xb0 [ 1617.532129] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.533289] do_syscall_64+0x33/0x40 [ 1617.534130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.535286] RIP: 0033:0x7f4930b3f197 [ 1617.536140] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.540299] RSP: 002b:00007f492e0b2098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 11:40:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 31) [ 1617.542036] RAX: ffffffffffffffda RBX: 00007f4930c50f60 RCX: 00007f4930b3f197 [ 1617.543812] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1617.545449] RBP: 00007f492e0b31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1617.546713] FAULT_INJECTION: forcing a failure. [ 1617.546713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.547085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1617.547097] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1617.547230] socket: no more sockets [ 1617.548538] CPU: 0 PID: 9142 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1617.552139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.553104] Call Trace: [ 1617.553415] dump_stack+0x107/0x167 [ 1617.553835] should_fail.cold+0x5/0xa [ 1617.554274] _copy_from_user+0x2e/0x1b0 [ 1617.554728] memdup_user+0x65/0xd0 [ 1617.555129] strndup_user+0x74/0xe0 [ 1617.555553] __x64_sys_mount+0x133/0x300 [ 1617.556014] ? copy_mnt_ns+0xa00/0xa00 [ 1617.556464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.557059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.557650] do_syscall_64+0x33/0x40 [ 1617.558072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.558655] RIP: 0033:0x7fa3b8173b19 [ 1617.559079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.561213] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1617.562094] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1617.562914] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1617.563742] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1617.564561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.565372] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1617.567032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:40:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) [ 1617.585566] FAULT_INJECTION: forcing a failure. [ 1617.585566] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.588250] CPU: 1 PID: 9145 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1617.589831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.591723] Call Trace: [ 1617.592327] dump_stack+0x107/0x167 [ 1617.593163] should_fail.cold+0x5/0xa [ 1617.594032] ? create_object.isra.0+0x3a/0xa30 [ 1617.595068] should_failslab+0x5/0x20 [ 1617.595943] kmem_cache_alloc+0x5b/0x310 [ 1617.596871] create_object.isra.0+0x3a/0xa30 [ 1617.597867] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.599037] __kmalloc_track_caller+0x177/0x370 [ 1617.600104] ? match_number+0xaf/0x1d0 [ 1617.601016] kmemdup_nul+0x2d/0xa0 [ 1617.601817] match_number+0xaf/0x1d0 [ 1617.602680] ? match_u64+0x190/0x190 [ 1617.603559] ? __kmalloc_track_caller+0x2c6/0x370 [ 1617.604663] ? memcpy+0x39/0x60 [ 1617.605439] parse_opts.part.0+0x1f3/0x340 [ 1617.606418] ? p9_fd_show_options+0x1c0/0x1c0 [ 1617.607454] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.608652] ? trace_hardirqs_on+0x5b/0x180 [ 1617.609645] ? kfree+0xd7/0x340 [ 1617.610414] p9_fd_create+0x98/0x4a0 [ 1617.611266] ? p9_conn_create+0x510/0x510 [ 1617.612228] ? p9_client_create+0x798/0x1230 [ 1617.613227] ? kfree+0xd7/0x340 [ 1617.613975] ? do_raw_spin_unlock+0x4f/0x220 [ 1617.614997] p9_client_create+0x7ff/0x1230 [ 1617.615982] ? p9_client_flush+0x430/0x430 [ 1617.616940] ? trace_hardirqs_on+0x5b/0x180 [ 1617.617935] ? lockdep_init_map_type+0x2c7/0x780 [ 1617.619013] ? __raw_spin_lock_init+0x36/0x110 [ 1617.620084] v9fs_session_init+0x1dd/0x1680 [ 1617.621064] ? lock_release+0x680/0x680 [ 1617.621980] ? kmem_cache_alloc_trace+0x151/0x320 [ 1617.623093] ? v9fs_show_options+0x690/0x690 [ 1617.624134] ? trace_hardirqs_on+0x5b/0x180 [ 1617.625123] ? kasan_unpoison_shadow+0x33/0x50 [ 1617.626159] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.627307] v9fs_mount+0x79/0x8f0 [ 1617.628120] ? v9fs_write_inode+0x60/0x60 [ 1617.629056] legacy_get_tree+0x105/0x220 [ 1617.629993] vfs_get_tree+0x8e/0x300 [ 1617.630839] path_mount+0x1490/0x21e0 [ 1617.631731] ? strncpy_from_user+0x9e/0x470 [ 1617.632719] ? finish_automount+0xa90/0xa90 [ 1617.633714] ? getname_flags.part.0+0x1dd/0x4f0 [ 1617.634779] ? _copy_from_user+0xfb/0x1b0 [ 1617.635753] __x64_sys_mount+0x282/0x300 [ 1617.636669] ? copy_mnt_ns+0xa00/0xa00 [ 1617.637576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.638773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.639964] do_syscall_64+0x33/0x40 [ 1617.640819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.642004] RIP: 0033:0x7f2d92adab19 [ 1617.642847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.647052] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1617.648784] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1617.650388] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1617.652020] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1617.653632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.655236] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 11:40:13 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 39) 11:40:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1617.699121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.699968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.700911] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1617.749502] FAULT_INJECTION: forcing a failure. [ 1617.749502] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.752321] CPU: 1 PID: 9153 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1617.753900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.755809] Call Trace: [ 1617.756410] dump_stack+0x107/0x167 [ 1617.757231] should_fail.cold+0x5/0xa [ 1617.758088] ? create_object.isra.0+0x3a/0xa30 [ 1617.759118] should_failslab+0x5/0x20 [ 1617.759987] kmem_cache_alloc+0x5b/0x310 [ 1617.760899] ? p9_fd_show_options+0x1c0/0x1c0 [ 1617.761916] create_object.isra.0+0x3a/0xa30 [ 1617.762904] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.764063] kmem_cache_alloc_trace+0x151/0x320 [ 1617.765113] p9_fd_create+0x161/0x4a0 [ 1617.765971] ? p9_conn_create+0x510/0x510 [ 1617.766902] ? p9_client_create+0x798/0x1230 [ 1617.767899] ? kfree+0xd7/0x340 [ 1617.768634] ? do_raw_spin_unlock+0x4f/0x220 [ 1617.769637] p9_client_create+0x7ff/0x1230 [ 1617.770598] ? p9_client_flush+0x430/0x430 [ 1617.771561] ? trace_hardirqs_on+0x5b/0x180 [ 1617.772550] ? lockdep_init_map_type+0x2c7/0x780 [ 1617.773613] ? __raw_spin_lock_init+0x36/0x110 [ 1617.774655] v9fs_session_init+0x1dd/0x1680 [ 1617.775653] ? lock_release+0x680/0x680 [ 1617.776567] ? kmem_cache_alloc_trace+0x151/0x320 [ 1617.777671] ? v9fs_show_options+0x690/0x690 [ 1617.778683] ? trace_hardirqs_on+0x5b/0x180 [ 1617.779669] ? kasan_unpoison_shadow+0x33/0x50 [ 1617.780720] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.781857] v9fs_mount+0x79/0x8f0 [ 1617.782686] ? v9fs_write_inode+0x60/0x60 [ 1617.783645] legacy_get_tree+0x105/0x220 [ 1617.784575] vfs_get_tree+0x8e/0x300 [ 1617.785420] path_mount+0x1490/0x21e0 [ 1617.786304] ? strncpy_from_user+0x9e/0x470 [ 1617.787278] ? finish_automount+0xa90/0xa90 [ 1617.788266] ? getname_flags.part.0+0x1dd/0x4f0 [ 1617.789338] ? _copy_from_user+0xfb/0x1b0 [ 1617.790306] __x64_sys_mount+0x282/0x300 [ 1617.791225] ? copy_mnt_ns+0xa00/0xa00 [ 1617.792125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.793313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.794490] do_syscall_64+0x33/0x40 [ 1617.795349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.796534] RIP: 0033:0x7f644830fb19 [ 1617.797387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.801618] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1617.803354] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1617.805015] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1617.806647] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1617.808302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.809923] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1629.343230] FAULT_INJECTION: forcing a failure. [ 1629.343230] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.344614] CPU: 1 PID: 9160 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1629.345396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.346342] Call Trace: [ 1629.346649] dump_stack+0x107/0x167 [ 1629.347074] should_fail.cold+0x5/0xa [ 1629.347521] ? copy_mount_options+0x55/0x180 [ 1629.348035] should_failslab+0x5/0x20 [ 1629.348472] kmem_cache_alloc_trace+0x55/0x320 [ 1629.348998] ? _copy_from_user+0xfb/0x1b0 [ 1629.349478] copy_mount_options+0x55/0x180 [ 1629.349966] __x64_sys_mount+0x1a8/0x300 [ 1629.350439] ? copy_mnt_ns+0xa00/0xa00 [ 1629.350889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1629.351495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.352104] do_syscall_64+0x33/0x40 [ 1629.352531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1629.353128] RIP: 0033:0x7fa3b8173b19 [ 1629.353558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.355694] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1629.356579] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1629.357398] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1629.358224] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1629.359052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.359882] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1629.364116] FAULT_INJECTION: forcing a failure. [ 1629.364116] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.365448] CPU: 1 PID: 9163 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1629.366230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.367181] Call Trace: [ 1629.367482] dump_stack+0x107/0x167 [ 1629.367902] should_fail.cold+0x5/0xa [ 1629.368340] ? p9_fd_create+0x161/0x4a0 [ 1629.368792] should_failslab+0x5/0x20 [ 1629.369227] kmem_cache_alloc_trace+0x55/0x320 [ 1629.369753] p9_fd_create+0x161/0x4a0 [ 1629.370186] ? p9_conn_create+0x510/0x510 [ 1629.370656] ? p9_client_create+0x798/0x1230 [ 1629.371158] ? kfree+0xd7/0x340 [ 1629.371534] ? do_raw_spin_unlock+0x4f/0x220 [ 1629.372049] p9_client_create+0x7ff/0x1230 [ 1629.372535] ? p9_client_flush+0x430/0x430 [ 1629.373020] ? trace_hardirqs_on+0x5b/0x180 [ 1629.373516] ? lockdep_init_map_type+0x2c7/0x780 [ 1629.374060] ? __raw_spin_lock_init+0x36/0x110 [ 1629.374583] v9fs_session_init+0x1dd/0x1680 [ 1629.375066] ? lock_release+0x680/0x680 [ 1629.375525] ? kmem_cache_alloc_trace+0x151/0x320 [ 1629.376091] ? v9fs_show_options+0x690/0x690 [ 1629.376594] ? trace_hardirqs_on+0x5b/0x180 [ 1629.377092] ? kasan_unpoison_shadow+0x33/0x50 [ 1629.377614] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1629.378198] v9fs_mount+0x79/0x8f0 [ 1629.378605] ? v9fs_write_inode+0x60/0x60 [ 1629.379082] legacy_get_tree+0x105/0x220 [ 1629.379547] vfs_get_tree+0x8e/0x300 [ 1629.379978] path_mount+0x1490/0x21e0 [ 1629.380421] ? strncpy_from_user+0x9e/0x470 [ 1629.380913] ? finish_automount+0xa90/0xa90 [ 1629.381408] ? getname_flags.part.0+0x1dd/0x4f0 [ 1629.381939] ? _copy_from_user+0xfb/0x1b0 [ 1629.382417] __x64_sys_mount+0x282/0x300 [ 1629.382877] ? copy_mnt_ns+0xa00/0xa00 [ 1629.383326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 11:40:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) 11:40:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 32) 11:40:25 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:40:25 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 4) [ 1629.383932] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.384706] do_syscall_64+0x33/0x40 11:40:25 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 40) 11:40:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1629.385165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1629.385885] RIP: 0033:0x7f2d92adab19 [ 1629.386344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.388468] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1629.389342] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1629.390160] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1629.390980] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1629.391812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1629.392632] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1629.396545] FAULT_INJECTION: forcing a failure. [ 1629.396545] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.397865] CPU: 1 PID: 9168 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1629.398653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.399612] Call Trace: [ 1629.399912] dump_stack+0x107/0x167 [ 1629.400331] should_fail.cold+0x5/0xa [ 1629.400770] ? p9_fcall_init+0x97/0x290 [ 1629.401230] should_failslab+0x5/0x20 [ 1629.401664] __kmalloc+0x72/0x390 [ 1629.402064] p9_fcall_init+0x97/0x290 [ 1629.402501] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1629.403088] p9_client_rpc+0x220/0x1370 [ 1629.403542] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1629.404147] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1629.404764] ? pipe_poll+0x21b/0x800 [ 1629.405192] ? p9_fd_close+0x4a0/0x4a0 [ 1629.405632] ? wait_for_partner+0x3c0/0x3c0 [ 1629.406138] ? p9_fd_poll+0x1e0/0x2c0 [ 1629.406581] ? p9_fd_create+0x357/0x4a0 [ 1629.407027] ? p9_conn_create+0x510/0x510 11:40:25 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 4) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:40:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 38) [ 1629.407504] ? p9_client_create+0x798/0x1230 [ 1629.408195] ? kfree+0xd7/0x340 [ 1629.408568] ? do_raw_spin_unlock+0x4f/0x220 [ 1629.409069] p9_client_create+0xa76/0x1230 [ 1629.409553] ? p9_client_flush+0x430/0x430 [ 1629.410030] ? trace_hardirqs_on+0x5b/0x180 [ 1629.410519] ? lockdep_init_map_type+0x2c7/0x780 [ 1629.411053] ? __raw_spin_lock_init+0x36/0x110 [ 1629.411567] v9fs_session_init+0x1dd/0x1680 [ 1629.412073] ? lock_release+0x680/0x680 [ 1629.412545] ? kmem_cache_alloc_trace+0x151/0x320 [ 1629.413088] ? v9fs_show_options+0x690/0x690 [ 1629.413594] ? trace_hardirqs_on+0x5b/0x180 [ 1629.414091] ? kasan_unpoison_shadow+0x33/0x50 [ 1629.414604] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1629.415174] v9fs_mount+0x79/0x8f0 [ 1629.415584] ? v9fs_write_inode+0x60/0x60 [ 1629.416067] legacy_get_tree+0x105/0x220 [ 1629.416533] vfs_get_tree+0x8e/0x300 [ 1629.416953] path_mount+0x1490/0x21e0 [ 1629.417391] ? strncpy_from_user+0x9e/0x470 [ 1629.417875] ? finish_automount+0xa90/0xa90 [ 1629.418358] ? getname_flags.part.0+0x1dd/0x4f0 [ 1629.418884] ? _copy_from_user+0xfb/0x1b0 [ 1629.419366] __x64_sys_mount+0x282/0x300 [ 1629.419825] ? copy_mnt_ns+0xa00/0xa00 [ 1629.420269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1629.420858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.421443] do_syscall_64+0x33/0x40 [ 1629.421863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1629.422443] RIP: 0033:0x7f644830fb19 [ 1629.422860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.424978] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1629.425836] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1629.426653] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1629.427466] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1629.428286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1629.429105] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1629.435169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1629.436794] FAULT_INJECTION: forcing a failure. [ 1629.436794] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.438126] CPU: 1 PID: 9172 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1629.438894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.439867] Call Trace: [ 1629.440178] dump_stack+0x107/0x167 [ 1629.440596] should_fail.cold+0x5/0xa [ 1629.441036] ? create_object.isra.0+0x3a/0xa30 [ 1629.441572] should_failslab+0x5/0x20 [ 1629.442013] kmem_cache_alloc+0x5b/0x310 [ 1629.442481] create_object.isra.0+0x3a/0xa30 [ 1629.442980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1629.443569] kmem_cache_alloc+0x159/0x310 [ 1629.444055] security_inode_alloc+0x34/0x160 [ 1629.444563] inode_init_always+0xa4e/0xd10 [ 1629.445047] alloc_inode+0x84/0x240 [ 1629.445459] new_inode_pseudo+0x14/0xe0 [ 1629.445908] sock_alloc+0x3c/0x270 [ 1629.446310] __sock_create+0xbd/0x7f0 [ 1629.446736] ? wait_for_completion_io+0x270/0x270 [ 1629.447290] __sys_socket+0xef/0x200 [ 1629.447717] ? fput_many+0x2f/0x1a0 [ 1629.448127] ? move_addr_to_kernel+0x70/0x70 [ 1629.448623] ? ksys_write+0x1a9/0x260 [ 1629.449054] ? __ia32_sys_read+0xb0/0xb0 [ 1629.449526] __x64_sys_socket+0x6f/0xb0 [ 1629.449977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.450564] do_syscall_64+0x33/0x40 [ 1629.450991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1629.451572] RIP: 0033:0x7f4930b3f197 [ 1629.452011] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.454110] RSP: 002b:00007f492e0b2098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1629.454978] RAX: ffffffffffffffda RBX: 00007f4930c50f60 RCX: 00007f4930b3f197 [ 1629.455800] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1629.456613] RBP: 00007f492e0b31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1629.457425] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1629.458243] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1629.463143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.464759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.469450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1629.474110] FAULT_INJECTION: forcing a failure. [ 1629.474110] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.475408] CPU: 1 PID: 9175 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1629.476202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.477170] Call Trace: [ 1629.477473] dump_stack+0x107/0x167 [ 1629.477889] should_fail.cold+0x5/0xa [ 1629.478331] ? p9_fcall_init+0x97/0x290 [ 1629.478784] should_failslab+0x5/0x20 [ 1629.479218] __kmalloc+0x72/0x390 [ 1629.479633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1629.480213] p9_fcall_init+0x97/0x290 [ 1629.480649] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1629.481222] p9_client_rpc+0x220/0x1370 [ 1629.481665] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1629.482239] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1629.482854] ? pipe_poll+0x21b/0x800 [ 1629.483274] ? p9_fd_close+0x4a0/0x4a0 [ 1629.483717] ? wait_for_partner+0x3c0/0x3c0 [ 1629.484207] ? p9_fd_poll+0x1e0/0x2c0 [ 1629.484637] ? p9_fd_create+0x357/0x4a0 [ 1629.485094] ? p9_conn_create+0x510/0x510 [ 1629.485562] ? p9_client_create+0x798/0x1230 [ 1629.486058] ? kfree+0xd7/0x340 [ 1629.486432] ? do_raw_spin_unlock+0x4f/0x220 [ 1629.486935] p9_client_create+0xa76/0x1230 [ 1629.487417] ? p9_client_flush+0x430/0x430 [ 1629.487907] ? trace_hardirqs_on+0x5b/0x180 [ 1629.488391] ? lockdep_init_map_type+0x2c7/0x780 [ 1629.488928] ? __raw_spin_lock_init+0x36/0x110 [ 1629.489450] v9fs_session_init+0x1dd/0x1680 [ 1629.489938] ? lock_release+0x680/0x680 [ 1629.490391] ? kmem_cache_alloc_trace+0x151/0x320 [ 1629.490933] ? v9fs_show_options+0x690/0x690 [ 1629.491436] ? trace_hardirqs_on+0x5b/0x180 [ 1629.491924] ? kasan_unpoison_shadow+0x33/0x50 [ 1629.492447] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1629.493018] v9fs_mount+0x79/0x8f0 [ 1629.493417] ? v9fs_write_inode+0x60/0x60 [ 1629.493882] legacy_get_tree+0x105/0x220 [ 1629.494347] vfs_get_tree+0x8e/0x300 [ 1629.494764] path_mount+0x1490/0x21e0 [ 1629.495200] ? strncpy_from_user+0x9e/0x470 [ 1629.495695] ? finish_automount+0xa90/0xa90 [ 1629.496186] ? getname_flags.part.0+0x1dd/0x4f0 [ 1629.496712] ? _copy_from_user+0xfb/0x1b0 [ 1629.497182] __x64_sys_mount+0x282/0x300 [ 1629.497635] ? copy_mnt_ns+0xa00/0xa00 [ 1629.498078] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1629.498676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.499267] do_syscall_64+0x33/0x40 [ 1629.499692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1629.500280] RIP: 0033:0x7ff9c58eab19 [ 1629.500699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.502787] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1629.503654] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1629.504462] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1629.505267] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1629.506075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1629.506888] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 11:40:25 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 5) [ 1629.519156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:40:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 33) 11:40:25 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 41) [ 1629.555984] FAULT_INJECTION: forcing a failure. [ 1629.555984] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.557299] CPU: 1 PID: 9178 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1629.558087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.559114] Call Trace: [ 1629.559415] dump_stack+0x107/0x167 [ 1629.559834] should_fail.cold+0x5/0xa [ 1629.560270] ? create_object.isra.0+0x3a/0xa30 [ 1629.560790] should_failslab+0x5/0x20 [ 1629.561223] kmem_cache_alloc+0x5b/0x310 [ 1629.561684] create_object.isra.0+0x3a/0xa30 [ 1629.562179] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1629.562760] kmem_cache_alloc_trace+0x151/0x320 [ 1629.563288] ? _copy_from_user+0xfb/0x1b0 [ 1629.563768] copy_mount_options+0x55/0x180 [ 1629.564245] __x64_sys_mount+0x1a8/0x300 [ 1629.564703] ? copy_mnt_ns+0xa00/0xa00 [ 1629.565151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1629.565745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.566327] do_syscall_64+0x33/0x40 [ 1629.566749] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1629.567334] RIP: 0033:0x7fa3b8173b19 [ 1629.567761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.569866] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1629.570728] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1629.571538] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1629.572359] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1629.573168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.573982] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 11:40:25 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 5) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1629.601557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1629.601571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.601587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.611703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1629.612505] FAULT_INJECTION: forcing a failure. [ 1629.612505] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.614439] CPU: 1 PID: 9180 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1629.615211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.616158] Call Trace: [ 1629.616459] dump_stack+0x107/0x167 [ 1629.616869] should_fail.cold+0x5/0xa [ 1629.617300] ? sk_prot_alloc+0x11d/0x2c0 [ 1629.617754] should_failslab+0x5/0x20 [ 1629.618183] __kmalloc+0x72/0x390 [ 1629.618582] sk_prot_alloc+0x11d/0x2c0 [ 1629.619020] sk_alloc+0x30/0x350 [ 1629.619406] __netlink_create+0x63/0x340 [ 1629.619870] netlink_create+0x3b2/0x5e0 [ 1629.620322] ? genl_start+0x670/0x670 [ 1629.620751] __sock_create+0x358/0x7f0 [ 1629.621194] __sys_socket+0xef/0x200 [ 1629.621612] ? fput_many+0x2f/0x1a0 [ 1629.622026] ? move_addr_to_kernel+0x70/0x70 [ 1629.622519] ? ksys_write+0x1a9/0x260 [ 1629.622947] ? __ia32_sys_read+0xb0/0xb0 [ 1629.623415] __x64_sys_socket+0x6f/0xb0 [ 1629.623870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.624449] do_syscall_64+0x33/0x40 [ 1629.624869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1629.625447] RIP: 0033:0x7f4930b3f197 [ 1629.625863] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.627948] RSP: 002b:00007f492e0b2098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1629.628810] RAX: ffffffffffffffda RBX: 00007f4930c50f60 RCX: 00007f4930b3f197 [ 1629.629620] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1629.630430] RBP: 00007f492e0b31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1629.631235] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1629.632051] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1629.656481] FAULT_INJECTION: forcing a failure. [ 1629.656481] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.658973] CPU: 0 PID: 9183 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1629.660430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.662183] Call Trace: [ 1629.662754] dump_stack+0x107/0x167 [ 1629.663524] should_fail.cold+0x5/0xa [ 1629.664342] ? create_object.isra.0+0x3a/0xa30 [ 1629.665310] should_failslab+0x5/0x20 [ 1629.666113] kmem_cache_alloc+0x5b/0x310 [ 1629.666964] ? p9_fd_show_options+0x1c0/0x1c0 [ 1629.667927] create_object.isra.0+0x3a/0xa30 [ 1629.668852] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1629.669922] kmem_cache_alloc_trace+0x151/0x320 [ 1629.670904] p9_fd_create+0x161/0x4a0 [ 1629.671717] ? p9_conn_create+0x510/0x510 [ 1629.672588] ? p9_client_create+0x798/0x1230 [ 1629.673509] ? kfree+0xd7/0x340 [ 1629.674206] ? do_raw_spin_unlock+0x4f/0x220 [ 1629.675131] p9_client_create+0x7ff/0x1230 [ 1629.676049] ? p9_client_flush+0x430/0x430 [ 1629.676943] ? trace_hardirqs_on+0x5b/0x180 [ 1629.677862] ? lockdep_init_map_type+0x2c7/0x780 [ 1629.678860] ? __raw_spin_lock_init+0x36/0x110 [ 1629.679839] v9fs_session_init+0x1dd/0x1680 [ 1629.680748] ? lock_release+0x680/0x680 [ 1629.681596] ? kmem_cache_alloc_trace+0x151/0x320 [ 1629.682607] ? v9fs_show_options+0x690/0x690 [ 1629.683545] ? trace_hardirqs_on+0x5b/0x180 [ 1629.684467] ? kasan_unpoison_shadow+0x33/0x50 [ 1629.685433] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1629.686499] v9fs_mount+0x79/0x8f0 [ 1629.687248] ? v9fs_write_inode+0x60/0x60 [ 1629.688131] legacy_get_tree+0x105/0x220 [ 1629.688992] vfs_get_tree+0x8e/0x300 [ 1629.689776] path_mount+0x1490/0x21e0 [ 1629.690584] ? strncpy_from_user+0x9e/0x470 [ 1629.691496] ? finish_automount+0xa90/0xa90 [ 1629.692420] ? getname_flags.part.0+0x1dd/0x4f0 [ 1629.693400] ? _copy_from_user+0xfb/0x1b0 [ 1629.694286] __x64_sys_mount+0x282/0x300 [ 1629.695145] ? copy_mnt_ns+0xa00/0xa00 [ 1629.695974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1629.697079] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.698171] do_syscall_64+0x33/0x40 [ 1629.698954] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1629.700045] RIP: 0033:0x7f2d92adab19 [ 1629.700830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.704730] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1629.706327] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1629.707839] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1629.709348] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1629.710861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1629.712401] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 11:40:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1629.721437] FAULT_INJECTION: forcing a failure. [ 1629.721437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1629.722872] CPU: 1 PID: 9184 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1629.723668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.724611] Call Trace: [ 1629.724918] dump_stack+0x107/0x167 [ 1629.725340] should_fail.cold+0x5/0xa [ 1629.725784] __alloc_pages_nodemask+0x182/0x600 [ 1629.726315] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1629.727003] ? __kmalloc+0x379/0x390 11:40:25 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 6) 11:40:25 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 6) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1629.727432] alloc_pages_current+0x187/0x280 [ 1629.728095] allocate_slab+0x26f/0x380 [ 1629.728543] ___slab_alloc+0x470/0x700 [ 1629.728987] ? p9_fcall_init+0x97/0x290 [ 1629.729441] ? kmem_cache_alloc+0x159/0x310 [ 1629.729932] ? lock_downgrade+0x6d0/0x6d0 [ 1629.730402] ? p9_fcall_init+0x97/0x290 [ 1629.730852] ? __kmalloc+0x379/0x390 [ 1629.731275] ? p9_fcall_init+0x97/0x290 [ 1629.731731] __kmalloc+0x379/0x390 [ 1629.732137] p9_fcall_init+0x97/0x290 [ 1629.732568] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1629.733141] p9_client_rpc+0x220/0x1370 [ 1629.733588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1629.734191] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1629.734798] ? pipe_poll+0x21b/0x800 [ 1629.735220] ? p9_fd_close+0x4a0/0x4a0 [ 1629.735667] ? wait_for_partner+0x3c0/0x3c0 [ 1629.736157] ? p9_fd_poll+0x1e0/0x2c0 [ 1629.736592] ? p9_fd_create+0x357/0x4a0 [ 1629.737041] ? p9_conn_create+0x510/0x510 [ 1629.737507] ? p9_client_create+0x798/0x1230 [ 1629.738004] ? kfree+0xd7/0x340 [ 1629.738375] ? do_raw_spin_unlock+0x4f/0x220 [ 1629.738876] p9_client_create+0xa76/0x1230 [ 1629.739357] ? p9_client_flush+0x430/0x430 [ 1629.739841] ? trace_hardirqs_on+0x5b/0x180 [ 1629.740327] ? lockdep_init_map_type+0x2c7/0x780 [ 1629.740862] ? __raw_spin_lock_init+0x36/0x110 [ 1629.741383] v9fs_session_init+0x1dd/0x1680 [ 1629.741871] ? lock_release+0x680/0x680 [ 1629.742324] ? kmem_cache_alloc_trace+0x151/0x320 [ 1629.742866] ? v9fs_show_options+0x690/0x690 [ 1629.743368] ? trace_hardirqs_on+0x5b/0x180 [ 1629.743863] ? kasan_unpoison_shadow+0x33/0x50 [ 1629.744377] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1629.744955] v9fs_mount+0x79/0x8f0 [ 1629.745354] ? v9fs_write_inode+0x60/0x60 [ 1629.745824] legacy_get_tree+0x105/0x220 [ 1629.746287] vfs_get_tree+0x8e/0x300 [ 1629.746715] path_mount+0x1490/0x21e0 [ 1629.747157] ? strncpy_from_user+0x9e/0x470 [ 1629.747659] ? finish_automount+0xa90/0xa90 [ 1629.748151] ? getname_flags.part.0+0x1dd/0x4f0 [ 1629.748680] ? _copy_from_user+0xfb/0x1b0 [ 1629.749165] __x64_sys_mount+0x282/0x300 [ 1629.749623] ? copy_mnt_ns+0xa00/0xa00 [ 1629.750064] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1629.750656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.751247] do_syscall_64+0x33/0x40 [ 1629.751688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1629.752280] RIP: 0033:0x7f644830fb19 11:40:25 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1629.752705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.755086] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1629.756014] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1629.756833] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1629.757652] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1629.758473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1629.759285] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1629.771859] FAULT_INJECTION: forcing a failure. [ 1629.771859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1629.773203] CPU: 1 PID: 9191 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1629.773982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.774937] Call Trace: [ 1629.775239] dump_stack+0x107/0x167 [ 1629.775667] should_fail.cold+0x5/0xa [ 1629.776107] _copy_from_user+0x2e/0x1b0 [ 1629.776573] copy_mount_options+0x76/0x180 [ 1629.777063] __x64_sys_mount+0x1a8/0x300 [ 1629.777520] ? copy_mnt_ns+0xa00/0xa00 [ 1629.777970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1629.778561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.779150] do_syscall_64+0x33/0x40 [ 1629.779572] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1629.780161] RIP: 0033:0x7fa3b8173b19 [ 1629.780587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.782697] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1629.783572] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1629.784401] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1629.785217] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1629.786042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.786861] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1629.802355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:40:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 39) [ 1629.824709] FAULT_INJECTION: forcing a failure. [ 1629.824709] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.827169] CPU: 0 PID: 9193 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1629.828639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.830409] Call Trace: [ 1629.830982] dump_stack+0x107/0x167 [ 1629.831796] should_fail.cold+0x5/0xa [ 1629.832613] ? create_object.isra.0+0x3a/0xa30 [ 1629.833590] should_failslab+0x5/0x20 [ 1629.834411] kmem_cache_alloc+0x5b/0x310 [ 1629.835282] ? lock_downgrade+0x6d0/0x6d0 [ 1629.836176] create_object.isra.0+0x3a/0xa30 [ 1629.837113] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1629.838200] __kmalloc+0x16e/0x390 [ 1629.838958] sk_prot_alloc+0x11d/0x2c0 [ 1629.839801] sk_alloc+0x30/0x350 [ 1629.840516] __netlink_create+0x63/0x340 [ 1629.841383] ? trace_hardirqs_on+0x5b/0x180 [ 1629.842306] netlink_create+0x3b2/0x5e0 [ 1629.843156] ? genl_start+0x670/0x670 [ 1629.843989] __sock_create+0x358/0x7f0 [ 1629.844819] __sys_socket+0xef/0x200 [ 1629.845602] ? fput_many+0x2f/0x1a0 [ 1629.846372] ? move_addr_to_kernel+0x70/0x70 [ 1629.847294] ? ksys_write+0x1a9/0x260 [ 1629.848119] ? __ia32_sys_read+0xb0/0xb0 [ 1629.848988] __x64_sys_socket+0x6f/0xb0 [ 1629.849861] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.850979] do_syscall_64+0x33/0x40 [ 1629.851808] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1629.852925] RIP: 0033:0x7f4930b3f197 [ 1629.853737] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.857764] RSP: 002b:00007f492e0b2098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1629.859426] RAX: ffffffffffffffda RBX: 00007f4930c50f60 RCX: 00007f4930b3f197 [ 1629.861003] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1629.862554] RBP: 00007f492e0b31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1629.864120] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1629.865678] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1629.884979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1629.913837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.915399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.917633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1629.927694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.929288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.931003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:40:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:40:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:40:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 34) 11:40:26 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 7) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1629.983939] FAULT_INJECTION: forcing a failure. [ 1629.983939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1629.986513] CPU: 0 PID: 9200 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1629.987990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.989774] Call Trace: [ 1629.990346] dump_stack+0x107/0x167 [ 1629.991133] should_fail.cold+0x5/0xa [ 1629.991970] __alloc_pages_nodemask+0x182/0x600 [ 1629.992843] FAULT_INJECTION: forcing a failure. [ 1629.992843] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.992967] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1629.992997] ? __kmalloc+0x379/0x390 [ 1629.996363] alloc_pages_current+0x187/0x280 [ 1629.997304] allocate_slab+0x26f/0x380 [ 1629.998143] ___slab_alloc+0x470/0x700 [ 1629.998979] ? p9_fcall_init+0x97/0x290 [ 1629.999842] ? p9_fcall_init+0x97/0x290 [ 1630.000688] ? __kmalloc+0x379/0x390 [ 1630.001483] ? p9_fcall_init+0x97/0x290 [ 1630.002322] __kmalloc+0x379/0x390 [ 1630.003091] p9_fcall_init+0x97/0x290 [ 1630.003914] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1630.004993] p9_client_rpc+0x220/0x1370 [ 1630.005839] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1630.006959] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1630.008112] ? pipe_poll+0x21b/0x800 [ 1630.008901] ? p9_fd_close+0x4a0/0x4a0 [ 1630.009731] ? wait_for_partner+0x3c0/0x3c0 [ 1630.010648] ? p9_fd_poll+0x1e0/0x2c0 [ 1630.011471] ? p9_fd_create+0x357/0x4a0 [ 1630.012327] ? p9_conn_create+0x510/0x510 [ 1630.013209] ? p9_client_create+0x798/0x1230 [ 1630.014144] ? kfree+0xd7/0x340 [ 1630.014846] ? do_raw_spin_unlock+0x4f/0x220 [ 1630.015793] p9_client_create+0xa76/0x1230 [ 1630.016696] ? p9_client_flush+0x430/0x430 [ 1630.017598] ? trace_hardirqs_on+0x5b/0x180 [ 1630.018518] ? lockdep_init_map_type+0x2c7/0x780 [ 1630.019527] ? __raw_spin_lock_init+0x36/0x110 [ 1630.020509] v9fs_session_init+0x1dd/0x1680 [ 1630.021429] ? lock_release+0x680/0x680 [ 1630.022284] ? kmem_cache_alloc_trace+0x151/0x320 [ 1630.023315] ? v9fs_show_options+0x690/0x690 [ 1630.024273] ? trace_hardirqs_on+0x5b/0x180 [ 1630.025194] ? kasan_unpoison_shadow+0x33/0x50 [ 1630.026158] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1630.027243] v9fs_mount+0x79/0x8f0 [ 1630.028008] ? v9fs_write_inode+0x60/0x60 [ 1630.028887] legacy_get_tree+0x105/0x220 [ 1630.029748] vfs_get_tree+0x8e/0x300 [ 1630.030534] path_mount+0x1490/0x21e0 [ 1630.031343] ? strncpy_from_user+0x9e/0x470 [ 1630.032267] ? finish_automount+0xa90/0xa90 [ 1630.033177] ? getname_flags.part.0+0x1dd/0x4f0 [ 1630.034162] ? _copy_from_user+0xfb/0x1b0 [ 1630.035048] __x64_sys_mount+0x282/0x300 [ 1630.035917] ? copy_mnt_ns+0xa00/0xa00 [ 1630.036748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1630.037863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1630.038964] do_syscall_64+0x33/0x40 [ 1630.039762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1630.040848] RIP: 0033:0x7ff9c58eab19 [ 1630.041637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1630.045561] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1630.047172] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1630.048686] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1630.050197] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1630.051723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1630.053240] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 [ 1630.054766] CPU: 1 PID: 9202 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1630.055558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1630.056514] Call Trace: [ 1630.056826] dump_stack+0x107/0x167 [ 1630.057249] should_fail.cold+0x5/0xa [ 1630.057722] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 1630.058338] should_failslab+0x5/0x20 [ 1630.058781] kmem_cache_alloc+0x5b/0x310 [ 1630.059246] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1630.059831] p9_client_rpc+0x220/0x1370 [ 1630.060289] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1630.060885] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1630.061496] ? pipe_poll+0x21b/0x800 [ 1630.061919] ? p9_fd_close+0x4a0/0x4a0 [ 1630.062367] ? wait_for_partner+0x3c0/0x3c0 [ 1630.062858] ? p9_fd_poll+0x1e0/0x2c0 [ 1630.063292] ? p9_fd_create+0x357/0x4a0 [ 1630.063753] ? p9_conn_create+0x510/0x510 [ 1630.064227] ? p9_client_create+0x798/0x1230 [ 1630.064731] ? kfree+0xd7/0x340 [ 1630.065108] ? do_raw_spin_unlock+0x4f/0x220 [ 1630.065610] p9_client_create+0xa76/0x1230 [ 1630.066091] ? p9_client_flush+0x430/0x430 [ 1630.066578] ? trace_hardirqs_on+0x5b/0x180 [ 1630.067068] ? lockdep_init_map_type+0x2c7/0x780 [ 1630.067617] ? __raw_spin_lock_init+0x36/0x110 [ 1630.068140] v9fs_session_init+0x1dd/0x1680 [ 1630.068633] ? lock_release+0x680/0x680 [ 1630.069096] ? kmem_cache_alloc_trace+0x151/0x320 [ 1630.069648] ? v9fs_show_options+0x690/0x690 [ 1630.070163] ? trace_hardirqs_on+0x5b/0x180 [ 1630.070658] ? kasan_unpoison_shadow+0x33/0x50 [ 1630.071184] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1630.071776] v9fs_mount+0x79/0x8f0 [ 1630.072184] ? v9fs_write_inode+0x60/0x60 [ 1630.072655] legacy_get_tree+0x105/0x220 [ 1630.073118] vfs_get_tree+0x8e/0x300 [ 1630.073544] path_mount+0x1490/0x21e0 [ 1630.073979] ? strncpy_from_user+0x9e/0x470 [ 1630.074471] ? finish_automount+0xa90/0xa90 [ 1630.074961] ? getname_flags.part.0+0x1dd/0x4f0 [ 1630.075497] ? _copy_from_user+0xfb/0x1b0 [ 1630.075991] __x64_sys_mount+0x282/0x300 [ 1630.076460] ? copy_mnt_ns+0xa00/0xa00 [ 1630.076909] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1630.077522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1630.078113] do_syscall_64+0x33/0x40 [ 1630.078544] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1630.079134] RIP: 0033:0x7f2d92adab19 [ 1630.079568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1630.081687] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1630.082559] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1630.083381] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1630.084210] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1630.085024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1630.085856] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1630.160244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1630.167741] FAULT_INJECTION: forcing a failure. [ 1630.167741] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.169120] CPU: 1 PID: 9207 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1630.169903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1630.170865] Call Trace: [ 1630.171172] dump_stack+0x107/0x167 [ 1630.171593] should_fail.cold+0x5/0xa [ 1630.172042] ? selinux_sk_alloc_security+0x8b/0x1b0 [ 1630.172616] should_failslab+0x5/0x20 [ 1630.173057] kmem_cache_alloc_trace+0x55/0x320 [ 1630.173591] selinux_sk_alloc_security+0x8b/0x1b0 [ 1630.174141] security_sk_alloc+0x56/0xb0 [ 1630.174602] sk_prot_alloc+0x137/0x2c0 [ 1630.175048] sk_alloc+0x30/0x350 [ 1630.175439] __netlink_create+0x63/0x340 [ 1630.175913] netlink_create+0x3b2/0x5e0 [ 1630.176376] ? genl_start+0x670/0x670 [ 1630.176817] __sock_create+0x358/0x7f0 [ 1630.177271] __sys_socket+0xef/0x200 [ 1630.177697] ? fput_many+0x2f/0x1a0 [ 1630.178112] ? move_addr_to_kernel+0x70/0x70 [ 1630.178619] ? ksys_write+0x1a9/0x260 [ 1630.179054] ? __ia32_sys_read+0xb0/0xb0 [ 1630.179527] __x64_sys_socket+0x6f/0xb0 [ 1630.179996] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1630.180593] do_syscall_64+0x33/0x40 [ 1630.181020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1630.181617] RIP: 0033:0x7f4930b3f197 [ 1630.182051] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1630.184179] RSP: 002b:00007f492e091098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1630.185064] RAX: ffffffffffffffda RBX: 00007f4930c51020 RCX: 00007f4930b3f197 [ 1630.185895] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1630.186724] RBP: 00007f492e0921d0 R08: 0000000000000000 R09: 0000000000000000 [ 1630.187545] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1630.188377] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 11:40:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 7) 11:40:38 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:40:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 35) 11:40:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 40) 11:40:38 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b53a79c01949d4f220c7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe5"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:40:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 42) 11:40:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:40:38 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 8) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1641.858850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1641.861177] FAULT_INJECTION: forcing a failure. [ 1641.861177] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.862604] CPU: 0 PID: 9218 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1641.863411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1641.864395] Call Trace: [ 1641.864713] dump_stack+0x107/0x167 [ 1641.865146] should_fail.cold+0x5/0xa [ 1641.865605] ? getname_flags.part.0+0x50/0x4f0 [ 1641.866152] should_failslab+0x5/0x20 [ 1641.866604] kmem_cache_alloc+0x5b/0x310 [ 1641.867086] getname_flags.part.0+0x50/0x4f0 [ 1641.867607] ? _copy_from_user+0xfb/0x1b0 [ 1641.868106] user_path_at_empty+0xa1/0x100 [ 1641.868607] __x64_sys_mount+0x1e9/0x300 [ 1641.869086] ? copy_mnt_ns+0xa00/0xa00 [ 1641.869556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1641.870184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1641.870796] do_syscall_64+0x33/0x40 [ 1641.871239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1641.871855] RIP: 0033:0x7fa3b8173b19 [ 1641.872300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1641.874478] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1641.875383] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1641.876230] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1641.877077] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1641.877719] FAULT_INJECTION: forcing a failure. [ 1641.877719] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.877918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.877934] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1641.882197] CPU: 1 PID: 9227 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1641.883819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1641.885756] Call Trace: [ 1641.886379] dump_stack+0x107/0x167 [ 1641.887234] should_fail.cold+0x5/0xa [ 1641.888139] ? p9_fcall_init+0x97/0x290 [ 1641.889067] should_failslab+0x5/0x20 [ 1641.889959] __kmalloc+0x72/0x390 [ 1641.890760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1641.891950] p9_fcall_init+0x97/0x290 [ 1641.892833] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1641.894009] p9_client_rpc+0x220/0x1370 [ 1641.894928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1641.896167] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1641.897400] ? pipe_poll+0x21b/0x800 [ 1641.898258] ? p9_fd_close+0x4a0/0x4a0 [ 1641.899151] ? wait_for_partner+0x3c0/0x3c0 [ 1641.900147] ? p9_fd_poll+0x1e0/0x2c0 [ 1641.901028] ? p9_fd_create+0x357/0x4a0 [ 1641.901941] ? p9_conn_create+0x510/0x510 [ 1641.902889] ? p9_client_create+0x798/0x1230 [ 1641.903910] ? kfree+0xd7/0x340 [ 1641.904665] ? do_raw_spin_unlock+0x4f/0x220 [ 1641.905675] p9_client_create+0xa76/0x1230 [ 1641.906645] ? p9_client_flush+0x430/0x430 [ 1641.907616] ? trace_hardirqs_on+0x5b/0x180 [ 1641.908627] ? lockdep_init_map_type+0x2c7/0x780 [ 1641.909715] ? __raw_spin_lock_init+0x36/0x110 [ 1641.910778] v9fs_session_init+0x1dd/0x1680 [ 1641.911762] ? lock_release+0x680/0x680 [ 1641.912694] ? kmem_cache_alloc_trace+0x151/0x320 [ 1641.913787] ? v9fs_show_options+0x690/0x690 [ 1641.914801] ? trace_hardirqs_on+0x5b/0x180 [ 1641.915807] ? kasan_unpoison_shadow+0x33/0x50 [ 1641.916851] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1641.918005] v9fs_mount+0x79/0x8f0 [ 1641.918816] ? v9fs_write_inode+0x60/0x60 [ 1641.919759] legacy_get_tree+0x105/0x220 [ 1641.920702] vfs_get_tree+0x8e/0x300 [ 1641.921542] path_mount+0x1490/0x21e0 [ 1641.922405] ? strncpy_from_user+0x9e/0x470 [ 1641.923372] ? finish_automount+0xa90/0xa90 [ 1641.924338] ? getname_flags.part.0+0x1dd/0x4f0 [ 1641.925383] ? _copy_from_user+0xfb/0x1b0 [ 1641.926323] __x64_sys_mount+0x282/0x300 [ 1641.927231] ? copy_mnt_ns+0xa00/0xa00 [ 1641.928130] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1641.929307] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1641.930463] do_syscall_64+0x33/0x40 [ 1641.931298] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1641.932461] RIP: 0033:0x7f644830fb19 [ 1641.933303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1641.937438] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1641.939160] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1641.940780] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1641.942380] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1641.944000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1641.945601] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1641.951070] FAULT_INJECTION: forcing a failure. [ 1641.951070] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.952435] CPU: 0 PID: 9226 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1641.953229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1641.954186] Call Trace: [ 1641.954499] dump_stack+0x107/0x167 [ 1641.954921] should_fail.cold+0x5/0xa [ 1641.955368] ? create_object.isra.0+0x3a/0xa30 [ 1641.955900] should_failslab+0x5/0x20 [ 1641.956355] kmem_cache_alloc+0x5b/0x310 [ 1641.956827] ? p9_fd_show_options+0x1c0/0x1c0 [ 1641.957352] create_object.isra.0+0x3a/0xa30 [ 1641.957856] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1641.958444] kmem_cache_alloc_trace+0x151/0x320 [ 1641.958975] p9_fd_create+0x161/0x4a0 [ 1641.959411] ? p9_conn_create+0x510/0x510 [ 1641.959897] ? p9_client_create+0x798/0x1230 [ 1641.960402] ? kfree+0xd7/0x340 [ 1641.960785] ? do_raw_spin_unlock+0x4f/0x220 [ 1641.961296] p9_client_create+0x7ff/0x1230 [ 1641.961785] ? p9_client_flush+0x430/0x430 [ 1641.962273] ? trace_hardirqs_on+0x5b/0x180 [ 1641.962770] ? lockdep_init_map_type+0x2c7/0x780 [ 1641.963316] ? __raw_spin_lock_init+0x36/0x110 [ 1641.963854] v9fs_session_init+0x1dd/0x1680 [ 1641.964361] ? kmem_cache_alloc_trace+0x151/0x320 [ 1641.964917] ? v9fs_show_options+0x690/0x690 [ 1641.965419] ? trace_hardirqs_on+0x5b/0x180 [ 1641.965925] ? kasan_unpoison_shadow+0x33/0x50 [ 1641.966452] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1641.967040] v9fs_mount+0x79/0x8f0 [ 1641.967452] ? v9fs_write_inode+0x60/0x60 [ 1641.967935] legacy_get_tree+0x105/0x220 [ 1641.968405] vfs_get_tree+0x8e/0x300 [ 1641.968831] path_mount+0x1490/0x21e0 [ 1641.969275] ? strncpy_from_user+0x9e/0x470 [ 1641.969775] ? finish_automount+0xa90/0xa90 [ 1641.970269] ? getname_flags.part.0+0x1dd/0x4f0 [ 1641.970798] ? _copy_from_user+0xfb/0x1b0 [ 1641.971278] __x64_sys_mount+0x282/0x300 [ 1641.971743] ? copy_mnt_ns+0xa00/0xa00 [ 1641.972197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1641.972799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1641.973394] do_syscall_64+0x33/0x40 [ 1641.973819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1641.974408] RIP: 0033:0x7f2d92adab19 [ 1641.974838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1641.976976] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1641.977851] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1641.978672] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1641.979492] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1641.979740] FAULT_INJECTION: forcing a failure. [ 1641.979740] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.980319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1641.980327] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1641.986257] CPU: 1 PID: 9221 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1641.987815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1641.989697] Call Trace: [ 1641.990306] dump_stack+0x107/0x167 [ 1641.991140] should_fail.cold+0x5/0xa [ 1641.992020] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1641.993326] should_failslab+0x5/0x20 [ 1641.994193] kmem_cache_alloc+0x5b/0x310 [ 1641.995126] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1641.996413] idr_get_free+0x4b5/0x8f0 [ 1641.997301] idr_alloc_u32+0x170/0x2d0 [ 1641.998194] ? __fprop_inc_percpu_max+0x130/0x130 [ 1641.999294] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1642.000518] ? lock_release+0x680/0x680 [ 1642.001434] idr_alloc+0xc2/0x130 [ 1642.002220] ? idr_alloc_u32+0x2d0/0x2d0 [ 1642.003140] ? rwlock_bug.part.0+0x90/0x90 [ 1642.004133] p9_client_prepare_req.part.0+0x612/0xac0 [ 1642.005316] p9_client_rpc+0x220/0x1370 11:40:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 43) 11:40:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 8) [ 1642.006229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1642.007646] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1642.008871] ? pipe_poll+0x21b/0x800 [ 1642.009711] ? p9_fd_close+0x4a0/0x4a0 [ 1642.010592] ? wait_for_partner+0x3c0/0x3c0 [ 1642.010624] FAULT_INJECTION: forcing a failure. [ 1642.010624] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.011565] ? p9_fd_poll+0x1e0/0x2c0 [ 1642.011592] ? p9_fd_create+0x357/0x4a0 [ 1642.011612] ? p9_conn_create+0x510/0x510 [ 1642.015519] ? p9_client_create+0x798/0x1230 [ 1642.016522] ? kfree+0xd7/0x340 [ 1642.017265] ? do_raw_spin_unlock+0x4f/0x220 [ 1642.018268] p9_client_create+0xa76/0x1230 [ 1642.019246] ? p9_client_flush+0x430/0x430 [ 1642.020217] ? trace_hardirqs_on+0x5b/0x180 [ 1642.021203] ? lockdep_init_map_type+0x2c7/0x780 [ 1642.022277] ? __raw_spin_lock_init+0x36/0x110 [ 1642.023321] v9fs_session_init+0x1dd/0x1680 [ 1642.024313] ? lock_release+0x680/0x680 [ 1642.025212] ? kmem_cache_alloc_trace+0x151/0x320 [ 1642.026298] ? v9fs_show_options+0x690/0x690 [ 1642.027307] ? trace_hardirqs_on+0x5b/0x180 [ 1642.028298] ? kasan_unpoison_shadow+0x33/0x50 [ 1642.029329] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.030484] v9fs_mount+0x79/0x8f0 [ 1642.031291] ? v9fs_write_inode+0x60/0x60 [ 1642.032236] legacy_get_tree+0x105/0x220 [ 1642.033161] vfs_get_tree+0x8e/0x300 [ 1642.034007] path_mount+0x1490/0x21e0 [ 1642.034880] ? strncpy_from_user+0x9e/0x470 [ 1642.035867] ? finish_automount+0xa90/0xa90 [ 1642.036849] ? getname_flags.part.0+0x1dd/0x4f0 [ 1642.037904] ? _copy_from_user+0xfb/0x1b0 [ 1642.038861] __x64_sys_mount+0x282/0x300 [ 1642.039791] ? copy_mnt_ns+0xa00/0xa00 [ 1642.040676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1642.041868] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1642.043036] do_syscall_64+0x33/0x40 [ 1642.043893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.045053] RIP: 0033:0x7ff9c58eab19 [ 1642.045894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1642.050104] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1642.051860] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1642.053474] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1642.055102] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1642.056730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1642.058352] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 [ 1642.060007] CPU: 0 PID: 9235 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1642.060802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1642.061747] Call Trace: [ 1642.062054] dump_stack+0x107/0x167 [ 1642.062469] should_fail.cold+0x5/0xa [ 1642.062909] ? create_object.isra.0+0x3a/0xa30 [ 1642.063430] should_failslab+0x5/0x20 [ 1642.063876] kmem_cache_alloc+0x5b/0x310 [ 1642.064346] create_object.isra.0+0x3a/0xa30 [ 1642.064847] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.065429] __kmalloc+0x16e/0x390 [ 1642.065843] p9_fcall_init+0x97/0x290 [ 1642.066284] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1642.066865] p9_client_rpc+0x220/0x1370 [ 1642.067328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1642.067952] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1642.068643] ? pipe_poll+0x21b/0x800 [ 1642.069066] ? p9_fd_close+0x4a0/0x4a0 [ 1642.069514] ? wait_for_partner+0x3c0/0x3c0 [ 1642.070004] ? p9_fd_poll+0x1e0/0x2c0 [ 1642.070444] ? p9_fd_create+0x357/0x4a0 [ 1642.070900] ? p9_conn_create+0x510/0x510 [ 1642.071374] ? p9_client_create+0x798/0x1230 [ 1642.071890] ? kfree+0xd7/0x340 [ 1642.072263] ? do_raw_spin_unlock+0x4f/0x220 [ 1642.072770] p9_client_create+0xa76/0x1230 [ 1642.073254] ? p9_client_flush+0x430/0x430 [ 1642.073739] ? trace_hardirqs_on+0x5b/0x180 [ 1642.074237] ? lockdep_init_map_type+0x2c7/0x780 [ 1642.074783] ? __raw_spin_lock_init+0x36/0x110 [ 1642.075311] v9fs_session_init+0x1dd/0x1680 [ 1642.075813] ? lock_release+0x680/0x680 [ 1642.076270] ? kmem_cache_alloc_trace+0x151/0x320 [ 1642.076819] ? v9fs_show_options+0x690/0x690 [ 1642.077320] ? trace_hardirqs_on+0x5b/0x180 [ 1642.077812] ? kasan_unpoison_shadow+0x33/0x50 [ 1642.078333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.078909] v9fs_mount+0x79/0x8f0 [ 1642.079320] ? v9fs_write_inode+0x60/0x60 [ 1642.079803] legacy_get_tree+0x105/0x220 [ 1642.080266] vfs_get_tree+0x8e/0x300 [ 1642.080695] path_mount+0x1490/0x21e0 [ 1642.081133] ? strncpy_from_user+0x9e/0x470 [ 1642.081621] ? finish_automount+0xa90/0xa90 [ 1642.082109] ? getname_flags.part.0+0x1dd/0x4f0 [ 1642.082643] ? _copy_from_user+0xfb/0x1b0 [ 1642.083118] __x64_sys_mount+0x282/0x300 [ 1642.083580] ? copy_mnt_ns+0xa00/0xa00 [ 1642.084035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1642.084636] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1642.085223] do_syscall_64+0x33/0x40 [ 1642.085648] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.086231] RIP: 0033:0x7f644830fb19 [ 1642.086655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1642.088793] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1642.089659] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1642.090475] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1642.091286] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1642.092108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1642.092922] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1642.107084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.107576] FAULT_INJECTION: forcing a failure. [ 1642.107576] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.108822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.110064] CPU: 0 PID: 9236 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1642.110070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1642.110081] Call Trace: [ 1642.111741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1642.112334] dump_stack+0x107/0x167 [ 1642.112345] should_fail.cold+0x5/0xa [ 1642.112366] ? create_object.isra.0+0x3a/0xa30 [ 1642.116856] should_failslab+0x5/0x20 [ 1642.117290] kmem_cache_alloc+0x5b/0x310 [ 1642.117755] create_object.isra.0+0x3a/0xa30 [ 1642.118254] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.118417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1642.118837] kmem_cache_alloc+0x159/0x310 [ 1642.118850] getname_flags.part.0+0x50/0x4f0 [ 1642.118861] ? _copy_from_user+0xfb/0x1b0 [ 1642.118880] user_path_at_empty+0xa1/0x100 [ 1642.122242] __x64_sys_mount+0x1e9/0x300 [ 1642.122707] ? copy_mnt_ns+0xa00/0xa00 [ 1642.123155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1642.123752] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1642.124351] do_syscall_64+0x33/0x40 [ 1642.124778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.125366] RIP: 0033:0x7fa3b8173b19 [ 1642.125792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1642.127901] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1642.128760] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1642.129567] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1642.130378] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1642.131187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.132003] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1642.134467] FAULT_INJECTION: forcing a failure. [ 1642.134467] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.137479] CPU: 1 PID: 9224 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1642.139034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1642.140907] Call Trace: [ 1642.141509] dump_stack+0x107/0x167 [ 1642.142334] should_fail.cold+0x5/0xa [ 1642.143204] ? create_object.isra.0+0x3a/0xa30 [ 1642.144231] should_failslab+0x5/0x20 [ 1642.145093] kmem_cache_alloc+0x5b/0x310 [ 1642.146010] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1642.147235] create_object.isra.0+0x3a/0xa30 [ 1642.148234] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.149375] kmem_cache_alloc_trace+0x151/0x320 [ 1642.150437] selinux_sk_alloc_security+0x8b/0x1b0 [ 1642.151529] security_sk_alloc+0x56/0xb0 [ 1642.152465] sk_prot_alloc+0x137/0x2c0 [ 1642.153360] sk_alloc+0x30/0x350 [ 1642.154143] __netlink_create+0x63/0x340 [ 1642.155074] netlink_create+0x3b2/0x5e0 [ 1642.155989] ? genl_start+0x670/0x670 [ 1642.156864] __sock_create+0x358/0x7f0 [ 1642.157764] __sys_socket+0xef/0x200 [ 1642.158608] ? fput_many+0x2f/0x1a0 [ 1642.159437] ? move_addr_to_kernel+0x70/0x70 [ 1642.160438] ? ksys_write+0x1a9/0x260 [ 1642.161302] ? __ia32_sys_read+0xb0/0xb0 [ 1642.162234] __x64_sys_socket+0x6f/0xb0 [ 1642.163134] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1642.164313] do_syscall_64+0x33/0x40 [ 1642.165167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.166332] RIP: 0033:0x7f4930b3f197 [ 1642.167183] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1642.171379] RSP: 002b:00007f492e0b2098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1642.173114] RAX: ffffffffffffffda RBX: 00007f4930c50f60 RCX: 00007f4930b3f197 [ 1642.174737] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1642.176371] RBP: 00007f492e0b31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1642.177989] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1642.179610] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1642.196620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.197483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.198389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:40:38 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:40:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 41) [ 1642.293638] FAULT_INJECTION: forcing a failure. [ 1642.293638] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.296050] CPU: 1 PID: 9241 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 1642.297511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1642.299292] Call Trace: [ 1642.299876] dump_stack+0x107/0x167 [ 1642.300656] should_fail.cold+0x5/0xa [ 1642.301478] ? create_object.isra.0+0x3a/0xa30 [ 1642.302463] should_failslab+0x5/0x20 [ 1642.303282] kmem_cache_alloc+0x5b/0x310 [ 1642.304182] create_object.isra.0+0x3a/0xa30 [ 1642.305130] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.306233] kmem_cache_alloc+0x159/0x310 [ 1642.307146] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1642.308368] idr_get_free+0x4b5/0x8f0 [ 1642.309205] idr_alloc_u32+0x170/0x2d0 [ 1642.310050] ? __fprop_inc_percpu_max+0x130/0x130 [ 1642.311093] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1642.312268] ? lock_release+0x680/0x680 [ 1642.313144] idr_alloc+0xc2/0x130 [ 1642.313899] ? idr_alloc_u32+0x2d0/0x2d0 [ 1642.314785] ? rwlock_bug.part.0+0x90/0x90 [ 1642.315699] p9_client_prepare_req.part.0+0x612/0xac0 [ 1642.316853] p9_client_rpc+0x220/0x1370 [ 1642.317723] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1642.318838] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1642.320016] ? pipe_poll+0x21b/0x800 [ 1642.320835] ? p9_fd_close+0x4a0/0x4a0 [ 1642.321689] ? wait_for_partner+0x3c0/0x3c0 [ 1642.322640] ? p9_fd_poll+0x1e0/0x2c0 [ 1642.323488] ? p9_fd_create+0x357/0x4a0 [ 1642.324350] ? p9_conn_create+0x510/0x510 [ 1642.325257] ? p9_client_create+0x798/0x1230 [ 1642.326230] ? kfree+0xd7/0x340 [ 1642.326948] ? do_raw_spin_unlock+0x4f/0x220 [ 1642.327914] p9_client_create+0xa76/0x1230 [ 1642.328861] ? p9_client_flush+0x430/0x430 [ 1642.329804] ? trace_hardirqs_on+0x5b/0x180 [ 1642.330767] ? lockdep_init_map_type+0x2c7/0x780 [ 1642.331796] ? __raw_spin_lock_init+0x36/0x110 [ 1642.332821] v9fs_session_init+0x1dd/0x1680 [ 1642.333778] ? lock_release+0x680/0x680 [ 1642.334678] ? kmem_cache_alloc_trace+0x151/0x320 [ 1642.335710] ? v9fs_show_options+0x690/0x690 [ 1642.336723] ? trace_hardirqs_on+0x5b/0x180 [ 1642.337689] ? kasan_unpoison_shadow+0x33/0x50 [ 1642.338711] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.339813] v9fs_mount+0x79/0x8f0 [ 1642.340611] ? v9fs_write_inode+0x60/0x60 [ 1642.341539] legacy_get_tree+0x105/0x220 [ 1642.342453] vfs_get_tree+0x8e/0x300 [ 1642.343254] path_mount+0x1490/0x21e0 [ 1642.344115] ? strncpy_from_user+0x9e/0x470 [ 1642.345107] ? finish_automount+0xa90/0xa90 [ 1642.346058] ? getname_flags.part.0+0x1dd/0x4f0 [ 1642.347081] ? _copy_from_user+0xfb/0x1b0 [ 1642.348035] __x64_sys_mount+0x282/0x300 [ 1642.348956] ? copy_mnt_ns+0xa00/0xa00 [ 1642.349836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1642.351006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1642.352149] do_syscall_64+0x33/0x40 [ 1642.352994] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.354122] RIP: 0033:0x7ff9c58eab19 [ 1642.354935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1642.359054] RSP: 002b:00007ff9c2e60188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1642.360800] RAX: ffffffffffffffda RBX: 00007ff9c59fdf60 RCX: 00007ff9c58eab19 [ 1642.362372] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1642.364013] RBP: 00007ff9c2e601d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1642.365569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1642.367227] R13: 00007ffeb8055a0f R14: 00007ff9c2e60300 R15: 0000000000022000 11:40:38 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 9) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:40:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 36) [ 1642.404365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1642.420925] FAULT_INJECTION: forcing a failure. [ 1642.420925] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.423454] CPU: 1 PID: 9244 Comm: syz-executor.4 Not tainted 5.10.246 #1 11:40:38 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}}, 0x0) unshare(0x48020200) [ 1642.424934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1642.426835] Call Trace: [ 1642.427401] dump_stack+0x107/0x167 [ 1642.428194] should_fail.cold+0x5/0xa [ 1642.429006] ? create_object.isra.0+0x3a/0xa30 [ 1642.429996] should_failslab+0x5/0x20 [ 1642.430825] kmem_cache_alloc+0x5b/0x310 [ 1642.431686] create_object.isra.0+0x3a/0xa30 [ 1642.432614] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.433685] kmem_cache_alloc+0x159/0x310 [ 1642.434564] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1642.435643] p9_client_rpc+0x220/0x1370 [ 1642.436494] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1642.437606] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1642.438728] ? pipe_poll+0x21b/0x800 [ 1642.439515] ? p9_fd_close+0x4a0/0x4a0 [ 1642.440345] ? wait_for_partner+0x3c0/0x3c0 [ 1642.441268] ? p9_fd_poll+0x1e0/0x2c0 [ 1642.442078] ? p9_fd_create+0x357/0x4a0 [ 1642.442928] ? p9_conn_create+0x510/0x510 [ 1642.443825] ? p9_client_create+0x798/0x1230 [ 1642.444771] ? kfree+0xd7/0x340 [ 1642.445476] ? do_raw_spin_unlock+0x4f/0x220 [ 1642.446425] p9_client_create+0xa76/0x1230 [ 1642.447346] ? p9_client_flush+0x430/0x430 [ 1642.448263] ? trace_hardirqs_on+0x5b/0x180 [ 1642.449190] ? lockdep_init_map_type+0x2c7/0x780 [ 1642.450207] ? __raw_spin_lock_init+0x36/0x110 [ 1642.451194] v9fs_session_init+0x1dd/0x1680 [ 1642.452127] ? lock_release+0x680/0x680 [ 1642.452978] ? kmem_cache_alloc_trace+0x151/0x320 [ 1642.454008] ? v9fs_show_options+0x690/0x690 [ 1642.454958] ? trace_hardirqs_on+0x5b/0x180 [ 1642.455892] ? kasan_unpoison_shadow+0x33/0x50 [ 1642.456869] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.457948] v9fs_mount+0x79/0x8f0 [ 1642.458709] ? v9fs_write_inode+0x60/0x60 [ 1642.459592] legacy_get_tree+0x105/0x220 [ 1642.460469] vfs_get_tree+0x8e/0x300 [ 1642.461261] path_mount+0x1490/0x21e0 [ 1642.462080] ? strncpy_from_user+0x9e/0x470 [ 1642.462997] ? finish_automount+0xa90/0xa90 [ 1642.463917] ? getname_flags.part.0+0x1dd/0x4f0 [ 1642.464905] ? _copy_from_user+0xfb/0x1b0 [ 1642.465789] __x64_sys_mount+0x282/0x300 [ 1642.466645] ? copy_mnt_ns+0xa00/0xa00 [ 1642.467479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1642.468598] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1642.469701] do_syscall_64+0x33/0x40 [ 1642.470496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.471578] RIP: 0033:0x7f2d92adab19 [ 1642.472365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1642.476211] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1642.477821] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1642.479389] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1642.480938] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1642.482428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1642.483935] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 11:40:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1642.510552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1642.523178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.524804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.532641] FAULT_INJECTION: forcing a failure. [ 1642.532641] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.535188] CPU: 1 PID: 9250 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1642.536666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1642.538424] Call Trace: [ 1642.538985] dump_stack+0x107/0x167 [ 1642.539758] should_fail.cold+0x5/0xa [ 1642.540579] ? __d_alloc+0x2a/0x990 [ 1642.541346] should_failslab+0x5/0x20 [ 1642.542155] kmem_cache_alloc+0x5b/0x310 [ 1642.543012] ? expand_files+0x60a/0xa80 [ 1642.543871] __d_alloc+0x2a/0x990 [ 1642.544596] ? alloc_fd+0x2e7/0x670 [ 1642.545370] d_alloc_pseudo+0x19/0x70 [ 1642.546179] alloc_file_pseudo+0xce/0x250 [ 1642.547054] ? alloc_file+0x5a0/0x5a0 [ 1642.547867] ? do_raw_spin_unlock+0x4f/0x220 [ 1642.548801] ? _raw_spin_unlock+0x1a/0x30 [ 1642.549678] ? alloc_fd+0x2e7/0x670 [ 1642.550456] sock_alloc_file+0x4f/0x1a0 [ 1642.551301] __sys_socket+0x13d/0x200 [ 1642.552107] ? fput_many+0x2f/0x1a0 [ 1642.552878] ? move_addr_to_kernel+0x70/0x70 [ 1642.553809] ? ksys_write+0x1a9/0x260 [ 1642.554618] ? __ia32_sys_read+0xb0/0xb0 [ 1642.555485] __x64_sys_socket+0x6f/0xb0 [ 1642.556338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1642.557428] do_syscall_64+0x33/0x40 [ 1642.558218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.559297] RIP: 0033:0x7f4930b3f197 [ 1642.560091] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1642.563994] RSP: 002b:00007f492e0b2098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1642.565604] RAX: ffffffffffffffda RBX: 00007f4930c50f60 RCX: 00007f4930b3f197 [ 1642.567120] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1642.568639] RBP: 00007f492e0b31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1642.570145] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1642.571661] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1642.575179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:40:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 9) 11:40:38 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1642.607154] FAULT_INJECTION: forcing a failure. [ 1642.607154] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.608538] CPU: 0 PID: 9254 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1642.609318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1642.610263] Call Trace: [ 1642.610571] dump_stack+0x107/0x167 [ 1642.610988] should_fail.cold+0x5/0xa [ 1642.611432] ? create_object.isra.0+0x3a/0xa30 [ 1642.611962] should_failslab+0x5/0x20 [ 1642.612403] kmem_cache_alloc+0x5b/0x310 [ 1642.612875] create_object.isra.0+0x3a/0xa30 [ 1642.613383] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.613965] kmem_cache_alloc+0x159/0x310 [ 1642.614450] getname_flags.part.0+0x50/0x4f0 [ 1642.614952] ? _copy_from_user+0xfb/0x1b0 [ 1642.615423] user_path_at_empty+0xa1/0x100 [ 1642.615916] __x64_sys_mount+0x1e9/0x300 [ 1642.616378] ? copy_mnt_ns+0xa00/0xa00 [ 1642.616832] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1642.617434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1642.618027] do_syscall_64+0x33/0x40 [ 1642.618455] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.619042] RIP: 0033:0x7fa3b8173b19 [ 1642.619469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1642.621562] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1642.622429] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1642.623248] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1642.624069] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1642.624885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.625704] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1642.659909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1642.704624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.706159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.707963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:40:51 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 44) 11:40:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:40:51 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:40:51 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 10) 11:40:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}}, 0x0) unshare(0x48020200) 11:40:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 42) 11:40:51 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 10) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:40:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 37) [ 1655.220309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1655.236228] FAULT_INJECTION: forcing a failure. [ 1655.236228] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.237959] CPU: 0 PID: 9273 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1655.238959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1655.240164] Call Trace: [ 1655.240538] dump_stack+0x107/0x167 [ 1655.241066] should_fail.cold+0x5/0xa [ 1655.241620] ? create_object.isra.0+0x3a/0xa30 [ 1655.242277] should_failslab+0x5/0x20 [ 1655.242825] kmem_cache_alloc+0x5b/0x310 [ 1655.243413] create_object.isra.0+0x3a/0xa30 [ 1655.244048] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1655.244777] __kmalloc+0x16e/0x390 [ 1655.245293] p9_fcall_init+0x97/0x290 [ 1655.245637] FAULT_INJECTION: forcing a failure. [ 1655.245637] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.245845] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1655.249083] p9_client_rpc+0x220/0x1370 [ 1655.249654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1655.250405] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1655.251175] ? pipe_poll+0x21b/0x800 [ 1655.251704] ? p9_fd_close+0x4a0/0x4a0 [ 1655.252271] ? wait_for_partner+0x3c0/0x3c0 [ 1655.252887] ? p9_fd_poll+0x1e0/0x2c0 [ 1655.253437] ? p9_fd_create+0x357/0x4a0 [ 1655.254005] ? p9_conn_create+0x510/0x510 [ 1655.254597] ? p9_client_create+0x798/0x1230 [ 1655.255232] ? kfree+0xd7/0x340 [ 1655.255703] ? do_raw_spin_unlock+0x4f/0x220 [ 1655.256341] p9_client_create+0xa76/0x1230 [ 1655.256949] ? p9_client_flush+0x430/0x430 [ 1655.257556] ? trace_hardirqs_on+0x5b/0x180 [ 1655.258173] ? lockdep_init_map_type+0x2c7/0x780 [ 1655.258854] ? __raw_spin_lock_init+0x36/0x110 [ 1655.259512] v9fs_session_init+0x1dd/0x1680 [ 1655.260138] ? lock_release+0x680/0x680 [ 1655.260710] ? kmem_cache_alloc_trace+0x151/0x320 [ 1655.261401] ? v9fs_show_options+0x690/0x690 [ 1655.262034] ? trace_hardirqs_on+0x5b/0x180 [ 1655.262651] ? kasan_unpoison_shadow+0x33/0x50 [ 1655.263305] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1655.264035] v9fs_mount+0x79/0x8f0 [ 1655.264546] ? v9fs_write_inode+0x60/0x60 [ 1655.265140] legacy_get_tree+0x105/0x220 [ 1655.265720] vfs_get_tree+0x8e/0x300 [ 1655.266255] path_mount+0x1490/0x21e0 [ 1655.266803] ? strncpy_from_user+0x9e/0x470 [ 1655.267422] ? finish_automount+0xa90/0xa90 [ 1655.268046] ? getname_flags.part.0+0x1dd/0x4f0 [ 1655.268710] ? _copy_from_user+0xfb/0x1b0 [ 1655.269309] __x64_sys_mount+0x282/0x300 [ 1655.269889] ? copy_mnt_ns+0xa00/0xa00 [ 1655.270450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1655.271198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1655.271937] do_syscall_64+0x33/0x40 [ 1655.272498] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1655.273264] RIP: 0033:0x7f2d92adab19 [ 1655.273815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1655.276555] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1655.277627] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1655.278629] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1655.279607] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1655.280603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1655.281580] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1655.282587] CPU: 1 PID: 9274 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1655.284142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1655.286019] Call Trace: [ 1655.286620] dump_stack+0x107/0x167 [ 1655.287444] should_fail.cold+0x5/0xa [ 1655.288317] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1655.289611] should_failslab+0x5/0x20 [ 1655.290468] kmem_cache_alloc+0x5b/0x310 [ 1655.291392] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1655.292664] idr_get_free+0x4b5/0x8f0 [ 1655.293539] idr_alloc_u32+0x170/0x2d0 [ 1655.294426] ? __fprop_inc_percpu_max+0x130/0x130 [ 1655.295511] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1655.296721] ? lock_release+0x680/0x680 [ 1655.297619] idr_alloc+0xc2/0x130 [ 1655.298403] ? idr_alloc_u32+0x2d0/0x2d0 [ 1655.299318] ? rwlock_bug.part.0+0x90/0x90 [ 1655.300284] p9_client_prepare_req.part.0+0x612/0xac0 [ 1655.301455] p9_client_rpc+0x220/0x1370 [ 1655.302346] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1655.303535] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1655.304752] ? pipe_poll+0x21b/0x800 [ 1655.305582] ? p9_fd_close+0x4a0/0x4a0 [ 1655.306464] ? wait_for_partner+0x3c0/0x3c0 [ 1655.307423] ? p9_fd_poll+0x1e0/0x2c0 [ 1655.308299] ? p9_fd_create+0x357/0x4a0 [ 1655.309191] ? p9_conn_create+0x510/0x510 [ 1655.310115] ? p9_client_create+0x798/0x1230 [ 1655.311103] ? kfree+0xd7/0x340 [ 1655.311846] ? do_raw_spin_unlock+0x4f/0x220 [ 1655.312850] p9_client_create+0xa76/0x1230 [ 1655.313806] ? p9_client_flush+0x430/0x430 [ 1655.314767] ? trace_hardirqs_on+0x5b/0x180 [ 1655.315742] ? lockdep_init_map_type+0x2c7/0x780 [ 1655.316833] ? __raw_spin_lock_init+0x36/0x110 [ 1655.317873] v9fs_session_init+0x1dd/0x1680 [ 1655.318865] ? lock_release+0x680/0x680 [ 1655.319789] ? kmem_cache_alloc_trace+0x151/0x320 [ 1655.320879] ? v9fs_show_options+0x690/0x690 [ 1655.321873] ? trace_hardirqs_on+0x5b/0x180 [ 1655.322842] ? kasan_unpoison_shadow+0x33/0x50 [ 1655.323866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1655.325014] v9fs_mount+0x79/0x8f0 [ 1655.325812] ? v9fs_write_inode+0x60/0x60 [ 1655.326739] legacy_get_tree+0x105/0x220 [ 1655.327649] vfs_get_tree+0x8e/0x300 [ 1655.328491] path_mount+0x1490/0x21e0 [ 1655.329350] ? strncpy_from_user+0x9e/0x470 [ 1655.330322] ? finish_automount+0xa90/0xa90 [ 1655.331296] ? getname_flags.part.0+0x1dd/0x4f0 [ 1655.332351] ? _copy_from_user+0xfb/0x1b0 [ 1655.333294] __x64_sys_mount+0x282/0x300 [ 1655.334205] ? copy_mnt_ns+0xa00/0xa00 [ 1655.335084] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1655.336263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1655.337422] do_syscall_64+0x33/0x40 [ 1655.338263] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1655.339430] RIP: 0033:0x7f644830fb19 [ 1655.340276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1655.341644] FAULT_INJECTION: forcing a failure. [ 1655.341644] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.344413] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1655.344437] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1655.344456] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1655.350863] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1655.352474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1655.354072] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1655.355704] CPU: 0 PID: 9277 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1655.356656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1655.357778] Call Trace: [ 1655.357800] 9pnet: Insufficient options for proto=fd [ 1655.358140] dump_stack+0x107/0x167 [ 1655.358155] should_fail.cold+0x5/0xa [ 1655.358176] ? alloc_fs_context+0x57/0x840 [ 1655.360872] should_failslab+0x5/0x20 [ 1655.361393] kmem_cache_alloc_trace+0x55/0x320 [ 1655.362009] alloc_fs_context+0x57/0x840 [ 1655.362557] path_mount+0xab1/0x21e0 [ 1655.363066] ? strncpy_from_user+0x9e/0x470 [ 1655.363298] FAULT_INJECTION: forcing a failure. [ 1655.363298] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.363651] ? finish_automount+0xa90/0xa90 [ 1655.366697] ? getname_flags.part.0+0x1dd/0x4f0 [ 1655.367327] ? _copy_from_user+0xfb/0x1b0 [ 1655.367890] __x64_sys_mount+0x282/0x300 [ 1655.368473] ? copy_mnt_ns+0xa00/0xa00 [ 1655.369004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1655.369749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1655.370481] do_syscall_64+0x33/0x40 [ 1655.371009] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1655.371731] RIP: 0033:0x7fa3b8173b19 [ 1655.372261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1655.374873] RSP: 002b:00007fa3b56c8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1655.375962] RAX: ffffffffffffffda RBX: 00007fa3b8287020 RCX: 00007fa3b8173b19 [ 1655.376970] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1655.377969] RBP: 00007fa3b56c81d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1655.378978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1655.379986] R13: 00007ffe14e91d1f R14: 00007fa3b56c8300 R15: 0000000000022000 [ 1655.381012] CPU: 1 PID: 9281 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1655.382621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1655.384550] Call Trace: [ 1655.385168] dump_stack+0x107/0x167 [ 1655.386014] should_fail.cold+0x5/0xa [ 1655.386901] ? create_object.isra.0+0x3a/0xa30 [ 1655.387973] should_failslab+0x5/0x20 [ 1655.388864] kmem_cache_alloc+0x5b/0x310 [ 1655.389820] create_object.isra.0+0x3a/0xa30 [ 1655.390841] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1655.392034] kmem_cache_alloc+0x159/0x310 [ 1655.393001] ? expand_files+0x60a/0xa80 [ 1655.393933] __d_alloc+0x2a/0x990 [ 1655.394739] ? alloc_fd+0x2e7/0x670 [ 1655.395587] d_alloc_pseudo+0x19/0x70 [ 1655.396484] alloc_file_pseudo+0xce/0x250 [ 1655.397445] ? alloc_file+0x5a0/0x5a0 [ 1655.398330] ? do_raw_spin_unlock+0x4f/0x220 [ 1655.399354] ? _raw_spin_unlock+0x1a/0x30 [ 1655.400323] ? alloc_fd+0x2e7/0x670 [ 1655.401179] sock_alloc_file+0x4f/0x1a0 [ 1655.402104] __sys_socket+0x13d/0x200 [ 1655.402985] ? fput_many+0x2f/0x1a0 [ 1655.403833] ? move_addr_to_kernel+0x70/0x70 [ 1655.404857] ? ksys_write+0x1a9/0x260 [ 1655.405743] ? __ia32_sys_read+0xb0/0xb0 [ 1655.406694] __x64_sys_socket+0x6f/0xb0 [ 1655.407620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1655.408828] do_syscall_64+0x33/0x40 [ 1655.409695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1655.410887] RIP: 0033:0x7f4930b3f197 [ 1655.411757] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1655.415768] RSP: 002b:00007f492e091098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1655.417465] RAX: ffffffffffffffda RBX: 00007f4930c51020 RCX: 00007f4930b3f197 [ 1655.419028] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1655.420596] RBP: 00007f492e0921d0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.422180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1655.423750] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1655.435603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1655.473398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.473412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.473430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.475280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.475515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:40:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1655.485905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:40:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:40:51 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 11) [ 1655.588352] FAULT_INJECTION: forcing a failure. [ 1655.588352] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.589850] CPU: 0 PID: 9286 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1655.590721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1655.591745] Call Trace: [ 1655.592095] dump_stack+0x107/0x167 [ 1655.592560] should_fail.cold+0x5/0xa [ 1655.593038] ? create_object.isra.0+0x3a/0xa30 [ 1655.593618] should_failslab+0x5/0x20 [ 1655.594101] kmem_cache_alloc+0x5b/0x310 [ 1655.594616] create_object.isra.0+0x3a/0xa30 [ 1655.595172] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1655.595828] kmem_cache_alloc_trace+0x151/0x320 [ 1655.596441] alloc_fs_context+0x57/0x840 [ 1655.596959] path_mount+0xab1/0x21e0 [ 1655.597434] ? strncpy_from_user+0x9e/0x470 [ 1655.597987] ? finish_automount+0xa90/0xa90 [ 1655.598543] ? getname_flags.part.0+0x1dd/0x4f0 [ 1655.599142] ? _copy_from_user+0xfb/0x1b0 [ 1655.599672] __x64_sys_mount+0x282/0x300 [ 1655.600205] ? copy_mnt_ns+0xa00/0xa00 [ 1655.600704] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1655.601377] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1655.602027] do_syscall_64+0x33/0x40 [ 1655.602500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1655.603138] RIP: 0033:0x7fa3b8173b19 [ 1655.603621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1655.605937] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1655.606898] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1655.607787] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1655.608686] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1655.609584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1655.610468] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 11:41:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1669.119614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1669.145408] FAULT_INJECTION: forcing a failure. [ 1669.145408] name failslab, interval 1, probability 0, space 0, times 0 11:41:05 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 11) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:41:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 45) 11:41:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 38) 11:41:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}}, 0x0) unshare(0x48020200) 11:41:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:41:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 12) 11:41:05 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1669.147826] CPU: 1 PID: 9300 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1669.149425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.151211] Call Trace: [ 1669.151782] dump_stack+0x107/0x167 [ 1669.152559] should_fail.cold+0x5/0xa [ 1669.153377] ? p9_fcall_init+0x97/0x290 [ 1669.154218] should_failslab+0x5/0x20 [ 1669.155023] __kmalloc+0x72/0x390 [ 1669.155763] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.156835] p9_fcall_init+0x97/0x290 [ 1669.156904] FAULT_INJECTION: forcing a failure. [ 1669.156904] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.157625] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1669.157650] p9_client_rpc+0x220/0x1370 [ 1669.157673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.157700] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1669.164489] ? pipe_poll+0x21b/0x800 [ 1669.165279] ? p9_fd_close+0x4a0/0x4a0 [ 1669.166088] ? wait_for_partner+0x3c0/0x3c0 [ 1669.166997] ? p9_fd_poll+0x1e0/0x2c0 [ 1669.167800] ? p9_fd_create+0x357/0x4a0 [ 1669.168646] ? p9_conn_create+0x510/0x510 [ 1669.169506] ? p9_client_create+0x798/0x1230 [ 1669.170436] ? kfree+0xd7/0x340 [ 1669.171128] ? do_raw_spin_unlock+0x4f/0x220 [ 1669.172046] p9_client_create+0xa76/0x1230 [ 1669.172953] ? p9_client_flush+0x430/0x430 [ 1669.173837] ? trace_hardirqs_on+0x5b/0x180 [ 1669.174751] ? lockdep_init_map_type+0x2c7/0x780 [ 1669.175750] ? __raw_spin_lock_init+0x36/0x110 [ 1669.176730] v9fs_session_init+0x1dd/0x1680 [ 1669.177627] ? lock_release+0x680/0x680 [ 1669.178483] ? kmem_cache_alloc_trace+0x151/0x320 [ 1669.179491] ? v9fs_show_options+0x690/0x690 [ 1669.180450] ? trace_hardirqs_on+0x5b/0x180 [ 1669.181371] ? kasan_unpoison_shadow+0x33/0x50 [ 1669.182346] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.183427] v9fs_mount+0x79/0x8f0 [ 1669.184185] ? v9fs_write_inode+0x60/0x60 [ 1669.185058] legacy_get_tree+0x105/0x220 [ 1669.185914] vfs_get_tree+0x8e/0x300 [ 1669.186684] path_mount+0x1490/0x21e0 [ 1669.187489] ? strncpy_from_user+0x9e/0x470 [ 1669.188393] ? finish_automount+0xa90/0xa90 [ 1669.189300] ? getname_flags.part.0+0x1dd/0x4f0 [ 1669.190282] ? _copy_from_user+0xfb/0x1b0 [ 1669.191168] __x64_sys_mount+0x282/0x300 [ 1669.192015] ? copy_mnt_ns+0xa00/0xa00 [ 1669.192860] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.193979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.195078] do_syscall_64+0x33/0x40 [ 1669.195870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.196944] RIP: 0033:0x7f2d92adab19 [ 1669.197730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.201644] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1669.203280] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1669.204802] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1669.206320] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1669.207821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.209363] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1669.210910] CPU: 0 PID: 9304 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1669.212426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.213647] FAULT_INJECTION: forcing a failure. [ 1669.213647] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.214179] Call Trace: [ 1669.214213] dump_stack+0x107/0x167 [ 1669.214239] should_fail.cold+0x5/0xa [ 1669.218641] ? create_object.isra.0+0x3a/0xa30 [ 1669.219604] should_failslab+0x5/0x20 [ 1669.220429] kmem_cache_alloc+0x5b/0x310 [ 1669.221299] create_object.isra.0+0x3a/0xa30 [ 1669.222230] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.223304] __kmalloc+0x16e/0x390 [ 1669.224045] p9_fcall_init+0x97/0x290 [ 1669.224870] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1669.225922] p9_client_rpc+0x220/0x1370 [ 1669.226768] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.227898] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1669.229054] ? pipe_poll+0x21b/0x800 [ 1669.229829] ? p9_fd_close+0x4a0/0x4a0 [ 1669.230660] ? wait_for_partner+0x3c0/0x3c0 [ 1669.231572] ? p9_fd_poll+0x1e0/0x2c0 [ 1669.232386] ? p9_fd_create+0x357/0x4a0 [ 1669.233233] ? p9_conn_create+0x510/0x510 [ 1669.234108] ? p9_client_create+0x798/0x1230 [ 1669.235039] ? kfree+0xd7/0x340 [ 1669.235723] ? do_raw_spin_unlock+0x4f/0x220 [ 1669.236657] p9_client_create+0xa76/0x1230 [ 1669.237560] ? p9_client_flush+0x430/0x430 [ 1669.238441] ? trace_hardirqs_on+0x5b/0x180 [ 1669.239329] ? lockdep_init_map_type+0x2c7/0x780 [ 1669.240339] ? __raw_spin_lock_init+0x36/0x110 [ 1669.241313] v9fs_session_init+0x1dd/0x1680 [ 1669.242256] ? lock_release+0x680/0x680 [ 1669.243087] ? kmem_cache_alloc_trace+0x151/0x320 [ 1669.244107] ? v9fs_show_options+0x690/0x690 [ 1669.245062] ? trace_hardirqs_on+0x5b/0x180 [ 1669.245949] ? kasan_unpoison_shadow+0x33/0x50 [ 1669.246908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.247966] v9fs_mount+0x79/0x8f0 [ 1669.248727] ? v9fs_write_inode+0x60/0x60 [ 1669.249595] legacy_get_tree+0x105/0x220 [ 1669.250433] vfs_get_tree+0x8e/0x300 [ 1669.251214] path_mount+0x1490/0x21e0 [ 1669.252007] ? strncpy_from_user+0x9e/0x470 [ 1669.252918] ? finish_automount+0xa90/0xa90 [ 1669.253824] ? getname_flags.part.0+0x1dd/0x4f0 [ 1669.254813] ? _copy_from_user+0xfb/0x1b0 [ 1669.255688] __x64_sys_mount+0x282/0x300 [ 1669.256550] ? copy_mnt_ns+0xa00/0xa00 [ 1669.257371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.258474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.259561] do_syscall_64+0x33/0x40 [ 1669.260354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.261425] RIP: 0033:0x7f644830fb19 [ 1669.262205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.266024] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1669.267625] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1669.269142] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1669.270626] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1669.272124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.273620] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1669.275112] CPU: 1 PID: 9305 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1669.276573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.278340] Call Trace: [ 1669.278882] dump_stack+0x107/0x167 [ 1669.279668] should_fail.cold+0x5/0xa [ 1669.280487] ? legacy_init_fs_context+0x44/0xe0 [ 1669.281481] should_failslab+0x5/0x20 [ 1669.282289] kmem_cache_alloc_trace+0x55/0x320 [ 1669.283256] ? lockdep_init_map_type+0x2c7/0x780 [ 1669.284264] legacy_init_fs_context+0x44/0xe0 [ 1669.285203] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1669.286243] alloc_fs_context+0x4fd/0x840 [ 1669.287122] path_mount+0xab1/0x21e0 [ 1669.287913] ? strncpy_from_user+0x9e/0x470 [ 1669.288827] ? finish_automount+0xa90/0xa90 [ 1669.289739] ? getname_flags.part.0+0x1dd/0x4f0 [ 1669.290728] ? _copy_from_user+0xfb/0x1b0 [ 1669.291606] __x64_sys_mount+0x282/0x300 [ 1669.292475] ? copy_mnt_ns+0xa00/0xa00 [ 1669.293305] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.294398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.295480] do_syscall_64+0x33/0x40 [ 1669.296268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.297340] RIP: 0033:0x7fa3b8173b19 [ 1669.298129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.301999] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1669.303583] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1669.305102] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1669.306617] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1669.308112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.309609] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1669.324828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1669.325421] FAULT_INJECTION: forcing a failure. [ 1669.325421] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.329121] CPU: 0 PID: 9295 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1669.330583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.332353] Call Trace: [ 1669.332928] dump_stack+0x107/0x167 [ 1669.333685] should_fail.cold+0x5/0xa [ 1669.334489] ? __alloc_file+0x21/0x320 [ 1669.335325] should_failslab+0x5/0x20 [ 1669.336146] kmem_cache_alloc+0x5b/0x310 [ 1669.337032] __alloc_file+0x21/0x320 [ 1669.337833] alloc_empty_file+0x6d/0x170 [ 1669.338686] alloc_file+0x5e/0x5a0 [ 1669.339443] alloc_file_pseudo+0x16a/0x250 [ 1669.340330] ? alloc_file+0x5a0/0x5a0 [ 1669.341131] ? do_raw_spin_unlock+0x4f/0x220 [ 1669.342062] ? _raw_spin_unlock+0x1a/0x30 [ 1669.342932] ? alloc_fd+0x2e7/0x670 [ 1669.343694] sock_alloc_file+0x4f/0x1a0 [ 1669.344533] __sys_socket+0x13d/0x200 [ 1669.345319] ? fput_many+0x2f/0x1a0 [ 1669.346083] ? move_addr_to_kernel+0x70/0x70 [ 1669.347003] ? ksys_write+0x1a9/0x260 [ 1669.347800] ? __ia32_sys_read+0xb0/0xb0 [ 1669.348675] __x64_sys_socket+0x6f/0xb0 [ 1669.349527] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.350622] do_syscall_64+0x33/0x40 [ 1669.351418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.352507] RIP: 0033:0x7f4930b3f197 [ 1669.353290] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.357180] RSP: 002b:00007f492e0b2098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1669.358792] RAX: ffffffffffffffda RBX: 00007f4930c50f60 RCX: 00007f4930b3f197 [ 1669.360344] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1669.361858] RBP: 00007f492e0b31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.363367] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1669.364880] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 11:41:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1669.425883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.427510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.429227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:41:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 39) 11:41:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1669.519495] FAULT_INJECTION: forcing a failure. [ 1669.519495] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.522080] CPU: 0 PID: 9318 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1669.523545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.525329] Call Trace: [ 1669.525900] dump_stack+0x107/0x167 [ 1669.526670] should_fail.cold+0x5/0xa [ 1669.527471] ? p9_fcall_init+0x97/0x290 [ 1669.528301] should_failslab+0x5/0x20 [ 1669.529087] __kmalloc+0x72/0x390 [ 1669.529798] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.530856] p9_fcall_init+0x97/0x290 [ 1669.531659] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1669.532742] p9_client_rpc+0x220/0x1370 [ 1669.533581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.534651] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1669.535781] ? pipe_poll+0x21b/0x800 [ 1669.536554] ? p9_fd_close+0x4a0/0x4a0 [ 1669.537387] ? wait_for_partner+0x3c0/0x3c0 [ 1669.538290] ? p9_fd_poll+0x1e0/0x2c0 [ 1669.539085] ? p9_fd_create+0x357/0x4a0 [ 1669.539913] ? p9_conn_create+0x510/0x510 [ 1669.540797] ? p9_client_create+0x798/0x1230 [ 1669.541719] ? kfree+0xd7/0x340 [ 1669.542417] ? do_raw_spin_unlock+0x4f/0x220 [ 1669.543347] p9_client_create+0xa76/0x1230 [ 1669.544249] ? p9_client_flush+0x430/0x430 [ 1669.545154] ? trace_hardirqs_on+0x5b/0x180 [ 1669.546074] ? lockdep_init_map_type+0x2c7/0x780 [ 1669.547078] ? __raw_spin_lock_init+0x36/0x110 [ 1669.548046] v9fs_session_init+0x1dd/0x1680 [ 1669.548985] ? lock_release+0x680/0x680 [ 1669.549807] ? kmem_cache_alloc_trace+0x151/0x320 [ 1669.550825] ? v9fs_show_options+0x690/0x690 [ 1669.551760] ? trace_hardirqs_on+0x5b/0x180 [ 1669.552686] ? kasan_unpoison_shadow+0x33/0x50 [ 1669.553653] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.554736] v9fs_mount+0x79/0x8f0 [ 1669.555491] ? v9fs_write_inode+0x60/0x60 [ 1669.556371] legacy_get_tree+0x105/0x220 [ 1669.557225] vfs_get_tree+0x8e/0x300 [ 1669.557999] path_mount+0x1490/0x21e0 [ 1669.558802] ? strncpy_from_user+0x9e/0x470 [ 1669.559718] ? finish_automount+0xa90/0xa90 [ 1669.560647] ? getname_flags.part.0+0x1dd/0x4f0 [ 1669.561636] ? _copy_from_user+0xfb/0x1b0 [ 1669.562519] __x64_sys_mount+0x282/0x300 [ 1669.563375] ? copy_mnt_ns+0xa00/0xa00 [ 1669.564219] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.565324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.566403] do_syscall_64+0x33/0x40 [ 1669.567186] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.568270] RIP: 0033:0x7f2d92adab19 [ 1669.569066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.572968] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1669.574577] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1669.576089] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1669.577588] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1669.579074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.580608] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 11:41:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 46) 11:41:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 13) 11:41:05 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 12) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:41:05 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1669.634685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1669.635616] FAULT_INJECTION: forcing a failure. [ 1669.635616] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.638875] CPU: 0 PID: 9324 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1669.640295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.642005] Call Trace: [ 1669.642560] dump_stack+0x107/0x167 [ 1669.643326] should_fail.cold+0x5/0xa [ 1669.643728] FAULT_INJECTION: forcing a failure. [ 1669.643728] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.644120] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1669.644153] should_failslab+0x5/0x20 [ 1669.648470] kmem_cache_alloc+0x5b/0x310 [ 1669.649320] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1669.650487] idr_get_free+0x4b5/0x8f0 [ 1669.651281] idr_alloc_u32+0x170/0x2d0 [ 1669.652085] ? __fprop_inc_percpu_max+0x130/0x130 [ 1669.653098] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1669.654229] ? lock_release+0x680/0x680 [ 1669.655057] idr_alloc+0xc2/0x130 [ 1669.655792] ? idr_alloc_u32+0x2d0/0x2d0 [ 1669.656648] ? rwlock_bug.part.0+0x90/0x90 [ 1669.657553] p9_client_prepare_req.part.0+0x612/0xac0 [ 1669.658612] p9_client_rpc+0x220/0x1370 [ 1669.659447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.660561] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1669.661680] ? pipe_poll+0x21b/0x800 [ 1669.662454] ? p9_fd_close+0x4a0/0x4a0 [ 1669.663242] ? wait_for_partner+0x3c0/0x3c0 [ 1669.664131] ? p9_fd_poll+0x1e0/0x2c0 [ 1669.664928] ? p9_fd_create+0x357/0x4a0 [ 1669.665741] ? p9_conn_create+0x510/0x510 [ 1669.666590] ? p9_client_create+0x798/0x1230 [ 1669.667490] ? kfree+0xd7/0x340 [ 1669.668180] ? do_raw_spin_unlock+0x4f/0x220 [ 1669.669093] p9_client_create+0xa76/0x1230 [ 1669.669977] ? p9_client_flush+0x430/0x430 [ 1669.670848] ? trace_hardirqs_on+0x5b/0x180 [ 1669.671735] ? lockdep_init_map_type+0x2c7/0x780 [ 1669.672733] ? __raw_spin_lock_init+0x36/0x110 [ 1669.673670] v9fs_session_init+0x1dd/0x1680 [ 1669.674560] ? lock_release+0x680/0x680 [ 1669.675391] ? kmem_cache_alloc_trace+0x151/0x320 [ 1669.676400] ? v9fs_show_options+0x690/0x690 [ 1669.677318] ? trace_hardirqs_on+0x5b/0x180 [ 1669.678203] ? kasan_unpoison_shadow+0x33/0x50 [ 1669.679119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.680164] v9fs_mount+0x79/0x8f0 [ 1669.680873] ? v9fs_write_inode+0x60/0x60 [ 1669.681707] legacy_get_tree+0x105/0x220 [ 1669.682552] vfs_get_tree+0x8e/0x300 [ 1669.683317] path_mount+0x1490/0x21e0 [ 1669.684111] ? strncpy_from_user+0x9e/0x470 [ 1669.685000] ? finish_automount+0xa90/0xa90 [ 1669.685888] ? getname_flags.part.0+0x1dd/0x4f0 [ 1669.686843] ? _copy_from_user+0xfb/0x1b0 [ 1669.687703] __x64_sys_mount+0x282/0x300 [ 1669.688543] ? copy_mnt_ns+0xa00/0xa00 [ 1669.689351] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.690440] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.691507] do_syscall_64+0x33/0x40 [ 1669.692284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.693328] RIP: 0033:0x7f644830fb19 [ 1669.694098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.697898] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1669.699451] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1669.700923] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1669.702376] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1669.703816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.705297] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1669.706803] CPU: 1 PID: 9320 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1669.708273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.710021] Call Trace: [ 1669.710582] dump_stack+0x107/0x167 [ 1669.711352] should_fail.cold+0x5/0xa [ 1669.712165] ? create_object.isra.0+0x3a/0xa30 [ 1669.713138] should_failslab+0x5/0x20 [ 1669.713940] kmem_cache_alloc+0x5b/0x310 [ 1669.714805] create_object.isra.0+0x3a/0xa30 [ 1669.715732] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.716831] kmem_cache_alloc+0x159/0x310 [ 1669.717705] __alloc_file+0x21/0x320 [ 1669.718491] alloc_empty_file+0x6d/0x170 [ 1669.719349] alloc_file+0x5e/0x5a0 [ 1669.720103] alloc_file_pseudo+0x16a/0x250 [ 1669.721016] ? alloc_file+0x5a0/0x5a0 [ 1669.721827] ? do_raw_spin_unlock+0x4f/0x220 [ 1669.722764] ? _raw_spin_unlock+0x1a/0x30 [ 1669.723646] ? alloc_fd+0x2e7/0x670 [ 1669.724430] sock_alloc_file+0x4f/0x1a0 [ 1669.725278] __sys_socket+0x13d/0x200 [ 1669.726081] ? fput_many+0x2f/0x1a0 [ 1669.726860] ? move_addr_to_kernel+0x70/0x70 [ 1669.727781] ? ksys_write+0x1a9/0x260 [ 1669.728592] ? __ia32_sys_read+0xb0/0xb0 [ 1669.729445] __x64_sys_socket+0x6f/0xb0 [ 1669.730276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.731345] do_syscall_64+0x33/0x40 [ 1669.732122] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.733218] RIP: 0033:0x7f4930b3f197 [ 1669.734004] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.737922] RSP: 002b:00007f492e0b2098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1669.739525] RAX: ffffffffffffffda RBX: 00007f4930c50f60 RCX: 00007f4930b3f197 [ 1669.741045] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 11:41:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1669.742570] RBP: 00007f492e0b31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.744359] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1669.745865] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1669.763740] FAULT_INJECTION: forcing a failure. [ 1669.763740] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.766263] CPU: 1 PID: 9330 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1669.767714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.769479] Call Trace: [ 1669.770045] dump_stack+0x107/0x167 [ 1669.770817] should_fail.cold+0x5/0xa [ 1669.771627] ? create_object.isra.0+0x3a/0xa30 [ 1669.772603] should_failslab+0x5/0x20 [ 1669.773403] kmem_cache_alloc+0x5b/0x310 [ 1669.774252] create_object.isra.0+0x3a/0xa30 [ 1669.775184] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.776275] kmem_cache_alloc_trace+0x151/0x320 [ 1669.777259] ? lockdep_init_map_type+0x2c7/0x780 [ 1669.778282] legacy_init_fs_context+0x44/0xe0 [ 1669.779235] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1669.780299] alloc_fs_context+0x4fd/0x840 [ 1669.781183] path_mount+0xab1/0x21e0 [ 1669.781976] ? strncpy_from_user+0x9e/0x470 [ 1669.782892] ? finish_automount+0xa90/0xa90 [ 1669.783799] ? getname_flags.part.0+0x1dd/0x4f0 [ 1669.784782] ? _copy_from_user+0xfb/0x1b0 [ 1669.785675] __x64_sys_mount+0x282/0x300 [ 1669.786527] ? copy_mnt_ns+0xa00/0xa00 [ 1669.787355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.788464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.789548] do_syscall_64+0x33/0x40 [ 1669.790325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.791402] RIP: 0033:0x7fa3b8173b19 [ 1669.792197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.796082] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1669.797711] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1669.799222] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1669.800720] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1669.802211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.803726] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1669.809518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:41:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:41:06 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:41:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x0) [ 1669.858376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.859937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.863294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:41:06 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1669.999412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1670.068993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1670.070717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1670.072260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1670.084556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1670.086237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1670.087736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1684.715198] FAULT_INJECTION: forcing a failure. [ 1684.715198] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.717758] CPU: 1 PID: 9355 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1684.719197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.720949] Call Trace: [ 1684.721511] dump_stack+0x107/0x167 [ 1684.722285] should_fail.cold+0x5/0xa [ 1684.723095] ? v9fs_mount+0x5a/0x8f0 [ 1684.723881] should_failslab+0x5/0x20 [ 1684.724700] kmem_cache_alloc_trace+0x55/0x320 [ 1684.725670] ? v9fs_write_inode+0x60/0x60 [ 1684.726548] v9fs_mount+0x5a/0x8f0 [ 1684.727302] ? v9fs_write_inode+0x60/0x60 [ 1684.728182] legacy_get_tree+0x105/0x220 [ 1684.729307] vfs_get_tree+0x8e/0x300 [ 1684.730290] path_mount+0x1490/0x21e0 [ 1684.731259] ? strncpy_from_user+0x9e/0x470 [ 1684.732175] ? finish_automount+0xa90/0xa90 [ 1684.733099] ? getname_flags.part.0+0x1dd/0x4f0 [ 1684.734091] ? _copy_from_user+0xfb/0x1b0 [ 1684.734971] __x64_sys_mount+0x282/0x300 [ 1684.735812] ? copy_mnt_ns+0xa00/0xa00 [ 1684.736662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1684.737767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.738849] do_syscall_64+0x33/0x40 [ 1684.739622] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1684.740823] RIP: 0033:0x7fa3b8173b19 11:41:20 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 47) 11:41:20 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:41:20 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 13) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:41:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:41:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 40) 11:41:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x0) 11:41:20 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 14) 11:41:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) [ 1684.741787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.745983] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1684.747320] FAULT_INJECTION: forcing a failure. [ 1684.747320] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.747597] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1684.747619] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1684.753536] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1684.755041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1684.756559] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1684.758102] CPU: 0 PID: 9350 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1684.759612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.761640] Call Trace: [ 1684.762388] dump_stack+0x107/0x167 [ 1684.763195] should_fail.cold+0x5/0xa [ 1684.764029] ? ___slab_alloc+0x155/0x700 [ 1684.764931] ? create_object.isra.0+0x3a/0xa30 [ 1684.765929] should_failslab+0x5/0x20 [ 1684.766753] kmem_cache_alloc+0x5b/0x310 [ 1684.767574] create_object.isra.0+0x3a/0xa30 [ 1684.768548] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1684.769236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1684.769640] kmem_cache_alloc+0x159/0x310 [ 1684.772284] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1684.773496] idr_get_free+0x4b5/0x8f0 [ 1684.774347] idr_alloc_u32+0x170/0x2d0 [ 1684.775272] ? __fprop_inc_percpu_max+0x130/0x130 [ 1684.776550] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1684.777743] ? lock_release+0x680/0x680 [ 1684.778609] idr_alloc+0xc2/0x130 [ 1684.779368] ? idr_alloc_u32+0x2d0/0x2d0 [ 1684.780227] ? rwlock_bug.part.0+0x90/0x90 [ 1684.781165] p9_client_prepare_req.part.0+0x612/0xac0 [ 1684.782309] p9_client_rpc+0x220/0x1370 [ 1684.783208] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1684.784355] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1684.785480] ? pipe_poll+0x21b/0x800 [ 1684.786282] ? p9_fd_close+0x4a0/0x4a0 [ 1684.787124] ? wait_for_partner+0x3c0/0x3c0 [ 1684.787927] FAULT_INJECTION: forcing a failure. [ 1684.787927] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.788121] ? p9_fd_poll+0x1e0/0x2c0 [ 1684.791248] ? p9_fd_create+0x357/0x4a0 [ 1684.792096] ? p9_conn_create+0x510/0x510 [ 1684.792983] ? p9_client_create+0x798/0x1230 [ 1684.793930] ? kfree+0xd7/0x340 [ 1684.794633] ? do_raw_spin_unlock+0x4f/0x220 [ 1684.795602] p9_client_create+0xa76/0x1230 [ 1684.796587] ? p9_client_flush+0x430/0x430 [ 1684.797513] ? trace_hardirqs_on+0x5b/0x180 [ 1684.798448] ? lockdep_init_map_type+0x2c7/0x780 [ 1684.799465] ? __raw_spin_lock_init+0x36/0x110 [ 1684.800495] v9fs_session_init+0x1dd/0x1680 [ 1684.801578] ? lock_release+0x680/0x680 [ 1684.802589] ? kmem_cache_alloc_trace+0x151/0x320 [ 1684.803616] ? v9fs_show_options+0x690/0x690 [ 1684.804604] ? trace_hardirqs_on+0x5b/0x180 [ 1684.805526] ? kasan_unpoison_shadow+0x33/0x50 [ 1684.806508] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1684.807591] v9fs_mount+0x79/0x8f0 [ 1684.808376] ? v9fs_write_inode+0x60/0x60 [ 1684.809297] legacy_get_tree+0x105/0x220 [ 1684.810151] vfs_get_tree+0x8e/0x300 [ 1684.810956] path_mount+0x1490/0x21e0 [ 1684.811800] ? strncpy_from_user+0x9e/0x470 [ 1684.812758] ? finish_automount+0xa90/0xa90 [ 1684.813687] ? getname_flags.part.0+0x1dd/0x4f0 [ 1684.814868] ? _copy_from_user+0xfb/0x1b0 [ 1684.815868] __x64_sys_mount+0x282/0x300 [ 1684.816755] ? copy_mnt_ns+0xa00/0xa00 [ 1684.817576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1684.818711] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.819806] do_syscall_64+0x33/0x40 [ 1684.820606] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1684.821756] RIP: 0033:0x7f644830fb19 [ 1684.822556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.826417] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1684.828118] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1684.829844] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1684.831343] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1684.832889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1684.834660] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1684.836568] CPU: 1 PID: 9363 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1684.838022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.839783] Call Trace: [ 1684.840365] dump_stack+0x107/0x167 [ 1684.841127] should_fail.cold+0x5/0xa [ 1684.841946] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1684.843157] should_failslab+0x5/0x20 [ 1684.843971] kmem_cache_alloc+0x5b/0x310 [ 1684.844853] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1684.846044] idr_get_free+0x4b5/0x8f0 [ 1684.846867] idr_alloc_u32+0x170/0x2d0 [ 1684.847698] ? __fprop_inc_percpu_max+0x130/0x130 [ 1684.848729] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1684.849860] ? lock_release+0x680/0x680 [ 1684.850711] idr_alloc+0xc2/0x130 [ 1684.851450] ? idr_alloc_u32+0x2d0/0x2d0 [ 1684.852308] ? rwlock_bug.part.0+0x90/0x90 [ 1684.853237] p9_client_prepare_req.part.0+0x612/0xac0 [ 1684.854349] p9_client_rpc+0x220/0x1370 [ 1684.855191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1684.856292] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1684.857421] ? pipe_poll+0x21b/0x800 [ 1684.858196] ? p9_fd_close+0x4a0/0x4a0 [ 1684.859025] ? wait_for_partner+0x3c0/0x3c0 [ 1684.859954] ? p9_fd_poll+0x1e0/0x2c0 [ 1684.860777] ? p9_fd_create+0x357/0x4a0 [ 1684.861623] ? p9_conn_create+0x510/0x510 [ 1684.862500] ? p9_client_create+0x798/0x1230 [ 1684.863427] ? kfree+0xd7/0x340 [ 1684.864113] ? do_raw_spin_unlock+0x4f/0x220 [ 1684.865045] p9_client_create+0xa76/0x1230 [ 1684.865943] ? p9_client_flush+0x430/0x430 [ 1684.866830] ? trace_hardirqs_on+0x5b/0x180 [ 1684.867729] ? lockdep_init_map_type+0x2c7/0x780 [ 1684.868775] ? __raw_spin_lock_init+0x36/0x110 [ 1684.869738] v9fs_session_init+0x1dd/0x1680 [ 1684.870665] ? lock_release+0x680/0x680 [ 1684.871488] ? kmem_cache_alloc_trace+0x151/0x320 [ 1684.872515] ? v9fs_show_options+0x690/0x690 11:41:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1684.873455] ? trace_hardirqs_on+0x5b/0x180 [ 1684.874577] ? kasan_unpoison_shadow+0x33/0x50 [ 1684.875543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1684.876623] v9fs_mount+0x79/0x8f0 [ 1684.877380] ? v9fs_write_inode+0x60/0x60 [ 1684.878262] legacy_get_tree+0x105/0x220 [ 1684.879134] vfs_get_tree+0x8e/0x300 [ 1684.879925] path_mount+0x1490/0x21e0 [ 1684.880753] ? strncpy_from_user+0x9e/0x470 [ 1684.881670] ? finish_automount+0xa90/0xa90 [ 1684.882590] ? getname_flags.part.0+0x1dd/0x4f0 [ 1684.883578] ? _copy_from_user+0xfb/0x1b0 [ 1684.884475] __x64_sys_mount+0x282/0x300 [ 1684.885343] ? copy_mnt_ns+0xa00/0xa00 [ 1684.886176] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1684.887291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.888397] do_syscall_64+0x33/0x40 [ 1684.889193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1684.890289] RIP: 0033:0x7f2d92adab19 [ 1684.891085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.894977] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1684.896704] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1684.898323] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1684.899816] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1684.901348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1684.902838] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1684.906837] FAULT_INJECTION: forcing a failure. [ 1684.906837] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.909254] CPU: 1 PID: 9371 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1684.910706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.912447] Call Trace: [ 1684.913009] dump_stack+0x107/0x167 [ 1684.913786] should_fail.cold+0x5/0xa [ 1684.914601] ? security_file_alloc+0x34/0x170 [ 1684.915542] should_failslab+0x5/0x20 [ 1684.916361] kmem_cache_alloc+0x5b/0x310 [ 1684.917235] security_file_alloc+0x34/0x170 [ 1684.918150] __alloc_file+0xb7/0x320 11:41:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1684.918919] alloc_empty_file+0x6d/0x170 [ 1684.919938] alloc_file+0x5e/0x5a0 [ 1684.920705] alloc_file_pseudo+0x16a/0x250 [ 1684.921607] ? alloc_file+0x5a0/0x5a0 [ 1684.922420] ? do_raw_spin_unlock+0x4f/0x220 [ 1684.923358] ? _raw_spin_unlock+0x1a/0x30 [ 1684.924234] ? alloc_fd+0x2e7/0x670 [ 1684.925032] sock_alloc_file+0x4f/0x1a0 [ 1684.925873] __sys_socket+0x13d/0x200 [ 1684.926669] ? fput_many+0x2f/0x1a0 [ 1684.927427] ? move_addr_to_kernel+0x70/0x70 [ 1684.928352] ? ksys_write+0x1a9/0x260 [ 1684.929160] ? __ia32_sys_read+0xb0/0xb0 [ 1684.930016] __x64_sys_socket+0x6f/0xb0 [ 1684.930845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.931918] do_syscall_64+0x33/0x40 [ 1684.932712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1684.933780] RIP: 0033:0x7f4930b3f197 [ 1684.934556] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.938443] RSP: 002b:00007f492e091098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1684.940053] RAX: ffffffffffffffda RBX: 00007f4930c51020 RCX: 00007f4930b3f197 [ 1684.941573] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1684.943094] RBP: 00007f492e0921d0 R08: 0000000000000000 R09: 0000000000000000 [ 1684.944596] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1684.946091] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1684.987669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:41:21 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 15) [ 1685.037556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.039262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.040953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1685.059333] FAULT_INJECTION: forcing a failure. [ 1685.059333] name failslab, interval 1, probability 0, space 0, times 0 11:41:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1685.061845] CPU: 1 PID: 9378 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1685.063538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1685.065261] Call Trace: [ 1685.065829] dump_stack+0x107/0x167 [ 1685.066614] should_fail.cold+0x5/0xa [ 1685.067427] ? create_object.isra.0+0x3a/0xa30 [ 1685.068409] should_failslab+0x5/0x20 [ 1685.069213] kmem_cache_alloc+0x5b/0x310 [ 1685.070072] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1685.071147] create_object.isra.0+0x3a/0xa30 [ 1685.072091] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1685.073183] kmem_cache_alloc_trace+0x151/0x320 [ 1685.074182] ? v9fs_write_inode+0x60/0x60 [ 1685.075042] v9fs_mount+0x5a/0x8f0 [ 1685.075808] ? v9fs_write_inode+0x60/0x60 [ 1685.076701] legacy_get_tree+0x105/0x220 11:41:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x0) [ 1685.077575] vfs_get_tree+0x8e/0x300 [ 1685.078520] path_mount+0x1490/0x21e0 [ 1685.079342] ? strncpy_from_user+0x9e/0x470 [ 1685.080255] ? finish_automount+0xa90/0xa90 [ 1685.081170] ? getname_flags.part.0+0x1dd/0x4f0 [ 1685.082158] ? _copy_from_user+0xfb/0x1b0 [ 1685.083043] __x64_sys_mount+0x282/0x300 [ 1685.083908] ? copy_mnt_ns+0xa00/0xa00 [ 1685.084756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1685.085855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1685.086937] do_syscall_64+0x33/0x40 [ 1685.087727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1685.088791] RIP: 0033:0x7fa3b8173b19 [ 1685.089585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1685.093498] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1685.095105] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1685.096604] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1685.098075] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1685.099576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1685.101089] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 11:41:21 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 14) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:41:21 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b53a79c01949d4f220c7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e17e2cfa917e79a2a35bb2b"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:41:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 41) 11:41:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1685.202638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1685.206507] FAULT_INJECTION: forcing a failure. [ 1685.206507] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.208945] CPU: 1 PID: 9385 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1685.210402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1685.212138] Call Trace: [ 1685.212724] dump_stack+0x107/0x167 [ 1685.213507] should_fail.cold+0x5/0xa [ 1685.214321] ? create_object.isra.0+0x3a/0xa30 [ 1685.215299] should_failslab+0x5/0x20 [ 1685.216123] kmem_cache_alloc+0x5b/0x310 [ 1685.216982] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1685.218130] create_object.isra.0+0x3a/0xa30 [ 1685.219041] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1685.220131] kmem_cache_alloc+0x159/0x310 [ 1685.221023] security_file_alloc+0x34/0x170 [ 1685.221936] __alloc_file+0xb7/0x320 [ 1685.222717] alloc_empty_file+0x6d/0x170 [ 1685.223569] alloc_file+0x5e/0x5a0 [ 1685.224316] alloc_file_pseudo+0x16a/0x250 [ 1685.225222] ? alloc_file+0x5a0/0x5a0 [ 1685.226026] ? do_raw_spin_unlock+0x4f/0x220 [ 1685.226946] ? _raw_spin_unlock+0x1a/0x30 [ 1685.227803] ? alloc_fd+0x2e7/0x670 [ 1685.228579] sock_alloc_file+0x4f/0x1a0 [ 1685.229412] __sys_socket+0x13d/0x200 [ 1685.230199] ? fput_many+0x2f/0x1a0 [ 1685.230966] ? move_addr_to_kernel+0x70/0x70 [ 1685.231871] ? ksys_write+0x1a9/0x260 [ 1685.232674] ? __ia32_sys_read+0xb0/0xb0 [ 1685.233534] __x64_sys_socket+0x6f/0xb0 [ 1685.234360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1685.235431] do_syscall_64+0x33/0x40 [ 1685.236213] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1685.237306] RIP: 0033:0x7f4930b3f197 [ 1685.238104] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1685.241964] RSP: 002b:00007f492e0b2098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1685.243581] RAX: ffffffffffffffda RBX: 00007f4930c50f60 RCX: 00007f4930b3f197 [ 1685.245119] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1685.246599] RBP: 00007f492e0b31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1685.248127] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 1685.249650] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 1685.276582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:41:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 48) [ 1685.318700] FAULT_INJECTION: forcing a failure. [ 1685.318700] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.321385] CPU: 0 PID: 9389 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1685.322768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1685.324404] Call Trace: [ 1685.324918] dump_stack+0x107/0x167 [ 1685.325610] should_fail.cold+0x5/0xa [ 1685.326369] ? create_object.isra.0+0x3a/0xa30 [ 1685.327283] should_failslab+0x5/0x20 [ 1685.328061] kmem_cache_alloc+0x5b/0x310 [ 1685.328888] create_object.isra.0+0x3a/0xa30 [ 1685.329808] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1685.330791] __kmalloc+0x16e/0x390 [ 1685.331484] p9_fcall_init+0x97/0x290 [ 1685.332245] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1685.333237] p9_client_rpc+0x220/0x1370 [ 1685.334028] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1685.335245] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1685.336551] ? pipe_poll+0x21b/0x800 [ 1685.337455] ? p9_fd_close+0x4a0/0x4a0 [ 1685.338406] ? wait_for_partner+0x3c0/0x3c0 [ 1685.339460] ? p9_fd_poll+0x1e0/0x2c0 [ 1685.340388] ? p9_fd_create+0x357/0x4a0 [ 1685.341336] ? p9_conn_create+0x510/0x510 [ 1685.342320] ? p9_client_create+0x798/0x1230 [ 1685.343335] ? kfree+0xd7/0x340 [ 1685.343988] ? do_raw_spin_unlock+0x4f/0x220 [ 1685.344193] FAULT_INJECTION: forcing a failure. [ 1685.344193] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.344877] p9_client_create+0xa76/0x1230 [ 1685.348286] ? p9_client_flush+0x430/0x430 [ 1685.349334] ? trace_hardirqs_on+0x5b/0x180 [ 1685.350397] ? lockdep_init_map_type+0x2c7/0x780 [ 1685.351554] ? __raw_spin_lock_init+0x36/0x110 [ 1685.352476] v9fs_session_init+0x1dd/0x1680 [ 1685.353479] ? kmem_cache_alloc_trace+0x151/0x320 [ 1685.354626] ? v9fs_show_options+0x690/0x690 [ 1685.355668] ? trace_hardirqs_on+0x5b/0x180 [ 1685.356701] ? kasan_unpoison_shadow+0x33/0x50 [ 1685.357786] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1685.358982] v9fs_mount+0x79/0x8f0 [ 1685.359821] ? v9fs_write_inode+0x60/0x60 [ 1685.360805] legacy_get_tree+0x105/0x220 [ 1685.361777] vfs_get_tree+0x8e/0x300 [ 1685.362656] path_mount+0x1490/0x21e0 [ 1685.363563] ? strncpy_from_user+0x9e/0x470 [ 1685.364609] ? finish_automount+0xa90/0xa90 [ 1685.365585] ? getname_flags.part.0+0x1dd/0x4f0 [ 1685.366477] ? _copy_from_user+0xfb/0x1b0 [ 1685.367270] __x64_sys_mount+0x282/0x300 [ 1685.368059] ? copy_mnt_ns+0xa00/0xa00 [ 1685.368874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1685.369907] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1685.370910] do_syscall_64+0x33/0x40 [ 1685.371597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1685.372574] RIP: 0033:0x7f2d92adab19 [ 1685.373296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1685.376802] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1685.378234] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1685.379555] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1685.380886] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1685.382230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1685.383720] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1685.385420] CPU: 1 PID: 9392 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1685.386887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1685.388641] Call Trace: [ 1685.389214] dump_stack+0x107/0x167 [ 1685.389992] should_fail.cold+0x5/0xa [ 1685.390413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.390812] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1685.392332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.393515] should_failslab+0x5/0x20 [ 1685.393537] kmem_cache_alloc+0x5b/0x310 [ 1685.393569] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1685.397564] idr_get_free+0x4b5/0x8f0 [ 1685.398359] idr_alloc_u32+0x170/0x2d0 [ 1685.398810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1685.399186] ? __fprop_inc_percpu_max+0x130/0x130 [ 1685.399209] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1685.399239] ? lock_release+0x680/0x680 [ 1685.403596] idr_alloc+0xc2/0x130 [ 1685.404323] ? idr_alloc_u32+0x2d0/0x2d0 [ 1685.405172] ? rwlock_bug.part.0+0x90/0x90 [ 1685.406065] p9_client_prepare_req.part.0+0x612/0xac0 [ 1685.407143] p9_client_rpc+0x220/0x1370 [ 1685.407980] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1685.409109] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1685.410225] ? pipe_poll+0x21b/0x800 [ 1685.411004] ? p9_fd_close+0x4a0/0x4a0 [ 1685.411827] ? wait_for_partner+0x3c0/0x3c0 [ 1685.412744] ? p9_fd_poll+0x1e0/0x2c0 [ 1685.413553] ? p9_fd_create+0x357/0x4a0 [ 1685.414391] ? p9_conn_create+0x510/0x510 [ 1685.415257] ? p9_client_create+0x798/0x1230 [ 1685.416192] ? kfree+0xd7/0x340 [ 1685.416896] ? do_raw_spin_unlock+0x4f/0x220 [ 1685.417849] p9_client_create+0xa76/0x1230 [ 1685.418750] ? p9_client_flush+0x430/0x430 [ 1685.419633] ? trace_hardirqs_on+0x5b/0x180 [ 1685.420560] ? lockdep_init_map_type+0x2c7/0x780 [ 1685.421543] ? __raw_spin_lock_init+0x36/0x110 [ 1685.422506] v9fs_session_init+0x1dd/0x1680 [ 1685.423415] ? lock_release+0x680/0x680 [ 1685.424270] ? kmem_cache_alloc_trace+0x151/0x320 [ 1685.425285] ? v9fs_show_options+0x690/0x690 [ 1685.426225] ? trace_hardirqs_on+0x5b/0x180 [ 1685.427117] ? kasan_unpoison_shadow+0x33/0x50 [ 1685.428064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1685.429142] v9fs_mount+0x79/0x8f0 [ 1685.429888] ? v9fs_write_inode+0x60/0x60 [ 1685.430751] legacy_get_tree+0x105/0x220 [ 1685.431602] vfs_get_tree+0x8e/0x300 [ 1685.432394] path_mount+0x1490/0x21e0 [ 1685.433198] ? strncpy_from_user+0x9e/0x470 [ 1685.434102] ? finish_automount+0xa90/0xa90 [ 1685.434998] ? getname_flags.part.0+0x1dd/0x4f0 [ 1685.435979] ? _copy_from_user+0xfb/0x1b0 [ 1685.436859] __x64_sys_mount+0x282/0x300 [ 1685.437708] ? copy_mnt_ns+0xa00/0xa00 [ 1685.438522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1685.439609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1685.440695] do_syscall_64+0x33/0x40 [ 1685.441485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1685.442557] RIP: 0033:0x7f644830fb19 [ 1685.443348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1685.447231] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1685.448830] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1685.450328] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1685.451819] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1685.453325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1685.454821] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1685.517508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.519125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.520792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:41:35 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 42) [ 1699.424889] FAULT_INJECTION: forcing a failure. [ 1699.424889] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.426427] CPU: 1 PID: 9406 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1699.427334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.428444] Call Trace: [ 1699.428802] dump_stack+0x107/0x167 [ 1699.429286] should_fail.cold+0x5/0xa [ 1699.429800] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1699.430567] should_failslab+0x5/0x20 [ 1699.431078] kmem_cache_alloc+0x5b/0x310 [ 1699.431621] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1699.432363] idr_get_free+0x4b5/0x8f0 [ 1699.432890] idr_alloc_u32+0x170/0x2d0 [ 1699.433412] ? __fprop_inc_percpu_max+0x130/0x130 [ 1699.434064] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1699.434776] ? lock_release+0x680/0x680 [ 1699.435316] idr_alloc+0xc2/0x130 [ 1699.435788] ? idr_alloc_u32+0x2d0/0x2d0 [ 1699.436323] ? rwlock_bug.part.0+0x90/0x90 [ 1699.436899] p9_client_prepare_req.part.0+0x612/0xac0 [ 1699.437600] p9_client_rpc+0x220/0x1370 [ 1699.438126] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.438834] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1699.439553] ? pipe_poll+0x21b/0x800 [ 1699.440052] ? p9_fd_close+0x4a0/0x4a0 [ 1699.440574] ? wait_for_partner+0x3c0/0x3c0 [ 1699.441155] ? p9_fd_poll+0x1e0/0x2c0 [ 1699.441663] ? p9_fd_create+0x357/0x4a0 [ 1699.442196] ? p9_conn_create+0x510/0x510 [ 1699.442742] ? p9_client_create+0x798/0x1230 [ 1699.443320] ? kfree+0xd7/0x340 [ 1699.443751] ? do_raw_spin_unlock+0x4f/0x220 [ 1699.444341] p9_client_create+0xa76/0x1230 [ 1699.444911] ? p9_client_flush+0x430/0x430 [ 1699.445473] ? trace_hardirqs_on+0x5b/0x180 [ 1699.446051] ? lockdep_init_map_type+0x2c7/0x780 [ 1699.446683] ? __raw_spin_lock_init+0x36/0x110 [ 1699.447294] v9fs_session_init+0x1dd/0x1680 [ 1699.447872] ? lock_release+0x680/0x680 [ 1699.448402] ? kmem_cache_alloc_trace+0x151/0x320 [ 1699.449055] ? v9fs_show_options+0x690/0x690 [ 1699.449651] ? trace_hardirqs_on+0x5b/0x180 [ 1699.450234] ? kasan_unpoison_shadow+0x33/0x50 [ 1699.450847] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1699.451525] v9fs_mount+0x79/0x8f0 [ 1699.452000] ? v9fs_write_inode+0x60/0x60 [ 1699.452558] legacy_get_tree+0x105/0x220 [ 1699.453095] vfs_get_tree+0x8e/0x300 [ 1699.453593] path_mount+0x1490/0x21e0 [ 1699.454112] ? strncpy_from_user+0x9e/0x470 [ 1699.454679] ? finish_automount+0xa90/0xa90 [ 1699.455258] ? getname_flags.part.0+0x1dd/0x4f0 [ 1699.455876] ? _copy_from_user+0xfb/0x1b0 [ 1699.456435] __x64_sys_mount+0x282/0x300 [ 1699.456988] ? copy_mnt_ns+0xa00/0xa00 [ 1699.457512] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.458229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.458918] do_syscall_64+0x33/0x40 [ 1699.459408] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.460097] RIP: 0033:0x7f2d92adab19 [ 1699.460624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.463066] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1699.464077] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1699.465031] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1699.465967] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1699.466898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1699.467835] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1699.475733] FAULT_INJECTION: forcing a failure. [ 1699.475733] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.477245] CPU: 1 PID: 9413 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1699.478156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.479242] Call Trace: [ 1699.479591] dump_stack+0x107/0x167 [ 1699.480077] should_fail.cold+0x5/0xa [ 1699.480585] should_failslab+0x5/0x20 [ 1699.481105] __kmalloc_track_caller+0x79/0x370 [ 1699.481714] ? v9fs_session_init+0xa7/0x1680 [ 1699.482294] ? kernel_text_address+0xf2/0x120 [ 1699.482887] kstrdup+0x36/0x70 [ 1699.483309] v9fs_session_init+0xa7/0x1680 [ 1699.483872] ? lock_release+0x680/0x680 [ 1699.484398] ? find_held_lock+0x2c/0x110 [ 1699.484957] ? kmem_cache_alloc_trace+0x151/0x320 [ 1699.485588] ? v9fs_show_options+0x690/0x690 [ 1699.486167] ? trace_hardirqs_on+0x5b/0x180 [ 1699.486731] ? kasan_unpoison_shadow+0x33/0x50 [ 1699.487325] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1699.487989] v9fs_mount+0x79/0x8f0 [ 1699.488458] ? v9fs_write_inode+0x60/0x60 [ 1699.488760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1699.489014] legacy_get_tree+0x105/0x220 [ 1699.489042] vfs_get_tree+0x8e/0x300 [ 1699.491877] path_mount+0x1490/0x21e0 [ 1699.492380] ? strncpy_from_user+0x9e/0x470 [ 1699.492950] ? finish_automount+0xa90/0xa90 [ 1699.493517] ? getname_flags.part.0+0x1dd/0x4f0 [ 1699.494122] ? _copy_from_user+0xfb/0x1b0 [ 1699.494664] __x64_sys_mount+0x282/0x300 [ 1699.495195] ? copy_mnt_ns+0xa00/0xa00 [ 1699.495705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.496396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.497090] do_syscall_64+0x33/0x40 [ 1699.497583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.498259] RIP: 0033:0x7fa3b8173b19 [ 1699.498758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.501185] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1699.502172] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1699.503110] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1699.504041] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1699.504978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1699.505915] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1699.508266] FAULT_INJECTION: forcing a failure. [ 1699.508266] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.509752] CPU: 1 PID: 9407 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1699.510637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.511732] Call Trace: [ 1699.512395] dump_stack+0x107/0x167 [ 1699.513044] should_fail.cold+0x5/0xa [ 1699.513643] ? create_object.isra.0+0x3a/0xa30 [ 1699.514236] should_failslab+0x5/0x20 [ 1699.514736] kmem_cache_alloc+0x5b/0x310 [ 1699.515264] create_object.isra.0+0x3a/0xa30 [ 1699.515842] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1699.516500] kmem_cache_alloc+0x159/0x310 [ 1699.517062] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1699.517792] idr_get_free+0x4b5/0x8f0 [ 1699.518297] idr_alloc_u32+0x170/0x2d0 [ 1699.518809] ? __fprop_inc_percpu_max+0x130/0x130 [ 1699.519429] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1699.520113] ? lock_release+0x680/0x680 [ 1699.520642] idr_alloc+0xc2/0x130 [ 1699.521104] ? idr_alloc_u32+0x2d0/0x2d0 [ 1699.521633] ? rwlock_bug.part.0+0x90/0x90 [ 1699.522190] p9_client_prepare_req.part.0+0x612/0xac0 [ 1699.523011] p9_client_rpc+0x220/0x1370 [ 1699.523546] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.524232] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1699.524935] ? pipe_poll+0x21b/0x800 [ 1699.525427] ? p9_fd_close+0x4a0/0x4a0 [ 1699.525942] ? wait_for_partner+0x3c0/0x3c0 [ 1699.526668] ? p9_fd_poll+0x1e0/0x2c0 11:41:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:41:35 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 49) 11:41:35 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:41:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:41:35 executing program 0: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:41:35 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 16) 11:41:35 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) [ 1699.527405] ? p9_fd_create+0x357/0x4a0 [ 1699.528035] ? p9_conn_create+0x510/0x510 [ 1699.528598] ? p9_client_create+0x798/0x1230 [ 1699.529161] ? kfree+0xd7/0x340 [ 1699.529601] ? do_raw_spin_unlock+0x4f/0x220 [ 1699.530177] p9_client_create+0xa76/0x1230 [ 1699.530724] ? p9_client_flush+0x430/0x430 [ 1699.531276] ? trace_hardirqs_on+0x5b/0x180 [ 1699.531855] ? lockdep_init_map_type+0x2c7/0x780 [ 1699.532473] ? __raw_spin_lock_init+0x36/0x110 [ 1699.533098] v9fs_session_init+0x1dd/0x1680 [ 1699.533653] ? lock_release+0x680/0x680 [ 1699.534183] ? kmem_cache_alloc_trace+0x151/0x320 [ 1699.534806] ? v9fs_show_options+0x690/0x690 [ 1699.535379] ? trace_hardirqs_on+0x5b/0x180 [ 1699.535930] ? kasan_unpoison_shadow+0x33/0x50 [ 1699.536517] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1699.537177] v9fs_mount+0x79/0x8f0 [ 1699.537642] ? v9fs_write_inode+0x60/0x60 [ 1699.538175] legacy_get_tree+0x105/0x220 [ 1699.538705] vfs_get_tree+0x8e/0x300 [ 1699.539184] path_mount+0x1490/0x21e0 [ 1699.539675] ? strncpy_from_user+0x9e/0x470 [ 1699.540223] ? finish_automount+0xa90/0xa90 [ 1699.540792] ? getname_flags.part.0+0x1dd/0x4f0 [ 1699.541391] ? _copy_from_user+0xfb/0x1b0 [ 1699.541925] __x64_sys_mount+0x282/0x300 [ 1699.542283] FAULT_INJECTION: forcing a failure. [ 1699.542283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1699.542444] ? copy_mnt_ns+0xa00/0xa00 [ 1699.542460] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.542473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.542494] do_syscall_64+0x33/0x40 [ 1699.542507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.542515] RIP: 0033:0x7f644830fb19 [ 1699.548519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.550888] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1699.551869] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1699.552792] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1699.553716] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1699.554623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1699.555537] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1699.556475] CPU: 0 PID: 9422 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1699.557984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.559757] Call Trace: [ 1699.560327] dump_stack+0x107/0x167 [ 1699.561218] should_fail.cold+0x5/0xa [ 1699.562040] __alloc_pages_nodemask+0x182/0x600 [ 1699.563031] ? add_mm_counter_fast+0x220/0x220 [ 1699.564005] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1699.565297] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1699.566415] ? lock_downgrade+0x6d0/0x6d0 [ 1699.567289] ? mark_held_locks+0x9e/0xe0 [ 1699.568150] alloc_pages_vma+0xbb/0x410 [ 1699.569006] handle_mm_fault+0x152f/0x3500 [ 1699.569914] ? lock_downgrade+0x6d0/0x6d0 [ 1699.570794] ? alloc_file+0x5a0/0x5a0 [ 1699.571602] ? __pmd_alloc+0x630/0x630 [ 1699.572435] ? vmacache_find+0x55/0x2a0 [ 1699.573294] do_user_addr_fault+0x56e/0xc60 [ 1699.574218] exc_page_fault+0xa2/0x1a0 fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 15) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1699.575050] ? asm_exc_page_fault+0x8/0x30 [ 1699.576125] asm_exc_page_fault+0x1e/0x30 [ 1699.577014] RIP: 0033:0x7f4930adb858 [ 1699.577805] Code: b9 0c 00 00 00 89 57 50 31 c9 89 d2 44 89 f7 4c 8d 44 24 14 c7 44 24 1c 00 00 00 00 48 c7 44 24 14 00 00 00 00 66 89 44 24 14 e3 4f 01 00 48 89 c6 8b 43 50 48 39 f0 74 48 40 84 ed 0f 85 79 [ 1699.581727] RSP: 002b:00007f492e091000 EFLAGS: 00010246 [ 1699.582851] RAX: 0000000000000010 RBX: 00007f492e0910f0 RCX: 0000000000000000 [ 1699.584357] RDX: 0000000000000020 RSI: 00007f492e091140 RDI: 0000000000000007 [ 1699.585885] RBP: 0000000000000001 R08: 00007f492e091014 R09: 000000000000000c [ 1699.587407] R10: 00007f4930b97800 R11: 00007f4930b97801 R12: 00007f492e091068 [ 1699.588946] R13: 00007f492e091140 R14: 0000000000000007 R15: 0000000000000000 [ 1699.592854] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 11:41:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1699.616710] FAULT_INJECTION: forcing a failure. [ 1699.616710] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.618207] CPU: 1 PID: 9427 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1699.619065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.620115] Call Trace: [ 1699.620458] dump_stack+0x107/0x167 [ 1699.620927] should_fail.cold+0x5/0xa [ 1699.621403] ? create_object.isra.0+0x3a/0xa30 [ 1699.621968] should_failslab+0x5/0x20 [ 1699.622442] kmem_cache_alloc+0x5b/0x310 [ 1699.622965] create_object.isra.0+0x3a/0xa30 [ 1699.623520] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1699.624162] __kmalloc_track_caller+0x177/0x370 [ 1699.624768] ? v9fs_session_init+0xa7/0x1680 [ 1699.625333] ? kernel_text_address+0xf2/0x120 [ 1699.625894] kstrdup+0x36/0x70 [ 1699.626295] v9fs_session_init+0xa7/0x1680 [ 1699.626829] ? lock_release+0x680/0x680 [ 1699.627325] ? find_held_lock+0x2c/0x110 [ 1699.627831] ? kmem_cache_alloc_trace+0x151/0x320 [ 1699.628456] ? v9fs_show_options+0x690/0x690 [ 1699.629021] ? trace_hardirqs_on+0x5b/0x180 [ 1699.629571] ? kasan_unpoison_shadow+0x33/0x50 [ 1699.630143] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1699.630779] v9fs_mount+0x79/0x8f0 [ 1699.631215] ? v9fs_write_inode+0x60/0x60 [ 1699.631739] legacy_get_tree+0x105/0x220 [ 1699.632251] vfs_get_tree+0x8e/0x300 [ 1699.632720] path_mount+0x1490/0x21e0 [ 1699.633192] ? strncpy_from_user+0x9e/0x470 [ 1699.633733] ? finish_automount+0xa90/0xa90 [ 1699.634277] ? getname_flags.part.0+0x1dd/0x4f0 [ 1699.634852] ? _copy_from_user+0xfb/0x1b0 [ 1699.635371] __x64_sys_mount+0x282/0x300 [ 1699.635873] ? copy_mnt_ns+0xa00/0xa00 [ 1699.636367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.637032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.637676] do_syscall_64+0x33/0x40 [ 1699.638140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.638780] RIP: 0033:0x7fa3b8173b19 [ 1699.639242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.641530] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1699.642476] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1699.643370] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1699.644264] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1699.645145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1699.646041] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 11:41:35 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 17) 11:41:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x48, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:41:35 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 43) [ 1699.724605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1699.732418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1699.737428] FAULT_INJECTION: forcing a failure. [ 1699.737428] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.739797] CPU: 0 PID: 9438 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1699.741243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.742980] Call Trace: [ 1699.743545] dump_stack+0x107/0x167 [ 1699.744315] should_fail.cold+0x5/0xa [ 1699.745117] ? ___slab_alloc+0x155/0x700 [ 1699.745967] ? create_object.isra.0+0x3a/0xa30 [ 1699.746919] should_failslab+0x5/0x20 [ 1699.747710] kmem_cache_alloc+0x5b/0x310 [ 1699.748577] create_object.isra.0+0x3a/0xa30 [ 1699.749495] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1699.750569] kmem_cache_alloc+0x159/0x310 [ 1699.751442] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1699.752625] idr_get_free+0x4b5/0x8f0 [ 1699.753438] idr_alloc_u32+0x170/0x2d0 [ 1699.754259] ? __fprop_inc_percpu_max+0x130/0x130 [ 1699.755263] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1699.756386] ? lock_release+0x680/0x680 [ 1699.757273] idr_alloc+0xc2/0x130 [ 1699.758009] ? idr_alloc_u32+0x2d0/0x2d0 [ 1699.758848] ? rwlock_bug.part.0+0x90/0x90 [ 1699.759755] p9_client_prepare_req.part.0+0x612/0xac0 [ 1699.760864] p9_client_rpc+0x220/0x1370 [ 1699.761696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.762798] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1699.763915] ? pipe_poll+0x21b/0x800 [ 1699.764744] ? p9_fd_close+0x4a0/0x4a0 [ 1699.765702] ? wait_for_partner+0x3c0/0x3c0 [ 1699.766645] ? p9_fd_poll+0x1e0/0x2c0 [ 1699.767451] ? p9_fd_create+0x357/0x4a0 [ 1699.768284] ? p9_conn_create+0x510/0x510 [ 1699.769166] ? p9_client_create+0x798/0x1230 [ 1699.770092] ? kfree+0xd7/0x340 [ 1699.770777] ? do_raw_spin_unlock+0x4f/0x220 [ 1699.771704] p9_client_create+0xa76/0x1230 [ 1699.772608] ? p9_client_flush+0x430/0x430 [ 1699.773497] ? trace_hardirqs_on+0x5b/0x180 [ 1699.774406] ? lockdep_init_map_type+0x2c7/0x780 [ 1699.775395] ? __raw_spin_lock_init+0x36/0x110 [ 1699.776360] v9fs_session_init+0x1dd/0x1680 [ 1699.777281] ? lock_release+0x680/0x680 [ 1699.778124] ? kmem_cache_alloc_trace+0x151/0x320 [ 1699.779135] ? v9fs_show_options+0x690/0x690 [ 1699.780067] ? trace_hardirqs_on+0x5b/0x180 [ 1699.780991] ? kasan_unpoison_shadow+0x33/0x50 [ 1699.781945] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1699.783017] v9fs_mount+0x79/0x8f0 [ 1699.783771] ? v9fs_write_inode+0x60/0x60 [ 1699.784656] legacy_get_tree+0x105/0x220 [ 1699.785521] vfs_get_tree+0x8e/0x300 [ 1699.786309] path_mount+0x1490/0x21e0 [ 1699.787120] ? strncpy_from_user+0x9e/0x470 [ 1699.788024] ? finish_automount+0xa90/0xa90 [ 1699.788975] ? getname_flags.part.0+0x1dd/0x4f0 [ 1699.789953] ? _copy_from_user+0xfb/0x1b0 [ 1699.790834] __x64_sys_mount+0x282/0x300 [ 1699.791691] ? copy_mnt_ns+0xa00/0xa00 [ 1699.792516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.793628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.794728] do_syscall_64+0x33/0x40 [ 1699.795511] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.796591] RIP: 0033:0x7f2d92adab19 [ 1699.797378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.801245] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1699.802839] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1699.804351] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1699.805993] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1699.807493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1699.808996] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1699.817148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.818669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.829477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.831226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.858485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.859384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.859516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1699.863770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1699.871643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:41:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 44) 11:41:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}}, 0x0) unshare(0x48020200) [ 1712.922541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:41:49 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 50) 11:41:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x0) 11:41:49 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 18) 11:41:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:41:49 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:41:49 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 16) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1712.934765] FAULT_INJECTION: forcing a failure. [ 1712.934765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1712.936293] CPU: 0 PID: 9451 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1712.937173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.938233] Call Trace: [ 1712.938581] dump_stack+0x107/0x167 [ 1712.939047] should_fail.cold+0x5/0xa [ 1712.939536] _copy_from_user+0x2e/0x1b0 [ 1712.940046] move_addr_to_kernel.part.0+0x31/0x110 [ 1712.940665] __sys_sendto+0x166/0x320 [ 1712.941163] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1712.941757] ? __up_read+0x19f/0x7a0 [ 1712.942251] ? _down_write_nest_lock+0x160/0x160 [ 1712.942864] ? vmacache_find+0x55/0x2a0 [ 1712.943380] __x64_sys_sendto+0xdd/0x1b0 [ 1712.943901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.944557] do_syscall_64+0x33/0x40 [ 1712.945054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.945715] RIP: 0033:0x7f4930af08ac [ 1712.946185] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 1712.947287] FAULT_INJECTION: forcing a failure. [ 1712.947287] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.948530] RSP: 002b:00007f492e0b1fc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1712.951895] RAX: ffffffffffffffda RBX: 00007f492e0b20f0 RCX: 00007f4930af08ac [ 1712.952791] RDX: 0000000000000020 RSI: 00007f492e0b2140 RDI: 0000000000000007 [ 1712.953699] RBP: 0000000000000000 R08: 00007f492e0b2014 R09: 000000000000000c [ 1712.954607] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f492e0b2068 [ 1712.955495] R13: 00007f492e0b2140 R14: 0000000000000007 R15: 0000000000000000 [ 1712.956430] CPU: 1 PID: 9450 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1712.957882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.959645] Call Trace: [ 1712.959738] FAULT_INJECTION: forcing a failure. [ 1712.959738] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.960208] dump_stack+0x107/0x167 [ 1712.960231] should_fail.cold+0x5/0xa [ 1712.963175] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1712.964394] should_failslab+0x5/0x20 [ 1712.965212] kmem_cache_alloc+0x5b/0x310 [ 1712.966083] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1712.967265] idr_get_free+0x4b5/0x8f0 [ 1712.968077] idr_alloc_u32+0x170/0x2d0 [ 1712.968912] ? __fprop_inc_percpu_max+0x130/0x130 [ 1712.969929] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1712.971057] ? lock_release+0x680/0x680 [ 1712.971895] idr_alloc+0xc2/0x130 [ 1712.972624] ? idr_alloc_u32+0x2d0/0x2d0 [ 1712.973480] ? rwlock_bug.part.0+0x90/0x90 [ 1712.974380] p9_client_prepare_req.part.0+0x612/0xac0 [ 1712.975472] p9_client_rpc+0x220/0x1370 [ 1712.976321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.977439] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1712.978571] ? pipe_poll+0x21b/0x800 [ 1712.979351] ? p9_fd_close+0x4a0/0x4a0 [ 1712.980171] ? wait_for_partner+0x3c0/0x3c0 [ 1712.981085] ? p9_fd_poll+0x1e0/0x2c0 [ 1712.981891] ? p9_fd_create+0x357/0x4a0 [ 1712.982725] ? p9_conn_create+0x510/0x510 [ 1712.983595] ? p9_client_create+0x798/0x1230 [ 1712.984527] ? kfree+0xd7/0x340 [ 1712.985226] ? do_raw_spin_unlock+0x4f/0x220 [ 1712.986157] p9_client_create+0xa76/0x1230 [ 1712.987054] ? p9_client_flush+0x430/0x430 [ 1712.987943] ? trace_hardirqs_on+0x5b/0x180 [ 1712.988861] ? lockdep_init_map_type+0x2c7/0x780 [ 1712.989858] ? __raw_spin_lock_init+0x36/0x110 [ 1712.990835] v9fs_session_init+0x1dd/0x1680 [ 1712.991752] ? lock_release+0x680/0x680 [ 1712.992601] ? kmem_cache_alloc_trace+0x151/0x320 [ 1712.993629] ? v9fs_show_options+0x690/0x690 [ 1712.994565] ? trace_hardirqs_on+0x5b/0x180 [ 1712.995481] ? kasan_unpoison_shadow+0x33/0x50 [ 1712.996440] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1712.997532] v9fs_mount+0x79/0x8f0 [ 1712.998283] ? v9fs_write_inode+0x60/0x60 [ 1712.999153] legacy_get_tree+0x105/0x220 [ 1713.000013] vfs_get_tree+0x8e/0x300 [ 1713.000806] path_mount+0x1490/0x21e0 [ 1713.001619] ? strncpy_from_user+0x9e/0x470 [ 1713.002533] ? finish_automount+0xa90/0xa90 [ 1713.003453] ? getname_flags.part.0+0x1dd/0x4f0 [ 1713.004438] ? _copy_from_user+0xfb/0x1b0 [ 1713.005336] __x64_sys_mount+0x282/0x300 [ 1713.006200] ? copy_mnt_ns+0xa00/0xa00 [ 1713.007034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.008151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.009251] do_syscall_64+0x33/0x40 [ 1713.010042] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1713.011132] RIP: 0033:0x7f2d92adab19 [ 1713.011930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.015852] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1713.017472] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1713.018988] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1713.020501] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1713.022020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.023530] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1713.025083] CPU: 0 PID: 9458 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1713.025932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.026942] Call Trace: [ 1713.027267] dump_stack+0x107/0x167 [ 1713.027706] should_fail.cold+0x5/0xa [ 1713.028165] should_failslab+0x5/0x20 [ 1713.028623] __kmalloc_track_caller+0x79/0x370 [ 1713.029180] ? v9fs_session_init+0xe9/0x1680 [ 1713.029717] ? kernel_text_address+0xf2/0x120 [ 1713.030260] kstrdup+0x36/0x70 [ 1713.030647] v9fs_session_init+0xe9/0x1680 [ 1713.031154] ? lock_release+0x680/0x680 [ 1713.031635] ? find_held_lock+0x2c/0x110 [ 1713.032147] ? kmem_cache_alloc_trace+0x151/0x320 [ 1713.032739] ? v9fs_show_options+0x690/0x690 [ 1713.033273] ? trace_hardirqs_on+0x5b/0x180 [ 1713.033717] FAULT_INJECTION: forcing a failure. [ 1713.033717] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.033799] ? kasan_unpoison_shadow+0x33/0x50 [ 1713.036745] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.037381] v9fs_mount+0x79/0x8f0 [ 1713.037824] ? v9fs_write_inode+0x60/0x60 [ 1713.038340] legacy_get_tree+0x105/0x220 [ 1713.038845] vfs_get_tree+0x8e/0x300 [ 1713.039313] path_mount+0x1490/0x21e0 [ 1713.039791] ? strncpy_from_user+0x9e/0x470 [ 1713.040329] ? finish_automount+0xa90/0xa90 [ 1713.040876] ? getname_flags.part.0+0x1dd/0x4f0 [ 1713.041450] ? _copy_from_user+0xfb/0x1b0 [ 1713.041969] __x64_sys_mount+0x282/0x300 [ 1713.042470] ? copy_mnt_ns+0xa00/0xa00 [ 1713.042950] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.043594] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.044228] do_syscall_64+0x33/0x40 [ 1713.044686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1713.045330] RIP: 0033:0x7fa3b8173b19 [ 1713.045788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.048046] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1713.048988] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1713.049866] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1713.050742] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1713.051619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.052498] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1713.053409] CPU: 1 PID: 9457 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1713.054939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.056781] Call Trace: [ 1713.057375] dump_stack+0x107/0x167 [ 1713.058186] should_fail.cold+0x5/0xa [ 1713.059028] ? p9pdu_readf+0xadb/0x1d40 [ 1713.059908] should_failslab+0x5/0x20 [ 1713.060760] __kmalloc+0x72/0x390 [ 1713.061529] p9pdu_readf+0xadb/0x1d40 [ 1713.062374] ? pipe_poll+0x21b/0x800 [ 1713.063192] ? p9pdu_writef+0x100/0x100 [ 1713.064068] ? p9_fd_poll+0x1e0/0x2c0 [ 1713.064923] ? p9_fd_create+0x357/0x4a0 [ 1713.065801] ? p9_conn_create+0x510/0x510 [ 1713.066715] ? p9_client_create+0x798/0x1230 [ 1713.067685] ? kfree+0xd7/0x340 [ 1713.068410] ? do_raw_spin_unlock+0x4f/0x220 [ 1713.069403] p9_client_create+0xaee/0x1230 [ 1713.070342] ? p9_client_flush+0x430/0x430 [ 1713.071276] ? trace_hardirqs_on+0x5b/0x180 [ 1713.072238] ? lockdep_init_map_type+0x2c7/0x780 [ 1713.073309] ? __raw_spin_lock_init+0x36/0x110 [ 1713.074331] v9fs_session_init+0x1dd/0x1680 [ 1713.075291] ? lock_release+0x680/0x680 [ 1713.076178] ? kmem_cache_alloc_trace+0x151/0x320 [ 1713.077257] ? v9fs_show_options+0x690/0x690 [ 1713.078246] ? trace_hardirqs_on+0x5b/0x180 [ 1713.079197] ? kasan_unpoison_shadow+0x33/0x50 [ 1713.080202] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.081368] v9fs_mount+0x79/0x8f0 [ 1713.082156] ? v9fs_write_inode+0x60/0x60 [ 1713.083067] legacy_get_tree+0x105/0x220 [ 1713.083962] vfs_get_tree+0x8e/0x300 [ 1713.084790] path_mount+0x1490/0x21e0 [ 1713.085639] ? strncpy_from_user+0x9e/0x470 [ 1713.086592] ? finish_automount+0xa90/0xa90 [ 1713.087548] ? getname_flags.part.0+0x1dd/0x4f0 [ 1713.088572] ? _copy_from_user+0xfb/0x1b0 [ 1713.089501] __x64_sys_mount+0x282/0x300 [ 1713.090393] ? copy_mnt_ns+0xa00/0xa00 [ 1713.091256] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.092418] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.093573] do_syscall_64+0x33/0x40 [ 1713.094397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1713.095529] RIP: 0033:0x7f644830fb19 [ 1713.096354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.100419] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1713.102109] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1713.103689] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1713.105275] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1713.106852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.108427] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1713.124990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:41:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x68, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:41:49 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 19) [ 1713.143277] FAULT_INJECTION: forcing a failure. [ 1713.143277] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.145864] CPU: 1 PID: 9467 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1713.147373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.149196] Call Trace: [ 1713.149781] dump_stack+0x107/0x167 [ 1713.150578] should_fail.cold+0x5/0xa [ 1713.151420] ? create_object.isra.0+0x3a/0xa30 [ 1713.152421] should_failslab+0x5/0x20 [ 1713.153266] kmem_cache_alloc+0x5b/0x310 [ 1713.154156] create_object.isra.0+0x3a/0xa30 [ 1713.155124] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.156230] __kmalloc_track_caller+0x177/0x370 [ 1713.157258] ? v9fs_session_init+0xa7/0x1680 [ 1713.158224] ? kernel_text_address+0xf2/0x120 [ 1713.159205] kstrdup+0x36/0x70 [ 1713.159916] v9fs_session_init+0xa7/0x1680 [ 1713.160866] ? lock_release+0x680/0x680 [ 1713.161732] ? find_held_lock+0x2c/0x110 [ 1713.162624] ? kmem_cache_alloc_trace+0x151/0x320 [ 1713.163676] ? v9fs_show_options+0x690/0x690 [ 1713.164646] ? trace_hardirqs_on+0x5b/0x180 [ 1713.165599] ? kasan_unpoison_shadow+0x33/0x50 [ 1713.166587] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.167694] v9fs_mount+0x79/0x8f0 [ 1713.168472] ? v9fs_write_inode+0x60/0x60 [ 1713.169386] legacy_get_tree+0x105/0x220 [ 1713.170272] vfs_get_tree+0x8e/0x300 [ 1713.171086] path_mount+0x1490/0x21e0 [ 1713.171923] ? strncpy_from_user+0x9e/0x470 [ 1713.172889] ? finish_automount+0xa90/0xa90 [ 1713.173832] ? getname_flags.part.0+0x1dd/0x4f0 [ 1713.174855] ? _copy_from_user+0xfb/0x1b0 [ 1713.175766] __x64_sys_mount+0x282/0x300 [ 1713.176660] ? copy_mnt_ns+0xa00/0xa00 [ 1713.177522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.178678] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.179823] do_syscall_64+0x33/0x40 [ 1713.180634] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1713.181768] RIP: 0033:0x7fa3b8173b19 [ 1713.182577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.186591] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1713.188245] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1713.189802] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1713.191354] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1713.192928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.194484] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1713.219555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.221163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.225398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:41:49 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:41:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1713.230586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:41:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 45) [ 1713.240789] FAULT_INJECTION: forcing a failure. [ 1713.240789] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.242069] CPU: 0 PID: 9476 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1713.242841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.243789] Call Trace: [ 1713.244097] dump_stack+0x107/0x167 [ 1713.244518] should_fail.cold+0x5/0xa [ 1713.244964] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1713.245619] should_failslab+0x5/0x20 [ 1713.246052] kmem_cache_alloc+0x5b/0x310 [ 1713.246516] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1713.247150] idr_get_free+0x4b5/0x8f0 [ 1713.247587] idr_alloc_u32+0x170/0x2d0 [ 1713.248033] ? __fprop_inc_percpu_max+0x130/0x130 [ 1713.248585] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1713.249201] ? lock_release+0x680/0x680 [ 1713.249654] idr_alloc+0xc2/0x130 [ 1713.250051] ? idr_alloc_u32+0x2d0/0x2d0 [ 1713.250512] ? rwlock_bug.part.0+0x90/0x90 [ 1713.250994] p9_client_prepare_req.part.0+0x612/0xac0 [ 1713.251579] p9_client_rpc+0x220/0x1370 [ 1713.252027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.252624] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1713.253243] ? pipe_poll+0x21b/0x800 [ 1713.253665] ? p9_fd_close+0x4a0/0x4a0 [ 1713.254108] ? wait_for_partner+0x3c0/0x3c0 [ 1713.254596] ? p9_fd_poll+0x1e0/0x2c0 [ 1713.255031] ? p9_fd_create+0x357/0x4a0 [ 1713.255480] ? p9_conn_create+0x510/0x510 [ 1713.255945] ? p9_client_create+0x798/0x1230 [ 1713.256448] ? kfree+0xd7/0x340 [ 1713.256827] ? do_raw_spin_unlock+0x4f/0x220 [ 1713.257328] p9_client_create+0xa76/0x1230 [ 1713.257810] ? p9_client_flush+0x430/0x430 [ 1713.258294] ? trace_hardirqs_on+0x5b/0x180 [ 1713.258782] ? lockdep_init_map_type+0x2c7/0x780 [ 1713.259323] ? __raw_spin_lock_init+0x36/0x110 [ 1713.259845] v9fs_session_init+0x1dd/0x1680 [ 1713.260337] ? lock_release+0x680/0x680 [ 1713.260799] ? kmem_cache_alloc_trace+0x151/0x320 [ 1713.261346] ? v9fs_show_options+0x690/0x690 [ 1713.261846] ? trace_hardirqs_on+0x5b/0x180 [ 1713.262338] ? kasan_unpoison_shadow+0x33/0x50 [ 1713.262852] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.263431] v9fs_mount+0x79/0x8f0 [ 1713.263833] ? v9fs_write_inode+0x60/0x60 [ 1713.264302] legacy_get_tree+0x105/0x220 [ 1713.264770] vfs_get_tree+0x8e/0x300 [ 1713.265197] path_mount+0x1490/0x21e0 [ 1713.265633] ? strncpy_from_user+0x9e/0x470 [ 1713.266115] ? finish_automount+0xa90/0xa90 [ 1713.266607] ? getname_flags.part.0+0x1dd/0x4f0 [ 1713.267135] ? _copy_from_user+0xfb/0x1b0 [ 1713.267610] __x64_sys_mount+0x282/0x300 [ 1713.268068] ? copy_mnt_ns+0xa00/0xa00 [ 1713.268516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.269121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.269716] do_syscall_64+0x33/0x40 [ 1713.270142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1713.270725] RIP: 0033:0x7f2d92adab19 [ 1713.271149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.273243] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1713.274103] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1713.274908] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1713.275724] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1713.276534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.277345] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 11:41:49 executing program 0: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1713.282360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.285120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.286964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:41:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x74, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1713.326316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 11:41:49 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:41:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7a, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:41:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}}, 0x0) unshare(0x48020200) [ 1713.374659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.376275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.382237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1713.396549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1713.413489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.415133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.416961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1713.424411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:41:49 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b53a79c01949d4f220c7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e17e2cfa917e79a2a35bb2b6dbca9"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:41:49 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 51) 11:41:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1dd, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1713.469804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.471385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.473212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:41:49 executing program 0: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1713.541385] FAULT_INJECTION: forcing a failure. [ 1713.541385] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.543952] CPU: 1 PID: 9499 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1713.545391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.547133] Call Trace: [ 1713.547697] dump_stack+0x107/0x167 [ 1713.548458] should_fail.cold+0x5/0xa [ 1713.549279] ? create_object.isra.0+0x3a/0xa30 [ 1713.550252] should_failslab+0x5/0x20 [ 1713.551051] kmem_cache_alloc+0x5b/0x310 [ 1713.551907] create_object.isra.0+0x3a/0xa30 [ 1713.552838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.553898] __kmalloc+0x16e/0x390 [ 1713.554655] p9pdu_readf+0xadb/0x1d40 [ 1713.555465] ? pipe_poll+0x21b/0x800 [ 1713.556245] ? p9pdu_writef+0x100/0x100 [ 1713.557086] ? p9_fd_poll+0x1e0/0x2c0 [ 1713.557904] ? p9_fd_create+0x357/0x4a0 [ 1713.558735] ? p9_conn_create+0x510/0x510 [ 1713.559611] ? p9_client_create+0x798/0x1230 [ 1713.560541] ? kfree+0xd7/0x340 [ 1713.561238] ? do_raw_spin_unlock+0x4f/0x220 [ 1713.562156] p9_client_create+0xaee/0x1230 [ 1713.563043] ? p9_client_flush+0x430/0x430 [ 1713.563930] ? trace_hardirqs_on+0x5b/0x180 [ 1713.565013] ? lockdep_init_map_type+0x2c7/0x780 [ 1713.566114] ? __raw_spin_lock_init+0x36/0x110 [ 1713.567135] v9fs_session_init+0x1dd/0x1680 [ 1713.568102] ? lock_release+0x680/0x680 [ 1713.568983] ? kmem_cache_alloc_trace+0x151/0x320 [ 1713.570002] ? v9fs_show_options+0x690/0x690 [ 1713.570936] ? trace_hardirqs_on+0x5b/0x180 [ 1713.571847] ? kasan_unpoison_shadow+0x33/0x50 [ 1713.572815] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.574032] v9fs_mount+0x79/0x8f0 [ 1713.574759] ? v9fs_write_inode+0x60/0x60 [ 1713.575662] legacy_get_tree+0x105/0x220 [ 1713.576504] vfs_get_tree+0x8e/0x300 [ 1713.577378] path_mount+0x1490/0x21e0 [ 1713.578284] ? strncpy_from_user+0x9e/0x470 [ 1713.579208] ? finish_automount+0xa90/0xa90 [ 1713.580158] ? getname_flags.part.0+0x1dd/0x4f0 [ 1713.581233] ? _copy_from_user+0xfb/0x1b0 [ 1713.582126] __x64_sys_mount+0x282/0x300 [ 1713.582989] ? copy_mnt_ns+0xa00/0xa00 [ 1713.583818] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.585021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.586160] do_syscall_64+0x33/0x40 [ 1713.586978] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1713.588132] RIP: 0033:0x7f644830fb19 [ 1713.588966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.592929] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1713.594602] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1713.596218] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1713.597757] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1713.599269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.600854] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1713.612390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:41:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 46) 11:41:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2ae, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:41:49 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x3, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1713.669380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1713.706805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.708826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.715471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1713.727939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1713.732666] FAULT_INJECTION: forcing a failure. [ 1713.732666] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.735575] CPU: 1 PID: 9509 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1713.737325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.739426] Call Trace: [ 1713.740094] dump_stack+0x107/0x167 [ 1713.741045] should_fail.cold+0x5/0xa [ 1713.742004] ? p9pdu_readf+0xadb/0x1d40 [ 1713.743006] should_failslab+0x5/0x20 [ 1713.743971] __kmalloc+0x72/0x390 [ 1713.744863] p9pdu_readf+0xadb/0x1d40 [ 1713.745828] ? pipe_poll+0x21b/0x800 [ 1713.746764] ? p9pdu_writef+0x100/0x100 [ 1713.747766] ? p9_fd_poll+0x1e0/0x2c0 [ 1713.748746] ? p9_fd_create+0x357/0x4a0 [ 1713.749745] ? p9_conn_create+0x510/0x510 [ 1713.750787] ? p9_client_create+0x798/0x1230 [ 1713.751898] ? kfree+0xd7/0x340 [ 1713.752734] ? do_raw_spin_unlock+0x4f/0x220 [ 1713.753835] p9_client_create+0xaee/0x1230 [ 1713.754893] ? p9_client_flush+0x430/0x430 [ 1713.755953] ? trace_hardirqs_on+0x5b/0x180 [ 1713.757043] ? lockdep_init_map_type+0x2c7/0x780 [ 1713.758222] ? __raw_spin_lock_init+0x36/0x110 [ 1713.759372] v9fs_session_init+0x1dd/0x1680 [ 1713.760446] ? lock_release+0x680/0x680 [ 1713.761448] ? kmem_cache_alloc_trace+0x151/0x320 [ 1713.762652] ? v9fs_show_options+0x690/0x690 [ 1713.763744] ? trace_hardirqs_on+0x5b/0x180 [ 1713.764827] ? kasan_unpoison_shadow+0x33/0x50 [ 1713.765955] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.767235] v9fs_mount+0x79/0x8f0 [ 1713.768114] ? v9fs_write_inode+0x60/0x60 [ 1713.769154] legacy_get_tree+0x105/0x220 [ 1713.770159] vfs_get_tree+0x8e/0x300 [ 1713.771088] path_mount+0x1490/0x21e0 [ 1713.772033] ? strncpy_from_user+0x9e/0x470 [ 1713.773115] ? finish_automount+0xa90/0xa90 [ 1713.774185] ? getname_flags.part.0+0x1dd/0x4f0 [ 1713.775348] ? _copy_from_user+0xfb/0x1b0 [ 1713.776377] __x64_sys_mount+0x282/0x300 [ 1713.777405] ? copy_mnt_ns+0xa00/0xa00 [ 1713.778386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.779684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.780990] do_syscall_64+0x33/0x40 [ 1713.781909] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1713.783180] RIP: 0033:0x7f2d92adab19 [ 1713.784100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.788726] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1713.790590] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1713.792368] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1713.794135] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1713.795886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.797652] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1713.811311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.813209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.815652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1713.825423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1713.839031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.840926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.845447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1713.875837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.878024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.880307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:03 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 20) 11:42:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}}, 0x0) unshare(0x48020200) 11:42:03 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x4, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:42:03 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:42:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:42:03 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 52) 11:42:03 executing program 0: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:42:03 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 47) [ 1726.886282] FAULT_INJECTION: forcing a failure. [ 1726.886282] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.887837] CPU: 1 PID: 9524 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1726.888712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.889776] Call Trace: [ 1726.890119] dump_stack+0x107/0x167 [ 1726.890583] should_fail.cold+0x5/0xa [ 1726.891078] should_failslab+0x5/0x20 [ 1726.891565] __kmalloc_track_caller+0x79/0x370 [ 1726.892145] ? kasprintf+0xbb/0xf0 [ 1726.892597] ? __delete_object+0xb3/0x100 [ 1726.893155] kvasprintf+0xb5/0x150 [ 1726.893607] ? bust_spinlocks+0xe0/0xe0 [ 1726.894119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.894793] kasprintf+0xbb/0xf0 [ 1726.895223] ? kvasprintf_const+0x1a0/0x1a0 [ 1726.895773] ? kmem_cache_free+0x249/0x2d0 [ 1726.896319] ? p9_client_create+0xbfa/0x1230 [ 1726.896879] p9_client_create+0xc1b/0x1230 [ 1726.897426] ? p9_client_flush+0x430/0x430 [ 1726.897969] ? trace_hardirqs_on+0x5b/0x180 [ 1726.898514] ? lockdep_init_map_type+0x2c7/0x780 [ 1726.899113] ? __raw_spin_lock_init+0x36/0x110 [ 1726.899694] v9fs_session_init+0x1dd/0x1680 [ 1726.900244] ? lock_release+0x680/0x680 [ 1726.900750] ? kmem_cache_alloc_trace+0x151/0x320 [ 1726.901365] ? v9fs_show_options+0x690/0x690 [ 1726.901922] ? trace_hardirqs_on+0x5b/0x180 [ 1726.902465] ? kasan_unpoison_shadow+0x33/0x50 [ 1726.903040] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1726.903678] v9fs_mount+0x79/0x8f0 [ 1726.904127] ? v9fs_write_inode+0x60/0x60 [ 1726.904647] legacy_get_tree+0x105/0x220 [ 1726.905168] vfs_get_tree+0x8e/0x300 [ 1726.905635] path_mount+0x1490/0x21e0 [ 1726.906124] ? strncpy_from_user+0x9e/0x470 [ 1726.906660] ? finish_automount+0xa90/0xa90 [ 1726.907183] ? getname_flags.part.0+0x1dd/0x4f0 [ 1726.907748] ? _copy_from_user+0xfb/0x1b0 [ 1726.908255] __x64_sys_mount+0x282/0x300 [ 1726.908747] ? copy_mnt_ns+0xa00/0xa00 [ 1726.909237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.909781] FAULT_INJECTION: forcing a failure. [ 1726.909781] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.909875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.909892] do_syscall_64+0x33/0x40 [ 1726.913344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.913975] RIP: 0033:0x7f644830fb19 [ 1726.914432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.916659] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1726.917595] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1726.918458] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1726.919338] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1726.920192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.921077] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1726.921955] CPU: 0 PID: 9533 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1726.923424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.925203] Call Trace: [ 1726.925767] dump_stack+0x107/0x167 [ 1726.926544] should_fail.cold+0x5/0xa [ 1726.927353] ? p9_client_create+0xaf/0x1230 [ 1726.928265] should_failslab+0x5/0x20 [ 1726.929085] kmem_cache_alloc_trace+0x55/0x320 [ 1726.930052] ? find_held_lock+0x2c/0x110 [ 1726.930918] p9_client_create+0xaf/0x1230 [ 1726.931798] ? lock_downgrade+0x6d0/0x6d0 [ 1726.932679] ? p9_client_flush+0x430/0x430 [ 1726.933591] ? trace_hardirqs_on+0x5b/0x180 [ 1726.934518] ? lockdep_init_map_type+0x2c7/0x780 [ 1726.935530] ? __raw_spin_lock_init+0x36/0x110 [ 1726.936503] v9fs_session_init+0x1dd/0x1680 [ 1726.937425] ? lock_release+0x680/0x680 [ 1726.938283] ? kmem_cache_alloc_trace+0x151/0x320 [ 1726.939304] ? v9fs_show_options+0x690/0x690 [ 1726.940247] ? trace_hardirqs_on+0x5b/0x180 [ 1726.941164] ? kasan_unpoison_shadow+0x33/0x50 [ 1726.942136] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1726.943204] v9fs_mount+0x79/0x8f0 [ 1726.943951] ? v9fs_write_inode+0x60/0x60 [ 1726.944819] legacy_get_tree+0x105/0x220 [ 1726.945681] vfs_get_tree+0x8e/0x300 [ 1726.946465] path_mount+0x1490/0x21e0 [ 1726.947274] ? strncpy_from_user+0x9e/0x470 [ 1726.948180] ? finish_automount+0xa90/0xa90 [ 1726.949095] ? getname_flags.part.0+0x1dd/0x4f0 [ 1726.950073] ? _copy_from_user+0xfb/0x1b0 [ 1726.950957] __x64_sys_mount+0x282/0x300 [ 1726.951820] ? copy_mnt_ns+0xa00/0xa00 [ 1726.952642] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.953756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.954843] do_syscall_64+0x33/0x40 [ 1726.955636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.956716] RIP: 0033:0x7fa3b8173b19 [ 1726.957505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.961383] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1726.962970] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1726.964466] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1726.965960] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1726.967445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.968963] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1726.973280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1726.982843] FAULT_INJECTION: forcing a failure. [ 1726.982843] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.985699] CPU: 0 PID: 9538 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1726.987351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.989354] Call Trace: [ 1726.989988] dump_stack+0x107/0x167 11:42:03 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 53) 11:42:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1726.990864] should_fail.cold+0x5/0xa [ 1726.991940] ? create_object.isra.0+0x3a/0xa30 [ 1726.993036] should_failslab+0x5/0x20 [ 1726.993939] kmem_cache_alloc+0x5b/0x310 [ 1726.994912] create_object.isra.0+0x3a/0xa30 [ 1726.995952] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1726.997173] __kmalloc+0x16e/0x390 [ 1726.998014] p9pdu_readf+0xadb/0x1d40 [ 1726.998926] ? pipe_poll+0x21b/0x800 [ 1726.999799] ? p9pdu_writef+0x100/0x100 [ 1727.000735] ? p9_fd_poll+0x1e0/0x2c0 [ 1727.001651] ? p9_fd_create+0x357/0x4a0 [ 1727.002585] ? p9_conn_create+0x510/0x510 [ 1727.003557] ? p9_client_create+0x798/0x1230 [ 1727.004591] ? kfree+0xd7/0x340 [ 1727.005381] ? do_raw_spin_unlock+0x4f/0x220 [ 1727.006428] p9_client_create+0xaee/0x1230 [ 1727.007428] ? p9_client_flush+0x430/0x430 [ 1727.008429] ? trace_hardirqs_on+0x5b/0x180 [ 1727.009459] ? lockdep_init_map_type+0x2c7/0x780 [ 1727.010573] ? __raw_spin_lock_init+0x36/0x110 [ 1727.011674] v9fs_session_init+0x1dd/0x1680 [ 1727.012702] ? lock_release+0x680/0x680 [ 1727.013667] ? kmem_cache_alloc_trace+0x151/0x320 [ 1727.014801] ? v9fs_show_options+0x690/0x690 [ 1727.015851] ? trace_hardirqs_on+0x5b/0x180 [ 1727.016865] ? kasan_unpoison_shadow+0x33/0x50 [ 1727.017955] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1727.019143] v9fs_mount+0x79/0x8f0 [ 1727.019986] ? v9fs_write_inode+0x60/0x60 [ 1727.020961] legacy_get_tree+0x105/0x220 [ 1727.021929] vfs_get_tree+0x8e/0x300 [ 1727.022798] path_mount+0x1490/0x21e0 [ 1727.023705] ? strncpy_from_user+0x9e/0x470 [ 1727.024718] ? finish_automount+0xa90/0xa90 [ 1727.025748] ? getname_flags.part.0+0x1dd/0x4f0 [ 1727.026837] ? _copy_from_user+0xfb/0x1b0 [ 1727.027839] __x64_sys_mount+0x282/0x300 [ 1727.028787] ? copy_mnt_ns+0xa00/0xa00 [ 1727.029735] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1727.030962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1727.032184] do_syscall_64+0x33/0x40 [ 1727.033059] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1727.034267] RIP: 0033:0x7f2d92adab19 [ 1727.035129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.039490] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1727.041278] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1727.042929] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1727.044581] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1727.046243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.047896] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1727.062311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1727.063545] FAULT_INJECTION: forcing a failure. [ 1727.063545] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.065329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.066307] CPU: 0 PID: 9545 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1727.066320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1727.066326] Call Trace: [ 1727.066350] dump_stack+0x107/0x167 [ 1727.066372] should_fail.cold+0x5/0xa [ 1727.066394] ? create_object.isra.0+0x3a/0xa30 [ 1727.066413] should_failslab+0x5/0x20 [ 1727.066432] kmem_cache_alloc+0x5b/0x310 [ 1727.066451] ? vsnprintf+0x4ba/0x1600 [ 1727.066475] create_object.isra.0+0x3a/0xa30 [ 1727.067264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:42:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:42:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x0) [ 1727.068844] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1727.068870] __kmalloc_track_caller+0x177/0x370 [ 1727.080651] ? kasprintf+0xbb/0xf0 [ 1727.081487] kvasprintf+0xb5/0x150 [ 1727.082295] ? bust_spinlocks+0xe0/0xe0 [ 1727.083207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1727.084416] kasprintf+0xbb/0xf0 [ 1727.085199] ? kvasprintf_const+0x1a0/0x1a0 [ 1727.086182] ? kmem_cache_free+0x249/0x2d0 [ 1727.087154] ? p9_client_create+0xbfa/0x1230 [ 1727.088156] p9_client_create+0xc1b/0x1230 [ 1727.089135] ? p9_client_flush+0x430/0x430 [ 1727.090119] ? trace_hardirqs_on+0x5b/0x180 [ 1727.091118] ? lockdep_init_map_type+0x2c7/0x780 [ 1727.092214] ? __raw_spin_lock_init+0x36/0x110 [ 1727.093275] v9fs_session_init+0x1dd/0x1680 [ 1727.094253] ? lock_release+0x680/0x680 [ 1727.095174] ? kmem_cache_alloc_trace+0x151/0x320 [ 1727.096288] ? v9fs_show_options+0x690/0x690 [ 1727.097324] ? trace_hardirqs_on+0x5b/0x180 [ 1727.098304] ? kasan_unpoison_shadow+0x33/0x50 [ 1727.099343] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1727.100499] v9fs_mount+0x79/0x8f0 [ 1727.101316] ? v9fs_write_inode+0x60/0x60 [ 1727.102264] legacy_get_tree+0x105/0x220 [ 1727.103197] vfs_get_tree+0x8e/0x300 [ 1727.104061] path_mount+0x1490/0x21e0 [ 1727.104956] ? strncpy_from_user+0x9e/0x470 [ 1727.105935] ? finish_automount+0xa90/0xa90 [ 1727.106922] ? getname_flags.part.0+0x1dd/0x4f0 [ 1727.107994] ? _copy_from_user+0xfb/0x1b0 [ 1727.108957] __x64_sys_mount+0x282/0x300 [ 1727.109896] ? copy_mnt_ns+0xa00/0xa00 [ 1727.110785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1727.111987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1727.113182] do_syscall_64+0x33/0x40 [ 1727.114030] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1727.115198] RIP: 0033:0x7f644830fb19 [ 1727.116046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.120250] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1727.121999] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1727.123629] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1727.125280] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1727.126906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.128531] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1727.147800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1727.164373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1727.171583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.172409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.173282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x0) [ 1727.197474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.198330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.199215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:42:15 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 21) 11:42:15 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 54) 11:42:15 executing program 0: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:42:15 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:42:15 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b53a79c01949d4f220c7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e17e2cfa917e79a2a35bb2b6dbca973"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:42:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x0) 11:42:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:42:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 48) [ 1738.897639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1738.907933] FAULT_INJECTION: forcing a failure. [ 1738.907933] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.909347] CPU: 0 PID: 9571 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1738.910142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1738.911293] Call Trace: [ 1738.911611] dump_stack+0x107/0x167 [ 1738.912039] should_fail.cold+0x5/0xa [ 1738.912492] should_failslab+0x5/0x20 [ 1738.912937] __kmalloc_track_caller+0x79/0x370 [ 1738.913480] ? kasprintf+0xbb/0xf0 [ 1738.913900] ? __delete_object+0xb3/0x100 [ 1738.914386] kvasprintf+0xb5/0x150 [ 1738.914796] ? bust_spinlocks+0xe0/0xe0 [ 1738.915264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1738.915876] kasprintf+0xbb/0xf0 [ 1738.916268] ? kvasprintf_const+0x1a0/0x1a0 [ 1738.916773] ? kmem_cache_free+0x249/0x2d0 [ 1738.917278] ? p9_client_create+0xbfa/0x1230 [ 1738.917791] p9_client_create+0xc1b/0x1230 [ 1738.918289] ? p9_client_flush+0x430/0x430 [ 1738.918785] ? trace_hardirqs_on+0x5b/0x180 [ 1738.919292] ? lockdep_init_map_type+0x2c7/0x780 [ 1738.919847] ? __raw_spin_lock_init+0x36/0x110 [ 1738.920381] v9fs_session_init+0x1dd/0x1680 [ 1738.920882] ? lock_release+0x680/0x680 [ 1738.921358] ? kmem_cache_alloc_trace+0x151/0x320 [ 1738.921918] ? v9fs_show_options+0x690/0x690 [ 1738.922435] ? trace_hardirqs_on+0x5b/0x180 [ 1738.922945] ? kasan_unpoison_shadow+0x33/0x50 [ 1738.923278] FAULT_INJECTION: forcing a failure. [ 1738.923278] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.923533] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1738.923547] v9fs_mount+0x79/0x8f0 [ 1738.923570] ? v9fs_write_inode+0x60/0x60 [ 1738.923581] legacy_get_tree+0x105/0x220 [ 1738.923593] vfs_get_tree+0x8e/0x300 [ 1738.928501] path_mount+0x1490/0x21e0 [ 1738.928946] ? strncpy_from_user+0x9e/0x470 [ 1738.929476] ? finish_automount+0xa90/0xa90 [ 1738.929974] ? getname_flags.part.0+0x1dd/0x4f0 [ 1738.930519] ? _copy_from_user+0xfb/0x1b0 [ 1738.930998] __x64_sys_mount+0x282/0x300 [ 1738.931475] ? copy_mnt_ns+0xa00/0xa00 [ 1738.931926] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1738.932545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1738.933173] do_syscall_64+0x33/0x40 [ 1738.933610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1738.934200] RIP: 0033:0x7f2d92adab19 [ 1738.934637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.936753] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1738.937644] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1738.938464] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1738.939285] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1738.940103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1738.940922] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1738.941780] CPU: 1 PID: 9579 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1738.943221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1738.944943] Call Trace: [ 1738.945529] dump_stack+0x107/0x167 [ 1738.946307] should_fail.cold+0x5/0xa [ 1738.947121] should_failslab+0x5/0x20 [ 1738.947967] __kmalloc_track_caller+0x79/0x370 [ 1738.948975] ? kstrdup_const+0x53/0x80 [ 1738.949846] ? kasprintf+0xbb/0xf0 [ 1738.950634] kstrdup+0x36/0x70 [ 1738.951338] kstrdup_const+0x53/0x80 [ 1738.952155] kmem_cache_create_usercopy+0x12f/0x2f0 [ 1738.953246] p9_client_create+0xc6a/0x1230 [ 1738.954136] ? p9_client_flush+0x430/0x430 [ 1738.955027] ? trace_hardirqs_on+0x5b/0x180 [ 1738.955920] ? lockdep_init_map_type+0x2c7/0x780 [ 1738.956932] ? __raw_spin_lock_init+0x36/0x110 [ 1738.957892] v9fs_session_init+0x1dd/0x1680 [ 1738.958812] ? lock_release+0x680/0x680 [ 1738.959642] ? kmem_cache_alloc_trace+0x151/0x320 [ 1738.960658] ? v9fs_show_options+0x690/0x690 [ 1738.961598] ? trace_hardirqs_on+0x5b/0x180 [ 1738.962515] ? kasan_unpoison_shadow+0x33/0x50 [ 1738.963492] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1738.964569] v9fs_mount+0x79/0x8f0 [ 1738.965326] ? v9fs_write_inode+0x60/0x60 [ 1738.966189] legacy_get_tree+0x105/0x220 [ 1738.967050] vfs_get_tree+0x8e/0x300 [ 1738.967824] path_mount+0x1490/0x21e0 [ 1738.968635] ? strncpy_from_user+0x9e/0x470 [ 1738.969530] ? finish_automount+0xa90/0xa90 [ 1738.970443] ? getname_flags.part.0+0x1dd/0x4f0 [ 1738.971404] ? _copy_from_user+0xfb/0x1b0 [ 1738.972289] __x64_sys_mount+0x282/0x300 [ 1738.973136] ? copy_mnt_ns+0xa00/0xa00 [ 1738.974005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1738.975180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1738.976333] do_syscall_64+0x33/0x40 [ 1738.977176] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1738.978270] RIP: 0033:0x7f644830fb19 [ 1738.979063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.982840] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1738.984406] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1738.985875] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1738.987330] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1738.988789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1738.990259] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1738.991933] kmem_cache_create(9p-fcall-cache-364) failed with error -12 [ 1738.993375] CPU: 1 PID: 9579 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1738.994789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1738.996498] Call Trace: [ 1738.997039] dump_stack+0x107/0x167 [ 1738.997836] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1738.998931] p9_client_create+0xc6a/0x1230 [ 1738.999833] ? p9_client_flush+0x430/0x430 [ 1738.999954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1739.000704] ? trace_hardirqs_on+0x5b/0x180 [ 1739.000726] ? lockdep_init_map_type+0x2c7/0x780 [ 1739.000748] ? __raw_spin_lock_init+0x36/0x110 [ 1739.000772] v9fs_session_init+0x1dd/0x1680 [ 1739.000792] ? lock_release+0x680/0x680 [ 1739.000820] ? kmem_cache_alloc_trace+0x151/0x320 [ 1739.000842] ? v9fs_show_options+0x690/0x690 [ 1739.002767] FAULT_INJECTION: forcing a failure. [ 1739.002767] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.003723] ? trace_hardirqs_on+0x5b/0x180 [ 1739.003743] ? kasan_unpoison_shadow+0x33/0x50 [ 1739.003764] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.013245] v9fs_mount+0x79/0x8f0 [ 1739.014141] ? v9fs_write_inode+0x60/0x60 [ 1739.015186] legacy_get_tree+0x105/0x220 [ 1739.016210] vfs_get_tree+0x8e/0x300 [ 1739.017145] path_mount+0x1490/0x21e0 [ 1739.018106] ? strncpy_from_user+0x9e/0x470 [ 1739.019237] ? finish_automount+0xa90/0xa90 [ 1739.020389] ? getname_flags.part.0+0x1dd/0x4f0 [ 1739.021626] ? _copy_from_user+0xfb/0x1b0 [ 1739.022750] __x64_sys_mount+0x282/0x300 [ 1739.023770] ? copy_mnt_ns+0xa00/0xa00 [ 1739.024767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.026092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1739.027396] do_syscall_64+0x33/0x40 [ 1739.028326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1739.029637] RIP: 0033:0x7f644830fb19 [ 1739.030566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.035218] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1739.037120] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1739.038910] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1739.040706] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1739.042517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.044284] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1739.046069] CPU: 0 PID: 9575 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1739.046847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.047787] Call Trace: [ 1739.048093] dump_stack+0x107/0x167 [ 1739.048507] should_fail.cold+0x5/0xa [ 1739.048942] ? create_object.isra.0+0x3a/0xa30 [ 1739.049466] should_failslab+0x5/0x20 [ 1739.049902] kmem_cache_alloc+0x5b/0x310 [ 1739.050358] ? kernel_text_address+0xf2/0x120 [ 1739.050863] create_object.isra.0+0x3a/0xa30 [ 1739.051357] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.051928] kmem_cache_alloc_trace+0x151/0x320 [ 1739.052454] ? find_held_lock+0x2c/0x110 [ 1739.052912] p9_client_create+0xaf/0x1230 [ 1739.053390] ? lock_downgrade+0x6d0/0x6d0 [ 1739.053852] ? p9_client_flush+0x430/0x430 [ 1739.054332] ? trace_hardirqs_on+0x5b/0x180 [ 1739.054812] ? lockdep_init_map_type+0x2c7/0x780 [ 1739.055352] ? __raw_spin_lock_init+0x36/0x110 [ 1739.055888] v9fs_session_init+0x1dd/0x1680 [ 1739.056385] ? lock_release+0x680/0x680 [ 1739.056835] ? kmem_cache_alloc_trace+0x151/0x320 [ 1739.057387] ? v9fs_show_options+0x690/0x690 [ 1739.057885] ? trace_hardirqs_on+0x5b/0x180 [ 1739.058398] ? kasan_unpoison_shadow+0x33/0x50 [ 1739.058913] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.059513] v9fs_mount+0x79/0x8f0 [ 1739.059912] ? v9fs_write_inode+0x60/0x60 [ 1739.060410] legacy_get_tree+0x105/0x220 [ 1739.060875] vfs_get_tree+0x8e/0x300 [ 1739.061341] path_mount+0x1490/0x21e0 [ 1739.061800] ? strncpy_from_user+0x9e/0x470 [ 1739.062317] ? finish_automount+0xa90/0xa90 [ 1739.062832] ? getname_flags.part.0+0x1dd/0x4f0 [ 1739.063391] ? _copy_from_user+0xfb/0x1b0 [ 1739.063884] __x64_sys_mount+0x282/0x300 [ 1739.064363] ? copy_mnt_ns+0xa00/0xa00 [ 1739.064835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.065474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1739.066094] do_syscall_64+0x33/0x40 [ 1739.066535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1739.067152] RIP: 0033:0x7fa3b8173b19 [ 1739.067598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.069812] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1739.070726] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1739.071572] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1739.072434] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1739.073289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.074131] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 11:42:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1739.101273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:42:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 49) 11:42:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1739.129612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.129627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.129642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.130755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.132314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1739.137014] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1739.142926] FAULT_INJECTION: forcing a failure. [ 1739.142926] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.144257] CPU: 0 PID: 9590 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1739.145066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.146006] Call Trace: [ 1739.146322] dump_stack+0x107/0x167 [ 1739.146743] should_fail.cold+0x5/0xa [ 1739.147186] ? create_object.isra.0+0x3a/0xa30 [ 1739.147711] should_failslab+0x5/0x20 [ 1739.148147] kmem_cache_alloc+0x5b/0x310 [ 1739.148622] ? vsnprintf+0x4ba/0x1600 [ 1739.149071] create_object.isra.0+0x3a/0xa30 [ 1739.149576] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.150169] __kmalloc_track_caller+0x177/0x370 [ 1739.150708] ? kasprintf+0xbb/0xf0 [ 1739.151122] kvasprintf+0xb5/0x150 [ 1739.151530] ? bust_spinlocks+0xe0/0xe0 [ 1739.151992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.152601] kasprintf+0xbb/0xf0 [ 1739.152989] ? kvasprintf_const+0x1a0/0x1a0 [ 1739.153497] ? kmem_cache_free+0x249/0x2d0 [ 1739.153992] ? p9_client_create+0xbfa/0x1230 [ 1739.154505] p9_client_create+0xc1b/0x1230 [ 1739.154993] ? p9_client_flush+0x430/0x430 [ 1739.155482] ? trace_hardirqs_on+0x5b/0x180 [ 1739.155979] ? lockdep_init_map_type+0x2c7/0x780 [ 1739.156542] ? __raw_spin_lock_init+0x36/0x110 [ 1739.157082] v9fs_session_init+0x1dd/0x1680 [ 1739.157588] ? lock_release+0x680/0x680 [ 1739.158050] ? kmem_cache_alloc_trace+0x151/0x320 [ 1739.158609] ? v9fs_show_options+0x690/0x690 [ 1739.159121] ? trace_hardirqs_on+0x5b/0x180 [ 1739.159620] ? kasan_unpoison_shadow+0x33/0x50 [ 1739.160148] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.160736] v9fs_mount+0x79/0x8f0 [ 1739.161154] ? v9fs_write_inode+0x60/0x60 [ 1739.161636] legacy_get_tree+0x105/0x220 [ 1739.162103] vfs_get_tree+0x8e/0x300 [ 1739.162533] path_mount+0x1490/0x21e0 [ 1739.162971] ? strncpy_from_user+0x9e/0x470 [ 1739.163477] ? finish_automount+0xa90/0xa90 [ 1739.163975] ? getname_flags.part.0+0x1dd/0x4f0 [ 1739.164512] ? _copy_from_user+0xfb/0x1b0 [ 1739.164991] __x64_sys_mount+0x282/0x300 [ 1739.165473] ? copy_mnt_ns+0xa00/0xa00 [ 1739.165922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.166533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1739.167129] do_syscall_64+0x33/0x40 [ 1739.167561] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1739.168151] RIP: 0033:0x7f2d92adab19 [ 1739.168583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.170901] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1739.171785] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1739.172614] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1739.173461] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1739.174292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.175119] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1739.176877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1739.202649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.203511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.204458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1739.217879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.219592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.221308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:15 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 55) 11:42:15 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1739.273010] FAULT_INJECTION: forcing a failure. [ 1739.273010] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.274401] CPU: 0 PID: 9598 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1739.275189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.276131] Call Trace: [ 1739.276437] dump_stack+0x107/0x167 [ 1739.276850] should_fail.cold+0x5/0xa [ 1739.277294] ? create_object.isra.0+0x3a/0xa30 [ 1739.277807] should_failslab+0x5/0x20 [ 1739.278239] kmem_cache_alloc+0x5b/0x310 [ 1739.278702] ? vsnprintf+0x4ba/0x1600 [ 1739.279133] create_object.isra.0+0x3a/0xa30 [ 1739.279628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.280205] __kmalloc_track_caller+0x177/0x370 [ 1739.280736] ? kasprintf+0xbb/0xf0 [ 1739.281147] kvasprintf+0xb5/0x150 [ 1739.281546] ? bust_spinlocks+0xe0/0xe0 [ 1739.281997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.282593] kasprintf+0xbb/0xf0 [ 1739.282973] ? kvasprintf_const+0x1a0/0x1a0 [ 1739.283466] ? kmem_cache_free+0x249/0x2d0 [ 1739.283944] ? p9_client_create+0xbfa/0x1230 [ 1739.284439] p9_client_create+0xc1b/0x1230 [ 1739.284917] ? p9_client_flush+0x430/0x430 [ 1739.285403] ? trace_hardirqs_on+0x5b/0x180 [ 1739.285888] ? lockdep_init_map_type+0x2c7/0x780 [ 1739.286429] ? __raw_spin_lock_init+0x36/0x110 [ 1739.286947] v9fs_session_init+0x1dd/0x1680 [ 1739.287433] ? lock_release+0x680/0x680 [ 1739.287887] ? kmem_cache_alloc_trace+0x151/0x320 [ 1739.288434] ? v9fs_show_options+0x690/0x690 [ 1739.288931] ? trace_hardirqs_on+0x5b/0x180 [ 1739.289439] ? kasan_unpoison_shadow+0x33/0x50 [ 1739.289954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.290530] v9fs_mount+0x79/0x8f0 [ 1739.290930] ? v9fs_write_inode+0x60/0x60 [ 1739.291397] legacy_get_tree+0x105/0x220 [ 1739.291968] vfs_get_tree+0x8e/0x300 [ 1739.292395] path_mount+0x1490/0x21e0 [ 1739.292843] ? strncpy_from_user+0x9e/0x470 [ 1739.293348] ? finish_automount+0xa90/0xa90 [ 1739.293843] ? getname_flags.part.0+0x1dd/0x4f0 [ 1739.294374] ? _copy_from_user+0xfb/0x1b0 [ 1739.294855] __x64_sys_mount+0x282/0x300 [ 1739.295321] ? copy_mnt_ns+0xa00/0xa00 [ 1739.295768] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.296375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1739.296969] do_syscall_64+0x33/0x40 [ 1739.297409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1739.297997] RIP: 0033:0x7f644830fb19 [ 1739.298419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.300541] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1739.301432] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1739.302253] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1739.303073] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1739.303896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.304716] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1739.337386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1739.364899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.365808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.366687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:29 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:42:29 executing program 0: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:42:29 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 56) 11:42:29 executing program 1: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:42:29 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x7, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1753.547573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 11:42:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:42:29 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 22) 11:42:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 50) [ 1753.562906] FAULT_INJECTION: forcing a failure. [ 1753.562906] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.565469] CPU: 1 PID: 9614 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1753.566934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.568738] Call Trace: [ 1753.569351] dump_stack+0x107/0x167 [ 1753.570134] should_fail.cold+0x5/0xa [ 1753.571043] should_failslab+0x5/0x20 [ 1753.571087] FAULT_INJECTION: forcing a failure. [ 1753.571087] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.571867] __kmalloc_track_caller+0x79/0x370 [ 1753.571883] ? kstrdup_const+0x53/0x80 [ 1753.571898] ? kasprintf+0xbb/0xf0 [ 1753.571919] kstrdup+0x36/0x70 [ 1753.577598] kstrdup_const+0x53/0x80 [ 1753.578403] kmem_cache_create_usercopy+0x12f/0x2f0 [ 1753.579478] p9_client_create+0xc6a/0x1230 [ 1753.580442] ? p9_client_flush+0x430/0x430 [ 1753.581395] ? trace_hardirqs_on+0x5b/0x180 [ 1753.582333] ? lockdep_init_map_type+0x2c7/0x780 [ 1753.583360] ? __raw_spin_lock_init+0x36/0x110 [ 1753.584377] v9fs_session_init+0x1dd/0x1680 [ 1753.585318] ? lock_release+0x680/0x680 [ 1753.586163] ? kmem_cache_alloc_trace+0x151/0x320 [ 1753.587177] ? v9fs_show_options+0x690/0x690 [ 1753.588110] ? trace_hardirqs_on+0x5b/0x180 [ 1753.589001] ? kasan_unpoison_shadow+0x33/0x50 [ 1753.589986] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.591062] v9fs_mount+0x79/0x8f0 [ 1753.591812] ? v9fs_write_inode+0x60/0x60 [ 1753.592684] legacy_get_tree+0x105/0x220 [ 1753.593545] vfs_get_tree+0x8e/0x300 [ 1753.594326] path_mount+0x1490/0x21e0 [ 1753.595130] ? strncpy_from_user+0x9e/0x470 [ 1753.596044] ? finish_automount+0xa90/0xa90 [ 1753.596936] ? getname_flags.part.0+0x1dd/0x4f0 [ 1753.597923] ? _copy_from_user+0xfb/0x1b0 [ 1753.598801] __x64_sys_mount+0x282/0x300 [ 1753.599654] ? copy_mnt_ns+0xa00/0xa00 [ 1753.600481] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.601591] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.602674] do_syscall_64+0x33/0x40 [ 1753.603473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.604543] RIP: 0033:0x7f2d92adab19 [ 1753.605329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.609225] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1753.610841] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1753.612355] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1753.613854] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1753.615346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1753.616842] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1753.618415] CPU: 0 PID: 9615 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1753.618475] kmem_cache_create(9p-fcall-cache-368) failed with error -12 [ 1753.619945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.619952] Call Trace: [ 1753.619978] dump_stack+0x107/0x167 [ 1753.624577] should_fail.cold+0x5/0xa [ 1753.625444] should_failslab+0x5/0x20 [ 1753.626303] __kmalloc_track_caller+0x79/0x370 [ 1753.627321] ? p9_client_create+0x41d/0x1230 [ 1753.628303] kstrdup+0x36/0x70 [ 1753.629026] p9_client_create+0x41d/0x1230 [ 1753.629980] ? lock_downgrade+0x6d0/0x6d0 [ 1753.630918] ? p9_client_flush+0x430/0x430 [ 1753.631861] ? trace_hardirqs_on+0x5b/0x180 [ 1753.632826] ? lockdep_init_map_type+0x2c7/0x780 [ 1753.633895] ? __raw_spin_lock_init+0x36/0x110 [ 1753.634923] v9fs_session_init+0x1dd/0x1680 [ 1753.635884] ? lock_release+0x680/0x680 [ 1753.636779] ? kmem_cache_alloc_trace+0x151/0x320 [ 1753.637869] ? v9fs_show_options+0x690/0x690 [ 1753.638863] ? trace_hardirqs_on+0x5b/0x180 [ 1753.639826] ? kasan_unpoison_shadow+0x33/0x50 [ 1753.640847] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.641996] v9fs_mount+0x79/0x8f0 [ 1753.642796] ? v9fs_write_inode+0x60/0x60 [ 1753.643716] legacy_get_tree+0x105/0x220 [ 1753.644624] vfs_get_tree+0x8e/0x300 [ 1753.645476] path_mount+0x1490/0x21e0 [ 1753.646342] ? strncpy_from_user+0x9e/0x470 [ 1753.647313] ? finish_automount+0xa90/0xa90 [ 1753.648278] ? getname_flags.part.0+0x1dd/0x4f0 [ 1753.649319] ? _copy_from_user+0xfb/0x1b0 [ 1753.650266] __x64_sys_mount+0x282/0x300 [ 1753.651182] ? copy_mnt_ns+0xa00/0xa00 [ 1753.652051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.653233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.654401] do_syscall_64+0x33/0x40 [ 1753.655240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.656392] RIP: 0033:0x7fa3b8173b19 [ 1753.657250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.661353] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1753.663036] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1753.664623] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1753.666207] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1753.667809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1753.669629] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1753.671627] CPU: 1 PID: 9614 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1753.673131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.674919] Call Trace: [ 1753.675561] dump_stack+0x107/0x167 [ 1753.676356] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1753.677516] p9_client_create+0xc6a/0x1230 [ 1753.678475] ? p9_client_flush+0x430/0x430 [ 1753.679389] ? trace_hardirqs_on+0x5b/0x180 [ 1753.680342] ? lockdep_init_map_type+0x2c7/0x780 [ 1753.681402] ? __raw_spin_lock_init+0x36/0x110 [ 1753.682217] FAULT_INJECTION: forcing a failure. [ 1753.682217] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.682409] v9fs_session_init+0x1dd/0x1680 [ 1753.685724] ? lock_release+0x680/0x680 [ 1753.686590] ? kmem_cache_alloc_trace+0x151/0x320 [ 1753.687631] ? v9fs_show_options+0x690/0x690 [ 1753.688588] ? trace_hardirqs_on+0x5b/0x180 [ 1753.689558] ? kasan_unpoison_shadow+0x33/0x50 [ 1753.690561] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.691657] v9fs_mount+0x79/0x8f0 [ 1753.692419] ? v9fs_write_inode+0x60/0x60 [ 1753.693326] legacy_get_tree+0x105/0x220 [ 1753.694222] vfs_get_tree+0x8e/0x300 [ 1753.695027] path_mount+0x1490/0x21e0 [ 1753.695859] ? strncpy_from_user+0x9e/0x470 [ 1753.696785] ? finish_automount+0xa90/0xa90 [ 1753.697739] ? getname_flags.part.0+0x1dd/0x4f0 [ 1753.698764] ? _copy_from_user+0xfb/0x1b0 [ 1753.699721] __x64_sys_mount+0x282/0x300 [ 1753.700602] ? copy_mnt_ns+0xa00/0xa00 [ 1753.701458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.702599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.703707] do_syscall_64+0x33/0x40 [ 1753.704519] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.705626] RIP: 0033:0x7f2d92adab19 [ 1753.706421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.710363] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1753.711987] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1753.713538] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1753.715073] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1753.716624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1753.718182] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1753.719749] CPU: 0 PID: 9616 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1753.721252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.723029] Call Trace: [ 1753.723629] dump_stack+0x107/0x167 [ 1753.724410] should_fail.cold+0x5/0xa [ 1753.725252] should_failslab+0x5/0x20 [ 1753.726102] __kmalloc_track_caller+0x79/0x370 [ 1753.727082] ? kstrdup_const+0x53/0x80 [ 1753.727915] ? kasprintf+0xbb/0xf0 [ 1753.728679] kstrdup+0x36/0x70 [ 1753.729373] kstrdup_const+0x53/0x80 [ 1753.730165] kmem_cache_create_usercopy+0x12f/0x2f0 [ 1753.731231] p9_client_create+0xc6a/0x1230 [ 1753.732142] ? p9_client_flush+0x430/0x430 [ 1753.733037] ? trace_hardirqs_on+0x5b/0x180 [ 1753.734316] ? lockdep_init_map_type+0x2c7/0x780 [ 1753.735555] ? __raw_spin_lock_init+0x36/0x110 [ 1753.736757] v9fs_session_init+0x1dd/0x1680 [ 1753.737862] ? lock_release+0x680/0x680 [ 1753.738807] ? kmem_cache_alloc_trace+0x151/0x320 [ 1753.739933] ? v9fs_show_options+0x690/0x690 [ 1753.740988] ? trace_hardirqs_on+0x5b/0x180 [ 1753.742031] ? kasan_unpoison_shadow+0x33/0x50 [ 1753.743110] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.744320] v9fs_mount+0x79/0x8f0 [ 1753.745157] ? v9fs_write_inode+0x60/0x60 [ 1753.746145] legacy_get_tree+0x105/0x220 [ 1753.747111] vfs_get_tree+0x8e/0x300 [ 1753.747991] path_mount+0x1490/0x21e0 [ 1753.748902] ? strncpy_from_user+0x9e/0x470 [ 1753.749934] ? finish_automount+0xa90/0xa90 [ 1753.750953] ? getname_flags.part.0+0x1dd/0x4f0 [ 1753.752055] ? _copy_from_user+0xfb/0x1b0 [ 1753.753041] __x64_sys_mount+0x282/0x300 [ 1753.754007] ? copy_mnt_ns+0xa00/0xa00 [ 1753.754936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.756174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.757410] do_syscall_64+0x33/0x40 [ 1753.758297] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.759507] RIP: 0033:0x7f644830fb19 [ 1753.760388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.764273] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1753.765883] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1753.767380] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1753.768883] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1753.770388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1753.771900] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1753.775692] kmem_cache_create(9p-fcall-cache-369) failed with error -12 [ 1753.777395] CPU: 0 PID: 9616 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1753.778867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.780635] Call Trace: [ 1753.781205] dump_stack+0x107/0x167 [ 1753.782003] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1753.783154] p9_client_create+0xc6a/0x1230 [ 1753.784066] ? p9_client_flush+0x430/0x430 [ 1753.784966] ? trace_hardirqs_on+0x5b/0x180 [ 1753.785896] ? lockdep_init_map_type+0x2c7/0x780 [ 1753.786921] ? __raw_spin_lock_init+0x36/0x110 [ 1753.787932] v9fs_session_init+0x1dd/0x1680 [ 1753.788871] ? lock_release+0x680/0x680 [ 1753.789739] ? kmem_cache_alloc_trace+0x151/0x320 [ 1753.790772] ? v9fs_show_options+0x690/0x690 [ 1753.791718] ? trace_hardirqs_on+0x5b/0x180 [ 1753.792647] ? kasan_unpoison_shadow+0x33/0x50 [ 1753.793637] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.794722] v9fs_mount+0x79/0x8f0 [ 1753.795485] ? v9fs_write_inode+0x60/0x60 [ 1753.796362] legacy_get_tree+0x105/0x220 [ 1753.797220] vfs_get_tree+0x8e/0x300 [ 1753.798033] path_mount+0x1490/0x21e0 [ 1753.798860] ? strncpy_from_user+0x9e/0x470 [ 1753.799787] ? finish_automount+0xa90/0xa90 [ 1753.800713] ? getname_flags.part.0+0x1dd/0x4f0 [ 1753.801701] ? _copy_from_user+0xfb/0x1b0 [ 1753.802588] __x64_sys_mount+0x282/0x300 [ 1753.803473] ? copy_mnt_ns+0xa00/0xa00 [ 1753.804300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.805419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.806514] do_syscall_64+0x33/0x40 [ 1753.807303] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.808383] RIP: 0033:0x7f644830fb19 [ 1753.809166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.813072] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1753.814698] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1753.816212] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1753.817722] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1753.819237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1753.820755] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1753.838186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1753.867725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1753.887818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1753.906898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.908548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.911696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1753.917062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.918732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.918849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.921117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1753.921732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.927171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1753.942886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.944692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.945603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1753.955740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1753.965508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.967233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.979661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}}, 0x0) unshare(0x48020200) 11:42:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:42:47 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x8, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:42:47 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 57) 11:42:47 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 23) 11:42:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 51) 11:42:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}}, 0x0) unshare(0x48020200) 11:42:47 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1770.793218] FAULT_INJECTION: forcing a failure. [ 1770.793218] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.796518] CPU: 1 PID: 9643 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1770.797697] FAULT_INJECTION: forcing a failure. [ 1770.797697] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.798291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.798300] Call Trace: [ 1770.798343] dump_stack+0x107/0x167 [ 1770.804326] should_fail.cold+0x5/0xa [ 1770.805302] ? create_object.isra.0+0x3a/0xa30 [ 1770.806486] should_failslab+0x5/0x20 [ 1770.807455] kmem_cache_alloc+0x5b/0x310 [ 1770.808492] ? lock_downgrade+0x6d0/0x6d0 [ 1770.809562] create_object.isra.0+0x3a/0xa30 [ 1770.810674] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.811976] __kmalloc_track_caller+0x177/0x370 [ 1770.813164] ? p9_client_create+0x41d/0x1230 [ 1770.814307] kstrdup+0x36/0x70 [ 1770.815131] p9_client_create+0x41d/0x1230 [ 1770.816211] ? lock_downgrade+0x6d0/0x6d0 [ 1770.817274] ? p9_client_flush+0x430/0x430 [ 1770.818354] ? trace_hardirqs_on+0x5b/0x180 [ 1770.819455] ? lockdep_init_map_type+0x2c7/0x780 [ 1770.820676] ? __raw_spin_lock_init+0x36/0x110 [ 1770.821807] v9fs_session_init+0x1dd/0x1680 [ 1770.822480] ? lock_release+0x680/0x680 [ 1770.823111] ? kmem_cache_alloc_trace+0x151/0x320 [ 1770.823886] ? v9fs_show_options+0x690/0x690 [ 1770.824590] ? trace_hardirqs_on+0x5b/0x180 [ 1770.825285] ? kasan_unpoison_shadow+0x33/0x50 [ 1770.826005] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.826763] v9fs_mount+0x79/0x8f0 [ 1770.827291] ? v9fs_write_inode+0x60/0x60 [ 1770.827921] legacy_get_tree+0x105/0x220 [ 1770.828526] vfs_get_tree+0x8e/0x300 [ 1770.829107] path_mount+0x1490/0x21e0 [ 1770.829694] ? strncpy_from_user+0x9e/0x470 [ 1770.830338] ? finish_automount+0xa90/0xa90 [ 1770.830996] ? getname_flags.part.0+0x1dd/0x4f0 [ 1770.831698] ? _copy_from_user+0xfb/0x1b0 [ 1770.832332] __x64_sys_mount+0x282/0x300 [ 1770.832946] ? copy_mnt_ns+0xa00/0xa00 [ 1770.833539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.834326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.835105] do_syscall_64+0x33/0x40 [ 1770.835656] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.836443] RIP: 0033:0x7fa3b8173b19 [ 1770.836996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.839780] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1770.840919] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1770.841999] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1770.843072] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1770.844138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.845212] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1770.846326] CPU: 0 PID: 9640 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1770.847803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.849557] Call Trace: [ 1770.850118] dump_stack+0x107/0x167 [ 1770.850890] should_fail.cold+0x5/0xa [ 1770.851694] ? __kmem_cache_create+0x10e/0x520 [ 1770.852654] should_failslab+0x5/0x20 [ 1770.853454] kmem_cache_alloc_node+0x55/0x330 [ 1770.854414] __kmem_cache_create+0x10e/0x520 [ 1770.855346] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1770.856420] p9_client_create+0xc6a/0x1230 [ 1770.857313] ? p9_client_flush+0x430/0x430 [ 1770.858253] ? trace_hardirqs_on+0x5b/0x180 [ 1770.859216] ? lockdep_init_map_type+0x2c7/0x780 [ 1770.860245] ? __raw_spin_lock_init+0x36/0x110 [ 1770.861231] v9fs_session_init+0x1dd/0x1680 [ 1770.862164] ? lock_release+0x680/0x680 [ 1770.863015] ? kmem_cache_alloc_trace+0x151/0x320 [ 1770.864038] ? v9fs_show_options+0x690/0x690 [ 1770.865007] ? trace_hardirqs_on+0x5b/0x180 [ 1770.865976] ? kasan_unpoison_shadow+0x33/0x50 [ 1770.866954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.868075] v9fs_mount+0x79/0x8f0 [ 1770.868846] ? v9fs_write_inode+0x60/0x60 [ 1770.869770] legacy_get_tree+0x105/0x220 [ 1770.870672] vfs_get_tree+0x8e/0x300 [ 1770.871482] path_mount+0x1490/0x21e0 [ 1770.872327] ? strncpy_from_user+0x9e/0x470 [ 1770.873280] ? finish_automount+0xa90/0xa90 [ 1770.874233] ? getname_flags.part.0+0x1dd/0x4f0 [ 1770.875266] ? _copy_from_user+0xfb/0x1b0 [ 1770.876181] __x64_sys_mount+0x282/0x300 [ 1770.877037] ? copy_mnt_ns+0xa00/0xa00 [ 1770.877874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.878984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.880083] do_syscall_64+0x33/0x40 [ 1770.880870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.881967] RIP: 0033:0x7f644830fb19 [ 1770.882752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.886645] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1770.888251] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1770.889774] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1770.891280] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1770.892796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.894312] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1770.896000] kmem_cache_create(9p-fcall-cache-370) failed with error -22 [ 1770.897153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1770.897449] CPU: 0 PID: 9640 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1770.900188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.901956] Call Trace: [ 1770.902515] dump_stack+0x107/0x167 [ 1770.903291] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1770.904410] p9_client_create+0xc6a/0x1230 [ 1770.905311] ? p9_client_flush+0x430/0x430 [ 1770.906222] ? trace_hardirqs_on+0x5b/0x180 [ 1770.907137] ? lockdep_init_map_type+0x2c7/0x780 [ 1770.908139] ? __raw_spin_lock_init+0x36/0x110 [ 1770.909116] v9fs_session_init+0x1dd/0x1680 [ 1770.910040] ? lock_release+0x680/0x680 [ 1770.910888] ? kmem_cache_alloc_trace+0x151/0x320 [ 1770.911914] ? v9fs_show_options+0x690/0x690 [ 1770.912852] ? trace_hardirqs_on+0x5b/0x180 [ 1770.913773] ? kasan_unpoison_shadow+0x33/0x50 [ 1770.914744] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.915824] v9fs_mount+0x79/0x8f0 [ 1770.916589] ? v9fs_write_inode+0x60/0x60 [ 1770.917477] legacy_get_tree+0x105/0x220 [ 1770.918349] vfs_get_tree+0x8e/0x300 [ 1770.919136] path_mount+0x1490/0x21e0 [ 1770.919946] ? strncpy_from_user+0x9e/0x470 [ 1770.920868] ? finish_automount+0xa90/0xa90 [ 1770.921799] ? getname_flags.part.0+0x1dd/0x4f0 [ 1770.922789] ? _copy_from_user+0xfb/0x1b0 [ 1770.923675] __x64_sys_mount+0x282/0x300 [ 1770.924539] ? copy_mnt_ns+0xa00/0xa00 [ 1770.925373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.926500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.927627] do_syscall_64+0x33/0x40 [ 1770.928449] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.929553] RIP: 0033:0x7f644830fb19 [ 1770.930347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.934259] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1770.935873] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1770.937386] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1770.938926] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1770.940441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.941967] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1770.958924] FAULT_INJECTION: forcing a failure. [ 1770.958924] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.960828] CPU: 1 PID: 9645 Comm: syz-executor.4 Not tainted 5.10.246 #1 11:42:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1770.961884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.963404] Call Trace: [ 1770.963954] dump_stack+0x107/0x167 [ 1770.964591] should_fail.cold+0x5/0xa [ 1770.965171] ? create_object.isra.0+0x3a/0xa30 [ 1770.965894] should_failslab+0x5/0x20 [ 1770.966472] kmem_cache_alloc+0x5b/0x310 [ 1770.967122] ? lock_acquire+0x197/0x470 [ 1770.967737] create_object.isra.0+0x3a/0xa30 [ 1770.968420] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.969208] __kmalloc_track_caller+0x177/0x370 [ 1770.969936] ? kstrdup_const+0x53/0x80 [ 1770.970539] ? kasprintf+0xbb/0xf0 [ 1770.971096] kstrdup+0x36/0x70 [ 1770.971576] kstrdup_const+0x53/0x80 [ 1770.972147] kmem_cache_create_usercopy+0x12f/0x2f0 [ 1770.972921] p9_client_create+0xc6a/0x1230 [ 1770.973608] ? p9_client_flush+0x430/0x430 [ 1770.974265] ? trace_hardirqs_on+0x5b/0x180 [ 1770.974947] ? lockdep_init_map_type+0x2c7/0x780 [ 1770.975696] ? __raw_spin_lock_init+0x36/0x110 [ 1770.976393] v9fs_session_init+0x1dd/0x1680 [ 1770.977051] ? lock_release+0x680/0x680 [ 1770.977686] ? kmem_cache_alloc_trace+0x151/0x320 [ 1770.978410] ? v9fs_show_options+0x690/0x690 [ 1770.979072] ? trace_hardirqs_on+0x5b/0x180 [ 1770.979712] ? kasan_unpoison_shadow+0x33/0x50 [ 1770.980396] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.981184] v9fs_mount+0x79/0x8f0 [ 1770.981757] ? v9fs_write_inode+0x60/0x60 [ 1770.982383] legacy_get_tree+0x105/0x220 [ 1770.983011] vfs_get_tree+0x8e/0x300 [ 1770.983563] path_mount+0x1490/0x21e0 [ 1770.984150] ? strncpy_from_user+0x9e/0x470 [ 1770.984794] ? finish_automount+0xa90/0xa90 [ 1770.985448] ? getname_flags.part.0+0x1dd/0x4f0 [ 1770.986166] ? _copy_from_user+0xfb/0x1b0 [ 1770.986803] __x64_sys_mount+0x282/0x300 [ 1770.987416] ? copy_mnt_ns+0xa00/0xa00 [ 1770.988026] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.988805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.989592] do_syscall_64+0x33/0x40 [ 1770.990161] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.990919] RIP: 0033:0x7f2d92adab19 [ 1770.991493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.994397] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1770.995558] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1770.996648] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1770.997742] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1770.998828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.999903] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1771.018245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.019876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:42:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1771.038379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1771.041246] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1771.054469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1771.066594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.067709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.069131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:47 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 58) [ 1771.088738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.089859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.091103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:42:47 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x9, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:42:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:42:47 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1771.207186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1771.260557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1771.274753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.276408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.278893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.280152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.280295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1771.286665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1771.292968] FAULT_INJECTION: forcing a failure. [ 1771.292968] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.296127] CPU: 0 PID: 9662 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1771.297611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1771.299389] Call Trace: [ 1771.299963] dump_stack+0x107/0x167 [ 1771.300748] should_fail.cold+0x5/0xa [ 1771.301567] ? create_object.isra.0+0x3a/0xa30 [ 1771.302544] should_failslab+0x5/0x20 [ 1771.303364] kmem_cache_alloc+0x5b/0x310 [ 1771.304240] create_object.isra.0+0x3a/0xa30 [ 1771.305178] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1771.306278] __kmalloc_track_caller+0x177/0x370 [ 1771.307263] ? kstrdup_const+0x53/0x80 [ 1771.308096] kstrdup+0x36/0x70 [ 1771.308787] kstrdup_const+0x53/0x80 [ 1771.309590] kmem_cache_create_usercopy+0x12f/0x2f0 [ 1771.310662] p9_client_create+0xc6a/0x1230 [ 1771.311571] ? p9_client_flush+0x430/0x430 [ 1771.312476] ? trace_hardirqs_on+0x5b/0x180 [ 1771.313398] ? lockdep_init_map_type+0x2c7/0x780 [ 1771.314424] ? __raw_spin_lock_init+0x36/0x110 [ 1771.315409] v9fs_session_init+0x1dd/0x1680 [ 1771.316330] ? lock_release+0x680/0x680 [ 1771.317190] ? kmem_cache_alloc_trace+0x151/0x320 [ 1771.318231] ? v9fs_show_options+0x690/0x690 [ 1771.319169] ? trace_hardirqs_on+0x5b/0x180 [ 1771.320098] ? kasan_unpoison_shadow+0x33/0x50 [ 1771.321071] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1771.322164] v9fs_mount+0x79/0x8f0 [ 1771.322922] ? v9fs_write_inode+0x60/0x60 [ 1771.323805] legacy_get_tree+0x105/0x220 [ 1771.324672] vfs_get_tree+0x8e/0x300 [ 1771.325477] path_mount+0x1490/0x21e0 [ 1771.326297] ? strncpy_from_user+0x9e/0x470 [ 1771.327220] ? finish_automount+0xa90/0xa90 [ 1771.328138] ? getname_flags.part.0+0x1dd/0x4f0 [ 1771.329126] ? _copy_from_user+0xfb/0x1b0 [ 1771.330057] __x64_sys_mount+0x282/0x300 [ 1771.330921] ? copy_mnt_ns+0xa00/0xa00 [ 1771.331751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1771.332873] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1771.333981] do_syscall_64+0x33/0x40 [ 1771.334777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1771.335863] RIP: 0033:0x7f644830fb19 [ 1771.336653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1771.340572] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1771.342205] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1771.343714] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1771.345228] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1771.346762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1771.348272] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1771.358801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:42:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:42:47 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b53a79c01949d4f220c7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e17e2cfa917e79a2a35bb2b6dbca97391"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1771.373539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.374559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.375850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4084, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:42:47 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0xa, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1771.417482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1771.459638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1771.485576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.486530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.490544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:47 executing program 0: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1771.501414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:42:47 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 24) [ 1771.515223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.516336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.517283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 52) [ 1771.545359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.546627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.554187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:42:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4800, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:42:47 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0xb, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1771.584604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1771.587456] FAULT_INJECTION: forcing a failure. [ 1771.587456] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.588874] CPU: 1 PID: 9692 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1771.589729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1771.590739] Call Trace: [ 1771.591073] dump_stack+0x107/0x167 [ 1771.591515] should_fail.cold+0x5/0xa [ 1771.591988] ? create_object.isra.0+0x3a/0xa30 [ 1771.592544] should_failslab+0x5/0x20 [ 1771.593023] kmem_cache_alloc+0x5b/0x310 [ 1771.593524] create_object.isra.0+0x3a/0xa30 [ 1771.594051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1771.594668] kmem_cache_alloc+0x159/0x310 [ 1771.595170] kmem_cache_create_usercopy+0x190/0x2f0 [ 1771.595777] p9_client_create+0xc6a/0x1230 [ 1771.596314] ? p9_client_flush+0x430/0x430 [ 1771.596826] ? trace_hardirqs_on+0x5b/0x180 [ 1771.597356] ? lockdep_init_map_type+0x2c7/0x780 [ 1771.597952] ? __raw_spin_lock_init+0x36/0x110 [ 1771.598509] v9fs_session_init+0x1dd/0x1680 [ 1771.599035] ? lock_release+0x680/0x680 [ 1771.599525] ? kmem_cache_alloc_trace+0x151/0x320 [ 1771.600118] ? v9fs_show_options+0x690/0x690 [ 1771.600662] ? trace_hardirqs_on+0x5b/0x180 [ 1771.601182] ? kasan_unpoison_shadow+0x33/0x50 [ 1771.601756] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1771.602374] v9fs_mount+0x79/0x8f0 [ 1771.602811] ? v9fs_write_inode+0x60/0x60 [ 1771.603319] legacy_get_tree+0x105/0x220 [ 1771.603816] vfs_get_tree+0x8e/0x300 [ 1771.604259] path_mount+0x1490/0x21e0 [ 1771.604729] ? strncpy_from_user+0x9e/0x470 [ 1771.605238] ? finish_automount+0xa90/0xa90 [ 1771.605539] FAULT_INJECTION: forcing a failure. [ 1771.605539] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.605780] ? getname_flags.part.0+0x1dd/0x4f0 [ 1771.605792] ? _copy_from_user+0xfb/0x1b0 [ 1771.605809] __x64_sys_mount+0x282/0x300 [ 1771.605828] ? copy_mnt_ns+0xa00/0xa00 [ 1771.610171] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1771.610820] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1771.611442] do_syscall_64+0x33/0x40 [ 1771.611898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1771.612514] RIP: 0033:0x7f2d92adab19 [ 1771.612965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1771.615159] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1771.616080] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1771.616942] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1771.617827] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1771.618694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1771.619578] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1771.620477] CPU: 0 PID: 9694 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1771.621968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1771.623740] Call Trace: [ 1771.624307] dump_stack+0x107/0x167 [ 1771.625088] should_fail.cold+0x5/0xa [ 1771.625920] should_failslab+0x5/0x20 [ 1771.626739] __kmalloc_track_caller+0x79/0x370 [ 1771.627715] ? p9_client_create+0x51e/0x1230 [ 1771.628663] kmemdup_nul+0x2d/0xa0 [ 1771.629422] p9_client_create+0x51e/0x1230 [ 1771.630344] ? p9_client_flush+0x430/0x430 [ 1771.631265] ? trace_hardirqs_on+0x5b/0x180 [ 1771.632182] ? lockdep_init_map_type+0x2c7/0x780 [ 1771.633207] ? __raw_spin_lock_init+0x36/0x110 [ 1771.634210] v9fs_session_init+0x1dd/0x1680 [ 1771.635137] ? lock_release+0x680/0x680 [ 1771.635992] ? kmem_cache_alloc_trace+0x151/0x320 [ 1771.637024] ? v9fs_show_options+0x690/0x690 [ 1771.637995] ? trace_hardirqs_on+0x5b/0x180 [ 1771.638925] ? kasan_unpoison_shadow+0x33/0x50 [ 1771.639911] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1771.640992] v9fs_mount+0x79/0x8f0 [ 1771.641767] ? v9fs_write_inode+0x60/0x60 [ 1771.642657] legacy_get_tree+0x105/0x220 [ 1771.643527] vfs_get_tree+0x8e/0x300 [ 1771.644327] path_mount+0x1490/0x21e0 [ 1771.645145] ? strncpy_from_user+0x9e/0x470 [ 1771.646080] ? finish_automount+0xa90/0xa90 [ 1771.647015] ? getname_flags.part.0+0x1dd/0x4f0 [ 1771.648013] ? _copy_from_user+0xfb/0x1b0 [ 1771.648905] __x64_sys_mount+0x282/0x300 [ 1771.649791] ? copy_mnt_ns+0xa00/0xa00 [ 1771.650625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1771.651740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1771.652843] do_syscall_64+0x33/0x40 [ 1771.653642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1771.654744] RIP: 0033:0x7fa3b8173b19 [ 1771.655532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1771.659465] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1771.661084] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1771.662601] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1771.664117] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1771.665643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1771.667155] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1771.699265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.700134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.701011] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1771.723085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.723946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.724856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1771.743846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.744698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.745601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:43:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 53) 11:43:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 25) 11:43:00 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0xc, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:43:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 59) 11:43:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:43:00 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:43:00 executing program 0: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:43:00 executing program 1: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1784.512827] FAULT_INJECTION: forcing a failure. [ 1784.512827] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.514592] CPU: 0 PID: 9717 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1784.514870] FAULT_INJECTION: forcing a failure. [ 1784.514870] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.515567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.515573] Call Trace: [ 1784.515595] dump_stack+0x107/0x167 [ 1784.515617] should_fail.cold+0x5/0xa [ 1784.520577] ? __kmem_cache_create+0x10e/0x520 [ 1784.521239] should_failslab+0x5/0x20 [ 1784.521792] kmem_cache_alloc_node+0x55/0x330 [ 1784.522449] __kmem_cache_create+0x10e/0x520 [ 1784.523082] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1784.523799] p9_client_create+0xc6a/0x1230 [ 1784.524408] ? p9_client_flush+0x430/0x430 [ 1784.525032] ? trace_hardirqs_on+0x5b/0x180 [ 1784.525663] ? lockdep_init_map_type+0x2c7/0x780 [ 1784.526349] ? __raw_spin_lock_init+0x36/0x110 [ 1784.527006] v9fs_session_init+0x1dd/0x1680 [ 1784.527627] ? lock_release+0x680/0x680 [ 1784.528203] ? kmem_cache_alloc_trace+0x151/0x320 [ 1784.528905] ? v9fs_show_options+0x690/0x690 [ 1784.529544] ? trace_hardirqs_on+0x5b/0x180 [ 1784.530174] ? kasan_unpoison_shadow+0x33/0x50 [ 1784.530841] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.531571] v9fs_mount+0x79/0x8f0 [ 1784.532079] ? v9fs_write_inode+0x60/0x60 [ 1784.532677] legacy_get_tree+0x105/0x220 [ 1784.533268] vfs_get_tree+0x8e/0x300 [ 1784.533809] path_mount+0x1490/0x21e0 [ 1784.534357] ? strncpy_from_user+0x9e/0x470 [ 1784.534979] ? finish_automount+0xa90/0xa90 [ 1784.535612] ? getname_flags.part.0+0x1dd/0x4f0 [ 1784.536278] ? _copy_from_user+0xfb/0x1b0 [ 1784.536879] __x64_sys_mount+0x282/0x300 [ 1784.537456] ? copy_mnt_ns+0xa00/0xa00 [ 1784.538020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.538773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.539514] do_syscall_64+0x33/0x40 [ 1784.540047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.540797] RIP: 0033:0x7f644830fb19 [ 1784.541334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.543980] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1784.545067] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1784.546095] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1784.547134] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1784.548151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.549222] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1784.550297] CPU: 1 PID: 9709 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1784.550342] kmem_cache_create(9p-fcall-cache-375) failed with error -22 [ 1784.551750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.551758] Call Trace: [ 1784.551786] dump_stack+0x107/0x167 [ 1784.555763] should_fail.cold+0x5/0xa [ 1784.556572] ? create_object.isra.0+0x3a/0xa30 [ 1784.557537] should_failslab+0x5/0x20 [ 1784.558350] kmem_cache_alloc+0x5b/0x310 [ 1784.559210] create_object.isra.0+0x3a/0xa30 [ 1784.560135] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.561206] __kmalloc_track_caller+0x177/0x370 [ 1784.562190] ? p9_client_create+0x51e/0x1230 [ 1784.563116] kmemdup_nul+0x2d/0xa0 [ 1784.563861] p9_client_create+0x51e/0x1230 [ 1784.564757] ? p9_client_flush+0x430/0x430 [ 1784.565651] ? trace_hardirqs_on+0x5b/0x180 [ 1784.566562] ? lockdep_init_map_type+0x2c7/0x780 [ 1784.567557] ? __raw_spin_lock_init+0x36/0x110 [ 1784.568532] v9fs_session_init+0x1dd/0x1680 [ 1784.569438] ? lock_release+0x680/0x680 [ 1784.570297] ? kmem_cache_alloc_trace+0x151/0x320 [ 1784.571311] ? v9fs_show_options+0x690/0x690 [ 1784.572244] ? trace_hardirqs_on+0x5b/0x180 [ 1784.573162] ? kasan_unpoison_shadow+0x33/0x50 [ 1784.574130] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.575198] v9fs_mount+0x79/0x8f0 [ 1784.575947] ? v9fs_write_inode+0x60/0x60 [ 1784.576815] legacy_get_tree+0x105/0x220 [ 1784.577681] vfs_get_tree+0x8e/0x300 [ 1784.578462] path_mount+0x1490/0x21e0 [ 1784.579272] ? strncpy_from_user+0x9e/0x470 [ 1784.580183] ? finish_automount+0xa90/0xa90 [ 1784.581096] ? getname_flags.part.0+0x1dd/0x4f0 [ 1784.582082] ? _copy_from_user+0xfb/0x1b0 [ 1784.582967] __x64_sys_mount+0x282/0x300 [ 1784.583818] ? copy_mnt_ns+0xa00/0xa00 [ 1784.584642] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.585757] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.586851] do_syscall_64+0x33/0x40 [ 1784.587633] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.588710] RIP: 0033:0x7fa3b8173b19 [ 1784.589493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.593375] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1784.594988] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1784.596490] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1784.598005] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1784.599513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.601020] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1784.602550] CPU: 0 PID: 9717 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1784.603518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.604678] Call Trace: [ 1784.605044] dump_stack+0x107/0x167 [ 1784.605560] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1784.606322] p9_client_create+0xc6a/0x1230 [ 1784.606915] ? p9_client_flush+0x430/0x430 [ 1784.607509] ? trace_hardirqs_on+0x5b/0x180 [ 1784.608110] ? lockdep_init_map_type+0x2c7/0x780 [ 1784.608772] ? __raw_spin_lock_init+0x36/0x110 [ 1784.609416] v9fs_session_init+0x1dd/0x1680 [ 1784.610031] ? lock_release+0x680/0x680 [ 1784.610611] ? kmem_cache_alloc_trace+0x151/0x320 [ 1784.611300] ? v9fs_show_options+0x690/0x690 [ 1784.611948] ? trace_hardirqs_on+0x5b/0x180 [ 1784.612565] ? kasan_unpoison_shadow+0x33/0x50 [ 1784.613234] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.613959] v9fs_mount+0x79/0x8f0 [ 1784.614469] ? v9fs_write_inode+0x60/0x60 [ 1784.615051] legacy_get_tree+0x105/0x220 [ 1784.615625] vfs_get_tree+0x8e/0x300 [ 1784.616149] path_mount+0x1490/0x21e0 [ 1784.616684] ? strncpy_from_user+0x9e/0x470 [ 1784.617292] ? finish_automount+0xa90/0xa90 [ 1784.617924] ? getname_flags.part.0+0x1dd/0x4f0 [ 1784.618581] ? _copy_from_user+0xfb/0x1b0 [ 1784.619181] __x64_sys_mount+0x282/0x300 [ 1784.619748] ? copy_mnt_ns+0xa00/0xa00 [ 1784.619832] __nla_validate_parse: 2 callbacks suppressed [ 1784.619843] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1784.620307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.620322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.620337] do_syscall_64+0x33/0x40 [ 1784.620359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.625399] RIP: 0033:0x7f644830fb19 [ 1784.625947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.628571] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1784.629657] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1784.630662] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1784.631668] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1784.632108] FAULT_INJECTION: forcing a failure. [ 1784.632108] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.632682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.632700] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1784.637052] CPU: 1 PID: 9721 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1784.638495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.640249] Call Trace: [ 1784.640812] dump_stack+0x107/0x167 [ 1784.641584] should_fail.cold+0x5/0xa [ 1784.642401] ? __kmem_cache_create+0x10e/0x520 [ 1784.643356] should_failslab+0x5/0x20 [ 1784.644156] kmem_cache_alloc_node+0x55/0x330 [ 1784.645103] __kmem_cache_create+0x10e/0x520 [ 1784.646049] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1784.647105] p9_client_create+0xc6a/0x1230 [ 1784.648015] ? p9_client_flush+0x430/0x430 [ 1784.648922] ? trace_hardirqs_on+0x5b/0x180 [ 1784.649846] ? lockdep_init_map_type+0x2c7/0x780 [ 1784.650858] ? __raw_spin_lock_init+0x36/0x110 [ 1784.651831] v9fs_session_init+0x1dd/0x1680 [ 1784.652745] ? lock_release+0x680/0x680 [ 1784.653599] ? kmem_cache_alloc_trace+0x151/0x320 [ 1784.654629] ? v9fs_show_options+0x690/0x690 [ 1784.655571] ? trace_hardirqs_on+0x5b/0x180 [ 1784.656491] ? kasan_unpoison_shadow+0x33/0x50 [ 1784.657462] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.658548] v9fs_mount+0x79/0x8f0 [ 1784.659305] ? v9fs_write_inode+0x60/0x60 [ 1784.660185] legacy_get_tree+0x105/0x220 11:43:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6800, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1784.661050] vfs_get_tree+0x8e/0x300 [ 1784.662017] path_mount+0x1490/0x21e0 [ 1784.662828] ? strncpy_from_user+0x9e/0x470 [ 1784.663736] ? finish_automount+0xa90/0xa90 [ 1784.664654] ? getname_flags.part.0+0x1dd/0x4f0 [ 1784.665650] ? _copy_from_user+0xfb/0x1b0 [ 1784.666535] __x64_sys_mount+0x282/0x300 [ 1784.667393] ? copy_mnt_ns+0xa00/0xa00 [ 1784.668222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.669331] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.670443] do_syscall_64+0x33/0x40 [ 1784.671229] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.672307] RIP: 0033:0x7f2d92adab19 [ 1784.673096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.677018] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1784.678632] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1784.680145] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1784.681660] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1784.683180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.684691] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1784.687262] kmem_cache_create(9p-fcall-cache-376) failed with error -22 [ 1784.688902] CPU: 1 PID: 9721 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1784.690370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.692133] Call Trace: [ 1784.692711] dump_stack+0x107/0x167 [ 1784.693497] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1784.694626] p9_client_create+0xc6a/0x1230 [ 1784.695534] ? p9_client_flush+0x430/0x430 [ 1784.696427] ? trace_hardirqs_on+0x5b/0x180 [ 1784.697349] ? lockdep_init_map_type+0x2c7/0x780 [ 1784.698370] ? __raw_spin_lock_init+0x36/0x110 [ 1784.699345] v9fs_session_init+0x1dd/0x1680 [ 1784.700260] ? lock_release+0x680/0x680 [ 1784.701111] ? kmem_cache_alloc_trace+0x151/0x320 [ 1784.702142] ? v9fs_show_options+0x690/0x690 [ 1784.703080] ? trace_hardirqs_on+0x5b/0x180 [ 1784.703998] ? kasan_unpoison_shadow+0x33/0x50 [ 1784.704963] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.706051] v9fs_mount+0x79/0x8f0 [ 1784.706805] ? v9fs_write_inode+0x60/0x60 [ 1784.707680] legacy_get_tree+0x105/0x220 [ 1784.708546] vfs_get_tree+0x8e/0x300 [ 1784.709333] path_mount+0x1490/0x21e0 [ 1784.710148] ? strncpy_from_user+0x9e/0x470 [ 1784.711063] ? finish_automount+0xa90/0xa90 [ 1784.711974] ? getname_flags.part.0+0x1dd/0x4f0 11:43:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 60) [ 1784.712961] ? _copy_from_user+0xfb/0x1b0 [ 1784.714059] __x64_sys_mount+0x282/0x300 [ 1784.714925] ? copy_mnt_ns+0xa00/0xa00 [ 1784.715756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.716875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.717985] do_syscall_64+0x33/0x40 [ 1784.718777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.719864] RIP: 0033:0x7f2d92adab19 [ 1784.720652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.724547] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1784.726167] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1784.727693] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1784.729211] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1784.730743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.731000] FAULT_INJECTION: forcing a failure. [ 1784.731000] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.732230] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1784.734881] CPU: 0 PID: 9729 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1784.735815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.736962] Call Trace: [ 1784.737328] dump_stack+0x107/0x167 [ 1784.737832] should_fail.cold+0x5/0xa [ 1784.738358] ? create_object.isra.0+0x3a/0xa30 [ 1784.738982] should_failslab+0x5/0x20 [ 1784.739502] kmem_cache_alloc+0x5b/0x310 [ 1784.740053] ? mark_held_locks+0x9e/0xe0 [ 1784.740606] create_object.isra.0+0x3a/0xa30 [ 1784.741211] kmemleak_alloc_percpu+0xa0/0x100 [ 1784.741829] pcpu_alloc+0x4e2/0x1240 [ 1784.742343] __kmem_cache_create+0x35a/0x520 [ 1784.742939] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1784.743609] p9_client_create+0xc6a/0x1230 [ 1784.744192] ? p9_client_flush+0x430/0x430 [ 1784.744761] ? trace_hardirqs_on+0x5b/0x180 [ 1784.745343] ? lockdep_init_map_type+0x2c7/0x780 [ 1784.745988] ? __raw_spin_lock_init+0x36/0x110 [ 1784.746606] v9fs_session_init+0x1dd/0x1680 [ 1784.747194] ? lock_release+0x680/0x680 [ 1784.747737] ? kmem_cache_alloc_trace+0x151/0x320 [ 1784.748387] ? v9fs_show_options+0x690/0x690 [ 1784.748982] ? trace_hardirqs_on+0x5b/0x180 [ 1784.749564] ? kasan_unpoison_shadow+0x33/0x50 [ 1784.750185] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.750873] v9fs_mount+0x79/0x8f0 [ 1784.751353] ? v9fs_write_inode+0x60/0x60 [ 1784.751908] legacy_get_tree+0x105/0x220 [ 1784.752468] vfs_get_tree+0x8e/0x300 [ 1784.752971] path_mount+0x1490/0x21e0 [ 1784.753487] ? strncpy_from_user+0x9e/0x470 [ 1784.754084] ? finish_automount+0xa90/0xa90 [ 1784.754659] ? getname_flags.part.0+0x1dd/0x4f0 [ 1784.755283] ? _copy_from_user+0xfb/0x1b0 [ 1784.755842] __x64_sys_mount+0x282/0x300 [ 1784.756381] ? copy_mnt_ns+0xa00/0xa00 [ 1784.756903] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.757604] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.758304] do_syscall_64+0x33/0x40 [ 1784.758799] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.759484] RIP: 0033:0x7f644830fb19 [ 1784.759981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.762442] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1784.763459] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1784.764414] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1784.765382] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1784.766350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.767311] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1784.792266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:43:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6c00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1784.808618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1784.819068] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1784.827184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.828363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.829395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1784.830352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.831317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.841775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1784.845920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.846987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.849098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1784.851703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1784.853188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.854147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.860568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.861541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.869188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:43:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7400, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:43:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 54) [ 1784.889272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:43:01 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0xf, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:43:01 executing program 1: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0xc, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1784.959769] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1784.972470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1784.977948] FAULT_INJECTION: forcing a failure. [ 1784.977948] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.979471] CPU: 0 PID: 9743 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1784.980336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.981345] Call Trace: [ 1784.981707] dump_stack+0x107/0x167 [ 1784.982168] should_fail.cold+0x5/0xa [ 1784.982656] ? __kmem_cache_create+0x10e/0x520 [ 1784.983242] should_failslab+0x5/0x20 [ 1784.983732] kmem_cache_alloc_node+0x55/0x330 [ 1784.984292] __kmem_cache_create+0x10e/0x520 [ 1784.984848] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1784.985485] p9_client_create+0xc6a/0x1230 [ 1784.986007] ? p9_client_flush+0x430/0x430 [ 1784.986555] ? trace_hardirqs_on+0x5b/0x180 [ 1784.987084] ? lockdep_init_map_type+0x2c7/0x780 [ 1784.987692] ? __raw_spin_lock_init+0x36/0x110 [ 1784.988274] v9fs_session_init+0x1dd/0x1680 [ 1784.988822] ? lock_release+0x680/0x680 [ 1784.989318] ? kmem_cache_alloc_trace+0x151/0x320 [ 1784.989933] ? v9fs_show_options+0x690/0x690 [ 1784.990471] ? trace_hardirqs_on+0x5b/0x180 [ 1784.991019] ? kasan_unpoison_shadow+0x33/0x50 [ 1784.991572] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.992210] v9fs_mount+0x79/0x8f0 [ 1784.992651] ? v9fs_write_inode+0x60/0x60 [ 1784.993152] legacy_get_tree+0x105/0x220 [ 1784.993675] vfs_get_tree+0x8e/0x300 [ 1784.994137] path_mount+0x1490/0x21e0 [ 1784.994621] ? strncpy_from_user+0x9e/0x470 [ 1784.995166] ? finish_automount+0xa90/0xa90 [ 1784.995708] ? getname_flags.part.0+0x1dd/0x4f0 [ 1784.996287] ? _copy_from_user+0xfb/0x1b0 [ 1784.996812] __x64_sys_mount+0x282/0x300 [ 1784.997323] ? copy_mnt_ns+0xa00/0xa00 [ 1784.997813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.998478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.999095] do_syscall_64+0x33/0x40 [ 1784.999564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.000191] RIP: 0033:0x7f2d92adab19 [ 1785.000651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1785.002963] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1785.003934] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1785.004790] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1785.005688] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1785.006548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1785.007446] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1785.008392] kmem_cache_create(9p-fcall-cache-379) failed with error -22 [ 1785.009259] CPU: 0 PID: 9743 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1785.010122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1785.011117] Call Trace: [ 1785.011450] dump_stack+0x107/0x167 [ 1785.011915] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1785.012567] p9_client_create+0xc6a/0x1230 [ 1785.013090] ? p9_client_flush+0x430/0x430 [ 1785.013610] ? trace_hardirqs_on+0x5b/0x180 [ 1785.014157] ? lockdep_init_map_type+0x2c7/0x780 [ 1785.014743] ? __raw_spin_lock_init+0x36/0x110 [ 1785.015315] v9fs_session_init+0x1dd/0x1680 [ 1785.015869] ? lock_release+0x680/0x680 [ 1785.016351] ? kmem_cache_alloc_trace+0x151/0x320 [ 1785.016951] ? v9fs_show_options+0x690/0x690 [ 1785.017478] ? trace_hardirqs_on+0x5b/0x180 [ 1785.018010] ? kasan_unpoison_shadow+0x33/0x50 [ 1785.018573] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1785.019198] v9fs_mount+0x79/0x8f0 [ 1785.019634] ? v9fs_write_inode+0x60/0x60 [ 1785.020142] legacy_get_tree+0x105/0x220 [ 1785.020632] vfs_get_tree+0x8e/0x300 [ 1785.021083] path_mount+0x1490/0x21e0 [ 1785.021559] ? strncpy_from_user+0x9e/0x470 [ 1785.022098] ? finish_automount+0xa90/0xa90 [ 1785.022634] ? getname_flags.part.0+0x1dd/0x4f0 [ 1785.023192] ? _copy_from_user+0xfb/0x1b0 [ 1785.023712] __x64_sys_mount+0x282/0x300 [ 1785.024214] ? copy_mnt_ns+0xa00/0xa00 [ 1785.024690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1785.025333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1785.025954] do_syscall_64+0x33/0x40 [ 1785.026419] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.027040] RIP: 0033:0x7f2d92adab19 [ 1785.027484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1785.029668] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1785.030570] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1785.031417] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1785.032261] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1785.033104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1785.033953] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1785.043699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.044879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.045807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1785.046717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.047989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.053842] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1785.067714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1785.082136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.083745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.087594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:43:17 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1801.457076] FAULT_INJECTION: forcing a failure. [ 1801.457076] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.458527] CPU: 1 PID: 9762 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1801.459368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1801.460386] Call Trace: [ 1801.460720] dump_stack+0x107/0x167 [ 1801.461168] should_fail.cold+0x5/0xa [ 1801.461637] ? create_object.isra.0+0x3a/0xa30 [ 1801.462207] should_failslab+0x5/0x20 [ 1801.462674] kmem_cache_alloc+0x5b/0x310 [ 1801.463172] ? mark_held_locks+0x9e/0xe0 [ 1801.463670] create_object.isra.0+0x3a/0xa30 [ 1801.464217] kmemleak_alloc_percpu+0xa0/0x100 [ 1801.464772] pcpu_alloc+0x4e2/0x1240 [ 1801.465237] __kmem_cache_create+0x35a/0x520 [ 1801.465780] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1801.466402] p9_client_create+0xc6a/0x1230 [ 1801.466926] ? p9_client_flush+0x430/0x430 [ 1801.467448] ? trace_hardirqs_on+0x5b/0x180 [ 1801.467978] ? lockdep_init_map_type+0x2c7/0x780 [ 1801.468562] ? __raw_spin_lock_init+0x36/0x110 [ 1801.469127] v9fs_session_init+0x1dd/0x1680 [ 1801.469652] ? lock_release+0x680/0x680 [ 1801.470158] ? kmem_cache_alloc_trace+0x151/0x320 [ 1801.470744] ? v9fs_show_options+0x690/0x690 [ 1801.471282] ? trace_hardirqs_on+0x5b/0x180 [ 1801.471806] ? kasan_unpoison_shadow+0x33/0x50 [ 1801.472359] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1801.472979] v9fs_mount+0x79/0x8f0 [ 1801.473413] ? v9fs_write_inode+0x60/0x60 [ 1801.473924] legacy_get_tree+0x105/0x220 [ 1801.474420] vfs_get_tree+0x8e/0x300 [ 1801.474873] path_mount+0x1490/0x21e0 [ 1801.475342] ? strncpy_from_user+0x9e/0x470 [ 1801.475867] ? finish_automount+0xa90/0xa90 [ 1801.476395] ? getname_flags.part.0+0x1dd/0x4f0 [ 1801.476963] ? _copy_from_user+0xfb/0x1b0 [ 1801.477473] __x64_sys_mount+0x282/0x300 [ 1801.477978] ? copy_mnt_ns+0xa00/0xa00 [ 1801.478455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1801.479096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1801.479726] do_syscall_64+0x33/0x40 [ 1801.480182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1801.480805] RIP: 0033:0x7f644830fb19 [ 1801.481258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1801.483499] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1801.484428] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1801.485297] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1801.486173] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1801.487045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1801.487913] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1801.496757] FAULT_INJECTION: forcing a failure. [ 1801.496757] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.498195] CPU: 1 PID: 9771 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1801.499025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1801.499723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1801.500038] Call Trace: [ 1801.500052] dump_stack+0x107/0x167 [ 1801.500065] should_fail.cold+0x5/0xa [ 1801.500077] ? create_object.isra.0+0x3a/0xa30 [ 1801.500088] should_failslab+0x5/0x20 [ 1801.500099] kmem_cache_alloc+0x5b/0x310 [ 1801.500119] create_object.isra.0+0x3a/0xa30 [ 1801.505138] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1801.505958] kmem_cache_alloc+0x159/0x310 [ 1801.506541] kmem_cache_create_usercopy+0x190/0x2f0 [ 1801.507224] p9_client_create+0xc6a/0x1230 [ 1801.507724] ? p9_client_flush+0x430/0x430 [ 1801.508221] ? trace_hardirqs_on+0x5b/0x180 [ 1801.508727] ? lockdep_init_map_type+0x2c7/0x780 [ 1801.509281] ? __raw_spin_lock_init+0x36/0x110 11:43:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 55) 11:43:17 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x10, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:43:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7a00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:43:17 executing program 0: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b53a79c01949d4f220c7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f15"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:43:17 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 26) 11:43:17 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 61) 11:43:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}}, 0x0) unshare(0x48020200) [ 1801.509930] v9fs_session_init+0x1dd/0x1680 [ 1801.510540] ? lock_release+0x680/0x680 [ 1801.511038] ? kmem_cache_alloc_trace+0x151/0x320 [ 1801.511600] ? v9fs_show_options+0x690/0x690 [ 1801.512118] ? trace_hardirqs_on+0x5b/0x180 [ 1801.512621] ? kasan_unpoison_shadow+0x33/0x50 [ 1801.513152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1801.513769] v9fs_mount+0x79/0x8f0 [ 1801.514195] ? v9fs_write_inode+0x60/0x60 [ 1801.514697] legacy_get_tree+0x105/0x220 [ 1801.515176] vfs_get_tree+0x8e/0x300 [ 1801.515630] path_mount+0x1490/0x21e0 [ 1801.516080] ? strncpy_from_user+0x9e/0x470 [ 1801.516599] ? finish_automount+0xa90/0xa90 [ 1801.517125] ? getname_flags.part.0+0x1dd/0x4f0 [ 1801.517689] ? _copy_from_user+0xfb/0x1b0 [ 1801.518205] __x64_sys_mount+0x282/0x300 [ 1801.518695] ? copy_mnt_ns+0xa00/0xa00 [ 1801.519155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1801.519794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1801.520393] do_syscall_64+0x33/0x40 [ 1801.520845] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1801.521437] RIP: 0033:0x7f2d92adab19 [ 1801.521904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1801.524024] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1801.524948] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1801.525810] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1801.526700] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1801.527559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1801.528427] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1801.529887] FAULT_INJECTION: forcing a failure. [ 1801.529887] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.531249] CPU: 1 PID: 9763 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 1801.532073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1801.533069] Call Trace: [ 1801.533388] dump_stack+0x107/0x167 [ 1801.533828] should_fail.cold+0x5/0xa [ 1801.534297] should_failslab+0x5/0x20 [ 1801.534753] __kmalloc_track_caller+0x79/0x370 [ 1801.535301] ? parse_opts.part.0+0x8e/0x340 [ 1801.535823] kstrdup+0x36/0x70 [ 1801.536211] parse_opts.part.0+0x8e/0x340 [ 1801.536714] ? p9_fd_show_options+0x1c0/0x1c0 [ 1801.537252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1801.537880] ? quarantine_put+0x8b/0x1a0 [ 1801.538363] ? trace_hardirqs_on+0x5b/0x180 [ 1801.538878] ? kfree+0xd7/0x340 [ 1801.539279] p9_fd_create+0x98/0x4a0 [ 1801.539722] ? p9_conn_create+0x510/0x510 [ 1801.540218] ? p9_client_create+0x798/0x1230 [ 1801.540743] ? kfree+0xd7/0x340 [ 1801.541141] ? do_raw_spin_unlock+0x4f/0x220 [ 1801.541672] p9_client_create+0x7ff/0x1230 [ 1801.542188] ? p9_client_flush+0x430/0x430 [ 1801.542694] ? trace_hardirqs_on+0x5b/0x180 [ 1801.543210] ? lockdep_init_map_type+0x2c7/0x780 [ 1801.543776] ? __raw_spin_lock_init+0x36/0x110 [ 1801.544328] v9fs_session_init+0x1dd/0x1680 [ 1801.544843] ? lock_release+0x680/0x680 [ 1801.545324] ? kmem_cache_alloc_trace+0x151/0x320 [ 1801.545909] ? v9fs_show_options+0x690/0x690 [ 1801.546439] ? trace_hardirqs_on+0x5b/0x180 [ 1801.546955] ? kasan_unpoison_shadow+0x33/0x50 [ 1801.547503] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1801.548112] v9fs_mount+0x79/0x8f0 [ 1801.548542] ? v9fs_write_inode+0x60/0x60 [ 1801.549040] legacy_get_tree+0x105/0x220 [ 1801.549531] vfs_get_tree+0x8e/0x300 [ 1801.549985] path_mount+0x1490/0x21e0 [ 1801.550444] ? strncpy_from_user+0x9e/0x470 [ 1801.550963] ? finish_automount+0xa90/0xa90 [ 1801.551479] ? getname_flags.part.0+0x1dd/0x4f0 [ 1801.552037] ? _copy_from_user+0xfb/0x1b0 [ 1801.552538] __x64_sys_mount+0x282/0x300 [ 1801.553025] ? copy_mnt_ns+0xa00/0xa00 [ 1801.553498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1801.554133] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1801.554754] do_syscall_64+0x33/0x40 [ 1801.555202] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1801.555817] RIP: 0033:0x7fa3b8173b19 [ 1801.556265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1801.558465] RSP: 002b:00007fa3b56e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1801.559377] RAX: ffffffffffffffda RBX: 00007fa3b8286f60 RCX: 00007fa3b8173b19 [ 1801.560213] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1801.561023] RBP: 00007fa3b56e91d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1801.561835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1801.562652] R13: 00007ffe14e91d1f R14: 00007fa3b56e9300 R15: 0000000000022000 [ 1801.563499] 9pnet: Insufficient options for proto=fd [ 1801.577306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1801.586600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.588186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.589928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1801.602323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1801.610862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:43:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xae02, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1801.643592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.644430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.645297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1801.699789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.701672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.703466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:43:17 executing program 1: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1801.730078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.730895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.731824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1801.769825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1801.788355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.789185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.789988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:43:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 62) 11:43:33 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x11, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:43:33 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:43:33 executing program 0: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b53a79c01949d4f220c7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe5"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1816.847172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1816.862962] FAULT_INJECTION: forcing a failure. [ 1816.862962] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.865897] CPU: 0 PID: 9796 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1816.867672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1816.869811] Call Trace: [ 1816.870504] dump_stack+0x107/0x167 [ 1816.871447] should_fail.cold+0x5/0xa [ 1816.872426] ? create_object.isra.0+0x3a/0xa30 [ 1816.873593] should_failslab+0x5/0x20 [ 1816.874579] kmem_cache_alloc+0x5b/0x310 [ 1816.875619] ? lock_release+0x680/0x680 [ 1816.876642] create_object.isra.0+0x3a/0xa30 [ 1816.877765] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1816.879087] __kmalloc_track_caller+0x177/0x370 [ 1816.880282] ? kstrdup_const+0x53/0x80 [ 1816.881281] kstrdup+0x36/0x70 [ 1816.882161] kstrdup_const+0x53/0x80 [ 1816.883118] kvasprintf_const+0x10c/0x1a0 [ 1816.884184] kobject_set_name_vargs+0x56/0x150 [ 1816.885358] kobject_init_and_add+0xc9/0x160 [ 1816.886496] ? kobject_create_and_add+0xb0/0xb0 [ 1816.887695] ? wait_for_completion_io+0x270/0x270 [ 1816.888926] ? kernfs_name_hash+0xe7/0x110 [ 1816.890013] ? kernfs_find_ns+0x256/0x380 [ 1816.891102] sysfs_slab_add+0x172/0x200 [ 1816.892132] __kmem_cache_create+0x3db/0x520 [ 1816.893268] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1816.894576] p9_client_create+0xc6a/0x1230 [ 1816.895682] ? p9_client_flush+0x430/0x430 [ 1816.896782] ? trace_hardirqs_on+0x5b/0x180 [ 1816.897904] ? lockdep_init_map_type+0x2c7/0x780 [ 1816.899054] ? __raw_spin_lock_init+0x36/0x110 [ 1816.900070] v9fs_session_init+0x1dd/0x1680 [ 1816.901016] ? lock_release+0x680/0x680 [ 1816.901895] ? kmem_cache_alloc_trace+0x151/0x320 [ 1816.902960] ? v9fs_show_options+0x690/0x690 [ 1816.903934] ? trace_hardirqs_on+0x5b/0x180 [ 1816.904877] ? kasan_unpoison_shadow+0x33/0x50 [ 1816.905873] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1816.906999] v9fs_mount+0x79/0x8f0 [ 1816.907777] ? v9fs_write_inode+0x60/0x60 [ 1816.908682] legacy_get_tree+0x105/0x220 [ 1816.909571] vfs_get_tree+0x8e/0x300 [ 1816.910401] path_mount+0x1490/0x21e0 [ 1816.911247] ? strncpy_from_user+0x9e/0x470 [ 1816.912189] ? finish_automount+0xa90/0xa90 [ 1816.913133] ? getname_flags.part.0+0x1dd/0x4f0 [ 1816.914157] ? _copy_from_user+0xfb/0x1b0 [ 1816.915072] __x64_sys_mount+0x282/0x300 [ 1816.915959] ? copy_mnt_ns+0xa00/0xa00 [ 1816.916815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1816.917964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1816.919104] do_syscall_64+0x33/0x40 [ 1816.919919] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1816.921040] RIP: 0033:0x7f644830fb19 [ 1816.921859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1816.925932] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1816.927611] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1816.929179] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1816.930766] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1816.932342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1816.933923] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 11:43:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 56) 11:43:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xdd01, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:43:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:43:33 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 27) [ 1816.955178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.956899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.958330] FAULT_INJECTION: forcing a failure. [ 1816.958330] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.958600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1816.960882] CPU: 0 PID: 9798 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1816.963784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1816.965625] Call Trace: [ 1816.966226] dump_stack+0x107/0x167 [ 1816.967037] should_fail.cold+0x5/0xa [ 1816.967883] ? create_object.isra.0+0x3a/0xa30 [ 1816.968894] should_failslab+0x5/0x20 [ 1816.969738] kmem_cache_alloc+0x5b/0x310 [ 1816.970654] create_object.isra.0+0x3a/0xa30 [ 1816.971631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1816.972762] kmem_cache_alloc_node+0x169/0x330 [ 1816.973778] __kmem_cache_create+0x10e/0x520 [ 1816.974768] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1816.975880] p9_client_create+0xc6a/0x1230 [ 1816.976827] ? p9_client_flush+0x430/0x430 [ 1816.977765] ? trace_hardirqs_on+0x5b/0x180 [ 1816.978738] ? lockdep_init_map_type+0x2c7/0x780 [ 1816.979799] ? __raw_spin_lock_init+0x36/0x110 [ 1816.980832] v9fs_session_init+0x1dd/0x1680 [ 1816.981797] ? lock_release+0x680/0x680 [ 1816.983005] ? kmem_cache_alloc_trace+0x151/0x320 [ 1816.984262] ? v9fs_show_options+0x690/0x690 [ 1816.985413] ? trace_hardirqs_on+0x5b/0x180 [ 1816.986558] ? kasan_unpoison_shadow+0x33/0x50 [ 1816.987634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1816.988817] v9fs_mount+0x79/0x8f0 [ 1816.989643] ? v9fs_write_inode+0x60/0x60 [ 1816.990611] legacy_get_tree+0x105/0x220 [ 1816.991555] vfs_get_tree+0x8e/0x300 [ 1816.992417] path_mount+0x1490/0x21e0 [ 1816.993303] ? strncpy_from_user+0x9e/0x470 [ 1816.994309] ? finish_automount+0xa90/0xa90 [ 1816.995309] ? getname_flags.part.0+0x1dd/0x4f0 [ 1816.996385] ? _copy_from_user+0xfb/0x1b0 [ 1816.997355] __x64_sys_mount+0x282/0x300 [ 1816.998303] ? copy_mnt_ns+0xa00/0xa00 [ 1816.999210] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1817.000425] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1817.001621] do_syscall_64+0x33/0x40 [ 1817.002491] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1817.003679] RIP: 0033:0x7f2d92adab19 [ 1817.004543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.005632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1817.008813] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1817.008835] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1817.008848] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1817.008860] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1817.008871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.008891] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1817.036888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1817.093246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1817.095176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1817.097416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1817.106689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1817.108379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1817.110580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:43:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:43:33 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) 11:43:33 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x25, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:43:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:43:33 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1817.237887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1817.258170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:43:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfeff, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1817.303674] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:43:33 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x2b, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:43:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 63) 11:43:33 executing program 1: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x25, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:43:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 57) [ 1817.414852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1817.418819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1817.447723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1817.449340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:43:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xff03, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1817.452265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1817.474750] FAULT_INJECTION: forcing a failure. [ 1817.474750] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.477233] CPU: 0 PID: 9839 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1817.478110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1817.478702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1817.478709] Call Trace: [ 1817.478737] dump_stack+0x107/0x167 [ 1817.478761] should_fail.cold+0x5/0xa [ 1817.484432] ? create_object.isra.0+0x3a/0xa30 [ 1817.485411] should_failslab+0x5/0x20 [ 1817.486241] kmem_cache_alloc+0x5b/0x310 [ 1817.487109] ? lock_release+0x680/0x680 [ 1817.487963] create_object.isra.0+0x3a/0xa30 [ 1817.488903] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1817.489995] __kmalloc_track_caller+0x177/0x370 [ 1817.490996] ? kstrdup_const+0x53/0x80 [ 1817.491833] kstrdup+0x36/0x70 [ 1817.492520] kstrdup_const+0x53/0x80 [ 1817.493308] kvasprintf_const+0x10c/0x1a0 [ 1817.494207] kobject_set_name_vargs+0x56/0x150 [ 1817.495190] kobject_init_and_add+0xc9/0x160 [ 1817.496129] ? kobject_create_and_add+0xb0/0xb0 [ 1817.497126] ? wait_for_completion_io+0x270/0x270 [ 1817.498162] ? kernfs_name_hash+0xe7/0x110 11:43:33 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) [ 1817.499065] ? kernfs_find_ns+0x256/0x380 [ 1817.500092] sysfs_slab_add+0x172/0x200 [ 1817.500931] __kmem_cache_create+0x3db/0x520 [ 1817.501873] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1817.502940] p9_client_create+0xc6a/0x1230 [ 1817.503837] ? p9_client_flush+0x430/0x430 [ 1817.504728] ? trace_hardirqs_on+0x5b/0x180 [ 1817.505637] ? lockdep_init_map_type+0x2c7/0x780 [ 1817.506648] ? __raw_spin_lock_init+0x36/0x110 [ 1817.507615] v9fs_session_init+0x1dd/0x1680 [ 1817.508521] ? lock_release+0x680/0x680 [ 1817.509368] ? kmem_cache_alloc_trace+0x151/0x320 [ 1817.510396] ? v9fs_show_options+0x690/0x690 [ 1817.511325] ? trace_hardirqs_on+0x5b/0x180 [ 1817.512236] ? kasan_unpoison_shadow+0x33/0x50 [ 1817.513189] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1817.514262] v9fs_mount+0x79/0x8f0 [ 1817.515010] ? v9fs_write_inode+0x60/0x60 [ 1817.515878] legacy_get_tree+0x105/0x220 [ 1817.516729] vfs_get_tree+0x8e/0x300 [ 1817.517511] path_mount+0x1490/0x21e0 [ 1817.518323] ? strncpy_from_user+0x9e/0x470 [ 1817.519230] ? finish_automount+0xa90/0xa90 [ 1817.520135] ? getname_flags.part.0+0x1dd/0x4f0 [ 1817.521116] ? _copy_from_user+0xfb/0x1b0 [ 1817.521994] __x64_sys_mount+0x282/0x300 [ 1817.522859] ? copy_mnt_ns+0xa00/0xa00 [ 1817.523681] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1817.524786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1817.525874] do_syscall_64+0x33/0x40 [ 1817.526665] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1817.527743] RIP: 0033:0x7f644830fb19 [ 1817.528525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.532406] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1817.534001] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1817.535490] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1817.536981] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1817.538490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.539979] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 11:43:33 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x32, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:43:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:43:33 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) 11:43:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffe, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1817.661631] FAULT_INJECTION: forcing a failure. [ 1817.661631] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.664065] CPU: 1 PID: 9842 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1817.665454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1817.667139] Call Trace: [ 1817.667689] dump_stack+0x107/0x167 [ 1817.668443] should_fail.cold+0x5/0xa [ 1817.669239] ? create_object.isra.0+0x3a/0xa30 [ 1817.670194] should_failslab+0x5/0x20 [ 1817.670946] kmem_cache_alloc+0x5b/0x310 [ 1817.671743] ? mark_held_locks+0x9e/0xe0 [ 1817.672544] create_object.isra.0+0x3a/0xa30 [ 1817.673429] kmemleak_alloc_percpu+0xa0/0x100 [ 1817.674354] pcpu_alloc+0x4e2/0x1240 [ 1817.675115] __kmem_cache_create+0x35a/0x520 [ 1817.675979] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1817.676969] p9_client_create+0xc6a/0x1230 [ 1817.677813] ? p9_client_flush+0x430/0x430 [ 1817.678656] ? trace_hardirqs_on+0x5b/0x180 [ 1817.679509] ? lockdep_init_map_type+0x2c7/0x780 [ 1817.680435] ? __raw_spin_lock_init+0x36/0x110 [ 1817.681345] v9fs_session_init+0x1dd/0x1680 [ 1817.682214] ? lock_release+0x680/0x680 [ 1817.683022] ? kmem_cache_alloc_trace+0x151/0x320 [ 1817.683976] ? v9fs_show_options+0x690/0x690 [ 1817.684853] ? trace_hardirqs_on+0x5b/0x180 [ 1817.685707] ? kasan_unpoison_shadow+0x33/0x50 [ 1817.686615] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1817.687627] v9fs_mount+0x79/0x8f0 [ 1817.688330] ? v9fs_write_inode+0x60/0x60 [ 1817.689158] legacy_get_tree+0x105/0x220 [ 1817.689961] vfs_get_tree+0x8e/0x300 [ 1817.690716] path_mount+0x1490/0x21e0 [ 1817.691498] ? strncpy_from_user+0x9e/0x470 [ 1817.692354] ? finish_automount+0xa90/0xa90 [ 1817.693225] ? getname_flags.part.0+0x1dd/0x4f0 [ 1817.694150] ? _copy_from_user+0xfb/0x1b0 [ 1817.694961] __x64_sys_mount+0x282/0x300 [ 1817.695763] ? copy_mnt_ns+0xa00/0xa00 [ 1817.696523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1817.697538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1817.698579] do_syscall_64+0x33/0x40 [ 1817.699304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1817.700327] RIP: 0033:0x7f2d92adab19 [ 1817.701056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.704679] RSP: 002b:00007f2d90050188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1817.706153] RAX: ffffffffffffffda RBX: 00007f2d92bedf60 RCX: 00007f2d92adab19 [ 1817.707532] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1817.708927] RBP: 00007f2d900501d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1817.710327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.711728] R13: 00007ffffa5abb7f R14: 00007f2d90050300 R15: 0000000000022000 [ 1817.723831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:43:46 executing program 1: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:43:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) (fail_nth: 58) 11:43:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="018200008000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 11:43:46 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) 11:43:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1c43a, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:43:46 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x69, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:43:46 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 64) 11:43:46 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 1830.551370] FAULT_INJECTION: forcing a failure. [ 1830.551370] name failslab, interval 1, probability 0, space 0, times 0 [ 1830.553882] __nla_validate_parse: 1 callbacks suppressed [ 1830.553892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1830.554129] CPU: 0 PID: 9871 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1830.557967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1830.559645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1830.559747] Call Trace: [ 1830.561457] dump_stack+0x107/0x167 [ 1830.562254] should_fail.cold+0x5/0xa [ 1830.563076] ? create_object.isra.0+0x3a/0xa30 [ 1830.564056] should_failslab+0x5/0x20 [ 1830.564871] kmem_cache_alloc+0x5b/0x310 [ 1830.565739] ? lock_release+0x680/0x680 [ 1830.566599] create_object.isra.0+0x3a/0xa30 [ 1830.567544] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1830.568836] __kmalloc_track_caller+0x177/0x370 [ 1830.569818] ? kstrdup_const+0x53/0x80 [ 1830.570819] kstrdup+0x36/0x70 [ 1830.571499] kstrdup_const+0x53/0x80 [ 1830.572458] kvasprintf_const+0x10c/0x1a0 [ 1830.573337] kobject_set_name_vargs+0x56/0x150 [ 1830.574525] kobject_init_and_add+0xc9/0x160 [ 1830.575506] ? kobject_create_and_add+0xb0/0xb0 [ 1830.576495] ? wait_for_completion_io+0x270/0x270 [ 1830.577507] ? kernfs_name_hash+0xe7/0x110 [ 1830.578600] ? kernfs_find_ns+0x256/0x380 [ 1830.579496] sysfs_slab_add+0x172/0x200 11:43:46 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) [ 1830.580340] __kmem_cache_create+0x3db/0x520 [ 1830.581586] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1830.582924] p9_client_create+0xc6a/0x1230 [ 1830.583855] ? p9_client_flush+0x430/0x430 [ 1830.584941] ? trace_hardirqs_on+0x5b/0x180 [ 1830.585888] ? lockdep_init_map_type+0x2c7/0x780 [ 1830.586952] ? __raw_spin_lock_init+0x36/0x110 [ 1830.587950] v9fs_session_init+0x1dd/0x1680 [ 1830.588885] ? lock_release+0x680/0x680 [ 1830.589761] ? kmem_cache_alloc_trace+0x151/0x320 [ 1830.590806] ? v9fs_show_options+0x690/0x690 [ 1830.591771] ? trace_hardirqs_on+0x5b/0x180 [ 1830.592699] ? kasan_unpoison_shadow+0x33/0x50 [ 1830.593681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1830.594789] v9fs_mount+0x79/0x8f0 [ 1830.595562] ? v9fs_write_inode+0x60/0x60 [ 1830.596461] legacy_get_tree+0x105/0x220 [ 1830.597348] vfs_get_tree+0x8e/0x300 [ 1830.598158] path_mount+0x1490/0x21e0 [ 1830.599001] ? strncpy_from_user+0x9e/0x470 [ 1830.599937] ? finish_automount+0xa90/0xa90 [ 1830.600879] ? getname_flags.part.0+0x1dd/0x4f0 [ 1830.601887] ? _copy_from_user+0xfb/0x1b0 [ 1830.602808] __x64_sys_mount+0x282/0x300 [ 1830.603688] ? copy_mnt_ns+0xa00/0xa00 [ 1830.604212] 9pnet: Insufficient options for proto=fd [ 1830.604543] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1830.606519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1830.607638] do_syscall_64+0x33/0x40 [ 1830.608448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1830.609557] RIP: 0033:0x7f644830fb19 [ 1830.610382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1830.614367] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1830.616017] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1830.617552] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1830.619102] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1830.620637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1830.622180] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 11:43:46 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) [ 1830.638308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1830.647202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.648771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.653563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:43:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) [ 1830.691375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.692940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.695230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:43:46 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6a, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) [ 1830.769197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1830.801828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:44:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) 11:44:00 executing program 0: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:44:00 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:44:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1c43b, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 11:44:00 executing program 1: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r4, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) dup(r6) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 11:44:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) 11:44:00 executing program 3: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x117, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) 11:44:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) (fail_nth: 65) [ 1844.474215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1844.480906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1844.498180] FAULT_INJECTION: forcing a failure. [ 1844.498180] name failslab, interval 1, probability 0, space 0, times 0 [ 1844.500976] CPU: 0 PID: 9924 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1844.502573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1844.504492] Call Trace: [ 1844.505104] dump_stack+0x107/0x167 [ 1844.505946] should_fail.cold+0x5/0xa [ 1844.506836] ? __kernfs_new_node+0xd4/0x860 [ 1844.507830] should_failslab+0x5/0x20 [ 1844.508708] kmem_cache_alloc+0x5b/0x310 [ 1844.509654] __kernfs_new_node+0xd4/0x860 [ 1844.510626] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1844.511729] ? lock_acquire+0x197/0x470 [ 1844.512650] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1844.513856] ? lock_release+0x680/0x680 [ 1844.514775] ? find_held_lock+0x2c/0x110 [ 1844.515720] kernfs_new_node+0x18d/0x250 [ 1844.516661] kernfs_create_dir_ns+0x49/0x160 [ 1844.517674] sysfs_create_dir_ns+0x127/0x290 [ 1844.518698] ? sysfs_create_mount_point+0xb0/0xb0 [ 1844.519803] ? rwlock_bug.part.0+0x90/0x90 [ 1844.520778] ? do_raw_spin_unlock+0x4f/0x220 [ 1844.521791] kobject_add_internal+0x25e/0xa30 [ 1844.522851] kobject_init_and_add+0x101/0x160 [ 1844.523881] ? kobject_create_and_add+0xb0/0xb0 [ 1844.524952] ? wait_for_completion_io+0x270/0x270 11:44:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) [ 1844.526056] ? kernfs_name_hash+0xe7/0x110 [ 1844.527253] ? kernfs_find_ns+0x256/0x380 [ 1844.528224] sysfs_slab_add+0x172/0x200 [ 1844.529145] __kmem_cache_create+0x3db/0x520 [ 1844.530172] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1844.531346] p9_client_create+0xc6a/0x1230 [ 1844.532336] ? p9_client_flush+0x430/0x430 [ 1844.533318] ? trace_hardirqs_on+0x5b/0x180 [ 1844.534316] ? lockdep_init_map_type+0x2c7/0x780 [ 1844.535421] ? __raw_spin_lock_init+0x36/0x110 [ 1844.536485] v9fs_session_init+0x1dd/0x1680 [ 1844.537482] ? lock_release+0x680/0x680 [ 1844.538428] ? kmem_cache_alloc_trace+0x151/0x320 [ 1844.539540] ? v9fs_show_options+0x690/0x690 [ 1844.540561] ? trace_hardirqs_on+0x5b/0x180 [ 1844.541551] ? kasan_unpoison_shadow+0x33/0x50 [ 1844.542613] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1844.543776] v9fs_mount+0x79/0x8f0 [ 1844.544591] ? v9fs_write_inode+0x60/0x60 [ 1844.545542] legacy_get_tree+0x105/0x220 [ 1844.546487] vfs_get_tree+0x8e/0x300 [ 1844.547354] path_mount+0x1490/0x21e0 [ 1844.548240] ? strncpy_from_user+0x9e/0x470 [ 1844.549235] ? finish_automount+0xa90/0xa90 [ 1844.550233] ? getname_flags.part.0+0x1dd/0x4f0 [ 1844.551326] ? _copy_from_user+0xfb/0x1b0 [ 1844.552296] __x64_sys_mount+0x282/0x300 [ 1844.553236] ? copy_mnt_ns+0xa00/0xa00 [ 1844.554131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1844.555349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1844.556542] do_syscall_64+0x33/0x40 [ 1844.557404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1844.558596] RIP: 0033:0x7f644830fb19 [ 1844.559460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1844.563708] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1844.565453] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1844.567102] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1844.568750] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1844.570395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1844.572038] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1844.576320] kobject_add_internal failed for 9p-fcall-cache-389 (error: -12 parent: slab) 11:44:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1c43c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1844.579400] kmem_cache_create(9p-fcall-cache-389) failed with error -12 [ 1844.581444] CPU: 0 PID: 9924 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1844.583017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1844.584926] Call Trace: [ 1844.585537] dump_stack+0x107/0x167 [ 1844.586383] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1844.587606] p9_client_create+0xc6a/0x1230 [ 1844.588594] ? p9_client_flush+0x430/0x430 [ 1844.589572] ? trace_hardirqs_on+0x5b/0x180 [ 1844.590573] ? lockdep_init_map_type+0x2c7/0x780 [ 1844.591661] ? __raw_spin_lock_init+0x36/0x110 [ 1844.592724] v9fs_session_init+0x1dd/0x1680 [ 1844.593728] ? lock_release+0x680/0x680 [ 1844.594668] ? kmem_cache_alloc_trace+0x151/0x320 [ 1844.595779] ? v9fs_show_options+0x690/0x690 [ 1844.596804] ? trace_hardirqs_on+0x5b/0x180 [ 1844.597820] ? kasan_unpoison_shadow+0x33/0x50 [ 1844.598897] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1844.600081] v9fs_mount+0x79/0x8f0 [ 1844.600913] ? v9fs_write_inode+0x60/0x60 [ 1844.601885] legacy_get_tree+0x105/0x220 [ 1844.602845] vfs_get_tree+0x8e/0x300 [ 1844.603711] path_mount+0x1490/0x21e0 [ 1844.604601] ? strncpy_from_user+0x9e/0x470 [ 1844.605615] ? finish_automount+0xa90/0xa90 [ 1844.606631] ? getname_flags.part.0+0x1dd/0x4f0 [ 1844.607714] ? _copy_from_user+0xfb/0x1b0 [ 1844.608691] __x64_sys_mount+0x282/0x300 [ 1844.609661] ? copy_mnt_ns+0xa00/0xa00 [ 1844.610581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1844.611798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1844.612999] do_syscall_64+0x33/0x40 [ 1844.613870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1844.615078] RIP: 0033:0x7f644830fb19 [ 1844.615951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1844.620282] RSP: 002b:00007f6445885188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1844.622061] RAX: ffffffffffffffda RBX: 00007f6448422f60 RCX: 00007f644830fb19 [ 1844.623738] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1844.625409] RBP: 00007f64458851d0 R08: 00000000200005c0 R09: 0000000000000000 [ 1844.627086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1844.628753] R13: 00007ffc4587d7ff R14: 00007f6445885300 R15: 0000000000022000 [ 1844.645381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:44:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) [ 1844.667618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1844.679900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:44:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid}]}}) 11:44:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1c43d, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 1844.709339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.711055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.712709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1844.717232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.718835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.719068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.721095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1844.721836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.742278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1858.887137] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888009b72140 (size 32): comm "syz-executor.6", pid 9924, jiffies 4296511478 (age 21.690s) hex dump (first 32 bytes): 39 70 2d 66 63 61 6c 6c 2d 63 61 63 68 65 2d 33 9p-fcall-cache-3 38 39 00 09 80 88 ff ff 5f 74 3a 73 30 00 ff ff 89......_t:s0... backtrace: [<0000000014f816f3>] kstrdup+0x36/0x70 [<000000005bd16e44>] kstrdup_const+0x53/0x80 [<000000004cf23abc>] kvasprintf_const+0x10c/0x1a0 [<00000000c697d2b1>] kobject_set_name_vargs+0x56/0x150 [<0000000004bd064f>] kobject_init_and_add+0xc9/0x160 [<00000000c9204871>] sysfs_slab_add+0x172/0x200 [<0000000008e0abac>] __kmem_cache_create+0x3db/0x520 [<00000000daae72a6>] kmem_cache_create_usercopy+0x1db/0x2f0 [<000000007a4c5121>] p9_client_create+0xc6a/0x1230 [<000000004b4844e8>] v9fs_session_init+0x1dd/0x1680 [<0000000046c18c05>] v9fs_mount+0x79/0x8f0 [<00000000bb115212>] legacy_get_tree+0x105/0x220 [<00000000b3d33b7a>] vfs_get_tree+0x8e/0x300 [<00000000a369c817>] path_mount+0x1490/0x21e0 [<00000000dd70f207>] __x64_sys_mount+0x282/0x300 [<000000008b325ed8>] do_syscall_64+0x33/0x40 BUG: leak checking failed VM DIAGNOSIS: 11:44:22 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff84eb9180 RDX=0000000000032046 RSI=0000000000006ce6 RDI=ffff88806ce09a58 RBP=ffff88806ce09a8d RSP=ffff88806ce09980 R8 =0000000000000003 R9 =ffff88806ce09da0 R10=0000000000032047 R11=1ffff1100d9c1338 R12=ffff88806ce09aa0 R13=ffff88806ce09a58 R14=1ffff1100d9c1338 R15=ffffffff816ce6aa RIP=ffffffff8110825f RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd15a3a2020 CR3=000000000915c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=3a29323320657a697328203034313237 XMM03=393920646970202c22362e726f747563 XMM04=2d6c6c6163662d703920203333206432 XMM05=64322063362063362031362033362036 XMM06=29736574796220323320747372696628 XMM07=362e3132206567612820383734313135 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e9ba40 RBX=0000000000000001 RCX=ffffffff83e836ac RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9c208 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff8567acc8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9ba4e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffedfc9be08 CR3=000000001e34e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004158de2600000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000