[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r7], 0x38}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000440)={'sit0\x00', r4, 0x6, 0x81, 0x81, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x8, 0x47, 0x80000000, 0x7}}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r9, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r11], 0x38}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x94, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40010}, 0x20000005) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 08:14:14 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}]}}) 08:14:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 1347.454578] FAULT_INJECTION: forcing a failure. [ 1347.454578] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.457041] CPU: 1 PID: 9569 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1347.458128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1347.459489] Call Trace: [ 1347.460008] dump_stack+0x107/0x167 [ 1347.461163] should_fail.cold+0x5/0xa [ 1347.462645] ? create_object.isra.0+0x3a/0xa20 [ 1347.463907] should_failslab+0x5/0x20 [ 1347.465280] kmem_cache_alloc+0x5b/0x310 [ 1347.465891] create_object.isra.0+0x3a/0xa20 [ 1347.467068] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1347.468449] kmem_cache_alloc+0x159/0x310 [ 1347.469573] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1347.471188] idr_get_free+0x4b5/0x8f0 [ 1347.472346] idr_alloc_u32+0x170/0x2d0 [ 1347.473467] ? __fprop_inc_percpu_max+0x130/0x130 [ 1347.474882] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1347.476438] ? lock_release+0x680/0x680 [ 1347.477615] idr_alloc+0xc2/0x130 [ 1347.478631] ? idr_alloc_u32+0x2d0/0x2d0 [ 1347.479819] ? rwlock_bug.part.0+0x90/0x90 [ 1347.481061] p9_client_prepare_req.part.0+0x612/0xac0 [ 1347.482534] p9_client_rpc+0x220/0x1360 [ 1347.483617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1347.485064] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1347.486534] ? pipe_poll+0x21b/0x7f0 [ 1347.487542] ? p9_fd_close+0x4a0/0x4a0 [ 1347.488593] ? anon_pipe_buf_release+0x280/0x280 [ 1347.489882] ? p9_fd_poll+0x1e0/0x2c0 [ 1347.490893] ? p9_fd_create+0x357/0x4a0 [ 1347.491968] ? p9_conn_create+0x510/0x510 [ 1347.493159] ? p9_client_create+0x798/0x11c0 [ 1347.494445] ? kfree+0xd7/0x340 [ 1347.495400] ? do_raw_spin_unlock+0x4f/0x220 [ 1347.496713] p9_client_create+0xa76/0x11c0 [ 1347.497951] ? p9_client_flush+0x430/0x430 [ 1347.499190] ? trace_hardirqs_on+0x5b/0x180 [ 1347.500458] ? lockdep_init_map_type+0x2c7/0x780 [ 1347.501834] ? __raw_spin_lock_init+0x36/0x110 [ 1347.503187] v9fs_session_init+0x1dd/0x1680 [ 1347.504450] ? lock_release+0x680/0x680 [ 1347.505612] ? kmem_cache_alloc_trace+0x151/0x320 [ 1347.506921] ? v9fs_show_options+0x690/0x690 [ 1347.508138] ? trace_hardirqs_on+0x5b/0x180 [ 1347.509324] ? kasan_unpoison_shadow+0x33/0x50 [ 1347.510569] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1347.511973] v9fs_mount+0x79/0x8f0 [ 1347.512906] ? v9fs_write_inode+0x60/0x60 [ 1347.514005] legacy_get_tree+0x105/0x220 [ 1347.515082] vfs_get_tree+0x8e/0x300 [ 1347.516133] path_mount+0x13be/0x20b0 [ 1347.517263] ? strncpy_from_user+0x9e/0x470 [ 1347.518608] ? finish_automount+0xa90/0xa90 [ 1347.519961] ? getname_flags.part.0+0x1dd/0x4f0 [ 1347.522353] ? _copy_from_user+0xfb/0x1b0 [ 1347.523645] __x64_sys_mount+0x282/0x300 [ 1347.524932] ? copy_mnt_ns+0xa00/0xa00 [ 1347.526758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1347.529267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1347.531305] do_syscall_64+0x33/0x40 [ 1347.532307] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1347.532983] RIP: 0033:0x7fef9ce93b19 [ 1347.533481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1347.535848] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1347.536948] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1347.537870] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1347.538780] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1347.539685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1347.540677] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:14:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000009000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:14:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 08:14:15 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='attr/fscreate\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r4, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='1', 0x1}], 0x6) 08:14:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 08:14:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001200010000000a000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1347.738199] SELinux: Context 1 is not valid (left unmapped). 08:14:15 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000009000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:14:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 1349.684126] Bluetooth: hci4: command 0x0405 tx timeout 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001200010000000b000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:14:33 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) mknodat(r0, &(0x7f0000000280)='./file0/file0\x00', 0x1, 0x10001) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f0000000400), &(0x7f0000000440)='./file1\x00', 0x8, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4) pipe(&(0x7f00000004c0)) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x161000, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) llistxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)=""/42, 0x2a) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)="8aa2d51e0a1edfa91a68404d8f95b5116a966ef1f8dc7a520ecc83c862e4d66f2687cd8650d547f9cb24", 0x2a, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x0, '\x00', {0x4}, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x0, 0x8) sendfile(r2, r3, 0x0, 0x100000001) 08:14:33 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) fcntl$dupfd(r0, 0x406, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 08:14:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:14:33 executing program 2: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='vfat\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="e6023096f4de5f0602f8d4a42998c8e8dd01ef72601cd9eb04e305efdddf14b8899414f0426f4bd206c1c76261399ef1c2cc5ebd080fe62e743fae0f639dfe91", @ANYRES16, @ANYBLOB="b0a704a06b801f385a4bd3ce854ca210ca6fb3ef440cec107d6d8b6a946a082e7b3f37334e3a8bb2b73d51fd466d68fcf8ad73708e13ec3d336587472d9b3603c95a51db8c7a22560ea6dfdfabd03aca3ba587ad593318e6f0aad3ec5b5ec5d1bc098ad3eb841ba9b6fadd84c1c4516dceaa2b4d8e513d4ef247b5215f022ffcbfa94f154ac49b883ee5bebdac540f49adaa0ab22bb6b667e710e86a966487b62f25b5b194b1314349b94877607262902e8ad7681e69898efdd1ad1bbb54541bf0356dc04f17a05f6e0aaf4152ab83331ec6bda9b9c609578667f0c4520eb698af37dc03f8c0e3fdd3c76379b28c87f5892d6b55361dcddbb425e00de3b53ce14f2b591bdc9dd18c6ce852e5dc8d34d95486de92bbd5ba8c05baf0ad029d692e3e744a61c3f0a253e0a02496a273dc428b5f57b5afab9492f365a8805046c1a32941d56b151ca21479f3b09342b987f8d9fc0a6e9719b35b095331d450fed49bdfae8c42829a4f9e63f59c2c40db5d1a0acc47dc5b08172475"]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x800000, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:14:33 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='attr/fscreate\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r4, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460981011f810000000000000003000600010000007e0200000000000040000000000000001c00000000000000d10000000300380002000100feff0000000000700300000002000000000000000900000000000000030000000000000000000000000000000500000000000000000000000000400000000060ffffffff0800000000000000f2000000000000000000000000000087adeb00030000000000000005000000000000000000000000000000b2d233284f94c91d748c568a67f61ed29aa245adfe3dad698fc8e0c8697cf12a843aea3fee6d798c05a7d605caac539f44fb295b60317716760c429990ccee64c6f90c8e20cff844361e93a4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"/1277], 0x4fd) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='1', 0x1}], 0x6) 08:14:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 08:14:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 43) [ 1366.068558] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001200010000000f000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:14:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) 08:14:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1366.223840] FAULT_INJECTION: forcing a failure. [ 1366.223840] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.225485] CPU: 0 PID: 9621 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1366.226537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1366.227831] Call Trace: [ 1366.228270] dump_stack+0x107/0x167 [ 1366.228841] should_fail.cold+0x5/0xa [ 1366.229436] ? create_object.isra.0+0x3a/0xa20 [ 1366.230163] should_failslab+0x5/0x20 [ 1366.230771] kmem_cache_alloc+0x5b/0x310 [ 1366.231416] create_object.isra.0+0x3a/0xa20 [ 1366.232090] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1366.232832] kmem_cache_alloc+0x159/0x310 [ 1366.233429] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1366.234222] idr_get_free+0x4b5/0x8f0 [ 1366.234765] idr_alloc_u32+0x170/0x2d0 [ 1366.235317] ? __fprop_inc_percpu_max+0x130/0x130 [ 1366.235986] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1366.237428] ? lock_release+0x680/0x680 [ 1366.238783] idr_alloc+0xc2/0x130 [ 1366.239907] ? idr_alloc_u32+0x2d0/0x2d0 [ 1366.241248] ? rwlock_bug.part.0+0x90/0x90 [ 1366.242631] p9_client_prepare_req.part.0+0x612/0xac0 [ 1366.244363] p9_client_rpc+0x220/0x1360 [ 1366.245646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1366.247408] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1366.249197] ? pipe_poll+0x21b/0x7f0 [ 1366.250386] ? p9_fd_close+0x4a0/0x4a0 [ 1366.251682] ? anon_pipe_buf_release+0x280/0x280 [ 1366.253272] ? p9_fd_poll+0x1e0/0x2c0 [ 1366.254540] ? p9_fd_create+0x357/0x4a0 [ 1366.255858] ? p9_conn_create+0x510/0x510 [ 1366.257249] ? p9_client_create+0x798/0x11c0 [ 1366.258686] ? kfree+0xd7/0x340 [ 1366.259773] ? do_raw_spin_unlock+0x4f/0x220 [ 1366.261250] p9_client_create+0xa76/0x11c0 [ 1366.262670] ? p9_client_flush+0x430/0x430 [ 1366.264058] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1366.265709] ? lockdep_init_map_type+0x2c7/0x780 [ 1366.267309] ? __raw_spin_lock_init+0x36/0x110 [ 1366.268809] v9fs_session_init+0x1dd/0x1680 [ 1366.270217] ? lock_release+0x680/0x680 [ 1366.271533] ? kmem_cache_alloc_trace+0x151/0x320 [ 1366.273143] ? v9fs_show_options+0x690/0x690 [ 1366.274613] ? trace_hardirqs_on+0x5b/0x180 [ 1366.276016] ? kasan_unpoison_shadow+0x33/0x50 [ 1366.277563] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1366.279264] v9fs_mount+0x79/0x8f0 [ 1366.280469] ? v9fs_write_inode+0x60/0x60 [ 1366.281820] legacy_get_tree+0x105/0x220 [ 1366.283191] vfs_get_tree+0x8e/0x300 [ 1366.288470] path_mount+0x13be/0x20b0 [ 1366.289946] ? strncpy_from_user+0x9e/0x470 [ 1366.291421] ? finish_automount+0xa90/0xa90 [ 1366.292855] ? getname_flags.part.0+0x1dd/0x4f0 [ 1366.294416] ? _copy_from_user+0xfb/0x1b0 [ 1366.295799] __x64_sys_mount+0x282/0x300 [ 1366.297172] ? copy_mnt_ns+0xa00/0xa00 [ 1366.298474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1366.300199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1366.301950] do_syscall_64+0x33/0x40 [ 1366.303169] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1366.304893] RIP: 0033:0x7fef9ce93b19 [ 1366.306142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1366.312351] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1366.314716] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1366.316907] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1366.319094] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1366.321254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1366.323405] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:14:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000) ftruncate(r0, 0x1000003) r3 = dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2e142, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000140), 0x80000001, 0x212801) r5 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r6 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000140)=r6, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c463f04012e0700000000000000020006001c75a5386a0100000000000040000000000000000502000000000000ff030000040038000200040004000500000000700000fffffdffffffffffffff6202000000000000c8010000000000000600000000000000e651c57b00000000030000000000000002000000c1ffffff000000000100000001000000000000000000008000000000d58600000000000009000000000000000700000000000000107cb2be78a7d30522a0208d1f24600e60b43c077471005dabc0cd74cdce7929c396ed44f02facbc0c0fb7ef297bc2626634724bf121d69e95fd9663f8786c6bb2e49af0e6fd7cbf8a35cf3ddfe5db40aac36c89e83d16695111a577853c814d0c558ad5f327ae2bebbc755f17431bdec141887707bfba6a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/1832], 0x728) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000000000000007000000000000000800000000000000000000000000000000000000000000000000000000000000190c000000800000000000000000000000000043820000000000000000000000010000000000000006000000000000001800"/128]) lseek(r4, 0x10001, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44a02, 0x0, 0x0, 0x7, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='#a ./file0\r'], 0xb) 08:14:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000010000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:14:33 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='attr/fscreate\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r4, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460981011f810000000000000003000600010000007e0200000000000040000000000000001c00000000000000d10000000300380002000100feff0000000000700300000002000000000000000900000000000000030000000000000000000000000000000500000000000000000000000000400000000060ffffffff0800000000000000f2000000000000000000000000000087adeb00030000000000000005000000000000000000000000000000b2d233284f94c91d748c568a67f61ed29aa245adfe3dad698fc8e0c8697cf12a843aea3fee6d798c05a7d605caac539f44fb295b60317716760c429990ccee64c6f90c8e20cff844361e93a4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"/1277], 0x4fd) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='1', 0x1}], 0x6) [ 1366.410831] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 08:14:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x4, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:14:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) 08:14:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000011000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:14:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:14:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653200f6b4371731cbf05440d1ed8ce5862d8576839ff6b27ecdae288750c957d70e33d59e95e09acf5b56730ac8897a3c7ae0f2a34bbcd5681984c03635913753f157339a"]) openat(r1, &(0x7f0000000280)='./file1\x00', 0x701f02, 0x2c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f00000001c0)={0x77359400}) dup(r0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xc) r2 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000040)={0x0, 0x1f9, [0x0, 0xc8a2, 0x0, 0x8000, 0x101, 0x4]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r4, r3) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010100}, 0x10) mkdirat(r2, &(0x7f0000000000)='./file1\x00', 0x0) unshare(0x48020200) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x2, 0x40, 0x40, 0x1f, 0x0, 0x6, 0x400, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x930, 0x0, @perf_config_ext={0x4, 0x8}, 0x980, 0x4, 0x80000001, 0x8, 0x3, 0x401, 0x5, 0x0, 0x8, 0x0, 0x7f}, 0x0, 0x5, 0xffffffffffffffff, 0x0) 08:14:52 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_gettime(0x0, &(0x7f00000008c0)) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f0000000140)) syz_usb_connect$cdc_ecm(0x2, 0x80, &(0x7f00000002c0)={{0x12, 0x1, 0x97f48c700bc1dd63, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0xd8, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x2, 0x6, 0x0, 0x81, {{0x9, 0x24, 0x6, 0x0, 0x0, "6e267f8d"}, {0x5, 0x24, 0x0, 0xa437}, {0xd, 0x24, 0xf, 0x1, 0x3c, 0x9, 0x7, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x9, 0x22}, @dmm={0x7, 0x24, 0x14, 0x3, 0x4}, @acm={0x4, 0x24, 0x2, 0xa}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}, @country_functional={0x10, 0x24, 0x7, 0xb8, 0x5, [0x2, 0x0, 0x8001, 0x9, 0x401]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x8, 0x3f}}], {{0x9, 0x5, 0x82, 0x2, 0x30, 0x5, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfd, 0x6, 0x80}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x0, 0x2, 0x0, 0x2, 0xff, 0xe9}, 0x41, &(0x7f0000000380)={0x5, 0xf, 0x41, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x80, 0x2, 0x7ff}, @ss_container_id={0x14, 0x10, 0x4, 0x19, "da751f19009d72e7556dd3c465538dd6"}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x7ffffc1, 0xff0f, 0x2, [0x14030]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x9, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x9, 0x9}]}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4c0a}}]}) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r2, &(0x7f0000000080)) timer_create(0x1, &(0x7f0000000100)={0x0, 0x20, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_gettime(r3, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x104, 0x2, 0x9, 0x201, 0x0, 0x0, {0xc}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0xa8, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}]}, 0x104}, 0x1, 0x0, 0x0, 0x8001}, 0x20000080) 08:14:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x7, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1384.730528] udc-core: couldn't find an available UDC or it's busy [ 1384.731690] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 08:14:52 executing program 3: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x3, 0xd3eb, 0x2000}], 0x1) r1 = semget(0x1, 0x4, 0x308) semctl$IPC_RMID(r1, 0x0, 0x0) semget(0x1, 0x0, 0x10) r2 = semget(0x3, 0x1, 0x101) semtimedop(r2, &(0x7f0000000000)=[{0x2, 0x5, 0x1000}, {0x4, 0x8, 0x1800}, {0x3, 0x3f}, {0x2, 0x8}, {0x0, 0x800}, {0x1, 0x10fe, 0x1800}], 0x6, &(0x7f0000000100)={0x0, 0x3938700}) semtimedop(r0, &(0x7f0000000040)=[{}, {0x0, 0xfff8}], 0x2, &(0x7f00000000c0)) 08:14:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 44) 08:14:52 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x12, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000012200)}], 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x268, 0x25, 0x800, 0x70bd2b, 0x25dfdbff, {0x13}, [@typed={0xe7, 0x1c, 0x0, 0x0, @binary="5b60fc97f47302dab8fc9ab25a2e6b1c66cb81c088c2c6e2e4403c614983da0f7a330dc2ed78f1d6065840920985b1da1a399b9827b51975a9e2b9381334bc825daed29a56ef27a697fa94e1999120dc8883afd2981288cdf0e329165805f4a5dd1d69f9c9271ea6d41abfd55910f672d0d02e9a66405d66374ace3d408fa72543143f8e38b94fd4f6c0891e7f3d6be5a8b2d11ea50e121576244bc190dd74278b601ab0c952f9b4dcd6f420a05163631370753383a922154eacb9afdbf33739cb1c86c311b72325ae44c268ed97114aab2ea46f3808004a1796818159fb14bcc1a7ce"}, @nested={0x16a, 0x58, 0x0, 0x1, [@generic="ee314e9b8257d56b928fd07b00f846428537c5c2ce", @typed={0x4, 0x16}, @generic="fa741d08269e021c5bd6027dc510e33d3c5458a32a56895245baee36936a71317247554f4f100a174f1880de36d98024d402e84e5f59d06b3fd3acf779cb036da13424df8f659b35221588eac1342e317adc05cfda4d6e32b1828b699d86690c4558db53f2e7704673156ad44f89b90fc0f74663a1ad2b6565cac8d01b1eb6c87252494fed94", @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@private0}, @generic="53a0cf0f33729de0473e43ae9d36620b3979485dad828783b774d973ab38ad2d8e94e4f17ba8f5171bcdab8900c352a1b4d57384dfb2503ec396a2eca1269f10476f66bfd2166cd933edf98081a8408dd23f38aa5a1381b2c769948a64205b57b5727e2498828686b0853cba41528f9f3df139abc2a26d0baf930a3b766640f419da3c5fde8ca5a8e14f1f1bf74411a8fe3348d4ec647d593a30199a06b762d310dd28bf2b3842", @typed={0x4, 0x6a}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x7}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}]}, 0x30}}, 0x0) [ 1384.786806] FAULT_INJECTION: forcing a failure. [ 1384.786806] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.788294] CPU: 0 PID: 9671 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1384.789213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1384.790331] Call Trace: [ 1384.790684] dump_stack+0x107/0x167 [ 1384.791159] should_fail.cold+0x5/0xa [ 1384.791646] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1384.792988] should_failslab+0x5/0x20 [ 1384.793469] kmem_cache_alloc+0x5b/0x310 [ 1384.794030] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1384.794788] idr_get_free+0x4b5/0x8f0 [ 1384.795318] idr_alloc_u32+0x170/0x2d0 [ 1384.795814] ? __fprop_inc_percpu_max+0x130/0x130 08:14:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001200010000006c000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1384.796467] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1384.797194] ? lock_release+0x680/0x680 [ 1384.797721] idr_alloc+0xc2/0x130 [ 1384.798159] ? idr_alloc_u32+0x2d0/0x2d0 [ 1384.798701] ? rwlock_bug.part.0+0x90/0x90 [ 1384.799578] p9_client_prepare_req.part.0+0x612/0xac0 [ 1384.800265] p9_client_rpc+0x220/0x1360 [ 1384.800862] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1384.801562] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1384.802262] ? pipe_poll+0x21b/0x7f0 [ 1384.802737] ? p9_fd_close+0x4a0/0x4a0 [ 1384.803224] ? anon_pipe_buf_release+0x280/0x280 [ 1384.803846] ? p9_fd_poll+0x1e0/0x2c0 [ 1384.804372] ? p9_fd_create+0x357/0x4a0 [ 1384.804939] ? p9_conn_create+0x510/0x510 [ 1384.805473] ? p9_client_create+0x798/0x11c0 [ 1384.806021] ? kfree+0xd7/0x340 [ 1384.806439] ? do_raw_spin_unlock+0x4f/0x220 [ 1384.807026] p9_client_create+0xa76/0x11c0 [ 1384.807610] ? p9_client_flush+0x430/0x430 [ 1384.808185] ? trace_hardirqs_on+0x5b/0x180 [ 1384.808771] ? lockdep_init_map_type+0x2c7/0x780 [ 1384.809377] ? __raw_spin_lock_init+0x36/0x110 [ 1384.809992] v9fs_session_init+0x1dd/0x1680 [ 1384.810589] ? kmem_cache_alloc_trace+0x151/0x320 [ 1384.811224] ? v9fs_show_options+0x690/0x690 [ 1384.811812] ? trace_hardirqs_on+0x5b/0x180 [ 1384.812414] ? kasan_unpoison_shadow+0x33/0x50 [ 1384.813029] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1384.813673] v9fs_mount+0x79/0x8f0 [ 1384.814130] ? v9fs_write_inode+0x60/0x60 [ 1384.814660] legacy_get_tree+0x105/0x220 [ 1384.815170] vfs_get_tree+0x8e/0x300 [ 1384.815647] path_mount+0x13be/0x20b0 [ 1384.816129] ? strncpy_from_user+0x9e/0x470 [ 1384.816693] ? finish_automount+0xa90/0xa90 [ 1384.817254] ? getname_flags.part.0+0x1dd/0x4f0 [ 1384.817888] ? _copy_from_user+0xfb/0x1b0 [ 1384.818478] __x64_sys_mount+0x282/0x300 [ 1384.819012] ? copy_mnt_ns+0xa00/0xa00 [ 1384.819514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1384.820176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1384.820857] do_syscall_64+0x33/0x40 [ 1384.821358] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1384.822044] RIP: 0033:0x7fef9ce93b19 [ 1384.822544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1384.824955] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1384.825947] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1384.826834] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1384.827764] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1384.828755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1384.829686] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:14:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1ea, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1384.861639] FAULT_INJECTION: forcing a failure. [ 1384.861639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.862873] CPU: 0 PID: 9687 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1384.863568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1384.864431] Call Trace: [ 1384.864701] dump_stack+0x107/0x167 [ 1384.865093] should_fail.cold+0x5/0xa [ 1384.865487] _copy_from_user+0x2e/0x1b0 [ 1384.865902] __copy_msghdr_from_user+0x91/0x4b0 [ 1384.866379] ? __ia32_sys_shutdown+0x80/0x80 [ 1384.866835] ? __lock_acquire+0xbb1/0x5b00 [ 1384.867281] sendmsg_copy_msghdr+0xa1/0x160 [ 1384.867710] ? do_recvmmsg+0x6d0/0x6d0 [ 1384.868209] ? perf_trace_lock+0xac/0x490 [ 1384.868692] ? SOFTIRQ_verbose+0x10/0x10 [ 1384.869203] ? __lockdep_reset_lock+0x180/0x180 [ 1384.869775] ? perf_trace_lock+0xac/0x490 [ 1384.870342] ___sys_sendmsg+0xc6/0x170 [ 1384.870826] ? sendmsg_copy_msghdr+0x160/0x160 [ 1384.871422] ? __fget_files+0x26d/0x4c0 [ 1384.871949] ? lock_downgrade+0x6d0/0x6d0 [ 1384.872514] ? lock_downgrade+0x6d0/0x6d0 [ 1384.872933] ? __fget_files+0x296/0x4c0 [ 1384.873345] ? __fget_light+0xea/0x290 [ 1384.873740] __sys_sendmmsg+0x195/0x470 [ 1384.874189] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1384.874633] ? lock_downgrade+0x6d0/0x6d0 [ 1384.875057] ? ksys_write+0x12d/0x260 [ 1384.875451] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1384.875942] ? wait_for_completion_io+0x270/0x270 [ 1384.876469] ? rcu_read_lock_any_held+0x75/0xa0 [ 1384.877147] ? vfs_write+0x354/0xa70 [ 1384.877669] ? fput_many+0x2f/0x1a0 [ 1384.878174] ? ksys_write+0x1a9/0x260 [ 1384.878704] ? __ia32_sys_read+0xb0/0xb0 [ 1384.879266] __x64_sys_sendmmsg+0x99/0x100 [ 1384.879849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1384.880586] do_syscall_64+0x33/0x40 [ 1384.881100] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1384.881803] RIP: 0033:0x7f31c146cb19 [ 1384.882323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1384.884851] RSP: 002b:00007f31be9e2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1384.885891] RAX: ffffffffffffffda RBX: 00007f31c157ff60 RCX: 00007f31c146cb19 [ 1384.886864] RDX: 0000000000000001 RSI: 0000000020004d00 RDI: 0000000000000003 [ 1384.887847] RBP: 00007f31be9e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1384.888883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.889864] R13: 00007ffda31cbeef R14: 00007f31be9e2300 R15: 0000000000022000 [ 1384.917852] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:14:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (fail_nth: 1) 08:14:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000086000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:14:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (fail_nth: 2) 08:14:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) [ 1385.093220] FAULT_INJECTION: forcing a failure. [ 1385.093220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1385.095213] CPU: 0 PID: 9700 Comm: syz-executor.1 Not tainted 5.10.200 #1 [ 1385.096132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1385.097241] Call Trace: [ 1385.097865] dump_stack+0x107/0x167 [ 1385.098772] should_fail.cold+0x5/0xa [ 1385.099709] _copy_to_user+0x2e/0x180 [ 1385.100762] simple_read_from_buffer+0xcc/0x160 [ 1385.101924] proc_fail_nth_read+0x198/0x230 [ 1385.103019] ? proc_sessionid_read+0x230/0x230 [ 1385.104177] ? security_file_permission+0x24e/0x570 [ 1385.105705] ? perf_trace_initcall_start+0x101/0x380 [ 1385.106954] ? proc_sessionid_read+0x230/0x230 [ 1385.108055] vfs_read+0x228/0x580 [ 1385.109053] ksys_read+0x12d/0x260 [ 1385.110106] ? vfs_write+0xa70/0xa70 [ 1385.111253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1385.122005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1385.123410] do_syscall_64+0x33/0x40 [ 1385.125346] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1385.126828] RIP: 0033:0x7f31c141f69c [ 1385.128484] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1385.133386] RSP: 002b:00007f31be9e2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1385.135481] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f31c141f69c [ 1385.136465] RDX: 000000000000000f RSI: 00007f31be9e21e0 RDI: 0000000000000004 [ 1385.137544] RBP: 00007f31be9e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1385.138504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1385.139476] R13: 00007ffda31cbeef R14: 00007f31be9e2300 R15: 0000000000022000 08:14:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xc00, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:14:52 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="fd6e573d0ee6f19f9abfa80000002000210c00000000000011823902000086008e8014000600fe880000000000000000000000000001050087002f00000010004058874165762f72666b696c6c003e005b00b2e1db48980f319c3681e017f564c850d75ef6cd202192130d3c03dc89ecb151fd778100000020e60a22e1e0bcfe9c741251f2e1dcafe96127e20000825d6d1c13b5816fb8833ab5c8bab9199f2e2ae7fe0800000c007a8056caf94c14ae6e75da860debf127"], 0xa8}}, 0x0) close_range(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @private1, 0x9}, 0x1c) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = fcntl$getown(r3, 0x9) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001c00)={0x0, 0x0}) r6 = signalfd4(r1, &(0x7f0000001c80), 0x8, 0x80000) clone3(&(0x7f0000001cc0)={0x800000, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340), {0x37}, &(0x7f0000000380)=""/100, 0x64, &(0x7f0000000440)=""/108, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x9, {r6}}, 0x58) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x80042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)}, 0x0) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000580)={0x0, 0x200, 0x1}) 08:14:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xd00, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:14:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001ffffff9e000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1385.292695] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 08:15:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:15:10 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x2, "6450d066ec1dd6286c62199fc21375291f"}, 0x12, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x303242, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xbdc6, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001d00210c000000001e00000004000200"], 0x14}}, 0x0) 08:15:10 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x100) 08:15:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xe00, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:15:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="fd6e573d0ee6f19f9abfa80000002000210c00000000000011823902000086008e8014000600fe880000000000000000000000000001050087002f00000010004058874165762f72666b696c6c003e005b00b2e1db48980f319c3681e017f564c850d75ef6cd202192130d3c03dc89ecb151fd778100000020e60a22e1e0bcfe9c741251f2e1dcafe96127e20000825d6d1c13b5816fb8833ab5c8bab9199f2e2ae7fe0800000c007a8056caf94c14ae6e75da860debf127"], 0xa8}}, 0x0) close_range(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @private1, 0x9}, 0x1c) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = fcntl$getown(r3, 0x9) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001c00)={0x0, 0x0}) r6 = signalfd4(r1, &(0x7f0000001c80), 0x8, 0x80000) clone3(&(0x7f0000001cc0)={0x800000, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340), {0x37}, &(0x7f0000000380)=""/100, 0x64, &(0x7f0000000440)=""/108, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x9, {r6}}, 0x58) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x80042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)}, 0x0) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000580)={0x0, 0x200, 0x1}) 08:15:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001fffffff0000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:15:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 45) 08:15:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@local, @mcast2, @mcast1, 0x0, 0x5, 0x0, 0x100, 0x8, 0x2080040, r2}) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = dup2(r0, r3) accept4$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0, 0x0) openat(r4, &(0x7f0000000000)='./file0\x00', 0xc0, 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000100)=0x8, 0x4) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r5, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) [ 1403.302223] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 08:15:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:15:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100f0ffff000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1403.394890] FAULT_INJECTION: forcing a failure. [ 1403.394890] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.396392] CPU: 1 PID: 9737 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1403.397257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1403.398311] Call Trace: [ 1403.398639] dump_stack+0x107/0x167 [ 1403.399093] should_fail.cold+0x5/0xa [ 1403.399569] ? create_object.isra.0+0x3a/0xa20 [ 1403.400179] should_failslab+0x5/0x20 [ 1403.400661] kmem_cache_alloc+0x5b/0x310 [ 1403.401233] create_object.isra.0+0x3a/0xa20 [ 1403.401831] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1403.402543] kmem_cache_alloc+0x159/0x310 [ 1403.403154] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1403.403975] idr_get_free+0x4b5/0x8f0 [ 1403.404555] idr_alloc_u32+0x170/0x2d0 [ 1403.405160] ? __fprop_inc_percpu_max+0x130/0x130 [ 1403.405872] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1403.406644] ? lock_release+0x680/0x680 [ 1403.407236] idr_alloc+0xc2/0x130 [ 1403.407736] ? idr_alloc_u32+0x2d0/0x2d0 [ 1403.408330] ? rwlock_bug.part.0+0x90/0x90 [ 1403.408976] p9_client_prepare_req.part.0+0x612/0xac0 [ 1403.409736] p9_client_rpc+0x220/0x1360 [ 1403.410317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1403.411090] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1403.411871] ? pipe_poll+0x21b/0x7f0 [ 1403.412412] ? p9_fd_close+0x4a0/0x4a0 [ 1403.412953] ? anon_pipe_buf_release+0x280/0x280 [ 1403.413545] ? p9_fd_poll+0x1e0/0x2c0 [ 1403.414083] ? p9_fd_create+0x357/0x4a0 [ 1403.414661] ? p9_conn_create+0x510/0x510 [ 1403.415263] ? p9_client_create+0x798/0x11c0 [ 1403.415909] ? kfree+0xd7/0x340 [ 1403.416380] ? do_raw_spin_unlock+0x4f/0x220 [ 1403.417051] p9_client_create+0xa76/0x11c0 [ 1403.417667] ? p9_client_flush+0x430/0x430 [ 1403.418275] ? trace_hardirqs_on+0x5b/0x180 [ 1403.418895] ? lockdep_init_map_type+0x2c7/0x780 [ 1403.419573] ? __raw_spin_lock_init+0x36/0x110 [ 1403.420257] v9fs_session_init+0x1dd/0x1680 [ 1403.420905] ? lock_release+0x680/0x680 [ 1403.421511] ? kmem_cache_alloc_trace+0x151/0x320 [ 1403.422208] ? v9fs_show_options+0x690/0x690 [ 1403.422871] ? trace_hardirqs_on+0x5b/0x180 [ 1403.423503] ? kasan_unpoison_shadow+0x33/0x50 [ 1403.424161] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1403.424932] v9fs_mount+0x79/0x8f0 [ 1403.425431] ? v9fs_write_inode+0x60/0x60 [ 1403.426643] legacy_get_tree+0x105/0x220 [ 1403.427752] vfs_get_tree+0x8e/0x300 [ 1403.428752] path_mount+0x13be/0x20b0 [ 1403.429783] ? strncpy_from_user+0x9e/0x470 [ 1403.430933] ? finish_automount+0xa90/0xa90 [ 1403.432080] ? getname_flags.part.0+0x1dd/0x4f0 [ 1403.433013] ? _copy_from_user+0xfb/0x1b0 [ 1403.434185] __x64_sys_mount+0x282/0x300 [ 1403.435286] ? copy_mnt_ns+0xa00/0xa00 [ 1403.435876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1403.437331] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1403.438734] do_syscall_64+0x33/0x40 [ 1403.439762] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1403.441159] RIP: 0033:0x7fef9ce93b19 [ 1403.442164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1403.447239] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1403.449344] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1403.451300] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1403.453200] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1403.455113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1403.457057] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1403.459725] audit: type=1400 audit(1700468111.025:518): avc: denied { execmod } for pid=9731 comm="syz-executor.6" path="/syzkaller-testdir995125942/syzkaller.EThHKu/24/file0" dev="sda" ino=16033 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 08:15:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xf00, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:15:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001200017fffffff000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:15:11 executing program 3: ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = socket$inet(0x2, 0x3, 0xff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @private}}}], 0x20}, 0x14) 08:15:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x2, 0x0}}], 0x1, 0x0) [ 1403.550863] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 08:15:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1100, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:15:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@local, @mcast2, @mcast1, 0x0, 0x5, 0x0, 0x100, 0x8, 0x2080040, r2}) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = dup2(r0, r3) accept4$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0, 0x0) openat(r4, &(0x7f0000000000)='./file0\x00', 0xc0, 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000100)=0x8, 0x4) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r5, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) 08:15:29 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'bond0\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) flock(r2, 0x2) io_uring_setup(0x162c, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x2fc}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x190}, 0x0, 0x80, 0x1}, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0xd) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @multicast2}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) 08:15:29 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) flock(r0, 0x1) flock(r1, 0x2) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000140)={'geneve0\x00', {0x2, 0x0, @private}}) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000080)={'xfrm0\x00', {0x2, 0x0, @loopback}}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) 08:15:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001200019effffff000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:15:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x4, 0x0}}], 0x1, 0x0) 08:15:29 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x21, r0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f0000fdffffff000100000001000000030000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000400)=ANY=[]) 08:15:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 46) [ 1421.885486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1421.914070] FAULT_INJECTION: forcing a failure. [ 1421.914070] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.915940] CPU: 1 PID: 9781 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1421.916917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1421.918010] Call Trace: [ 1421.918371] dump_stack+0x107/0x167 [ 1421.918864] should_fail.cold+0x5/0xa [ 1421.919364] ? p9pdu_readf+0xb23/0x1ca0 [ 1421.919885] should_failslab+0x5/0x20 [ 1421.920384] __kmalloc+0x72/0x390 [ 1421.920845] p9pdu_readf+0xb23/0x1ca0 [ 1421.921274] ? pipe_poll+0x21b/0x7f0 [ 1421.921646] ? p9pdu_writef+0x100/0x100 [ 1421.922048] ? p9_fd_poll+0x1e0/0x2c0 [ 1421.922432] ? p9_fd_create+0x357/0x4a0 [ 1421.922831] ? p9_conn_create+0x510/0x510 [ 1421.923241] ? p9_client_create+0x798/0x11c0 [ 1421.923676] ? kfree+0xd7/0x340 [ 1421.924014] ? do_raw_spin_unlock+0x4f/0x220 [ 1421.924455] p9_client_create+0xaee/0x11c0 08:15:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfc, 0x0}}], 0x1, 0x0) [ 1421.924897] ? p9_client_flush+0x430/0x430 [ 1421.929107] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1421.929121] ? lockdep_init_map_type+0x2c7/0x780 [ 1421.929136] ? __raw_spin_lock_init+0x36/0x110 [ 1421.929152] v9fs_session_init+0x1dd/0x1680 08:15:29 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(r0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x42000, 0xa, 0x10}, 0x18) write$P9_RREADLINK(r1, &(0x7f0000000580)={0x1a, 0x17, 0x1, {0x11, 'mnt/encrypted_dir'}}, 0x1a) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400), 0x4000) lsetxattr$system_posix_acl(&(0x7f0000000080)='./mnt\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="2a4fdd033627c93a00000000040000000000000010000000000000002000000000000000"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) getdents(r0, &(0x7f0000000140)=""/42, 0x31) lgetxattr(&(0x7f0000000300)='mnt/encrypted_dir\x00', &(0x7f00000000c0)=@random={'btrfs.', '({@+/\\\xf5[6\x00'}, &(0x7f0000000200)=""/215, 0xd7) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000480)={0x2, 0x5, 0x2, 0x800}) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r2, r0, &(0x7f0000000380)=0x78c7, 0x401) lgetxattr(&(0x7f0000000000)='mnt/encrypted_dir\x00', &(0x7f0000000180)=@random={'osx.', ',\\+\\.\x00'}, 0x0, 0x0) [ 1421.929163] ? lock_release+0x680/0x680 [ 1421.929176] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1421.929185] ? trace_hardirqs_on+0x5b/0x180 08:15:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1200, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:15:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001f0ffffff000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1421.929196] ? v9fs_show_options+0x690/0x690 08:15:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x80fe, 0x0}}], 0x1, 0x0) [ 1421.929214] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1421.929228] ? kasan_unpoison_shadow+0x33/0x50 [ 1421.929239] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1421.929254] v9fs_mount+0x79/0x8f0 [ 1421.929266] ? v9fs_write_inode+0x60/0x60 08:15:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 47) [ 1421.929278] legacy_get_tree+0x105/0x220 [ 1421.929291] vfs_get_tree+0x8e/0x300 [ 1421.929303] path_mount+0x13be/0x20b0 [ 1421.929317] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1421.929334] ? finish_automount+0xa90/0xa90 [ 1421.929368] __x64_sys_mount+0x282/0x300 [ 1421.929381] ? copy_mnt_ns+0xa00/0xa00 [ 1421.929394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1421.929407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1421.929427] do_syscall_64+0x33/0x40 [ 1421.929443] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1421.929454] RIP: 0033:0x7fef9ce93b19 [ 1421.929472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 08:15:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000008000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1421.929480] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1421.929498] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1421.929507] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1421.929513] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1421.929520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1421.929526] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:15:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1300, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1422.191375] FAULT_INJECTION: forcing a failure. [ 1422.191375] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.193287] CPU: 1 PID: 9819 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1422.194221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1422.195446] Call Trace: [ 1422.195847] dump_stack+0x107/0x167 [ 1422.196434] should_fail.cold+0x5/0xa [ 1422.197040] ? create_object.isra.0+0x3a/0xa20 [ 1422.197658] ? create_object.isra.0+0x3a/0xa20 [ 1422.198281] should_failslab+0x5/0x20 [ 1422.198818] kmem_cache_alloc+0x5b/0x310 [ 1422.199406] create_object.isra.0+0x3a/0xa20 [ 1422.199987] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1422.200660] __kmalloc+0x16e/0x390 [ 1422.201195] p9pdu_readf+0xb23/0x1ca0 [ 1422.201729] ? pipe_poll+0x21b/0x7f0 [ 1422.202254] ? p9pdu_writef+0x100/0x100 [ 1422.202807] ? p9_fd_poll+0x1e0/0x2c0 [ 1422.203348] ? p9_fd_create+0x357/0x4a0 [ 1422.203900] ? p9_conn_create+0x510/0x510 [ 1422.204478] ? p9_client_create+0x798/0x11c0 [ 1422.205128] ? kfree+0xd7/0x340 [ 1422.205667] ? do_raw_spin_unlock+0x4f/0x220 [ 1422.206370] p9_client_create+0xaee/0x11c0 [ 1422.207033] ? p9_client_flush+0x430/0x430 [ 1422.207699] ? trace_hardirqs_on+0x5b/0x180 [ 1422.208364] ? lockdep_init_map_type+0x2c7/0x780 [ 1422.209152] ? __raw_spin_lock_init+0x36/0x110 [ 1422.209773] v9fs_session_init+0x1dd/0x1680 [ 1422.210365] ? lock_release+0x680/0x680 [ 1422.210982] ? kmem_cache_alloc_trace+0x151/0x320 [ 1422.211737] ? v9fs_show_options+0x690/0x690 [ 1422.212427] ? trace_hardirqs_on+0x5b/0x180 [ 1422.213125] ? kasan_unpoison_shadow+0x33/0x50 [ 1422.213813] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1422.214532] v9fs_mount+0x79/0x8f0 [ 1422.215036] ? v9fs_write_inode+0x60/0x60 [ 1422.215656] legacy_get_tree+0x105/0x220 [ 1422.216222] vfs_get_tree+0x8e/0x300 [ 1422.216997] path_mount+0x13be/0x20b0 [ 1422.217511] ? strncpy_from_user+0x9e/0x470 [ 1422.218088] ? finish_automount+0xa90/0xa90 [ 1422.218668] ? getname_flags.part.0+0x1dd/0x4f0 [ 1422.219307] ? _copy_from_user+0xfb/0x1b0 [ 1422.219883] __x64_sys_mount+0x282/0x300 [ 1422.220525] ? copy_mnt_ns+0xa00/0xa00 [ 1422.221161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1422.221962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1422.222759] do_syscall_64+0x33/0x40 [ 1422.223333] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1422.224124] RIP: 0033:0x7fef9ce93b19 [ 1422.224715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1422.227505] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1422.228653] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1422.229737] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1422.230811] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1422.231901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1422.233043] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:15:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xc0fe, 0x0}}], 0x1, 0x0) 08:15:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@local, @mcast2, @mcast1, 0x0, 0x5, 0x0, 0x100, 0x8, 0x2080040, r2}) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = dup2(r0, r3) accept4$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0, 0x0) openat(r4, &(0x7f0000000000)='./file0\x00', 0xc0, 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000100)=0x8, 0x4) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r5, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) 08:15:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 48) 08:15:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000340000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:15:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x2400, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002104010200000000000000000000000008000440000000000500010002000000c1d8dfeeb5d49e80685613b1c2e8005fdff53815e3517ba9445244"], 0x24}}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r2) keyctl$set_timeout(0xf, r2, 0x0) r3 = request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000280)='\\{\x00', 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r5, 0xfffffffffffffffb, 0x0) getgroups(0x5, &(0x7f0000000040)=[0x0, 0x0, 0xee00, 0x0, 0x0]) keyctl$chown(0x4, r5, 0xffffffffffffffff, r6) keyctl$link(0x8, 0x0, r2) setgid(0x0) pwrite64(r0, 0x0, 0x0, 0xd1) 08:15:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1400, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:15:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0xbf, 0x80, 0x0, 0x1000, 0x2, 0x3, 0xfffff000, 0x241, 0x40, 0x326, 0x7, 0x3, 0x38, 0x1, 0x3, 0x80, 0x14e}, [{0x7, 0xc3, 0x1, 0x4, 0x0, 0x10000, 0x2}, {0x5, 0xef2, 0x8, 0x20, 0x4000, 0x1, 0x1, 0x1}], "6be809fcd7d54a280747367aa91ea161a6ab31947bd82f0e4b7c3c18f33ddf8194e233e6a5912c4212d77e09b3836fad4f0895e8b1ccedb4fa5f87e0e42caf87811ae5bc45fe4bbda602b33fdc5458c26397239639a624a93d3719b6cb7f697bd1a7442356d045e6a58800b5f41b6f5a63a4645b4a133cff24", ['\x00', '\x00', '\x00', '\x00']}, 0x529) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x20000000000081}}, r2, 0x0, r1, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r4, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000a00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r5, @in_args={0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xf1, 0x1, 0x8, 0x5, 0x0, 0xc34, 0x20, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0xa40, 0xed8, 0xfffffffd, 0x0, 0x5, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x8}, r2, 0xc, r3, 0xa) 08:15:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xa00, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000517711be97aa443644210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f"], 0x28}}, 0x0) [ 1440.456772] FAULT_INJECTION: forcing a failure. [ 1440.456772] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.459387] CPU: 0 PID: 9845 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1440.460257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1440.461307] Call Trace: [ 1440.461649] dump_stack+0x107/0x167 [ 1440.462120] should_fail.cold+0x5/0xa [ 1440.462625] ? create_object.isra.0+0x3a/0xa20 [ 1440.463221] should_failslab+0x5/0x20 [ 1440.463719] kmem_cache_alloc+0x5b/0x310 [ 1440.464245] ? lock_release+0x680/0x680 [ 1440.464770] create_object.isra.0+0x3a/0xa20 [ 1440.465413] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1440.466078] kmem_cache_alloc+0x159/0x310 [ 1440.466620] kmem_cache_create_usercopy+0x190/0x2f0 [ 1440.467273] p9_client_create+0xc2b/0x11c0 [ 1440.467830] ? p9_client_flush+0x430/0x430 [ 1440.468383] ? trace_hardirqs_on+0x5b/0x180 [ 1440.468949] ? lockdep_init_map_type+0x2c7/0x780 [ 1440.469633] ? __raw_spin_lock_init+0x36/0x110 [ 1440.470227] v9fs_session_init+0x1dd/0x1680 [ 1440.470782] ? lock_release+0x680/0x680 [ 1440.471308] ? kmem_cache_alloc_trace+0x151/0x320 [ 1440.471928] ? v9fs_show_options+0x690/0x690 [ 1440.472505] ? trace_hardirqs_on+0x5b/0x180 [ 1440.473067] ? kasan_unpoison_shadow+0x33/0x50 [ 1440.474760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1440.475418] v9fs_mount+0x79/0x8f0 [ 1440.475892] ? v9fs_write_inode+0x60/0x60 [ 1440.476417] legacy_get_tree+0x105/0x220 [ 1440.476933] vfs_get_tree+0x8e/0x300 [ 1440.477446] path_mount+0x13be/0x20b0 [ 1440.477937] ? strncpy_from_user+0x9e/0x470 [ 1440.478484] ? finish_automount+0xa90/0xa90 [ 1440.479033] ? getname_flags.part.0+0x1dd/0x4f0 [ 1440.479621] ? _copy_from_user+0xfb/0x1b0 [ 1440.480160] __x64_sys_mount+0x282/0x300 [ 1440.480685] ? copy_mnt_ns+0xa00/0xa00 [ 1440.481227] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1440.481895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1440.482564] do_syscall_64+0x33/0x40 [ 1440.483062] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1440.483731] RIP: 0033:0x7fef9ce93b19 [ 1440.484212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1440.486594] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1440.487592] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1440.488532] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1440.489654] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1440.490617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1440.491569] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:15:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat(r0, &(0x7f0000000180)='./file0\x00', 0x80, 0x4) writev(r1, &(0x7f0000000740)=[{&(0x7f00000000c0)="1c54b7", 0x3}], 0x1) pwrite64(r1, &(0x7f00000013c0)="c5", 0x1, 0x0) fsetxattr(r0, &(0x7f0000000100)=@random={'security.', '[/]\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) 08:15:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001fffffffffffff0000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:15:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfc00, 0x0}}], 0x1, 0x0) [ 1440.543209] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 08:15:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1500, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:15:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 08:15:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000010000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:16:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@local, @mcast2, @mcast1, 0x0, 0x5, 0x0, 0x100, 0x8, 0x2080040, r2}) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = dup2(r0, r3) accept4$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0, 0x0) openat(r4, &(0x7f0000000000)='./file0\x00', 0xc0, 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000100)=0x8, 0x4) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r5, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) 08:16:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x144, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast1, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @replay_thresh={0x8}]}, 0x144}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000f80)={0x10, 0x0, 0x25dfdbff, 0x1040001}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="7f454c460981011f810000000000000003000600010000007e0200000000000040000000000000001c00000000000000d10000000300380002000100feff00000000007003000000020000000000000009000000000000000000000000000000000500000000000000000000000000400000000060ffffffff0800000000000000f2000000000000000000000000000087adeb00030000000000000005000000000000000000000000000000b2d233284f94c91d748c568a67e81ed29aa245adfe3dad698fc8e0c8697cf12a843aea3fee6d798c05a7d605caac539f44fb295b60317716760c429990ccee64c6f90c8e20cff844361e93a4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe0000000000000000000000000000ca9d145f015f9af5fe338e1340d9aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbde00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069c10c8a2f7d0b45ecf5a9c3226cae334e16a0402ed98e411de160a1eb17ce554f7ae748dffdb574a606b5291223b670acee7d899c087998829b3b3b80a5268e49595c"], 0x4fd) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x0, 0x6, {{0x5, 0x4, 0x0, 0x19, 0x14, 0x68, 0x0, 0x4, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x31}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl1\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x700, 0x10, 0x2, 0x401, {{0x24, 0x4, 0x1, 0x37, 0x90, 0x67, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @multicast2, {[@noop, @cipso={0x86, 0x1e, 0x2, [{0x7, 0xf, "592c875cf7a38becbbf4210e95"}, {0x6, 0x5, '0n '}, {0x2, 0x4, "a64b"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x65, 0x0, 0x9, [0x100, 0x200, 0xec7, 0x10000, 0x9]}, @timestamp_addr={0x44, 0x34, 0x1e, 0x1, 0x0, [{@empty, 0x81}, {@local, 0x1}, {@private=0xa010101, 0x401}, {@rand_addr=0x64010101, 0xdcf0}, {@multicast1, 0xfffffffc}, {@multicast1, 0x6}]}, @timestamp={0x44, 0xc, 0xad, 0x0, 0x0, [0xfffffff7, 0x3]}]}}}}}) fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={&(0x7f0000000500), 0xc, &(0x7f0000000b40)={&(0x7f0000000780)=@getsa={0x3a0, 0x12, 0x2, 0x70bd2b, 0x25dfdbfc, {@in6=@mcast1, 0x4d2, 0xa, 0x3c}, [@tfcpad={0x8, 0x16, 0x4fad}, @sa={0xe4, 0x6, {{@in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x4e23, 0xfff, 0x2, 0xa0, 0x20, 0x88, r3, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, @in6=@remote, {0x7, 0x3, 0x80000001, 0xb8, 0x7, 0x0, 0x0, 0x50}, {0x1, 0x2, 0x3674, 0x6}, {0x8, 0x0, 0x9cc}, 0x70bd29, 0x0, 0x2, 0x4, 0x81}}, @tmpl={0x144, 0x5, [{{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010100, 0x0, 0x0, 0x1, 0x3f, 0x800, 0x6, 0x3}, {{@in6=@empty, 0x4d3, 0x32}, 0xa, @in6=@local, 0x0, 0x3, 0x0, 0x7f, 0x9, 0xfffffff9, 0x7ff}, {{@in=@rand_addr=0x64010100, 0x4d5}, 0x2, @in=@multicast1, 0x3502, 0x1, 0x1, 0x1, 0x5, 0xf12b, 0x80000000}, {{@in6=@loopback, 0x4d2}, 0xa, @in=@broadcast, 0x3506, 0x2, 0x3, 0xfc, 0x1, 0x4, 0x8}, {{@in=@loopback, 0x4d5, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3502, 0x2, 0x1, 0x0, 0x7fffffff, 0x8000, 0x6b805930}]}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in=@local, 0x4e24, 0x0, 0x4e23, 0x0, 0x2, 0x40, 0x80, 0x2e, r4, r5}, {@in=@multicast1, 0x4d2, 0xff}, @in6=@local, {0x0, 0x6, 0x800, 0x5, 0x3f, 0x8, 0x0, 0x1}, {0x8, 0x0, 0x7, 0xffffffff}, {0x0, 0x9, 0xffff}, 0x70bd2d, 0x0, 0x0, 0x1, 0xe7, 0x2}}, @policy_type={0xa, 0x10, {0x1}}, @algo_auth={0x58, 0x1, {{'crc32c\x00'}, 0x80, "9f0a842be5eb6a2f1b239385f5c614c6"}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4040044}, 0x800) open(&(0x7f0000000180)='./file0\x00', 0x20000, 0x2) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x420}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c2080000be7481072a6191205c02df558c2ce1be23b7689179006fe73435c684d60b1e42e84739f2493a80386c892680cee7", @ANYRES16=r6, @ANYBLOB="100027bd7000fcdbdf25090000000e0001006e657464657673696d0000000f0002006e65746465052907d831a07673696d300000080003000000000008000900070000000e0001006e6526ff657673696d0000000f0002006e657464657673696d30000008000300010000000800090000000000080001007063690011000200303030303a30303a31302e30000000000800030001000000080009000800000083e44ec980c4e9780b8fa51f4728e2d537eeeb853b7157b9702bcdeca611f3d4cb306f11c36b0fc38600fb1939cf4e5ab65a16a5323903263df690afc4a363b3d69ea73a0e57cdf104e0e69f1d078fc29f976b9d6b9bafee"], 0xa0}, 0x1, 0x0, 0x0, 0x60000000}, 0x80) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000f00)={&(0x7f0000000bc0)=@tipc=@name, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c40)=""/161, 0xa1}, {&(0x7f0000000d00)=""/211, 0xd3}, {&(0x7f0000000e00)=""/83, 0x53}], 0x3, &(0x7f0000000ec0)=""/1, 0x1}, 0x0, 0x2042, 0x0, {0x1, r7}}, 0xff) 08:16:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x600000, 0x1b2) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2c1, 0xed6}, 0x401, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfa67}, 0x0, 0xa, r0, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) fallocate(r1, 0x3, 0x52, 0x6) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000003070102000005400000000230c1973ae0074628079664020e393bdb8b906309f7df2d2046e31fb196045319499e24b604138e58f854a516fa4bcf1436c57bbd5d84d17c71a0b72ca70dfd4a5ce1f9229d08714d80bd6ba36f8d8c9b81764d5fc4dd3297a52dd4ce94b690c9f26c2902d2f677cab56f5d637c0d924ebc641db89174a3a8973476af3e7be6c67f587d9c27c959431dafa3e372ffcef7ff04a18173af08a7bb88bb091d77578a17dd48051e6f007e9802af63cb4a3500000000000000000000000034b0e6463b0808a69c9c2c1400f3e07b48faf9a19be0e20bc3e9b73817213f7540e94ac71575a3aff152ac073cae29886c31195d759c11b6f7a30a27b43585b89126a150b4e52096f0f0350b81dbe7be6c84cea5e3ba8e6bef3e03fb37922b79afafe67f1aca78bdf672e4ef733a9be920c098e1e7767ddc0936f9705d544b16dc1ecf0681cf22f0974b5dd1c7d3815f9d39"], 0x1c}}, 0x41) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080), 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x950) r4 = syz_open_dev$vcsa(&(0x7f0000000840), 0x401, 0x28180) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000880)=0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x7f, 0x9, 0x0, 0x0, 0x2947, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffff046, 0x2}, 0x0, 0x7, 0xfc9, 0x2, 0x2, 0x7, 0x0, 0x0, 0x10001, 0x0, 0x5}, 0x0, 0xe, r1, 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r6, &(0x7f0000000340)="041a3a4985d40100008075f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f8e629105b7b399bc6751fe7de4c0b89460000", 0x6e, 0x13ff03) 08:16:06 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x23000497) syz_open_procfs(0x0, 0x0) 08:16:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfe80, 0x0}}], 0x1, 0x0) 08:16:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1600, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:16:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000020000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:16:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 49) [ 1459.123844] FAULT_INJECTION: forcing a failure. [ 1459.123844] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.126645] CPU: 0 PID: 9887 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1459.127535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.128949] Call Trace: [ 1459.129298] dump_stack+0x107/0x167 [ 1459.130114] should_fail.cold+0x5/0xa [ 1459.130621] ? create_object.isra.0+0x3a/0xa20 08:16:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1700, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1459.131221] should_failslab+0x5/0x20 [ 1459.131917] kmem_cache_alloc+0x5b/0x310 [ 1459.132446] create_object.isra.0+0x3a/0xa20 [ 1459.133012] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1459.133749] __kmalloc+0x16e/0x390 [ 1459.134210] p9pdu_readf+0xb23/0x1ca0 [ 1459.134686] ? pipe_poll+0x21b/0x7f0 [ 1459.135164] ? p9pdu_writef+0x100/0x100 [ 1459.135681] ? p9_fd_poll+0x1e0/0x2c0 [ 1459.136223] ? p9_fd_create+0x357/0x4a0 [ 1459.136743] ? p9_conn_create+0x510/0x510 [ 1459.137261] ? p9_client_create+0x798/0x11c0 [ 1459.137892] ? kfree+0xd7/0x340 [ 1459.138310] ? do_raw_spin_unlock+0x4f/0x220 [ 1459.138870] p9_client_create+0xaee/0x11c0 [ 1459.139408] ? p9_client_flush+0x430/0x430 [ 1459.139953] ? trace_hardirqs_on+0x5b/0x180 [ 1459.140504] ? lockdep_init_map_type+0x2c7/0x780 [ 1459.141134] ? __raw_spin_lock_init+0x36/0x110 [ 1459.141830] v9fs_session_init+0x1dd/0x1680 [ 1459.142393] ? lock_release+0x680/0x680 [ 1459.142920] ? kmem_cache_alloc_trace+0x151/0x320 [ 1459.143534] ? v9fs_show_options+0x690/0x690 [ 1459.144099] ? trace_hardirqs_on+0x5b/0x180 [ 1459.144644] ? kasan_unpoison_shadow+0x33/0x50 [ 1459.145214] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1459.145890] v9fs_mount+0x79/0x8f0 [ 1459.146347] ? v9fs_write_inode+0x60/0x60 [ 1459.146868] legacy_get_tree+0x105/0x220 [ 1459.147407] vfs_get_tree+0x8e/0x300 [ 1459.147903] path_mount+0x13be/0x20b0 [ 1459.148406] ? strncpy_from_user+0x9e/0x470 [ 1459.148948] ? finish_automount+0xa90/0xa90 [ 1459.149572] ? getname_flags.part.0+0x1dd/0x4f0 [ 1459.150155] ? _copy_from_user+0xfb/0x1b0 [ 1459.150686] __x64_sys_mount+0x282/0x300 [ 1459.151202] ? copy_mnt_ns+0xa00/0xa00 [ 1459.151700] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1459.152363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.153132] do_syscall_64+0x33/0x40 [ 1459.153701] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1459.154434] RIP: 0033:0x7fef9ce93b19 [ 1459.154942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.157871] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1459.159067] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1459.160195] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1459.161322] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1459.162388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.163476] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:16:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000030000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:16:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfec0, 0x0}}], 0x1, 0x0) 08:16:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000040000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:16:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x6651b, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:16:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@local, 0x78, r3}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fddbdf25090000000a000900bbbbbbbbbbbb0000080031380955f8a7b6024d49ef000100000008003c000100000008000300", @ANYRES32=r3, @ANYBLOB="08003c00000000000500350000000000050033000200000005003500000000000800320000500000"], 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x90) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) pidfd_open(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x9bbb) 08:16:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xff00, 0x0}}], 0x1, 0x0) 08:16:07 executing program 4: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000940)={{}, 0x0, 0x1a, @inherit={0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="51752517000000000300000000000000010100000000000001000000000080ffffffffffffff0600d30500004c5fe14200000000060000000000b8b4000009000000008000e20200000004a4c4601dc300"]}, @subvolid=0x4}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000340)=0x8, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x80000000}) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000006772a03d609443c638e897f36f973e47b706a8f11a256b7867cd2e2b538f64defb7f61db2d95f8e73b323312792c2231235adf89820557ca2124a8f927e97f0f936a30f992a92ad13dea710f07575a36050ffd0501054a5b0c853cc215f4f61225bf69dafc5dce0bebcb8a5ac30400"/146, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460981011f810000000000000003000600010000007e0200000000000040000000000000001c00000000000000d10000000300380002000100feff0000000000700300000002000000000000000900000000000000030000000000000000000000000000000500000000000000000000000000400000000060ffffffff0800000000000000f2000000000000000000000000000087adeb00030000000000000005000000000000000000000000000000b2d233284f94c91d748c568a67f61ed29aa245adfe3dad698fc8e0c8697cf12a843aea3fee6d798c05a7d605caac539f44fb295b60317716760c429990ccee64c6f90c8e20cff844361e93a4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"/1277], 0x4fd) openat(0xffffffffffffff9c, 0x0, 0x50200, 0x108) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) [ 1459.726111] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1459.728624] CPU: 0 PID: 9926 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 1459.729623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.730662] Call Trace: [ 1459.731011] dump_stack+0x107/0x167 [ 1459.731493] sysfs_warn_dup.cold+0x1c/0x29 [ 1459.732045] sysfs_do_create_link_sd+0x122/0x140 [ 1459.732659] sysfs_create_link+0x5f/0xc0 [ 1459.733189] device_add+0x703/0x1bc0 [ 1459.738695] ? devlink_add_symlinks+0x970/0x970 [ 1459.739296] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1459.739977] wiphy_register+0x1da6/0x2850 [ 1459.740533] ? wiphy_unregister+0xb90/0xb90 [ 1459.741112] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1459.750017] ieee80211_register_hw+0x23c5/0x38b0 [ 1459.750641] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1459.751250] ? net_generic+0xdb/0x2b0 [ 1459.751739] ? lockdep_init_map_type+0x2c7/0x780 [ 1459.752343] ? memset+0x20/0x50 [ 1459.752763] ? __hrtimer_init+0x12c/0x270 [ 1459.753289] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 1459.753985] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1459.754570] ? hwsim_new_radio_nl+0x967/0x1080 [ 1459.755153] ? memcpy+0x39/0x60 [ 1459.755578] hwsim_new_radio_nl+0x991/0x1080 [ 1459.756140] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1459.756809] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1459.757670] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1459.758491] genl_family_rcv_msg_doit+0x22d/0x330 [ 1459.759106] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1459.759936] ? cap_capable+0x1d6/0x240 [ 1459.760446] ? ns_capable+0xe2/0x110 [ 1459.760923] genl_rcv_msg+0x33c/0x5a0 [ 1459.761439] ? genl_get_cmd+0x480/0x480 [ 1459.761948] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1459.762603] ? lock_release+0x680/0x680 [ 1459.763107] ? __lockdep_reset_lock+0x180/0x180 [ 1459.763706] netlink_rcv_skb+0x14b/0x430 [ 1459.764220] ? genl_get_cmd+0x480/0x480 [ 1459.764732] ? netlink_ack+0xab0/0xab0 [ 1459.765240] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1459.765846] ? is_vmalloc_addr+0x7b/0xb0 [ 1459.766377] genl_rcv+0x24/0x40 [ 1459.766793] netlink_unicast+0x549/0x7f0 [ 1459.767316] ? netlink_attachskb+0x870/0x870 [ 1459.767875] ? __virt_addr_valid+0x128/0x350 [ 1459.768441] netlink_sendmsg+0x90f/0xdf0 [ 1459.768967] ? netlink_unicast+0x7f0/0x7f0 [ 1459.769552] ? netlink_unicast+0x7f0/0x7f0 [ 1459.770087] __sock_sendmsg+0x154/0x190 [ 1459.770586] ____sys_sendmsg+0x70d/0x870 [ 1459.771098] ? sock_write_iter+0x3d0/0x3d0 [ 1459.771631] ? do_recvmmsg+0x6d0/0x6d0 [ 1459.772125] ? perf_trace_lock+0xac/0x490 [ 1459.772660] ? __lockdep_reset_lock+0x180/0x180 [ 1459.773250] ? __delete_object+0xb3/0x100 [ 1459.773823] ___sys_sendmsg+0xf3/0x170 [ 1459.774325] ? sendmsg_copy_msghdr+0x160/0x160 [ 1459.774912] ? lock_downgrade+0x6d0/0x6d0 [ 1459.775440] ? __kasan_slab_free+0x122/0x160 [ 1459.776009] ? futex_exit_release+0x220/0x220 [ 1459.776585] ? __fget_files+0x296/0x4c0 [ 1459.777103] ? __fget_light+0xea/0x290 [ 1459.781679] __sys_sendmsg+0xe5/0x1b0 [ 1459.782167] ? __sys_sendmsg_sock+0x40/0x40 [ 1459.782713] ? __do_sys_futex+0x2bb/0x480 [ 1459.783264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1459.783929] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.784575] ? trace_hardirqs_on+0x5b/0x180 [ 1459.785128] do_syscall_64+0x33/0x40 [ 1459.785624] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1459.786265] RIP: 0033:0x7ff838ed8b19 [ 1459.786739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.789010] RSP: 002b:00007ff83642d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1459.790014] RAX: ffffffffffffffda RBX: 00007ff838fec020 RCX: 00007ff838ed8b19 [ 1459.790899] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 1459.791782] RBP: 00007ff838f32f6d R08: 0000000000000000 R09: 0000000000000000 [ 1459.792667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1459.793567] R13: 00007ffc4995a98f R14: 00007ff83642d300 R15: 0000000000022000 08:16:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x40000, 0x0}}], 0x1, 0x0) 08:16:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x105440, 0x0) fcntl$dupfd(r2, 0x406, r1) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 08:16:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 50) 08:16:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x2001, 0x0) pipe2(0x0, 0x80000) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe6b02, 0x0) write$tun(r0, &(0x7f0000000300)={@void, @val={0x2, 0x80, 0x3ff, 0x0, 0x9, 0x8b9}, @llc={@snap={0xab, 0xab, "ec", 'j%o', 0x17, "31aa4541a7cf00ccc80d8a91a2e58c3f7009fa5d042551eaf36c3b9584c4363e4a7464a8ccb197cd03e4b759f6562ad4b8df711dc56bba32837dee88a26c8b9c6abf81d42836d36e7d442da86aabe401ee16a03b1a8121f478b69ec34f6caf709ae8b627d71e2c131094e5c4c85a9e0e1f228efffadc203669657d0f63086a949c4db03608f974d6b43f8470617a031e1c072e6866a70b86b719414d2ac1680768fb358ef7aa19b457bb129296e133133c00ede67a6334dca1ae7861384fd1bf1f45071aec48e70cea14265f"}}}, 0xde) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460981011f810000000000000003000600010000007e0200000000000040000000000000001c00000000000000d10000000300380002000100feff0000000000700300000002000000000000000900000000000000030000000000000000000000000000000500000000000000000000000000400000000060ffffffff0800000000000000f2000000000000000000000000000087adeb00030000000000000005000000000000000000000000000000b2d233284f94c91d748c568a67f61ed29aa245adfe3dad698fc8e0c8697cf12a843aea3fee6d798c05a7d605caac539f44fb295b60317716760c429990ccee64c6f90c8e20cff844361e93a4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"/1277], 0x4fd) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000015c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000001e00)={0x1388, 0x20, 0x300, 0x70bd2b, 0x25dfdbfb, {0x19}, [@nested={0x1004, 0x73, 0x0, 0x1, [@generic="af089e580566673f7841731f413a142f3f4b18b6580f171ced490456f13604d6565b666057193f6b8024ed51d805f7a87c4baff2fad05bd0a2fd5791f88a8eb47c5dfad02db28266e35755cbde9d7956c68556579806e990cc699464822d029b3ef2c2d933b5234cf1a9069bc7f68394439d1d8cd061daeb13ed960e2397d69d70f82d7885066d93ad357e16e7ad9d60c51a01811f7b721aa7891c979614752e7364331ea3dc8e86992ba90479a0527d205171c12ecae5c68d6b807f76a9e101bafa800b0213d018ffc72ad68b4a2b7fa9a321e64d09abd29c31b1d8f428abbd726fb054ac7b59c10cdb97b516ad59542a494c8cb3ddf7a511b874cec1f05d47d4b136b470629dcd9376dc5c1fa730dd3e9e7520e6b7358a9e643d6143b17da58e287aaf7c9868d6a2cc15313d83dcf6c3b97208df1a90a2905c4de38e28bbd554effa11ac14afaa1d4c2af91c09c5ab243c1efbd3ec564a3b32bd3e4b6e869f40a28687a16f78c05de266b5c7fc0fb70eba80da0290be28fc7b9706092f0a4e5de53fa3c251ead826db851fe44d8a787cf2a16074bdc40a29c23c58e47bb05aa42f5a1b284f6b493ec7541df2e4a1693f2c4c46f28cc7ee64f525be21dcacf2bfaff7b18fba413e0bd13459ca07007e187a0b9a80aca476daf457fd4e0dda34ea9acf7287d25d12b3f148468660a8f194d4356b78ef2a728d29d6325598b6dc3494c27047f385fe731e913694ea301f13e7a1b77ea04a8c051bccc8d12b82bf5c2267cd998b527b156e78da828c135d0e93da08ffbd6e3ae3a0ec89e35e65c6e157e67750908ca3d7696b1c3bbddbf4d8451d65ae2f93174f0fc5266d8fbd74b3c29423623b2ccf8bae51ff785f9ec5eb5958df96b88b6609613958ecccd36512741ad8f442fc3f4deacc700c01d8869a0cd839741d228dd57d6c7daa730206d676c3cf13f624a8627f8d1af65dd176e0fa87f22112e038b3d22bd64bf580e05c01067ffb16d8b9986b91edb4a470ef8fdd3bc8136aa6542ba1e057f1a0a4717746f291a1ed3f52ab580b3faaeb6ea04feb1beeedfaec049cd088df5afc8e1b56c8f3d8470775c39e362e50d3a815d62ea656f03b2db91269f49e07df75ecea1a93f2a3cb4eb8495430f15712fcab2c627d08b5d7445eefacc7476d032e4a85cdbee78784597e7b157b5603373cb290102de39a5448359d5c4c382c0c9805afa50ef98dc74cfc268e2b6ce5cd9e6dfc1329e37bdb97c5cb33c91095b0f6052cee6509d577fe8f2d331e9377dbc8c2961e857cfaf284e48d9b9ace5b99c8d62d76941d844e23c740d900778887701e2643f47296bc6a415fda20bdd9897cfd1218678228619ad23d1b1988f2d35aad8e9adcdc0810ba3ed5342f729a1dbff3cdd5ce81fe1afe42cc2fb0c1c4a57b19216319a6674e66f86915e7b0efbb5a4612cfa906443e59432accf0ed7bc4fc66ce48a20fe5640ff6dab9c4f54f2c7f9bd5862658e5ab7c6bc5e49d4e680ee0f40564262e73506fc4923eac2d3f65ec3095c631ef9088345712e0f50ececdab20df5a022a6076aecc0ca5ecadab9bed19e725d29e2b8dda47a9bcee82cd173cb7189646c6772d12d902425af43e10505dc91e7bf77d072d12db39aca49321c45313bfc96e0892e63872cd20a876d5408fa4ed05fccd8a7f27bcf606b7091974bcaf7293faccb3e13b17509f27e41845e5d2e9d718d4d1e839cd0d2c1f36382742e86c714618e1ec00dc9f547175bea6c0bf03b5b5d04b0dfa8cc001a07e9cf5468dd9ad07f51b3d8b184a9c2e6c37a782f09726e8ba5e720e5ae8a302a74d8dd0260d579c28561e91f6fdf8c7387044ddc2d04f220bfb3dc98e454ab1aaf39d6f2ab3c2ee6b5051d09767c4f53f09b3516c4b57b7cf608fc26feb4aebd72bd38d8080e220dc8a7439f4e268d468ca5cc776a74dda7167ec726a42d33c8054b1c4488d7bc3d95846edb09d5af562430427d1ab89ea91c5e65c2d3233b1073bbb7dbf472731cec2651cbfa38119a7c26c4921d2a750f26211624eed2323dfb388d09fd1d19f5116bf1c84082f33c3a11e2461bd6b21c218b008c943bd85f5828641f8fccd52f36c97b36c971ec1cf2c3d54314d7546be17701a34fb32cb4d3d813ddf4580afa7542f9a96278e5d39467223bd22f7325519e37d6518c125b6dd56cec5e50abda4249fd2e97aa67c8b244aa0e98d8f80fdc2295cad1085eb9a931ed3779fac5733c53a12febeb8e5ce69e76a44f834c00969921e004828889bbb23d4b585f2be053659f9d7579c39a63271e65c2987265f36cd9f06e5cfe39865312a1019b7323f815dc62b2e38236900ef864a6ee6616e55c40cd14eebc3044238098cf8dafc3a008a799ad95f7317f46c5144f136b7b9031a77fcb4b14fe752e24ba323fc07c7a12e1d083a9bcfbecdcc6ff6726ffc2d2b5e69d9728bfc4b005936baa883e24fd4f1b24a2437fb9545e0506074f34a59207e73ed193bb1e393805114fabb7dd8a550e3e854a3a9a18dcd252ae4414e39267cec919cde9876ad022195501cc3e63755face0440a63efbc228b79dfede8f8d5d6de0159addb5b366330c5bd4a861eac306fb0182faa94153ded72d547ca340bfc7d2ff5e3681c4b07444f1002adb46f5aa699c7795bf433e146cdc6dac1c7844b4e27b5a4387340298f4b4c5b07d7dc8c49dfeac0854dd42f3fb5f3cc22e7c4aeb0c76dfe216066f1a390c5d51b2c0255c7395442bccb794a454e3afa95dcac3fa64e4c5379eea81ecd2261113412e3c0e5965891a1a431959f2f1fe6e6fb3139860dc771c246f9214fd7235485573190e063467ed3f4f282be2449214a835301fe57ed63e3751c39f9787a5c10cbf3d3e166e32e2734fdda123bb4baee0ea079ed00c77825c295e6df7fc849265f94300f4c0d0a23994d164df0072dedc963f1e3e8b893528c43dbb2584eff14a2741ca04fed7690af207988081a192c0d204f7012ecdcf382b7e322357dcfcd1d3da55ee615c977df4e76d963b245643bec45ac32ac22d72151103f9769a11d0bc4a2e2f88f7e667d2d4ec258434c373a6da75d522e9479c72b0ba93a7b76f87698e48a9c55cae4bfe71b3126ecd66bb44de26a49c1edfe7f08c4a2946a2b5e0b7c39a52011e6c6910d0dd15594d71490fce42f3294821804b6e2a73a9243defcc7a3fc698ffe01c14f6dd83e3d4a39e1a80eb5df2f76c307759b423bc41cd1532afcaf945f1ed32a3a30891ce3f5ec426363af2c8bd1935569a80c520c3124f0e0710d96cdb3650299955df67f9b1bec3631d737fbc1ca392ca8c0c63e3c1b2ce49894275871f7b08149d2f18cf4912c99a2ee33fafbbfd8b441b923cff7a3710b5ed4ca4d76f5d0651a91764a616234dbf6bf2cdf9d24580167dbeb2ff0a8d98b9925f03d00029343ec9a1f854299f2e292a44c966ad99ce05e047fa2c96ad36acd576571d9388f05087e7e8245ab04730614808fbde73fb72b5a51398a8adb0ef48c31b31dd222504f82696f3be2d256ba516ac44a5a06ca8c492db0acaee12d46b41a0329cffc33f6989b06c52ba39b887b5a67b16e78b2e30e9e0358664c476f380a11ec423c41bad98d2659f97d92d14afbe7c90d7b48f752fa2e2818d0134909f7be2d85d4fb08d71c38e32c662a668ec508800a6e23d96c715b04f25d7d26a51da6dfc6ccbbdacd19f788bf6e2ed2e0818b4be713ea8ac25d4dadb084f07b19d1622230bda2d68d7deebdf653faf86f9c3273398bb7349a59bf70b10664eb42cc36f326717e5f57e3090dba0cdb7f71ee838f9c567f0634e91e99f50e0f82e291c32719fa1668561e98cec68b22ead04442656bf072274dfc4e4f62d8b9d1ec2a49f79d25b6908f1c969dc67720bb2728549a4f33429fe6ec1a8c47a78539a2e0e92ab777558ce48c69e7d71c987a98e2ae7ce0faf7dd311401ff3bb4882614c1255c614583f419eb747f1cb43ea1b8f9e8005b5b00f44f43a8746565a737f15ce2be6a0a892a5cf7c142c905b4428b9e79d6223cb79233796017dfe40a16d01eb31a5149cc0c17a9bb84e69a5c22f5c49479d73c580e068126c8ebea5ade673f906e7611447397a64339f013f89fa795b305779a65bf2889bf03aed6d5088f2d5fa785c321052b09f4db5ce7384c134e9e013c532a4f25961f143a9ea56fa6da508b302d9041f7c1ddafc68eb0edc6dd9d730fce4bdf8c26064c4fd1e9f7a52dbb3835c10b03ad885da0743edf690ebbb77e5fae8d927bbf0d3f77420056ab6438673d932fdcaf6c3ea47f2a4a3976394bb2c797c55a0c8755c4cb41d9ffe00abbd6fbe603765bb359bd03bebaaca6948f0c8c2860ee454375ff5a1ba8bad37c07ca22ab9a836dbe8f9b56bc2ff8a2c5974cc52486d2481d946023e65c685c8ec849c25633502d3a3e8bbb7b6c757137c01193042cdaaa2af211d12e09843d07b0d6b628f7319b3ceb20367ecba5da5f089dd9bf18976dc5ce5c0a036cf29755c338da62934cdb616cdb79d94d53cd87ad5a05b9ac8d86760ee728da1ddd59ca1e54cde83de7591d1ede82696185f1321647af2ab852af356f9e34c709dacf290fce30b294c94d7ad40c904aca4993e7a0f4c3fcf5956d6d091eb6e92a123545beedffddfde57574ccb74c42c172353ef3d4bdac9964c5be0623b27ebd2ccb396055bcddf02b78a5562c5ffe3cba34327027c76e1d417299f2cc95bd90a6c6f09c2c2242b8fffaebe13c668ad6dfe33806470d753b816f783ac742ebf5c2e98bf05ec41ab16b6ea2057b7ccc50e54b0afba944ca3364643f397a4043a1814696843157170846b61e9a1ec60fdfb27e25180c21b71d468543b15095edb6bcf2bd1d62a862d9759f2f089761ce55f891113bf56591f4d6b63b794ccf73f01d7280a1fe93c1b5b437320ae581750d03a1ee33e59125f644788fe5fac8dd37d8c581909c58f39e5008f27f6fb23d66a170723e77689661cd430c8e82d365434966e38f26b7e50220af52386605ef253d50c346eb311a1d138b8488f755e1b2685c95ca34025dfe8136a36ddcb2736c740a58bc6023f8ad8c517ee1a5fe39f5e1e7ef6aa5e8d271bad9d03a76fb6526af628e7efbcabfd524aef82b588e76d172342baf33da3d41dafd9e2cb9e18d156c0c253eb7f68974bdf2b476c0bd56bc40e006d1f79f48408f17cdec3d390ae04825c5a31059c8054d8a2c0df42a7ebab33e85ff4ab7cc3a7af504df080cb5e6597289f9d2873f351183239f3c7dbe26b277595afe5b98e22200f4c734c83bf9714532923502c09c5fef3953dc138b094a1b52c4ea0e8867917163a01c7984731237ce2f7a5b719b0c25d74e79731f3ffe0733ab08da0bd34d2ebfd7f85c10c910d1143d84d0647288a6ae49514013cc8ef77f1814d36f017630aa630b50c777a3aa62dd695ecaa09dc6a6319293bc4e2bad0a26ed12b8b1fb07258b71f0c87389c988d43ea2ee77df17d2eef16025875be5116c6ec9c8a54aa97bbf67ab4ff916a127f05ce063a2179903c1ef389eb9e0a56c8aeb95e6b4ed5348e0c6ceea10e073502ea955ac99b3191a8a81eac9b1b748c1e1d55312c7f0397b68747f014e9deb34dd0cbff35da9e33fcc21e3f278cfd562e8bdfd389a93c3889f0bf8de9371bd7302afb88f0d56614a6f077879cd3007d963f95c0b07526e894819dbe34d777f236ef6911bcefcd522b445fa203175cf4530c7dd24e72a2b2e6eb037c917c10f332910aaded29978a80ca77c5c3e3b917302d1568628a9caa"]}, @typed={0xc, 0x4a, 0x0, 0x0, @u64=0x7}, @typed={0xd3, 0x10, 0x0, 0x0, @binary="d1ab9803605e3dffa6dbeaddb818f838476050785b85ee74411ea6d58af9c13b50f17314038e4d09552e81f3bfcad78e6ec30df226315595db845ac6b5c02aadef4d8baf6d07452a512c44961dcaee44373166c44eeeef0b4dbf8dfde06178bd7676383539185e701791435b7cdbc95384766f854d3e6fb507372b98a78b74a01ce5b480fe9bdbf096e84f5142adf4761f69d583a595c62a51f83889f6a91e7f90e15245d87a81268b1e2f5bae9cdc15158918e7c7d728896967c0d7e6e16c2db96c3f1b43ac0fbe079b3ffc927b7f"}, @generic="adc7e6e7b8f2a6a3174b99d00e39e4fdcd4e365cd736e33b81591f2d607e31e8da745df9732c132256321b25b24eda6331eb06baad80b54a55aa7e7f93080deaf79030fe864f248e46b9b66c1a4b4ef7e147fa054e2fe9aed8ff0963da5c57aa17908ad145a572750c01c7a5d1cdb423dc3dcc0f152b889d4bacd5b7cbb7eec99642090d0cfce605eff67964e7a4be7c6dfa7743e9581a41cb8f5f3b68f467244f1ab7e6d6e2", @nested={0x127, 0x47, 0x0, 0x1, [@typed={0x14, 0x78, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x29, 0x0, 0x0, @pid=r2}, @typed={0xe4, 0x46, 0x0, 0x0, @binary="a208579f3cdd61eb374a05f26e88714f0919619e2ecc663bb01e039023d09ea03b6e3622dfd57554ea0a5d55cd23d0420a95534812b38698a934716562038c68ef0af3057a1ec3d3ef1d17a1d3c2c828f9f12246eff9ee7421ad0e7a82b599f3a6e004a4cc186ea60addbf666016c3406294ff857594577c6200b8195bbd0ab99cff45323707e266c7d0e269db7c021b7d804fce174c0695e9e5f7eab4fffd273edab460ff436ae23b95e9bee2140306e051ae7df7f6725970e667caa225f9f7e517b521355cd15ccef3a138ff6bc82381fc4c45e3f7e41c76f3d2375ce2ee3f"}, @typed={0xe, 0x26, 0x0, 0x0, @str='/dev/ptp0\x00'}, @generic, @generic="4c673ead855c27294157527f049e6d0ddec4ce"]}, @nested={0xbd, 0x69, 0x0, 0x1, [@generic="51821f9957341b7de76f72efe443c392918ca9568c86ccef1e311dc07bfb5a569be0093ab8036900e65793ad3a0fe9dc0f0210f5484c446fb9215b490e48262e81db8b5d13334f42384d5f95feed9dc0d45cdaa0b51d990032c4b419e8a29966a503e213a2a2e170e26ec212316e4f08b476d52dcc3bb1f025df4f4d209568f3e920745198b43127819b11895db90fdc37946f341b78fbb8b49458250257e08b64e78ac4d36cbb140c6abbad06270f86fc2bb58bda3fae26c1"]}]}, 0x1388}, 0x1, 0x0, 0x0, 0x4800}, 0x4810) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, 0x0) 08:16:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000050000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:16:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:16:25 executing program 4: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000940)={{}, 0x0, 0x1a, @inherit={0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="51752517000000000300000000000000010100000000000001000000000080ffffffffffffff0600d30500004c5fe14200000000060000000000b8b4000009000000008000e20200000004a4c4601dc300"]}, @subvolid=0x4}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000340)=0x8, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x80000000}) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000006772a03d609443c638e897f36f973e47b706a8f11a256b7867cd2e2b538f64defb7f61db2d95f8e73b323312792c2231235adf89820557ca2124a8f927e97f0f936a30f992a92ad13dea710f07575a36050ffd0501054a5b0c853cc215f4f61225bf69dafc5dce0bebcb8a5ac30400"/146, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460981011f810000000000000003000600010000007e0200000000000040000000000000001c00000000000000d10000000300380002000100feff0000000000700300000002000000000000000900000000000000030000000000000000000000000000000500000000000000000000000000400000000060ffffffff0800000000000000f2000000000000000000000000000087adeb00030000000000000005000000000000000000000000000000b2d233284f94c91d748c568a67f61ed29aa245adfe3dad698fc8e0c8697cf12a843aea3fee6d798c05a7d605caac539f44fb295b60317716760c429990ccee64c6f90c8e20cff844361e93a4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"/1277], 0x4fd) openat(0xffffffffffffff9c, 0x0, 0x50200, 0x108) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 08:16:25 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x4307, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x19400, 0x0, 0x0, 0xb93837ae1ce4f0c9}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x20) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0\x00') socket$inet6_udplite(0xa, 0x2, 0x88) [ 1477.736585] FAULT_INJECTION: forcing a failure. [ 1477.736585] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.738760] CPU: 0 PID: 9942 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1477.739779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1477.740954] Call Trace: [ 1477.741353] dump_stack+0x107/0x167 [ 1477.741897] should_fail.cold+0x5/0xa [ 1477.742449] ? create_object.isra.0+0x3a/0xa20 [ 1477.743130] should_failslab+0x5/0x20 [ 1477.743673] kmem_cache_alloc+0x5b/0x310 [ 1477.744326] create_object.isra.0+0x3a/0xa20 [ 1477.744946] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1477.745663] kmem_cache_alloc_node+0x169/0x330 [ 1477.746418] __kmem_cache_create+0x10e/0x520 [ 1477.747054] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1477.747722] p9_client_create+0xc2b/0x11c0 [ 1477.748396] ? p9_client_flush+0x430/0x430 [ 1477.748969] ? trace_hardirqs_on+0x5b/0x180 [ 1477.749550] ? lockdep_init_map_type+0x2c7/0x780 [ 1477.750287] ? __raw_spin_lock_init+0x36/0x110 [ 1477.750943] v9fs_session_init+0x1dd/0x1680 [ 1477.751547] ? lock_release+0x680/0x680 [ 1477.752112] ? kmem_cache_alloc_trace+0x151/0x320 [ 1477.752743] ? v9fs_show_options+0x690/0x690 [ 1477.753426] ? trace_hardirqs_on+0x5b/0x180 [ 1477.754178] ? kasan_unpoison_shadow+0x33/0x50 [ 1477.762499] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1477.763250] v9fs_mount+0x79/0x8f0 [ 1477.766978] ? v9fs_write_inode+0x60/0x60 [ 1477.767614] legacy_get_tree+0x105/0x220 [ 1477.768228] vfs_get_tree+0x8e/0x300 [ 1477.768718] path_mount+0x13be/0x20b0 [ 1477.773932] ? strncpy_from_user+0x9e/0x470 [ 1477.774393] ? finish_automount+0xa90/0xa90 [ 1477.774837] ? getname_flags.part.0+0x1dd/0x4f0 [ 1477.775328] ? _copy_from_user+0xfb/0x1b0 [ 1477.775747] __x64_sys_mount+0x282/0x300 [ 1477.776166] ? copy_mnt_ns+0xa00/0xa00 [ 1477.776660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1477.777293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1477.777970] do_syscall_64+0x33/0x40 [ 1477.778453] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1477.779105] RIP: 0033:0x7fef9ce93b19 [ 1477.779577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1477.781888] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1477.782841] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1477.783731] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1477.784623] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1477.785512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1477.786432] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:16:25 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460981011f810000000000000003000600010000007e0200000000000040000000000000001c00000000000000d10000000300380002000100feff0000000000700300000002000000000000000900000000000000030000000000000000000000000000000500000000000000000000000000400000000060ffffffff0800000000000000f2000000000000000000000000000087adeb00030000000000000005000000000000000000000000000000b2d233284f94c91d748c568a67f61ed29aa245adfe3dad698fc8e0c8697cf12a843aea3fee6d798c05a7d605caac539f44fb295b60317716760c429990ccee64c6f90c8e20cff844361e93a4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"/1277], 0x4fd) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8bac}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3d0}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5a2efde6}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="64656275675f77616e745f65789501615f6973687a653d3078303020303030303030303030301530312c00fcb768477fa32ad100ed4ec65ddafb1dd73e3986ea1ee67c93245256f5e252172cfb7917f9ea7d8289ab057596c76d4115bef56ba9f15dd1fb432a2401b09750a10441f0172ad0"]) 08:16:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000715000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:16:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000060000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:16:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x2000000, 0x0}}], 0x1, 0x0) [ 1477.908579] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1477.916398] CPU: 1 PID: 9952 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 1477.918354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1477.919367] Call Trace: [ 1477.919709] dump_stack+0x107/0x167 [ 1477.920172] sysfs_warn_dup.cold+0x1c/0x29 [ 1477.920702] sysfs_do_create_link_sd+0x122/0x140 [ 1477.921296] sysfs_create_link+0x5f/0xc0 [ 1477.921824] device_add+0x703/0x1bc0 [ 1477.922298] ? devlink_add_symlinks+0x970/0x970 [ 1477.922893] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1477.923562] wiphy_register+0x1da6/0x2850 [ 1477.924101] ? wiphy_unregister+0xb90/0xb90 [ 1477.924666] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1477.925337] ieee80211_register_hw+0x23c5/0x38b0 [ 1477.925982] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1477.926592] ? net_generic+0xdb/0x2b0 [ 1477.927084] ? lockdep_init_map_type+0x2c7/0x780 [ 1477.927691] ? memset+0x20/0x50 [ 1477.928113] ? __hrtimer_init+0x12c/0x270 [ 1477.928636] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 1477.929279] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1477.929898] ? hwsim_new_radio_nl+0x967/0x1080 [ 1477.930480] ? memcpy+0x39/0x60 [ 1477.930907] hwsim_new_radio_nl+0x991/0x1080 [ 1477.931470] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1477.932135] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1477.932945] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1477.933789] genl_family_rcv_msg_doit+0x22d/0x330 [ 1477.934401] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1477.935233] ? cap_capable+0x1d6/0x240 [ 1477.935744] ? ns_capable+0xe2/0x110 [ 1477.936228] genl_rcv_msg+0x33c/0x5a0 [ 1477.936733] ? genl_get_cmd+0x480/0x480 [ 1477.937244] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1477.937984] ? lock_release+0x680/0x680 [ 1477.938603] ? __lockdep_reset_lock+0x180/0x180 [ 1477.939325] netlink_rcv_skb+0x14b/0x430 [ 1477.939945] ? genl_get_cmd+0x480/0x480 [ 1477.940550] ? netlink_ack+0xab0/0xab0 [ 1477.941158] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1477.941861] ? is_vmalloc_addr+0x7b/0xb0 [ 1477.942444] genl_rcv+0x24/0x40 [ 1477.942923] netlink_unicast+0x549/0x7f0 [ 1477.943508] ? netlink_attachskb+0x870/0x870 [ 1477.944133] ? __virt_addr_valid+0x128/0x350 [ 1477.944783] netlink_sendmsg+0x90f/0xdf0 [ 1477.945381] ? netlink_unicast+0x7f0/0x7f0 [ 1477.946021] ? netlink_unicast+0x7f0/0x7f0 [ 1477.946628] __sock_sendmsg+0x154/0x190 [ 1477.947204] ____sys_sendmsg+0x70d/0x870 [ 1477.947782] ? sock_write_iter+0x3d0/0x3d0 [ 1477.948390] ? do_recvmmsg+0x6d0/0x6d0 [ 1477.948963] ? perf_trace_lock+0xac/0x490 [ 1477.949564] ? __lockdep_reset_lock+0x180/0x180 [ 1477.950266] ? __lock_acquire+0x1657/0x5b00 [ 1477.950890] ___sys_sendmsg+0xf3/0x170 [ 1477.951462] ? sendmsg_copy_msghdr+0x160/0x160 [ 1477.952115] ? lock_downgrade+0x6d0/0x6d0 [ 1477.952724] ? futex_exit_release+0x220/0x220 [ 1477.953376] ? __fget_files+0x296/0x4c0 [ 1477.953910] ? __fget_light+0xea/0x290 [ 1477.954412] __sys_sendmsg+0xe5/0x1b0 [ 1477.954894] ? __sys_sendmsg_sock+0x40/0x40 [ 1477.955461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1477.956114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1477.956748] ? trace_hardirqs_on+0x5b/0x180 [ 1477.957296] do_syscall_64+0x33/0x40 [ 1477.957783] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1477.958431] RIP: 0033:0x7ff838ed8b19 [ 1477.958905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1477.961179] RSP: 002b:00007ff83644e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1477.962093] RAX: ffffffffffffffda RBX: 00007ff838febf60 RCX: 00007ff838ed8b19 [ 1477.962883] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 1477.963676] RBP: 00007ff838f32f6d R08: 0000000000000000 R09: 0000000000000000 [ 1477.964466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.965258] R13: 00007ffc4995a98f R14: 00007ff83644e300 R15: 0000000000022000 08:16:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000717000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:16:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000070000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:16:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x7ffffff7, 0x0}}], 0x1, 0x0) 08:16:25 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) io_setup(0x0, &(0x7f0000000080)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280), 0xc, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000005a00)={&(0x7f00000011c0), 0xc, 0x0}, 0x84c00) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x40040) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) r5 = accept4$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000440)=0x1c, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x4, 0xee01}, {0x2, 0x3, r2}, {0x2, 0x4}, {0x2, 0x7, r3}, {0x2, 0x4}, {0x2, 0x0, r4}, {0x2, 0x2, 0xee01}, {0x2, 0x5, r6}], {0x4, 0x4}, [{0x8, 0x1}], {0x10, 0x7}, {0x20, 0x4}}, 0x6c, 0x0) 08:16:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000080000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:16:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xf7ffff7f, 0x0}}], 0x1, 0x0) 08:16:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="007da1804886b1655e09966a7e07c44fecf87834ecdbb6650240e9635802006dcb1b3d4462fe59be4c704b17c759b22d78c09367f849dcb8494ee15dcf7d0932dbaed64f8c680c37873c7d65eecdf0eaed8aa6cb52ef5ae7ab35864fec9cb6832dcf658d3b207a59e9d55e0757fcf48c97ef843f7e"]) mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0x0) r2 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000040)={0x0, 0x1f9, [0x0, 0xc8a2, 0x8, 0x8000, 0x101, 0x4]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r4, r3) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010100}, 0x10) r6 = openat2(r5, &(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)={0x2980c0, 0x8, 0x4}, 0x18) mkdirat(r6, &(0x7f0000000000)='./file1\x00', 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file1', [{}, {0x20, '+[-+\xc3'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, 'vfat\x00'}, {0x20, '\\'}, {0x20, '\x00'}], 0xa, "2bbafb9d871e8a182aaaa667a7c4c9da64386a63f6b22e89b8dab7a5dbd814e3a1206dc7f2870f"}, 0x49) unshare(0x48020200) 08:16:43 executing program 2: getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f0000006140)}}], 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000180)={0x0, 0x0, 0x400, {0x2, 0x9}, 0x9, 0x1}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x1080, 0x0, 0x0, 0x0, 0xb7a, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000c27d86201c008a", @ANYRES32=r4, @ANYBLOB="501f890700386001619e2b58822242c5c5010007b7f07fd10f4226ef2ac43117d9244bf933c9bf76d055cf9d3606e00f2db74ae177b04f0127e3a043397c5c9ac8d46e9a9f884596d8a908449048c6d6b06e2b842a298b09f6010100000000be8800004766896cec94deaaba44f6dd07d57589962505d06719b85d120752e30f4d9e16b93c3b811626dca2db5ccbe4acf6cb90bbb646b667e3"]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) dup(0xffffffffffffffff) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) write$sndseq(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x10000, 0x28) 08:16:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000719000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:16:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000090000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:16:43 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req={0x9, 0x0, 0x20, 0x1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') write$char_usb(r2, 0x0, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) lstat(&(0x7f0000000080)='./file0\x00', 0x0) mlockall(0x3) mlockall(0xa) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1b2c20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r3, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000240)) 08:16:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 51) 08:16:43 executing program 6: sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={0xfffffffffffffffe, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x114, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xfc, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x86}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x48000}, 0x400) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000600000006000b0000000000"], 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, '(\x8b((^$\xaa.\xd1@#\\-\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040040) 08:16:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfc000000, 0x0}}], 0x1, 0x0) [ 1496.193805] FAULT_INJECTION: forcing a failure. [ 1496.193805] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.196473] CPU: 1 PID: 10003 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1496.197344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1496.198425] Call Trace: [ 1496.198787] dump_stack+0x107/0x167 [ 1496.199284] should_fail.cold+0x5/0xa [ 1496.199770] ? create_object.isra.0+0x3a/0xa20 [ 1496.200398] should_failslab+0x5/0x20 [ 1496.200880] kmem_cache_alloc+0x5b/0x310 [ 1496.201403] create_object.isra.0+0x3a/0xa20 [ 1496.201998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1496.202657] kmem_cache_alloc_node+0x169/0x330 [ 1496.203265] __kmem_cache_create+0x10e/0x520 [ 1496.203848] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1496.204485] p9_client_create+0xc2b/0x11c0 [ 1496.205032] ? p9_client_flush+0x430/0x430 [ 1496.205565] ? trace_hardirqs_on+0x5b/0x180 [ 1496.206167] ? lockdep_init_map_type+0x2c7/0x780 [ 1496.206775] ? __raw_spin_lock_init+0x36/0x110 [ 1496.207364] v9fs_session_init+0x1dd/0x1680 [ 1496.207916] ? lock_release+0x680/0x680 [ 1496.208443] ? kmem_cache_alloc_trace+0x151/0x320 [ 1496.209077] ? v9fs_show_options+0x690/0x690 [ 1496.209656] ? trace_hardirqs_on+0x5b/0x180 [ 1496.210267] ? kasan_unpoison_shadow+0x33/0x50 [ 1496.210888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1496.211544] v9fs_mount+0x79/0x8f0 [ 1496.212007] ? v9fs_write_inode+0x60/0x60 [ 1496.212536] legacy_get_tree+0x105/0x220 [ 1496.213059] vfs_get_tree+0x8e/0x300 [ 1496.213537] path_mount+0x13be/0x20b0 [ 1496.214050] ? strncpy_from_user+0x9e/0x470 [ 1496.214607] ? finish_automount+0xa90/0xa90 [ 1496.215178] ? getname_flags.part.0+0x1dd/0x4f0 [ 1496.215789] ? _copy_from_user+0xfb/0x1b0 [ 1496.216337] __x64_sys_mount+0x282/0x300 [ 1496.216872] ? copy_mnt_ns+0xa00/0xa00 [ 1496.217377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1496.218094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1496.218749] do_syscall_64+0x33/0x40 [ 1496.219228] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1496.219884] RIP: 0033:0x7fef9ce93b19 [ 1496.220376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1496.222755] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1496.223767] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1496.224735] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1496.225653] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1496.226598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1496.227512] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:16:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000000000000000a0000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:16:43 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xf7ffff7f, 0x0}}], 0x1, 0x0) 08:16:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000071b000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:16:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000000000000000b0000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:16:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000071f000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:16:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfe800000, 0x0}}], 0x1, 0x0) 08:16:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000280)=@v1={0x1000000, [{0xeaac, 0x4}]}, 0xc, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0xde, 0x0, 0x1, 0x7fff, r0}) fallocate(0xffffffffffffffff, 0x3, 0x900500, 0x30000000000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x183000, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='rxrpc\x00', &(0x7f0000001400)=@keyring) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x11eb806, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="02a90d8647cdcb29f96c8d0aa185fbae45bb2fe2863b99587bd6fefabd6c09d1a5961d2165e7894ae6b77154d3284e0e8255fe74c01cc51798dbd229902a"], &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x8, &(0x7f0000000200)='^},\x00') 08:16:43 executing program 2: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000080)=0x8) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000640)={'fscrypt:', @desc2}, &(0x7f0000000680)={0x0, "605e2436587f069fa751655a892cf5d2a6da65a8d8d944cfe92306b2ca3b9230062da25cfdefbfaf0c9bee1f7354a660ba82bfd59a7a8f3ade9efd8c6342f94e", 0x14}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1bc4451e1f202122232425262728292a2b32333400083723c8081953e7c5383b3a3b3c3d3e3f40000000000000"], 0x48, r1) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r4 = syz_io_uring_complete(0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:17:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000721000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:17:01 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1d2b229df9d010106b745321d68b42d1f323f404404fa5f59cbd3b98454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000280)={0xf38f, 0x10000}) execveat(r3, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000180)=[&(0x7f0000000100)='%&-.+@^!{\x00', &(0x7f0000000140)='tmpfs\x00'], &(0x7f0000000240)=[&(0x7f00000001c0)='^)\x00'], 0x1000) openat(r1, &(0x7f00000000c0)='./file0\x00', 0xc0240, 0x0) 08:17:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfec00000, 0x0}}], 0x1, 0x0) 08:17:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000000000000000f0000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:17:01 executing program 4: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) 08:17:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 52) 08:17:01 executing program 6: mknod$loop(&(0x7f0000001d40)='./file0\x00', 0x10, 0x0) acct(&(0x7f0000000080)='./file0\x00') mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), 0x8003, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4001830, 0x0) 08:17:01 executing program 2: r0 = epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)) io_setup(0x3, &(0x7f0000000700)=0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r2, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) [ 1514.454490] FAULT_INJECTION: forcing a failure. [ 1514.454490] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.458500] CPU: 1 PID: 10061 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1514.460594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1514.463163] Call Trace: [ 1514.463949] dump_stack+0x107/0x167 [ 1514.465055] should_fail.cold+0x5/0xa [ 1514.466202] ? create_object.isra.0+0x3a/0xa20 [ 1514.467656] should_failslab+0x5/0x20 [ 1514.468817] kmem_cache_alloc+0x5b/0x310 [ 1514.470068] ? mark_held_locks+0x9e/0xe0 [ 1514.471369] create_object.isra.0+0x3a/0xa20 [ 1514.472684] kmemleak_alloc_percpu+0xa0/0x100 [ 1514.474082] pcpu_alloc+0x4e2/0x1240 [ 1514.475133] __kmem_cache_create+0x35a/0x520 [ 1514.476547] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1514.478151] p9_client_create+0xc2b/0x11c0 [ 1514.479533] ? p9_client_flush+0x430/0x430 [ 1514.480880] ? trace_hardirqs_on+0x5b/0x180 [ 1514.482272] ? lockdep_init_map_type+0x2c7/0x780 [ 1514.483784] ? __raw_spin_lock_init+0x36/0x110 [ 1514.485320] v9fs_session_init+0x1dd/0x1680 [ 1514.486794] ? lock_release+0x680/0x680 [ 1514.488170] ? kmem_cache_alloc_trace+0x151/0x320 [ 1514.489825] ? v9fs_show_options+0x690/0x690 [ 1514.491373] ? trace_hardirqs_on+0x5b/0x180 [ 1514.492803] ? kasan_unpoison_shadow+0x33/0x50 [ 1514.494381] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1514.496021] v9fs_mount+0x79/0x8f0 [ 1514.497203] ? v9fs_write_inode+0x60/0x60 [ 1514.498677] legacy_get_tree+0x105/0x220 [ 1514.499996] vfs_get_tree+0x8e/0x300 [ 1514.501222] path_mount+0x13be/0x20b0 [ 1514.502482] ? strncpy_from_user+0x9e/0x470 [ 1514.503940] ? finish_automount+0xa90/0xa90 [ 1514.505356] ? getname_flags.part.0+0x1dd/0x4f0 [ 1514.506878] ? _copy_from_user+0xfb/0x1b0 [ 1514.508261] __x64_sys_mount+0x282/0x300 [ 1514.509586] ? copy_mnt_ns+0xa00/0xa00 [ 1514.510902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1514.512683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1514.514441] do_syscall_64+0x33/0x40 [ 1514.515687] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1514.517382] RIP: 0033:0x7fef9ce93b19 [ 1514.518701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1514.524722] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1514.527242] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1514.529615] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1514.532034] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1514.534447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1514.536860] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:17:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xff000000, 0x0}}], 0x1, 0x0) 08:17:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000100000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:17:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000723000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:17:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000110000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:17:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000725000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:17:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xffffff7f, 0x0}}], 0x1, 0x0) 08:17:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000000000000006c0000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:17:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x17e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', 0x400, 0x2) r3 = dup2(r1, r2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f010020acebde78116a53b0058b1123750000001800", @ANYRES32], 0x38}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x3f, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x80, 0x9, 0x7dc20000}}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmsg$SEG6_CMD_SETHMAC(r4, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x8000}}, 0x8) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f00000001c0)=ANY=[@ANYBLOB="9c456a68e373f5a0299900000003ff4477258c59b47e45f5af7c6cc58be2912302a30a941821400c62f07f0d7da90830e4106ca54d64133ef17d282b6c60cfc0d7e9809d843becbf9f45447d1d03292cc66d4f40da3d4f18f164c3a1e79c63edf5295e9b9f5cf71c3556d8d1d0e0bde6f33ed0e759b269705d1d60e77474c68805ca9675f46ecb4ac49f4f25ff22d3d60e44dda2c3b1e4174ae124b65c9404918e15065591b541ae8c78b7a0f1bf8631868dd6bd477b3d"]) lgetxattr(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000003c0)=@known='user.incfs.size\x00', &(0x7f0000000400)=""/154, 0x9a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'rose0\x00'}) r5 = syz_io_uring_complete(r0) sendmsg$nl_generic(r5, &(0x7f0000001740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001700)={&(0x7f0000003200)={0x1464, 0x20, 0x400, 0x70bd26, 0x25dfdbfb, {0xc}, [@nested={0x1b2, 0x9, 0x0, 0x1, [@generic="d0801dc7ce1ef48400b6dc1e646f7dcfe038f02a31fba8c5741f288556ac3e935c4a1ba51ae72d05ca4ef91fd8d470d1bfb744a3d8193e69a24023bc420abf987de6051d674284b0d80827f61aa081b3828744b063fc1262442c8dbb64098b419167cbeb64bc04055da2dac5fed4610edf2dda27b1600950fabd0ec4bdfd126f54dc3f79d0a15d4cfa", @typed={0xb1, 0x7a, 0x0, 0x0, @binary="f03e99d82b5b22b9cec5a3f1e5ccfae3e0f6161f9673b5a91974c5fa6874599f02c3423969bed9657f55d1be05b7826aab694ecac69e5b6758a873c9ef2162edbc0dd73e6a283db14dad5341d8db5bbdf8ef2ceb1da05d6bb1576ea6ded4c7c1166248a2d367480026a8460d626d9d91c7175cd09d25b748e3755faf84f6feb710af02df42c199fc4889a73b0ab4943f4d33ead54f37a097595c0ee2e2a3ad56aa23c03fa245bc84f689de553d"}, @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x1000}, @typed={0x8, 0x1d, 0x0, 0x0, @u32}, @generic="1565df63c21b985e6d0dca2ea7e5e038f09bb10249040a961f30ce72f49b183fbd9b9d590040b911fab7f47b5e57bd6335afdea7210dd3a2dbd35fdc5b7bf65b2939f7cfefb653fcbfba5ee46fcbaa1a4d83b88da1c2f6b33cf363236e"]}, @nested={0x127f, 0x8c, 0x0, 0x1, [@typed={0x97, 0x38, 0x0, 0x0, @binary="1c375b82a2123e24392c400cd12aa2889195b8cede4691cdf28f39a9e73feb757e589972c1d00fe49bda7fb337350aa1fb760bc296e9a71072b84f4dca6c607130f2eeced027a771420981d2b488ddfdb80905d0d228c6b5138a5cffc80045f652630e6f4233480f1c62bbfe1379350186f0b130bce36af3caeff2bd5f04c40868756f48a86f704b1d10720310f262871052b5"}, @typed={0x4, 0x8d}, @generic="4ef2f3564e08566227639670d68362ed7044ad2f017fbe652e470a9070e88563be0324ef3abbbd54cd581a47458b6fa53db0c38154ed23ba8b8fdc0879d985c7ea8b0169ee3b7290ac57681d81a0124c391727fe4e34af65cae39b26ca1c4448c0c3a1dc176e04cb3e10023d79e9e597effd4254362671ab550a18da6932da58f4121e1cf40ef1cb2d06e52484d77dd514423eb445b20c96188028513373f7f3f70a2fc6140bc87ecfc50d32679e7285f36b7cf85f155bd7787fcc2e907ec366608e3fe57eb996c6e9e838300852222a5e2fb3d671a72dedfbfcef650bcfbea7ac2c33adcc23df", @generic="e476cb0b8e01359da07819e5d0bfe9ad3b47df4a634c779c403f5ac16928483bd5834e09ca33760e7e44cfecc58633df976a935a6a1d566715475db1a647a5254ad02600a9ad882798286578d015ec813a7d914ef77e8baedc5208d07b86eeeae0e91d7dd1ce54789ae35089b34a7a2a8d55cd4199635e609db344c1118b6eeb9418f62d12de02894163f4249237fcfa34d76943caffbaa1ce15ea70838f0405470ec5b98accc0d67a", @generic="2f97acdbb0a9", @typed={0x8, 0x34, 0x0, 0x0, @u32=0x3}, @typed={0xc, 0x25, 0x0, 0x0, @u64=0x5}, @generic="02af9cbf8fa14aa7839e33b37cdd1146fc9c1fa81cf2851a5035ad62c79a909cb927b9b2bfdb38098694ce9e8f", @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="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"]}, @generic="8ae48d906837722ecc86397284a6d0570700d3c7ceda0e33c63919b7"]}, 0x1464}, 0x1, 0x0, 0x0, 0x1}, 0x20004804) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20, 0x0) 08:17:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0) [ 1514.991684] EXT4-fs (sda): re-mounted. Opts: (null) [ 1515.011585] EXT4-fs (sda): re-mounted. Opts: (null) [ 1519.410177] Bluetooth: hci4: command 0x0409 tx timeout [ 1521.456092] Bluetooth: hci4: command 0x041b tx timeout [ 1523.506307] Bluetooth: hci4: command 0x040f tx timeout [ 1525.562263] Bluetooth: hci4: command 0x0419 tx timeout [ 1526.477729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.478962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.481249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1526.534744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.535921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.538279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1526.743019] Process accounting resumed [ 1526.768126] Process accounting resumed 08:17:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000727000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:17:32 executing program 6: unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x248803, 0x0) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x86) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000440)="f4434bb8feebf0eb6a52c8c7bb69ac5b642e37ca2c7e966bcf3e059fc7df68c624a2a7a002566a88a733349f7bfcfcfc77b7651b2d687b8e705d2cef016a0bd89bd1a182186c92ec76413546adeac1e86d6866fa3b1c0620fe72f68cd10074dd2f52c931776a9da9e94ca123503d0c6d11a57995cf96795cb9074516215b64c3a6358b62cf6c57b5b4b30efb59406621f6ae09009d5795d000b3226976775134dd548a49ec15117b64d33bb0d1e887c0c07af7546d7a2d8c9beeabe9e4ac32ad8580604f735a1639ab431fd8b61efafd9b9045a411501f3f82d69bf9db2a13e405bbc43e43b269517e6cb8bc2612593ac2070e41f3893381c6", 0xf9, 0x7}, {&(0x7f00000001c0), 0x0, 0x2}, {&(0x7f0000000540)="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", 0xfd, 0x10001}, {&(0x7f0000000640)="2d951245d9cfcce208def884fc5296f5090f15f6269a431ca8bf3b6a759bc0ba1801a32fbb3fb5f12a3486fa6b468a8a4e6a1f83815765f7471026399b311cf26dab", 0x42, 0xffffffffffffffa2}], 0x100000, &(0x7f0000000740)={[{@uni_xlateno}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}], [{@uid_lt}, {@obj_type={'obj_type', 0x3d, '{'}}]}) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) getsockname(r1, &(0x7f0000000240)=@hci, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf32(r2, &(0x7f00000098c0)=ANY=[@ANYBLOB="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"], 0x31b) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/142, 0x8e}, {&(0x7f0000000380)=""/139, 0x8b}], 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 08:17:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10, 0xffffffffffffffff, 0x966b7000) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6d, 0x3, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000009, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000100)=0x3a, 0x6, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f0000ff9000/0x4000)=nil) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) r5 = socket$inet_udplite(0x2, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, r3, r4, r5], 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 08:17:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 53) 08:17:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000860000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:17:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="14000400766574ec255f746f5f626f6e640000000800050009"], 0x40}}, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/167, 0xa7}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000280)=""/17, 0x11}], 0x3, &(0x7f0000000300)=""/131, 0x83}, 0x400}, {{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f00000016c0)=""/200, 0xc8}, {&(0x7f00000017c0)=""/226, 0xe2}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002940)=""/123, 0x7b}}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/31, 0x1f}, {&(0x7f0000002a80)=""/115, 0x73}], 0x2, &(0x7f0000002b40)=""/87, 0x57}, 0x7}], 0x3, 0x40010041, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000003080)={&(0x7f0000002c80), 0xc, &(0x7f0000003040)={&(0x7f0000002cc0)={0x360, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xb1, 0x5b, "c9a203216e7dc78ec0e9e26e9dab9cb0a41c41c368dab0709481db43f39b2097e18e0288b7fae76f6ce92b860093eac08c632338de33279174749d345a7cba0fcac8894dabd5eb887c5ef43916c3957a3e2ad776bcdae1fca1ff9183352c9a6445807cb4dbba5192a1c27fc9df2e52227f3b611e30dae2bab25bf083e64969a6f4399d0bb601aaf32c22d495c138b15bffc4ab477705b4c1347131dcdcd0b9e8fc449398abe8b590505002d8c8"}, @NL80211_ATTR_FRAME_MATCH={0x7f, 0x5b, "851e30fede51ccbb49ec7065289e10afd25703e5c099c39884e48e7b28b383fa0cd1718dbffa5a20420f32c6885c63281f06d421cfc8d8b12c41345dc593b9557c9da8e07347ca8b912e96d3df025a0aa9e9cbe4276ba849a0fc4ee9e651ad4fee9c88302446212d608924930d37f9c4262a38ed2445a0246528e1"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x5a, 0x5b, "8910dc975b805414986415c6e8dc8b7884c370fe0501b53d953b1df4fb0258ab08cbaa1e07c701d8161e6f74a2abc585acebd24c8f1bbf0132e2345968e2711a0237e6da0303b1c225cc011af982df95baafd85648f5"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1af}, @NL80211_ATTR_FRAME_MATCH={0xd8, 0x5b, "90f5062ee21c28e8b9ff29c5ea1c732df78f8623090465e6e5f77bea8995c446a0a857617a24f37c093c76f7b8b4ef4ea8ba6de16bd95d468828569dc7b75c36c31afed489930ef9dc416abdd38f8dc50365e559454d53fcb11862f943467cbed0e9b00f1c6a5232a7fc0c949bbf24947244c788b9e0256433655644c9181902940e471031ecb7ab50d910d2126a8958854a9d9d613e87ad0f2296418672a17c2c7a9b4229ea6c3ad0a4c5b138d280a929f6984bb77ddff23bc5cf17c5abcfa3b85e03b8e582bbeb3b1aa67747ceabe4439c7ff8"}, @NL80211_ATTR_FRAME_MATCH={0xcd, 0x5b, "9f87f2e471a9c18ae9dc1bc8d5cb9da002cbd19a9067d5fb030028ac6df77cc9142b936613be3fb495f8aee0489cc962fea2b9d49afcac06b2e10fdfbd27793d3555604e61f3aaab6b40759ba62865aed7aa3dab1400a8bfd9314335d64f6d8d23c0615fa829ebb4716e8c5e05801a1de98e4f23b721e10b9203884bc8802bb81d3b76bc8cd1599b11cd0ed69ea3fe89e0a11c3d5b00395607e10dfabc1eedf1e97cf9c45d3543459bcb6d7979e9fcb74ae5c0f1cb9cfca1e0b99df0e711cb92e943999ac7ed80a550"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x360}, 0x1, 0x0, 0x0, 0x4001}, 0x20008014) 08:17:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 08:17:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004307, 0x60102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xaab8}, 0x0, 0x0, 0xfffffffd, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x802) ioctl$TCSBRK(r1, 0x5409, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0x4, 0x9ce6}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) preadv(r2, 0x0, 0x0, 0x8, 0x5) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1544.628254] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1544.654431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1544.657030] FAULT_INJECTION: forcing a failure. [ 1544.657030] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.660025] CPU: 0 PID: 10578 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1544.660924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1544.662053] Call Trace: [ 1544.662426] dump_stack+0x107/0x167 [ 1544.662930] should_fail.cold+0x5/0xa [ 1544.663470] ? __kernfs_new_node+0xd4/0x860 [ 1544.664053] should_failslab+0x5/0x20 [ 1544.664574] kmem_cache_alloc+0x5b/0x310 [ 1544.665129] __kernfs_new_node+0xd4/0x860 [ 1544.665698] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1544.666339] ? mark_held_locks+0x9e/0xe0 [ 1544.666865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1544.667580] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1544.668290] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1544.669013] ? trace_hardirqs_on+0x5b/0x180 [ 1544.669602] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1544.670344] kernfs_create_dir_ns+0x9c/0x230 [ 1544.670944] sysfs_create_dir_ns+0x127/0x290 [ 1544.671726] ? sysfs_create_mount_point+0xb0/0xb0 [ 1544.671740] ? rwlock_bug.part.0+0x90/0x90 [ 1544.671753] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1544.671767] ? do_raw_spin_unlock+0x4f/0x220 [ 1544.671784] kobject_add_internal+0x25e/0xa30 [ 1544.671798] ? kobject_add_internal+0x2/0xa30 [ 1544.671814] kobject_init_and_add+0x101/0x160 [ 1544.671829] ? kobject_create_and_add+0xb0/0xb0 [ 1544.671845] ? wait_for_completion_io+0x270/0x270 [ 1544.677854] ? kernfs_find_ns+0x256/0x380 [ 1544.678474] sysfs_slab_add+0x172/0x200 [ 1544.679018] __kmem_cache_create+0x3db/0x520 [ 1544.679620] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1544.680305] p9_client_create+0xc2b/0x11c0 [ 1544.680884] ? p9_client_flush+0x430/0x430 [ 1544.681459] ? trace_hardirqs_on+0x5b/0x180 [ 1544.682046] ? lockdep_init_map_type+0x2c7/0x780 [ 1544.682632] ? __raw_spin_lock_init+0x36/0x110 [ 1544.683158] v9fs_session_init+0x1dd/0x1680 [ 1544.683662] ? lock_release+0x680/0x680 [ 1544.684162] ? kmem_cache_alloc_trace+0x151/0x320 [ 1544.684752] ? v9fs_show_options+0x690/0x690 [ 1544.685321] ? trace_hardirqs_on+0x5b/0x180 [ 1544.685866] ? kasan_unpoison_shadow+0x33/0x50 [ 1544.686455] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1544.687094] v9fs_mount+0x79/0x8f0 [ 1544.687553] ? v9fs_write_inode+0x60/0x60 [ 1544.688078] legacy_get_tree+0x105/0x220 [ 1544.688588] vfs_get_tree+0x8e/0x300 [ 1544.689025] path_mount+0x13be/0x20b0 [ 1544.689510] ? strncpy_from_user+0x9e/0x470 [ 1544.690064] ? finish_automount+0xa90/0xa90 [ 1544.690643] ? getname_flags.part.0+0x1dd/0x4f0 [ 1544.691224] ? _copy_from_user+0xfb/0x1b0 [ 1544.691768] __x64_sys_mount+0x282/0x300 [ 1544.692283] ? copy_mnt_ns+0xa00/0xa00 [ 1544.692787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1544.693449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1544.694137] do_syscall_64+0x33/0x40 [ 1544.694631] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1544.695271] RIP: 0033:0x7fef9ce93b19 [ 1544.695735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1544.697994] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1544.698980] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1544.699866] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1544.700758] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1544.701645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1544.702552] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1544.705889] kobject_add_internal failed for 9p-fcall-cache (error: -12 parent: slab) [ 1544.707511] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1544.708387] CPU: 0 PID: 10578 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1544.709241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1544.710274] Call Trace: [ 1544.710646] dump_stack+0x107/0x167 [ 1544.711114] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1544.711781] p9_client_create+0xc2b/0x11c0 [ 1544.712330] ? p9_client_flush+0x430/0x430 [ 1544.712863] ? trace_hardirqs_on+0x5b/0x180 [ 1544.713418] ? lockdep_init_map_type+0x2c7/0x780 [ 1544.714020] ? __raw_spin_lock_init+0x36/0x110 [ 1544.714627] v9fs_session_init+0x1dd/0x1680 [ 1544.715172] ? lock_release+0x680/0x680 [ 1544.715685] ? kmem_cache_alloc_trace+0x151/0x320 [ 1544.716289] ? v9fs_show_options+0x690/0x690 [ 1544.716849] ? trace_hardirqs_on+0x5b/0x180 [ 1544.717403] ? kasan_unpoison_shadow+0x33/0x50 [ 1544.717980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1544.718636] v9fs_mount+0x79/0x8f0 [ 1544.719091] ? v9fs_write_inode+0x60/0x60 [ 1544.719615] legacy_get_tree+0x105/0x220 [ 1544.720132] vfs_get_tree+0x8e/0x300 [ 1544.720605] path_mount+0x13be/0x20b0 [ 1544.721078] ? strncpy_from_user+0x9e/0x470 [ 1544.721632] ? finish_automount+0xa90/0xa90 [ 1544.722176] ? getname_flags.part.0+0x1dd/0x4f0 [ 1544.722796] ? _copy_from_user+0xfb/0x1b0 [ 1544.723329] __x64_sys_mount+0x282/0x300 [ 1544.723840] ? copy_mnt_ns+0xa00/0xa00 [ 1544.724333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1544.724989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1544.725669] do_syscall_64+0x33/0x40 [ 1544.726136] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1544.726839] RIP: 0033:0x7fef9ce93b19 [ 1544.727308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1544.729554] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1544.730526] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1544.731402] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1544.732284] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1544.733164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1544.734043] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:17:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000729000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:17:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfc}}], 0x1, 0x0) 08:17:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000ffffff9e0000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:17:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xe0, r2, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1000}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0xbb0}, {0x8, 0x0, 0x401}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xa0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x101}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="134a389900acbc34bb1da4a85d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x17, 0x1, @random="70d38aeb7bbe55fb21cca54b1a0a1259c86498"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}, 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000073778375000008000300", @ANYRES32=r3], 0x24}}, 0x0) 08:17:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_netdev_private(r3, 0x89ff, &(0x7f0000000400)="740696db5201baa24525a4ba59bb208a73fe3225a12f4e309fe05d7d55fd29ef07c11480eda067dd3854460693f61a0d3fb505b6e6702414fc0fedb4680173625ee67721e7dec509b9127c056af3c75c686944af313154671b84a02cc3bec4e1929421bdc41b0a72002ac43b84f423fcffbaac092bf349f74f12bde2e56b9c") ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="01800000696c653000"]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_bridge\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x9, r5, 0x1, 0x2, 0x6, @remote}, 0x14) r6 = syz_io_uring_setup(0x1432, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PROBE(r6, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/16], 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="018f35000007ebc1cd429829", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) splice(r7, &(0x7f0000000240)=0xef6, r6, &(0x7f0000000280)=0xffffffffffffff6d, 0x6, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6(0xa, 0x4, 0x9) getsockname$inet6(r8, &(0x7f0000000340)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000380)=0x1c) [ 1544.817256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 08:17:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000072b000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:17:32 executing program 3: memfd_create(&(0x7f00000003c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\x82\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\xb5\xc6#w\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87\x8d\x8d\x82|\x94\x10\xdaU', 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea1", 0x2, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x3, 0x10000, 0xab) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) readv(r1, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f00000004c0)=""/245, 0xf5}, {&(0x7f00000005c0)=""/219, 0xdb}], 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xcf5fef4df4039412, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1075, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0x17, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)=""/248, 0xf8}], 0x1, &(0x7f0000000800)=""/158, 0x9e}, 0xa1ea}], 0x1, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r4, &(0x7f0000000000), 0x1b4000) 08:17:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x80fe}}], 0x1, 0x0) 08:17:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000fffffff00000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:17:49 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xa004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x1, 0x1}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4}, 0x0, 0xffbffffffffffffe, 0xffffffffffffffff, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0xfffffdc4) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={0x24, @none={0x0, 0xffff}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000240)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e1d, 0x0, @loopback, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = dup2(r1, r2) accept4$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)={'U-', 0x1f}, 0x16, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r4, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="200000006100000000000000000000000000000043bd01000100e9de7e31bdf4e60e000000000000cf7a855c6a2a615ff2a53cca77a3982d02429900"/77], &(0x7f0000000140), 0x0) 08:17:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020208000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x3802048, &(0x7f0000000280)={[{@delalloc}], [{@fsname}, {@appraise_type}, {@uid_gt={'uid>', r1}}, {@smackfsroot={'smackfsroot', 0x3d, '%)\\}!'}}, {@obj_role={'obj_role', 0x3d, '[^/,[[-!&-,*\'{$'}}, {@context={'context', 0x3d, 'staff_u'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}, {@obj_type}]}) 08:17:49 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'nr0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) 08:17:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 54) 08:17:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000072d000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:17:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xc0fe}}], 0x1, 0x0) 08:17:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001200010000000000c9ffff0000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:17:49 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) get_robust_list(0xffffffffffffffff, &(0x7f0000000340)=0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48804}, 0x20000040) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000239}}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0x3f, 0x80, 0x7, 0x0, 0x5, 0xa003, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x5, @perf_config_ext={0xd9, 0x9}, 0x108, 0xffffffffffffff85, 0x6, 0x0, 0x80, 0x4, 0x7ff, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xa, r2, 0x9) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) openat$incfs(r1, &(0x7f0000000100)='.pending_reads\x00', 0x4400, 0x20) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS(r5, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c06, 0x0) 08:17:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000000007fffffff0000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:17:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000072f000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1562.463566] FAULT_INJECTION: forcing a failure. [ 1562.463566] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.465500] CPU: 1 PID: 10640 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1562.466377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1562.467436] Call Trace: [ 1562.467783] dump_stack+0x107/0x167 [ 1562.468256] should_fail.cold+0x5/0xa [ 1562.468745] ? create_object.isra.0+0x3a/0xa20 [ 1562.469321] should_failslab+0x5/0x20 [ 1562.469805] kmem_cache_alloc+0x5b/0x310 08:17:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfc00}}], 0x1, 0x0) [ 1562.470329] create_object.isra.0+0x3a/0xa20 [ 1562.470910] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1562.474857] kmem_cache_alloc+0x159/0x310 [ 1562.475387] __kernfs_new_node+0xd4/0x860 [ 1562.475919] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1562.476517] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1562.477176] ? perf_trace_lock+0xac/0x490 [ 1562.477698] ? SOFTIRQ_verbose+0x10/0x10 [ 1562.478216] ? __lockdep_reset_lock+0x180/0x180 [ 1562.478845] kernfs_create_dir_ns+0x9c/0x230 [ 1562.479412] sysfs_create_dir_ns+0x127/0x290 [ 1562.479961] ? sysfs_create_mount_point+0xb0/0xb0 [ 1562.480564] ? rwlock_bug.part.0+0x90/0x90 [ 1562.481100] ? do_raw_spin_unlock+0x4f/0x220 [ 1562.481654] kobject_add_internal+0x25e/0xa30 [ 1562.482225] kobject_init_and_add+0x101/0x160 [ 1562.482824] ? kobject_create_and_add+0xb0/0xb0 [ 1562.483411] ? wait_for_completion_io+0x270/0x270 [ 1562.484012] ? kernfs_name_hash+0xe7/0x110 [ 1562.484554] ? kernfs_find_ns+0x256/0x380 [ 1562.485085] sysfs_slab_add+0x172/0x200 [ 1562.485588] __kmem_cache_create+0x3db/0x520 [ 1562.486152] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1562.490828] p9_client_create+0xc2b/0x11c0 [ 1562.491375] ? p9_client_flush+0x430/0x430 [ 1562.491910] ? trace_hardirqs_on+0x5b/0x180 [ 1562.492456] ? lockdep_init_map_type+0x2c7/0x780 [ 1562.493057] ? __raw_spin_lock_init+0x36/0x110 [ 1562.493640] v9fs_session_init+0x1dd/0x1680 [ 1562.494189] ? lock_release+0x680/0x680 [ 1562.494712] ? kmem_cache_alloc_trace+0x151/0x320 [ 1562.495334] ? v9fs_show_options+0x690/0x690 [ 1562.495901] ? trace_hardirqs_on+0x5b/0x180 [ 1562.496448] ? kasan_unpoison_shadow+0x33/0x50 [ 1562.497021] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1562.497654] v9fs_mount+0x79/0x8f0 [ 1562.498105] ? v9fs_write_inode+0x60/0x60 [ 1562.498637] legacy_get_tree+0x105/0x220 [ 1562.499157] vfs_get_tree+0x8e/0x300 [ 1562.499634] path_mount+0x13be/0x20b0 [ 1562.500121] ? strncpy_from_user+0x9e/0x470 [ 1562.500678] ? finish_automount+0xa90/0xa90 [ 1562.501226] ? getname_flags.part.0+0x1dd/0x4f0 [ 1562.501808] ? _copy_from_user+0xfb/0x1b0 [ 1562.502348] __x64_sys_mount+0x282/0x300 [ 1562.502917] ? copy_mnt_ns+0xa00/0xa00 [ 1562.503413] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1562.504074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1562.504735] do_syscall_64+0x33/0x40 [ 1562.505213] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1562.505851] RIP: 0033:0x7fef9ce93b19 [ 1562.506327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1562.508612] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1562.509563] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1562.510461] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1562.511380] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1562.512261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1562.513138] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:17:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000ffffffff0000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:17:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000731000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:18:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfe80}}], 0x1, 0x0) 08:18:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100f0ffffffffffff0000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:18:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x843, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x900, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x8000}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7, 0x400000}}, './cgroup/cgroup.procs\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r4, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './cgroup/cgroup.procs\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(r2, 0x0, 0x40000, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r2, 0x0, 0x80464c453f) 08:18:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000733000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:18:08 executing program 3: r0 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x6, &(0x7f0000000780)=[{&(0x7f0000000400)="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", 0xfb, 0xe01b}, {&(0x7f0000000280)="fe61ed2428faf4fa9ff5", 0xa, 0x5428}, {&(0x7f00000005c0)="5df34aebd9b004ebe1d8c26415258bf62ec2cf2feee66c063ba041fe388bbee863a9e464d391465cc2c9ce5aa2d06ae6ef052d42559a31ce5a288dd135f8ec936c52c551ec06fb4f030d545c09573fa8e0372a750d7f7aba6844e3e998af78ec1d0d7801f9c285fec20d0e00ab8ddae850c8b659388f9fcddbfdf2", 0x7b, 0x1}, {&(0x7f0000000500)="85dbb4363b503cce911af5dced5cb00ab4d0faf548ec59dd0deb526645b573df368958410a6b6910670a0dd54301d672024bf797e672ba81ef", 0x39, 0xffffffffffffff82}, {&(0x7f0000000640)="b7be038494c191d85867453058e3172eebd124ae688aef571961e02c36121c44c851e4ac5f5dbc9e18b360075556022d1799c0464f07e8c14a8edc5d6b072e2be3b23b63c68bc086ea92e3e8bc4ce969f60d516bd68c6bffa68c46082c21180b81247c4d1ab5c7cb82f6154f1d4bd735c99490b3f0813eb8c7c33d417de428b0605cb24109cdf284a4203006672eab331448bcd3a43fd7f92e9c17e755bbf4d797a749110bd229d87ebe676ca660acf31047afbda2767f3c7b3e2b9eea85ecef1f1b09e91aa16c772096c7e3480f5fc78a", 0xd1}, {&(0x7f0000000740)="e7aee9f19daa25aed21ff759af28122f009cd21616a685ee1faa6fd274f4a5850dabc56d9fa0d234890035c316ca01a9b766966e8970e43fd8dd26b20eb5", 0x3e, 0x6242}], 0x1000000, &(0x7f0000000840)={[{'iso9660\x00'}, {'\x00'}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x32, 0x66, 0x23, 0x63, 0x32, 0x32, 0x38], 0x2d, [0x30, 0x37, 0x34, 0x55], 0x2d, [0x65, 0x36, 0x65, 0x63], 0x2d, [0x64, 0x35, 0x36, 0x30], 0x2d, [0x38, 0x61, 0x35, 0x61, 0x39, 0x32, 0x61, 0x31]}}}]}) r1 = openat(r0, &(0x7f0000000880)='./file0\x00', 0x880, 0x21) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000340)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000", 0x74, 0xb800}], 0x0, &(0x7f0000011700)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x100010, r1, 0x8000000) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r6, &(0x7f0000000940)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000008c0)=@pptp={0x18, 0x2, {0x1, @multicast1}}, 0x0, 0x0, 0x1}, 0x10001) readv(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000540)=""/118, 0x76}, {0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/21, 0x15}], 0x7) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 08:18:08 executing program 4: perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x10, &(0x7f00000016c0)={0x0, {{0x2, 0x4e23, @local}}, {{0x2, 0x0, @dev}}}, 0x108) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000180)={0x4, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) truncate(&(0x7f0000000140)='./file0\x00', 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) 08:18:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x1, 0x3, 0xdc3, 0x7ff, 0x0, 0x1, {0x1}}, 0x511c) bind$bt_l2cap(r0, &(0x7f0000001080), 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000100)=0x4) 08:18:08 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 55) 08:18:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100020000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1580.713616] FAULT_INJECTION: forcing a failure. [ 1580.713616] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.717004] CPU: 1 PID: 10692 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1580.718783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1580.721071] Call Trace: [ 1580.721719] dump_stack+0x107/0x167 [ 1580.722691] should_fail.cold+0x5/0xa [ 1580.723705] ? create_object.isra.0+0x3a/0xa20 [ 1580.724943] should_failslab+0x5/0x20 [ 1580.725969] kmem_cache_alloc+0x5b/0x310 [ 1580.727040] create_object.isra.0+0x3a/0xa20 [ 1580.728183] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1580.729505] kmem_cache_alloc+0x159/0x310 [ 1580.730604] __kernfs_new_node+0xd4/0x860 [ 1580.731742] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1580.733021] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1580.734370] ? perf_trace_lock+0xac/0x490 [ 1580.735214] ? SOFTIRQ_verbose+0x10/0x10 [ 1580.735751] ? __lockdep_reset_lock+0x180/0x180 [ 1580.736376] kernfs_create_dir_ns+0x9c/0x230 [ 1580.736960] sysfs_create_dir_ns+0x127/0x290 [ 1580.737536] ? sysfs_create_mount_point+0xb0/0xb0 [ 1580.738169] ? rwlock_bug.part.0+0x90/0x90 [ 1580.738724] ? do_raw_spin_unlock+0x4f/0x220 [ 1580.743347] kobject_add_internal+0x25e/0xa30 [ 1580.743961] kobject_init_and_add+0x101/0x160 [ 1580.744570] ? kobject_create_and_add+0xb0/0xb0 [ 1580.745198] ? wait_for_completion_io+0x270/0x270 [ 1580.745842] ? kernfs_name_hash+0xe7/0x110 [ 1580.746408] ? kernfs_find_ns+0x256/0x380 [ 1580.751018] sysfs_slab_add+0x172/0x200 [ 1580.751557] __kmem_cache_create+0x3db/0x520 [ 1580.752150] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1580.752830] p9_client_create+0xc2b/0x11c0 [ 1580.753413] ? p9_client_flush+0x430/0x430 [ 1580.753984] ? trace_hardirqs_on+0x5b/0x180 [ 1580.754565] ? lockdep_init_map_type+0x2c7/0x780 [ 1580.755210] ? __raw_spin_lock_init+0x36/0x110 [ 1580.755868] v9fs_session_init+0x1dd/0x1680 [ 1580.756451] ? lock_release+0x680/0x680 [ 1580.757008] ? kmem_cache_alloc_trace+0x151/0x320 [ 1580.757652] ? v9fs_show_options+0x690/0x690 [ 1580.758235] ? trace_hardirqs_on+0x5b/0x180 [ 1580.758800] ? kasan_unpoison_shadow+0x33/0x50 [ 1580.759423] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1580.760120] v9fs_mount+0x79/0x8f0 [ 1580.760590] ? v9fs_write_inode+0x60/0x60 [ 1580.767510] legacy_get_tree+0x105/0x220 [ 1580.768051] vfs_get_tree+0x8e/0x300 [ 1580.768540] path_mount+0x13be/0x20b0 [ 1580.769167] ? strncpy_from_user+0x9e/0x470 [ 1580.770054] ? finish_automount+0xa90/0xa90 [ 1580.770969] ? getname_flags.part.0+0x1dd/0x4f0 [ 1580.771518] ? _copy_from_user+0xfb/0x1b0 [ 1580.772222] __x64_sys_mount+0x282/0x300 [ 1580.773134] ? copy_mnt_ns+0xa00/0xa00 [ 1580.773987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1580.774865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1580.775636] do_syscall_64+0x33/0x40 [ 1580.776232] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1580.776923] RIP: 0033:0x7fef9ce93b19 [ 1580.777441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1580.780130] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1580.781184] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1580.782105] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1580.783034] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1580.783858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1580.784691] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:18:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfec0}}], 0x1, 0x0) 08:18:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100030000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:18:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x843, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x900, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x8000}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="11019e3e1db8bc6b370d00f0ffca2489d6789f414473cca3819f0b009d33147a246b81e6a699ddcfd6e83686f0", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00@\x00./cgroup/cgroup.procs\x00']) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r3, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) openat(r2, 0x0, 0x40000, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, r2, 0x0, 0x80464c453f) 08:18:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x12ec, 0x12, 0x4, 0x70bd29, 0x25dfdbfd, {0x2c, 0x8c, 0x5, 0x5, {0x4e24, 0x4e20, [0xfffffff9, 0x1, 0x2, 0x7fff], [0x1, 0x8, 0x3], 0x0, [0x3, 0x1]}, 0x2, 0x8356}, [@INET_DIAG_REQ_BYTECODE={0x48, 0x1, "d68b7b88c59356e0259a864a6c460a40b326349f24b11860e36523b0d44179cd67539ec35c5dd000f028acad8ca0b757573b0044465ab986837abe969dfc6826971d613c"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "4d3f4a4ddc99a39659884388d8b92e12caac6f4e0a83c956bb97513225d4785775b66f38ad1455a7c1d81f"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "4801de85320e3149720e63042c069d486f1e02f51fafc8e1ac67a0d37d30b4a9fbe3eb9e39b48b6d1f2fd97518dec2285f1bdcde4e95ba4bf78cec951ef6325e2c42827f73db8debfac447ab5f65babe293885bde474ba9a631ce54fd94afc588cb340ac54478b653f4d1e7c754506df69a4dacd3873d8a546aedeef5f6d66b0ec2aa453a0b3eb625d8638ad46a4b01dc2e93d5edbbb2ad102ee2ff7011dc648dbf52559795eabdd76acafc557922229e9b208d405366ff1f50ef038872f2d3fa18e79cdc791d98f7a730ba34ba9d2fd0b8992f21b53f518432f101772da16ab"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "099a2aa0eee01d7202a51d88e0f0e6ec415a111f7c063fc16545756e77e58415c1af7c71cc58bb84590a06f423d708a6fab6f9497f06d8f9b42c0b63ede32eba2c5390c86f34e6bd9a646de863fa16415beeb34d316778"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "88bd39745c9f448cde8c066575a3c118baf11415099120b85627749f14ae406cac21756e370989404609b16f9b841d603d27cf0dd5bdcd9bf26cf08cfdbed3372aef4cb71f2174defcde30644b0ff0df2458a987690d55f48ecc6d705c4e0379d5e3321bac8d584598a2273cf5ca1db7da5c30d3fa52902b72c4465749c6b6830f451d7600f646893cea2ed4bc8b5a408a2e685c89cfbfa10d792923"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "825557340553b1bb85d7d4a5ec220008433ea4cf6ec9cb608987408ecf38b25d6c52e5fd7ad17414761c3683fb0f9d276e7f116f280031fc1d7f019c36"}]}, 0x12ec}}, 0x80851) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000014c0)={r0, 0x49, 0x9, 0x9}) sendmsg$nl_generic(r2, &(0x7f00000016c0)={&(0x7f0000001500), 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x118, 0x30, 0x0, 0x70bd2b, 0x25dfdbff, {0x19}, [@nested={0x1c, 0x79, 0x0, 0x1, [@typed={0x4, 0x50}, @typed={0x14, 0x82, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @nested={0xe8, 0x5b, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x2d, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="9f5f5ade827c4a2771d04280db8e396da54d3976964780805beb2b6a682fc43f669978d7d3093a46f91483bebf0ac0ea5d5f78304a3dec12fab0d4c71d3d62849b98fbba57962e3704886ac35a818b96e7c8d1b83602c9aa52d691e445f1cfc4065dbe85fc752e9be6ec701823688144ea2fd4389c01d135e676694f6be70cd2beb8bf8595194e14852f76b164fb1555eddf6fd401eb4db7eaf7b9d9825c64051c5f2524709caffecc0fd7ec5eeed9bbc2da8c9d", @typed={0x8, 0x42, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x7d, 0x0, 0x0, @u32=0x2}, @generic, @typed={0x8, 0x30, 0x0, 0x0, @fd}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x400c011) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 08:18:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000735000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1580.881600] mac80211_hwsim hwsim13 ÿÿÿÿ: renamed from wlan1 08:18:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xff00}}], 0x1, 0x0) 08:18:08 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xfc, 0x94, 0x81, 0xcb, 0x0, 0x2, 0x88, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40, 0x4, @perf_bp={&(0x7f0000000200), 0x2}, 0x100, 0x1, 0xf654, 0x5, 0xffffffffffffffd5, 0x3ff, 0x401, 0x0, 0x6, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r5) creat(&(0x7f0000000140)='./file0\x00', 0x8) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x200400, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0xa0000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@uname={'uname', 0x3d, '/'}}], [{@uid_gt}, {@permit_directio}]}}) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000ff7f00000500000000000000ffff00000000000008000000000000000104000000000000000000000000000000000000000000000000000000000000090000008100000000000000feff0000001000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003019b2561b2a351000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/512]) 08:18:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000000001c59994138a307ea0000000000", @ANYRES32, @ANYBLOB="0500001208001b"], 0x28}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) 08:18:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000737000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:18:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) 08:18:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33323134393739343100"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004400000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000010500)="ff000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000020000000", 0x40, 0x2400}, {&(0x7f0000011700)="20000000b45b976cb45b976c00000000e0f4655f00"/32, 0x20, 0x2480}, {&(0x7f0000011800)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2800}, {&(0x7f0000011900)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2880}, {&(0x7f0000011a00)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000050000000", 0x40, 0x2c00}, {&(0x7f0000011b00)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2c80}, {&(0x7f0000011c00)="c041000000380000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000030000000", 0x40, 0x4800}, {&(0x7f0000011d00)="20000000000000000000000000000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4880}, {&(0x7f0000011e00)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000006b1710a600000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4c00}, {&(0x7f0000011f00)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000006f20934800000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x5000}, {&(0x7f0000012000)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3332313439373934312f66696c65302f66696c653000000000000000000000000000000000000000000000afa6093f00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x5400}, {&(0x7f0000012100)="ed8100000a000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009270a1b300000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x5800}, {&(0x7f0000012200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800010000000af301000400000000000000000000000500000070000000000000000000000000000000000000000000000000000000000000000000000000000000743fdfdf00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xc0, 0x5be0}, {&(0x7f0000012300)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c2efb56f000000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x63c0}, {&(0x7f0000012500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x18000}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x18800}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19800}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a000}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a800}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1b000}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x20400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x21400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x28000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x28400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x28800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x28c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x29000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x29400}, {&(0x7f0000013900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}], 0x0, &(0x7f0000013e00)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) openat(r1, &(0x7f0000000040)='./file0\x00', 0x1, 0x4) 08:18:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 56) 08:18:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000040)={[{@journal_checksum}]}) mount$9p_unix(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000180), 0x80022, &(0x7f00000001c0)={'trans=unix,', {[{}, {}, {@access_client}, {@access_any}], [{@subj_type={'subj_type', 0x3d, 'journal_checksum'}}, {@audit}]}}) 08:18:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="015e00d65a1c78c592", @ANYRES32=r0, @ANYBLOB='?\x00\x00\x00\x00\x00\x00\x00', @ANYRES16]) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000002c0)=0xe8) fsetxattr$security_capability(r3, &(0x7f0000000180), &(0x7f00000003c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0x7}], r4}, 0x18, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x20000000000081}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r6, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xfb, 0x7f, 0x20, 0x0, 0x0, 0x1, 0x2100, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x1c03, 0x8702, 0x40, 0x6, 0x2, 0x3, 0x591c, 0x0, 0x2, 0x0, 0x1ff}, 0x0, 0x3, r5, 0x1) setresuid(r2, r2, r4) 08:18:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000000001c59994138a307ea0000000000", @ANYRES32, @ANYBLOB="0500001208001b"], 0x28}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) 08:18:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100040000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1598.601852] EXT4-fs (sda): re-mounted. Opts: journal_checksum,,errors=continue [ 1598.604461] EXT4-fs (sda): Unrecognized mount option "trans=unix" or missing value [ 1598.627359] EXT4-fs (sda): re-mounted. Opts: journal_checksum,,errors=continue [ 1598.633508] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 08:18:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100050000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:18:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000739000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:18:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) [ 1598.707649] FAULT_INJECTION: forcing a failure. [ 1598.707649] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.709597] CPU: 0 PID: 10741 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1598.710502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1598.711600] Call Trace: [ 1598.711956] dump_stack+0x107/0x167 [ 1598.712449] should_fail.cold+0x5/0xa [ 1598.712951] ? create_object.isra.0+0x3a/0xa20 [ 1598.713540] should_failslab+0x5/0x20 [ 1598.714043] kmem_cache_alloc+0x5b/0x310 [ 1598.714587] ? mark_held_locks+0x9e/0xe0 [ 1598.715154] create_object.isra.0+0x3a/0xa20 [ 1598.715750] kmemleak_alloc_percpu+0xa0/0x100 [ 1598.716337] pcpu_alloc+0x4e2/0x1240 [ 1598.716848] __kmem_cache_create+0x35a/0x520 [ 1598.717442] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1598.718131] p9_client_create+0xc2b/0x11c0 [ 1598.718724] ? p9_client_flush+0x430/0x430 [ 1598.719354] ? trace_hardirqs_on+0x5b/0x180 [ 1598.719920] ? lockdep_init_map_type+0x2c7/0x780 [ 1598.720585] ? __raw_spin_lock_init+0x36/0x110 [ 1598.721194] v9fs_session_init+0x1dd/0x1680 [ 1598.721771] ? lock_release+0x680/0x680 [ 1598.722311] ? kmem_cache_alloc_trace+0x151/0x320 [ 1598.722949] ? v9fs_show_options+0x690/0x690 [ 1598.723552] ? rcu_nmi_exit+0x71/0xe0 [ 1598.724071] ? trace_hardirqs_on+0x5b/0x180 [ 1598.724648] ? kasan_unpoison_shadow+0x33/0x50 [ 1598.725252] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1598.725928] v9fs_mount+0x79/0x8f0 [ 1598.726408] ? v9fs_write_inode+0x60/0x60 [ 1598.726953] legacy_get_tree+0x105/0x220 [ 1598.731557] vfs_get_tree+0x8e/0x300 [ 1598.732060] path_mount+0x13be/0x20b0 [ 1598.732575] ? strncpy_from_user+0x9e/0x470 [ 1598.733143] ? finish_automount+0xa90/0xa90 [ 1598.733701] ? getname_flags.part.0+0x1dd/0x4f0 [ 1598.734301] ? _copy_from_user+0xfb/0x1b0 [ 1598.734835] __x64_sys_mount+0x282/0x300 [ 1598.735408] ? copy_mnt_ns+0xa00/0xa00 [ 1598.735925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1598.736609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1598.737283] do_syscall_64+0x33/0x40 [ 1598.737777] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1598.738458] RIP: 0033:0x7fef9ce93b19 [ 1598.738953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1598.741310] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1598.742289] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1598.747274] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1598.748191] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1598.749105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1598.750018] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:18:26 executing program 4: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') pread64(r0, &(0x7f0000001140)=""/4102, 0x1006, 0x2) 08:18:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) sendfile(r0, r0, &(0x7f0000000000)=0x4, 0xdb) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 08:18:26 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0xfffffffffffff5bb, 0x2, &(0x7f0000000380)=[{&(0x7f0000000240)="19b337bbc220e9d2f1968ac628c78b28395f508f53ff82de6c2f1d855aed9d10fcd43cd75984aa59221aac70e9e5dab2633484ef7088e60ebecf35545273ce1b454f7896eded481a1b4f17c8cfa4b1d6960048a63272260665d41789b7ede9030a6fb66b7fa7f00870897ec080b1c86b3508b17d5122f015b7e86d", 0x7b, 0x742}, {&(0x7f00000002c0)="acacda967b975463155343e9663226697b62ae29e1f2715475f01736126415b84eb9cac0f95accb93e01d0ab3006a807bba9fee2834221c80a4b0d4da5c4c79831c6fce6356100b5b5ecbc8022a7b75b910d3beb34967cb329eeca2e079e86af887fe0bb03cfc07c21b04589921f4577fa1b80be0b631ea1b32abedbd0a83a412d8e3c524d02de8f7ec7bd72b24c159fe78629eb32317b4852130339cdd9b4692212", 0xa2, 0xffffffffffff8001}], 0x2000000, &(0x7f0000000940)={[{@block={'block', 0x3d, 0x400}}, {@dmode}, {@block={'block', 0x3d, 0x100}}, {@sbsector={'sbsector', 0x3d, 0x9}}, {@nocompress}, {@hide}], [{@smackfsfloor={'smackfsfloor', 0x3d, ']\xfb\\}){'}}, {@measure}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfsdef={'smackfsdef', 0x3d, '(g#!g*#])-+%:-'}}, {@dont_appraise}, {@permit_directio}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, ','}}]}) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) dup3(r1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="200000008000000006000000368124580d3c4ef28bc7eb6a0000000f00000000000000010000000100000000e0f4655fe0f4655f0105ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) 08:18:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100060000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:18:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="015e00d65a1c78c592", @ANYRES32=r0, @ANYBLOB='?\x00\x00\x00\x00\x00\x00\x00', @ANYRES16]) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000002c0)=0xe8) fsetxattr$security_capability(r3, &(0x7f0000000180), &(0x7f00000003c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0x7}], r4}, 0x18, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x20000000000081}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r6, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xfb, 0x7f, 0x20, 0x0, 0x0, 0x1, 0x2100, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x1c03, 0x8702, 0x40, 0x6, 0x2, 0x3, 0x591c, 0x0, 0x2, 0x0, 0x1ff}, 0x0, 0x3, r5, 0x1) setresuid(r2, r2, r4) 08:18:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 57) 08:18:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='ext4\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed0100010000000000f4655200000000000004000000000000000400046ec241d64075eb2eace13c2f65097f7e9819552b8236101c1ee889fd927c47a5f86fbe1423574d4c9eb918798c2c49ceaf2afadbddbd1f926f8e5c1732027e170f4e75aed7b6530321fb8f71c3e4826e18e3193188fd0d6a9414f1b6a60aa882380663df", 0x81, 0x2100}], 0x0, &(0x7f0000000140)) 08:18:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 08:18:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000073b000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1599.308577] EXT4-fs error (device loop4): ext4_fill_super:4962: inode #2: comm syz-executor.4: iget: bad extra_isize 223 (inode size 256) [ 1599.310571] EXT4-fs (loop4): get root inode failed [ 1599.311299] EXT4-fs (loop4): mount failed [ 1599.328797] FAULT_INJECTION: forcing a failure. [ 1599.328797] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.330294] CPU: 1 PID: 10791 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1599.331147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1599.332132] Call Trace: [ 1599.332452] dump_stack+0x107/0x167 [ 1599.332883] should_fail.cold+0x5/0xa [ 1599.333335] ? create_object.isra.0+0x3a/0xa20 [ 1599.333881] should_failslab+0x5/0x20 [ 1599.334328] kmem_cache_alloc+0x5b/0x310 [ 1599.334813] create_object.isra.0+0x3a/0xa20 [ 1599.339400] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1599.340006] kmem_cache_alloc+0x159/0x310 [ 1599.340503] __kernfs_new_node+0xd4/0x860 [ 1599.340997] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1599.341552] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1599.342173] ? kernfs_add_one+0x124/0x4d0 [ 1599.342669] ? kernfs_create_dir_ns+0x19f/0x230 [ 1599.343278] kernfs_new_node+0x93/0x120 [ 1599.343780] __kernfs_create_file+0x51/0x350 [ 1599.344295] sysfs_add_file_mode_ns+0x221/0x560 [ 1599.344896] internal_create_group+0x324/0xb30 [ 1599.345446] ? sysfs_remove_group+0x170/0x170 [ 1599.345972] ? kernfs_name_hash+0xe7/0x110 [ 1599.346473] ? kernfs_find_ns+0x256/0x380 [ 1599.346972] sysfs_slab_add+0x188/0x200 [ 1599.347493] __kmem_cache_create+0x3db/0x520 [ 1599.348020] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1599.348610] p9_client_create+0xc2b/0x11c0 [ 1599.349113] ? p9_client_flush+0x430/0x430 [ 1599.349620] ? trace_hardirqs_on+0x5b/0x180 [ 1599.350133] ? lockdep_init_map_type+0x2c7/0x780 [ 1599.350695] ? __raw_spin_lock_init+0x36/0x110 [ 1599.355315] v9fs_session_init+0x1dd/0x1680 [ 1599.355821] ? lock_release+0x680/0x680 [ 1599.356301] ? kmem_cache_alloc_trace+0x151/0x320 [ 1599.356864] ? v9fs_show_options+0x690/0x690 [ 1599.357392] ? trace_hardirqs_on+0x5b/0x180 [ 1599.357903] ? kasan_unpoison_shadow+0x33/0x50 [ 1599.358444] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1599.359107] v9fs_mount+0x79/0x8f0 [ 1599.359588] ? v9fs_write_inode+0x60/0x60 [ 1599.360080] legacy_get_tree+0x105/0x220 [ 1599.360657] vfs_get_tree+0x8e/0x300 [ 1599.361102] path_mount+0x13be/0x20b0 [ 1599.361559] ? strncpy_from_user+0x9e/0x470 [ 1599.362071] ? finish_automount+0xa90/0xa90 [ 1599.362578] ? getname_flags.part.0+0x1dd/0x4f0 [ 1599.363157] ? _copy_from_user+0xfb/0x1b0 [ 1599.363671] __x64_sys_mount+0x282/0x300 [ 1599.364154] ? copy_mnt_ns+0xa00/0xa00 [ 1599.364615] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1599.365231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1599.365849] do_syscall_64+0x33/0x40 [ 1599.366290] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1599.366892] RIP: 0033:0x7fef9ce93b19 [ 1599.371405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1599.373522] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1599.374411] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1599.375283] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1599.376128] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1599.376956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1599.377782] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:18:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 58) 08:18:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000073d000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:18:44 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x3, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffffffffffff, 0x101000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) io_submit(0x0, 0x6, &(0x7f0000000840)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7fff, 0xffffffffffffffff, &(0x7f0000000200)="a91bd9aa70f0259460604f9530f4abd4a579328c9f4c7322022fc3bf1c00d80d9fd08af8acdc49717b5cf44dd6f3a4b2430bab68799171b8830ed8608d73ddcd18ed4e29b2be1d7f162affb8f71616", 0x4f, 0x3, 0x0, 0x0, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000000500)="78cba087c77518ecb554fdee249d3981b572c6cde25de1e1dc9fd8707cc7391dea8e0035b666e3a6ea62434575cdef114c25d5286b72e3e5966c86767a7ae0c026b855eb1fe347bb837e4fd0cbdb84201be5d67eb9cb10f13593f474f841ea700f9b97d6d5fd273fb78cfae5140dc45b6e876b38436e1e00aa78749eff1b054397abfe84b94c39b198bdaf2b7b023a89103fb9800483a5ad408441e576", 0x9d, 0x8001, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f00000005c0)="bbfd2bf6f2bf2917f26669e4a2c4546bcb8893e0703f617a7e27c1e1cc424dd4419830d2d66b0ee65d67b023af12304c03800714a9d45a6d966a7f725062a1cad3a50653c0f958aa2ad724f7d8b13700ee5fb2c4aa6d70a9b469aa13d5fd4ca8", 0x60, 0xad7, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000480)="c86d37ca59c0c0", 0x7, 0xffffffff, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0xc5d1, 0xffffffffffffffff, &(0x7f0000000680)="c789a4d384c0676f19d9ee06701e2673e8f944ee6c37dc223bbebfd1de6f8e0be3b4842f65c8df18a4ff34000678360359e48897364f3f8a34", 0x39, 0x4, 0x0, 0x3, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0x8001, 0xffffffffffffffff, &(0x7f0000000740)="32b1fa380d56c7993c3ec09024c8e64a74dd82d38877cf2034318872bdc0e14e1f02f7fd0d2cb3ea969d4f1a99e1eaf02834e5c309aae119d051e9c1ae222f6de17064cc4e8d41fc8cd4db28a4068d57f03e2287000b843c223a6494d74f02bb8332fc7593655ff388fd8bbf9cd0babef7e124b2d542246147936f3cb5c17493d3fb17e6ce6456696ff6ca8284796e83e03dd18139", 0x95, 0x5, 0x0, 0x1}]) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000340)) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@local, r5}, 0x14) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="0567dc0100000000000000ff0000000000000000000000005aed97e1"]) rename(&(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='./file0\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) 08:18:44 executing program 6: sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000740)={0x74, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9064d68a1d688cb564c5100107341e4376c6b7894c391015718c602f3aca345aab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595ac38e5e42f1edd80c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3e00020000000000002637b26db43c04d57f634751"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x8) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000cc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E/\xc6\x17gB0Qim\x82u\x0fZ\xa9\x14\xf5\xc7X\xa9\x00\xb7\xaf\xcfouN\xbd\xb2\t^\xbe&~\xa7l\xfa\x036\x1c\"\x80\xfc/\x9b\x95\xf1!K\xc5{\xe7\xfdB[\xca\x87\x9bc\x98dg\x1a\xa1\xaa\xb4\x19\x7f\xa7\x90y\x9fq\xf5\x8a\xa9 \xa6\xdd\xf0+gb\xa6g\\\xec\tz\x06\xdf\x1a\x9c\xc9\xf7\xcc\x85\xb4G\xe9\xd3D\xf4\x8c\n\x17\xd5\x00\xf18\xb3T', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f0000000940)=']\xadt\xe0\r\xa3\xd7\xe8\x91\x90\n\x03_\x85\xa9\'E\xae\"\xeb]DE\xa3w\x8b\x94\xf7Yf\x03\x00\xd2:-\xab7\xd0\xf6\x0e\x903U\xe1\xe2\x8cS*HC\x17\xa0}@\xf4.\x87]\xed\x1f\x1e\xe8;\xfd\xee$\x8f\xba\xa5@\"\x93\xf7yR\x95z\x95\xc4\x03{\x11\xbe\xb3e\xb8B\x13\xa3uh\xcf\x11\xc7{Y\x0fp\x031\xb1/b_mq\x96\xccc\xa7\xbb\xb4T\x00J\xd7\xb8\n\xd4\xd9B\xa9\xec\xc5\xb5\x0e\xf1Q\x03\xbcX\x8d\xb2\xf6^\xb9\xc8\xa5\xdc\xa5\xcb\xde\xd3\xd03\xcc\xbe\xed\x9b\xbd\xcbb\x91\x98\x80\xe1X(t\xda\xd3F\x02\xa9\xa0\x81\xce;{\xfa\xba\xa3,{\xe87\xf6\x0f\xf9M\xb5mz', &(0x7f0000000700)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) 08:18:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100070000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:18:44 executing program 2: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1451c2, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca88c, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1c8) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x24, r5, 0x101, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x24}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, 0x0, 0x48011) pwrite64(r2, &(0x7f0000000480)="af", 0x1, 0x1000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x8, 0x0, 0x8000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) write$P9_RAUTH(r0, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x1, 0x3, 0x6}}, 0x14) 08:18:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x0) 08:18:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x3bac, &(0x7f0000000040)={0x0, 0x5489, 0x0, 0x0, 0x206}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'gretap0\x00', 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2c49, &(0x7f00000005c0)={0x0, 0xda7e, 0x0, 0x2, 0x31b, 0x0, r4}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) [ 1616.944466] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1617.010703] FAULT_INJECTION: forcing a failure. [ 1617.010703] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.014460] CPU: 0 PID: 10815 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1617.016248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.018354] Call Trace: [ 1617.019022] dump_stack+0x107/0x167 [ 1617.019973] should_fail.cold+0x5/0xa [ 1617.020959] ? create_object.isra.0+0x3a/0xa20 [ 1617.022130] should_failslab+0x5/0x20 [ 1617.023099] kmem_cache_alloc+0x5b/0x310 [ 1617.024149] create_object.isra.0+0x3a/0xa20 [ 1617.025257] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.026548] kmem_cache_alloc+0x159/0x310 [ 1617.027617] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1617.030716] idr_get_free+0x4b5/0x8f0 [ 1617.031789] idr_alloc_u32+0x170/0x2d0 [ 1617.033876] ? __fprop_inc_percpu_max+0x130/0x130 [ 1617.035292] ? lock_acquire+0x197/0x470 [ 1617.036436] ? __kernfs_new_node+0xff/0x860 [ 1617.037664] idr_alloc_cyclic+0x102/0x230 [ 1617.038913] ? idr_alloc+0x130/0x130 [ 1617.039875] ? rwlock_bug.part.0+0x90/0x90 [ 1617.040955] __kernfs_new_node+0x117/0x860 [ 1617.042030] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1617.043237] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1617.044596] ? perf_trace_lock+0xac/0x490 [ 1617.045655] ? SOFTIRQ_verbose+0x10/0x10 [ 1617.046701] ? __lockdep_reset_lock+0x180/0x180 [ 1617.047901] kernfs_create_dir_ns+0x9c/0x230 [ 1617.049020] sysfs_create_dir_ns+0x127/0x290 [ 1617.050137] ? sysfs_create_mount_point+0xb0/0xb0 [ 1617.051384] ? rwlock_bug.part.0+0x90/0x90 [ 1617.052621] ? do_raw_spin_unlock+0x4f/0x220 [ 1617.053837] kobject_add_internal+0x25e/0xa30 [ 1617.055050] kobject_init_and_add+0x101/0x160 [ 1617.056264] ? kobject_create_and_add+0xb0/0xb0 [ 1617.057589] ? wait_for_completion_io+0x270/0x270 [ 1617.058952] ? kernfs_name_hash+0xe7/0x110 [ 1617.060172] ? kernfs_find_ns+0x256/0x380 [ 1617.061304] sysfs_slab_add+0x172/0x200 [ 1617.062542] __kmem_cache_create+0x3db/0x520 [ 1617.063852] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1617.065314] p9_client_create+0xc2b/0x11c0 [ 1617.066445] ? p9_client_flush+0x430/0x430 [ 1617.067684] ? trace_hardirqs_on+0x5b/0x180 [ 1617.068817] ? lockdep_init_map_type+0x2c7/0x780 [ 1617.070060] ? __raw_spin_lock_init+0x36/0x110 [ 1617.071279] v9fs_session_init+0x1dd/0x1680 [ 1617.072537] ? lock_release+0x680/0x680 [ 1617.073592] ? kmem_cache_alloc_trace+0x151/0x320 [ 1617.074844] ? v9fs_show_options+0x690/0x690 [ 1617.076026] ? trace_hardirqs_on+0x5b/0x180 [ 1617.077148] ? kasan_unpoison_shadow+0x33/0x50 [ 1617.078335] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.079677] v9fs_mount+0x79/0x8f0 [ 1617.080608] ? v9fs_write_inode+0x60/0x60 [ 1617.081688] legacy_get_tree+0x105/0x220 [ 1617.082748] vfs_get_tree+0x8e/0x300 [ 1617.083740] path_mount+0x13be/0x20b0 [ 1617.084736] ? strncpy_from_user+0x9e/0x470 [ 1617.085869] ? finish_automount+0xa90/0xa90 [ 1617.086999] ? getname_flags.part.0+0x1dd/0x4f0 [ 1617.088224] ? _copy_from_user+0xfb/0x1b0 [ 1617.089325] __x64_sys_mount+0x282/0x300 [ 1617.090383] ? copy_mnt_ns+0xa00/0xa00 [ 1617.091412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.092780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.094116] do_syscall_64+0x33/0x40 [ 1617.095433] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1617.096777] RIP: 0033:0x7fef9ce93b19 [ 1617.097745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.102466] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1617.104420] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1617.106249] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1617.108069] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1617.109867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.111699] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:18:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100080000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:18:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfc000000}}], 0x1, 0x0) 08:18:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000073f000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1617.165630] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 08:18:44 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000340)={0xa9c2, 0x0, 0x9, {0x2, 0x6f5}, 0xcca7, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x4, @time={0x6, 0x3f}, 0x3, {0x1, 0x1f}, 0x83, 0x2, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000240)) ioctl$TCSETSF(r2, 0x5404, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0xe4, 0x0, 0x18, 0x0, 0x0, 0x16000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8, 0x8, 0x0, 0x1, 0x5, 0x15d, 0xffff, 0x0, 0x101, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r0, 0x893, 0x8, 0x1}) ioctl$CDROM_SET_OPTIONS(r4, 0x5320, 0x5) 08:18:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 59) 08:18:44 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$getown(0xffffffffffffffff, 0x9) fsmount(0xffffffffffffffff, 0x0, 0x70) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r0, &(0x7f0000000040)=0xffffffe, 0x12) 08:18:45 executing program 4: sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x0, 0x609, 0x0, 0x0, {0x2d}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008801}, 0x40081) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x40008, 0x0, 0x0, 0x7, 0x0, 0x7, 0x40, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x20) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x8, 0x0, 0x0, 0x9, 0x0, 0xfff, 0x8, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_config_ext={0x5, 0x1f}, 0x1060, 0x8001, 0x9, 0x6, 0x31b, 0x20, 0xa03, 0x0, 0x3, 0x0, 0x25}, r4, 0x2, r5, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x9, 0x0, 0x4, 0x0, 0x100, 0x40002, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xeda, 0x100000001}, 0xc302, 0x7340, 0x2dd72f0c, 0x0, 0x6, 0x2, 0x3f, 0x0, 0x95f8, 0x0, 0x5}, 0xffffffffffffffff, 0x8, r2, 0x2) copy_file_range(r6, 0x0, r1, 0x0, 0x200f5ef, 0x0) 08:18:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000008d) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000540)}, 0x4200, 0x0, 0x17d, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x1) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000a8ea0a0e29d9b199468d4c81f0bae4c9ea331915bf560f2db5994f41725507a3e488313033c64dd1e7dcbb006ab98e284e6f397624d6b124e58122b7158f8bb65a4705852be924c9", @ANYRES16=r5, @ANYBLOB="000326bd7000fedbdf2523000000050021000400000005002100200000000500220001000000050022000000000008000200", @ANYRES32=r4, @ANYBLOB="0500210078000000"], 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x40) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x11, 0x1, 0x6, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x0, 0xae5b, 0x1, &(0x7f00000001c0)={[0x7ff]}, 0x8) keyctl$search(0xa, 0x0, &(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0xb, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x20008000) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x0, 0x401}]}, 0x10) 08:18:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfe800000}}], 0x1, 0x0) [ 1617.718801] ALSA: seq fatal error: cannot create timer (-22) [ 1617.769768] ALSA: seq fatal error: cannot create timer (-22) [ 1617.865646] FAULT_INJECTION: forcing a failure. [ 1617.865646] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.868546] CPU: 0 PID: 10856 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1617.869485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.870608] Call Trace: [ 1617.870961] dump_stack+0x107/0x167 [ 1617.871907] should_fail.cold+0x5/0xa [ 1617.872814] ? __kernfs_new_node+0xd4/0x860 [ 1617.873437] should_failslab+0x5/0x20 [ 1617.873930] kmem_cache_alloc+0x5b/0x310 [ 1617.874507] __kernfs_new_node+0xd4/0x860 [ 1617.875043] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1617.876373] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1617.877842] ? wait_for_completion_io+0x270/0x270 [ 1617.879314] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1617.879995] kernfs_new_node+0x93/0x120 [ 1617.880556] __kernfs_create_file+0x51/0x350 [ 1617.881127] sysfs_add_file_mode_ns+0x221/0x560 [ 1617.881808] internal_create_group+0x324/0xb30 [ 1617.882471] ? sysfs_remove_group+0x170/0x170 [ 1617.883050] ? kernfs_name_hash+0xe7/0x110 [ 1617.883694] ? kernfs_find_ns+0x256/0x380 [ 1617.884287] sysfs_slab_add+0x188/0x200 [ 1617.884798] __kmem_cache_create+0x3db/0x520 [ 1617.885427] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1617.886079] p9_client_create+0xc2b/0x11c0 [ 1617.886705] ? p9_client_flush+0x430/0x430 [ 1617.887320] ? trace_hardirqs_on+0x5b/0x180 [ 1617.887884] ? lockdep_init_map_type+0x2c7/0x780 [ 1617.888571] ? __raw_spin_lock_init+0x36/0x110 [ 1617.889162] v9fs_session_init+0x1dd/0x1680 [ 1617.889768] ? lock_release+0x680/0x680 [ 1617.890336] ? kmem_cache_alloc_trace+0x151/0x320 [ 1617.890970] ? v9fs_show_options+0x690/0x690 [ 1617.891638] ? trace_hardirqs_on+0x5b/0x180 [ 1617.892243] ? kasan_unpoison_shadow+0x33/0x50 [ 1617.892831] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.893558] v9fs_mount+0x79/0x8f0 [ 1617.894018] ? v9fs_write_inode+0x60/0x60 [ 1617.894604] legacy_get_tree+0x105/0x220 [ 1617.895127] vfs_get_tree+0x8e/0x300 [ 1617.895674] path_mount+0x13be/0x20b0 [ 1617.896177] ? strncpy_from_user+0x9e/0x470 [ 1617.896800] ? finish_automount+0xa90/0xa90 [ 1617.897739] ? getname_flags.part.0+0x1dd/0x4f0 [ 1617.898910] ? _copy_from_user+0xfb/0x1b0 [ 1617.899643] __x64_sys_mount+0x282/0x300 [ 1617.900348] ? copy_mnt_ns+0xa00/0xa00 [ 1617.900966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.901854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.902726] do_syscall_64+0x33/0x40 [ 1617.903383] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1617.904167] RIP: 0033:0x7fef9ce93b19 [ 1617.904786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.907712] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1617.908934] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1617.910045] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1617.911263] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1617.912309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.913390] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1617.933143] syz-executor.2 (10857): /proc/10857/oom_adj is deprecated, please use /proc/10857/oom_score_adj instead. [ 1617.959928] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1617.962048] CPU: 0 PID: 10856 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1617.963019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.964497] Call Trace: [ 1617.964925] dump_stack+0x107/0x167 [ 1617.965495] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1617.966237] p9_client_create+0xc2b/0x11c0 [ 1617.966806] ? p9_client_flush+0x430/0x430 [ 1617.967455] ? trace_hardirqs_on+0x5b/0x180 [ 1617.968035] ? lockdep_init_map_type+0x2c7/0x780 [ 1617.968691] ? __raw_spin_lock_init+0x36/0x110 [ 1617.969340] v9fs_session_init+0x1dd/0x1680 [ 1617.969902] ? lock_release+0x680/0x680 [ 1617.970476] ? kmem_cache_alloc_trace+0x151/0x320 [ 1617.971099] ? v9fs_show_options+0x690/0x690 [ 1617.971781] ? trace_hardirqs_on+0x5b/0x180 [ 1617.972399] ? kasan_unpoison_shadow+0x33/0x50 [ 1617.972990] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.973699] v9fs_mount+0x79/0x8f0 [ 1617.974167] ? v9fs_write_inode+0x60/0x60 [ 1617.974752] legacy_get_tree+0x105/0x220 [ 1617.975352] vfs_get_tree+0x8e/0x300 [ 1617.975836] path_mount+0x13be/0x20b0 [ 1617.976426] ? strncpy_from_user+0x9e/0x470 [ 1617.976987] ? finish_automount+0xa90/0xa90 [ 1617.977666] ? getname_flags.part.0+0x1dd/0x4f0 [ 1617.979364] ? _copy_from_user+0xfb/0x1b0 [ 1617.979920] __x64_sys_mount+0x282/0x300 [ 1617.980500] ? copy_mnt_ns+0xa00/0xa00 [ 1617.981005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.981697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.982400] do_syscall_64+0x33/0x40 [ 1617.982873] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1617.983609] RIP: 0033:0x7fef9ce93b19 [ 1617.984096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.986587] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1617.987685] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1617.988652] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1617.989614] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1617.990517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.991498] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1619.123378] Bluetooth: hci4: command 0x0405 tx timeout 08:19:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100090000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:19:02 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000340)={0xa9c2, 0x0, 0x9, {0x2, 0x6f5}, 0xcca7, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x4, @time={0x6, 0x3f}, 0x3, {0x1, 0x1f}, 0x83, 0x2, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000240)) ioctl$TCSETSF(r2, 0x5404, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0xe4, 0x0, 0x18, 0x0, 0x0, 0x16000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8, 0x8, 0x0, 0x1, 0x5, 0x15d, 0xffff, 0x0, 0x101, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r0, 0x893, 0x8, 0x1}) ioctl$CDROM_SET_OPTIONS(r4, 0x5320, 0x5) 08:19:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 60) 08:19:02 executing program 3: timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) timer_gettime(0x0, &(0x7f00000001c0)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000940)={{}, 0x0, 0x1a, @inherit={0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000030000000000000001010000000000000180000000000000140000000000000080ffffffffffffff0600000000000000d30500000000000006000000000000000900000000000000030000000000000020"]}, @subvolid=0x4}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/software_nodes', 0x505603, 0x559c2d29381c3ae3) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'macvtap0\x00'}) read(r0, &(0x7f0000000100)=""/183, 0xb7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x3a, 0x1, 0x0, 0x0) 08:19:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.apparmor\x00') r0 = open(&(0x7f00000002c0)='./file0\x00', 0x448343, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa31f52699464f080045000078000000000011907800000000ffffffff00004e20006490780200000000000000000000006bd60e8c561d4bbfed48726363752d54c82fee2b995254fa2817997b3828a5007d60fa6d1c0779e6cb3d5656f39594619e6946ecbd671680e02dce79b473ee4cea9e52a884ab3f41ebf64e74737515e1"], 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 08:19:02 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000005, 0x80010, r0, 0x8000000) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x102, 0x180, 0x15}, 0x18) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000940)={{}, 0x0, 0x1a, @inherit={0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000030000000000000001010000000000000180000000000000140000000000000080ffffffffffffff0600000000000000d30500000000000006000000000000000900000000000000030000000000000020"]}, @subvolid=0x4}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x3f, &(0x7f0000000180)=[r3, r4, r5, r1], 0x4, 0x0, 0x1, {0x0, r6}}, 0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200", 0x2e}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000011300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) getsockname(0xffffffffffffffff, &(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x80) pipe2(&(0x7f00000000c0), 0x4800) 08:19:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfec00000}}], 0x1, 0x0) 08:19:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000741000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:19:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000100000000200000000000000000020d3900594285e4c57d008d000c0018800500300010000000"], 0x20}}, 0x0) [ 1635.472624] ALSA: seq fatal error: cannot create timer (-22) 08:19:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000a0000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:19:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) [ 1635.487426] FAULT_INJECTION: forcing a failure. [ 1635.487426] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.489437] CPU: 0 PID: 10886 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1635.490291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1635.491273] Call Trace: [ 1635.491755] dump_stack+0x107/0x167 [ 1635.492244] should_fail.cold+0x5/0xa [ 1635.492779] ? create_object.isra.0+0x3a/0xa20 [ 1635.493351] should_failslab+0x5/0x20 [ 1635.493827] kmem_cache_alloc+0x5b/0x310 [ 1635.494309] create_object.isra.0+0x3a/0xa20 [ 1635.494832] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1635.495476] kmem_cache_alloc+0x159/0x310 [ 1635.496016] __kernfs_new_node+0xd4/0x860 [ 1635.496547] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1635.497146] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1635.497760] ? wait_for_completion_io+0x270/0x270 [ 1635.498374] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1635.499050] kernfs_new_node+0x93/0x120 [ 1635.499575] __kernfs_create_file+0x51/0x350 [ 1635.500126] sysfs_add_file_mode_ns+0x221/0x560 [ 1635.500718] internal_create_group+0x324/0xb30 [ 1635.501295] ? sysfs_remove_group+0x170/0x170 [ 1635.501871] ? kernfs_name_hash+0xe7/0x110 [ 1635.502405] ? kernfs_find_ns+0x256/0x380 [ 1635.502955] sysfs_slab_add+0x188/0x200 [ 1635.503612] __kmem_cache_create+0x3db/0x520 [ 1635.504216] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1635.505275] p9_client_create+0xc2b/0x11c0 [ 1635.505904] ? p9_client_flush+0x430/0x430 [ 1635.506527] ? trace_hardirqs_on+0x5b/0x180 [ 1635.507094] ? lockdep_init_map_type+0x2c7/0x780 [ 1635.507770] ? __raw_spin_lock_init+0x36/0x110 [ 1635.508390] v9fs_session_init+0x1dd/0x1680 [ 1635.509050] ? lock_release+0x680/0x680 [ 1635.509628] ? kmem_cache_alloc_trace+0x151/0x320 [ 1635.510260] ? v9fs_show_options+0x690/0x690 [ 1635.510899] ? trace_hardirqs_on+0x5b/0x180 [ 1635.511544] ? kasan_unpoison_shadow+0x33/0x50 [ 1635.512149] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1635.512908] v9fs_mount+0x79/0x8f0 [ 1635.513468] ? v9fs_write_inode+0x60/0x60 [ 1635.514034] legacy_get_tree+0x105/0x220 [ 1635.514628] vfs_get_tree+0x8e/0x300 [ 1635.515127] path_mount+0x13be/0x20b0 [ 1635.515701] ? strncpy_from_user+0x9e/0x470 [ 1635.516240] ? finish_automount+0xa90/0xa90 [ 1635.516826] ? getname_flags.part.0+0x1dd/0x4f0 [ 1635.517444] ? _copy_from_user+0xfb/0x1b0 [ 1635.517980] __x64_sys_mount+0x282/0x300 [ 1635.518544] ? copy_mnt_ns+0xa00/0xa00 [ 1635.519039] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1635.519760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1635.520496] do_syscall_64+0x33/0x40 [ 1635.520975] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1635.521668] RIP: 0033:0x7fef9ce93b19 [ 1635.522141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1635.524723] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1635.525770] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1635.526738] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1635.527729] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1635.528726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1635.529697] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:19:03 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000f77d7bbd00002e2f66696c653000cdd636be606e373d619c51"]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) r2 = syz_io_uring_setup(0x1d, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1124001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) fspick(r2, &(0x7f0000000300)='./file0\x00', 0x1) accept$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0xfffffffffffffd6d) openat(0xffffffffffffffff, 0x0, 0x8080, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) [ 1641.776036] Bluetooth: hci4: command 0x0406 tx timeout 08:19:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000743000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:19:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 61) 08:19:21 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 08:19:21 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff3}]}) clone3(&(0x7f0000000ac0)={0x1701a4500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000940)={{}, 0x0, 0x1a, @inherit={0x60, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000030000000000000001010000000020000180000000000000140000000000000080ffffffffffffff0600000000000000d30500000000000006000000000000000900000000000000030000000000000020df3d908894644063d377eb9bf8d8e9a0fe2543a1546b1cf22c70ead6c38abd45ffa9f26ecae511ec6434405ede6b2f4aab44ee1ec955fb443a661ded8e7ed2716ad8fcb739333417dba84ba0732f37de33b9557d274c16ebd1dc9b9a8bc5adee7d394439f0e48c641c406c28adfac04a9be64370715dff168f04f0b6b085e2d9b418c6de44eb485c9e56915368c007c9fe69537607c166c344943616eca58fc9a90c0a4360ed6c8cb5ada319fe7832a3b31d07bd16ea09c1f6c82459531aaa18812bc38c09ddee0e948e8fb8d5aa057365"]}, @subvolid=0x4}) r1 = epoll_create1(0x80000) dup2(r0, r1) 08:19:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) 08:19:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000b0000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:19:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) fstat(r2, &(0x7f00000000c0)) 08:19:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = eventfd(0x0) io_setup(0xc4, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r6, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/1286], 0x4fd) ioctl$LOOP_SET_STATUS(r6, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) execveat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000000c0)='%]:^]e!--!({P\x00', &(0x7f0000000180)='-\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='*%\x00', &(0x7f00000002c0)=')$!]\x00'], &(0x7f0000000400)=[&(0x7f0000000340)='.^\x8e$9)(\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00'], 0x800) 08:19:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000f0000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:19:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="dc97086ea95cb084db4c67e29e7240dd386614859e06402bfb88b6c8646fc504d6d7b44eb1896d9f3f027e422cb17fdabb2d034b047fdbd518aa5e8e42c5869007e5e212f48e301fa09a2936cfec386b49a8d852c86300000000000000"], 0x24}}, 0x14050880) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x3f}, 0x40100, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x113e}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x880, 0x4) 08:19:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x7, 0x3, 0x8, 0x40, 0x0, 0x2, 0x40, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x52001, 0x8000, 0xfffffffe, 0x0, 0x9, 0x2, 0x3f, 0x0, 0x7, 0x0, 0x1000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000021000000000000210000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="2200170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000011300)) 08:19:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x0) 08:19:22 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x7bf9, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1}}], 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1654.718855] FAULT_INJECTION: forcing a failure. [ 1654.718855] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.720844] CPU: 0 PID: 10931 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1654.724255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1654.725316] Call Trace: [ 1654.725673] dump_stack+0x107/0x167 [ 1654.726151] should_fail.cold+0x5/0xa [ 1654.726638] ? __kernfs_new_node+0xd4/0x860 [ 1654.727208] should_failslab+0x5/0x20 [ 1654.727728] kmem_cache_alloc+0x5b/0x310 [ 1654.728267] __kernfs_new_node+0xd4/0x860 [ 1654.728798] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1654.729417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1654.730046] ? wait_for_completion_io+0x270/0x270 [ 1654.730677] ? kernfs_next_descendant_post+0x1a7/0x2a0 08:19:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000745000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1654.731346] kernfs_new_node+0x93/0x120 [ 1654.731899] __kernfs_create_file+0x51/0x350 [ 1654.732474] sysfs_add_file_mode_ns+0x221/0x560 [ 1654.733082] internal_create_group+0x324/0xb30 [ 1654.736235] ? sysfs_remove_group+0x170/0x170 [ 1654.736796] ? kernfs_name_hash+0xe7/0x110 [ 1654.737338] ? kernfs_find_ns+0x256/0x380 [ 1654.737872] sysfs_slab_add+0x188/0x200 [ 1654.738379] __kmem_cache_create+0x3db/0x520 [ 1654.738941] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1654.739581] p9_client_create+0xc2b/0x11c0 [ 1654.740161] ? p9_client_flush+0x430/0x430 [ 1654.740698] ? trace_hardirqs_on+0x5b/0x180 [ 1654.741239] ? lockdep_init_map_type+0x2c7/0x780 [ 1654.741840] ? __raw_spin_lock_init+0x36/0x110 [ 1654.742422] v9fs_session_init+0x1dd/0x1680 [ 1654.742965] ? lock_release+0x680/0x680 [ 1654.743475] ? kmem_cache_alloc_trace+0x151/0x320 [ 1654.744103] ? v9fs_show_options+0x690/0x690 [ 1654.744683] ? trace_hardirqs_on+0x5b/0x180 [ 1654.745241] ? kasan_unpoison_shadow+0x33/0x50 [ 1654.745828] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1654.746475] v9fs_mount+0x79/0x8f0 [ 1654.746943] ? v9fs_write_inode+0x60/0x60 [ 1654.747483] legacy_get_tree+0x105/0x220 [ 1654.748043] vfs_get_tree+0x8e/0x300 [ 1654.748535] path_mount+0x13be/0x20b0 [ 1654.749018] ? strncpy_from_user+0x9e/0x470 [ 1654.749584] ? finish_automount+0xa90/0xa90 [ 1654.750145] ? getname_flags.part.0+0x1dd/0x4f0 [ 1654.750744] ? _copy_from_user+0xfb/0x1b0 [ 1654.751284] __x64_sys_mount+0x282/0x300 [ 1654.751841] ? copy_mnt_ns+0xa00/0xa00 [ 1654.752330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1654.752987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1654.753635] do_syscall_64+0x33/0x40 [ 1654.754108] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1654.754749] RIP: 0033:0x7fef9ce93b19 [ 1654.755226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1654.761551] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1654.762504] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1654.763387] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1654.764295] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1654.765181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1654.766069] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1654.782521] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1654.783872] CPU: 1 PID: 10931 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1654.784735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1654.785760] Call Trace: [ 1654.786103] dump_stack+0x107/0x167 [ 1654.786570] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1654.787237] p9_client_create+0xc2b/0x11c0 [ 1654.787795] ? p9_client_flush+0x430/0x430 [ 1654.788340] ? trace_hardirqs_on+0x5b/0x180 [ 1654.788890] ? lockdep_init_map_type+0x2c7/0x780 [ 1654.789495] ? __raw_spin_lock_init+0x36/0x110 [ 1654.790081] v9fs_session_init+0x1dd/0x1680 [ 1654.790636] ? lock_release+0x680/0x680 [ 1654.791152] ? kmem_cache_alloc_trace+0x151/0x320 [ 1654.791780] ? v9fs_show_options+0x690/0x690 [ 1654.792354] ? trace_hardirqs_on+0x5b/0x180 [ 1654.792926] ? kasan_unpoison_shadow+0x33/0x50 [ 1654.793503] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1654.794128] v9fs_mount+0x79/0x8f0 [ 1654.794596] ? v9fs_write_inode+0x60/0x60 [ 1654.795131] legacy_get_tree+0x105/0x220 [ 1654.795654] vfs_get_tree+0x8e/0x300 [ 1654.800182] path_mount+0x13be/0x20b0 [ 1654.800677] ? strncpy_from_user+0x9e/0x470 [ 1654.801233] ? finish_automount+0xa90/0xa90 [ 1654.801782] ? getname_flags.part.0+0x1dd/0x4f0 [ 1654.802372] ? _copy_from_user+0xfb/0x1b0 [ 1654.802906] __x64_sys_mount+0x282/0x300 [ 1654.803426] ? copy_mnt_ns+0xa00/0xa00 [ 1654.803956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1654.804619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1654.805277] do_syscall_64+0x33/0x40 [ 1654.805755] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1654.806403] RIP: 0033:0x7fef9ce93b19 [ 1654.806881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1654.809175] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1654.810129] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1654.811016] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1654.811929] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1654.812816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1654.813707] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:19:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 62) 08:19:22 executing program 6: ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000500)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getegid() recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, &(0x7f0000001980)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000140)={0x0, @broadcast, 0x4e24, 0x2, 'rr\x00', 0x0, 0x2, 0x37}, 0x2c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mount$bind(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c460981011f810000000000000003000600010000007e0200000000000040000000000000001c00000000000000d10000000300380002000100feff0000000000700300002bfeb62974f66486d40002000000000000000900000000000000030000000000000000000000000000000500000000000000000000000000400000000060ffffffff0800000000000000f2000000000000000000000000000087adeb00030000000000000005000000000100000000000000000000b2d233284f94c91d748c568a67f61ed29aa245adfe3dad698fc8e0c8697cf12a843aea3fee6d798c05a7d605caac539f44fb295b60317716760c429990ccee64c6f90c8e20cff844361e93a4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a2b7e76849cd4642000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007833355700"/1290], 0x4fd) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=tcp,', {}, 0x2c, {[{@privport}]}}) 08:19:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100100000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1655.807812] FAULT_INJECTION: forcing a failure. [ 1655.807812] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.809561] CPU: 1 PID: 10958 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1655.810512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1655.811692] Call Trace: [ 1655.812082] dump_stack+0x107/0x167 [ 1655.812638] should_fail.cold+0x5/0xa [ 1655.813126] ? create_object.isra.0+0x3a/0xa20 [ 1655.813757] should_failslab+0x5/0x20 [ 1655.814233] kmem_cache_alloc+0x5b/0x310 [ 1655.814807] create_object.isra.0+0x3a/0xa20 [ 1655.815356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1655.816797] kmem_cache_alloc+0x159/0x310 [ 1655.817351] __kernfs_new_node+0xd4/0x860 [ 1655.817988] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1655.818670] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1655.819297] ? wait_for_completion_io+0x270/0x270 [ 1655.820685] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1655.821469] kernfs_new_node+0x93/0x120 [ 1655.821988] __kernfs_create_file+0x51/0x350 [ 1655.822594] sysfs_add_file_mode_ns+0x221/0x560 [ 1655.823217] internal_create_group+0x324/0xb30 [ 1655.824617] ? sysfs_remove_group+0x170/0x170 [ 1655.825182] ? kernfs_name_hash+0xe7/0x110 [ 1655.825793] ? kernfs_find_ns+0x256/0x380 [ 1655.826327] sysfs_slab_add+0x188/0x200 [ 1655.826890] __kmem_cache_create+0x3db/0x520 [ 1655.827506] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1655.828171] p9_client_create+0xc2b/0x11c0 [ 1655.828784] ? p9_client_flush+0x430/0x430 [ 1655.829338] ? trace_hardirqs_on+0x5b/0x180 [ 1655.829981] ? lockdep_init_map_type+0x2c7/0x780 [ 1655.830657] ? __raw_spin_lock_init+0x36/0x110 [ 1655.831262] v9fs_session_init+0x1dd/0x1680 [ 1655.832603] ? lock_release+0x680/0x680 [ 1655.833142] ? kmem_cache_alloc_trace+0x151/0x320 [ 1655.833852] ? v9fs_show_options+0x690/0x690 [ 1655.834485] ? trace_hardirqs_on+0x5b/0x180 [ 1655.835059] ? kasan_unpoison_shadow+0x33/0x50 [ 1655.835725] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1655.836475] v9fs_mount+0x79/0x8f0 [ 1655.836950] ? v9fs_write_inode+0x60/0x60 [ 1655.837586] legacy_get_tree+0x105/0x220 [ 1655.841659] vfs_get_tree+0x8e/0x300 [ 1655.842145] path_mount+0x13be/0x20b0 [ 1655.842688] ? strncpy_from_user+0x9e/0x470 [ 1655.843241] ? finish_automount+0xa90/0xa90 [ 1655.843817] ? getname_flags.part.0+0x1dd/0x4f0 [ 1655.844411] ? _copy_from_user+0xfb/0x1b0 [ 1655.844952] __x64_sys_mount+0x282/0x300 [ 1655.845481] ? copy_mnt_ns+0xa00/0xa00 [ 1655.845987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1655.846655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1655.847307] do_syscall_64+0x33/0x40 [ 1655.851837] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1655.852488] RIP: 0033:0x7fef9ce93b19 [ 1655.852991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1655.855302] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1655.856263] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1655.857148] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1655.858042] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1655.858939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1655.859880] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:19:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x200000000000000}}], 0x1, 0x0) 08:19:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100110000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:19:42 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) fallocate(r2, 0x0, 0x9, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xfc, 0x94, 0x81, 0xcb, 0x0, 0x2, 0x88, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40, 0x4, @perf_bp={&(0x7f0000000200), 0x2}, 0x100, 0x1, 0xf654, 0x5, 0xffffffffffffffd5, 0x3ff, 0x401, 0x0, 0x6, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r5) creat(&(0x7f0000000140)='./file0\x00', 0x8) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000ff7f00000500000000000000ffff00000000000008000000000000000104000000000000000000000000000000000000000000000000000000000000090000008100000000000000feff0000001000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003019b2561b2a351000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/512]) 08:19:42 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x97, 0x0, 0x0, 0x2, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x80) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000000), 0x400000d, 0x100000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000180)={@broadcast, @remote, r2}, 0xc) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r3 = socket(0x4, 0x2, 0x3) shutdown(r3, 0x1) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x5, 0x6, 0x407, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x4000084) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100f00000000000081250700000005732b28e0e3d27427f96ba6734b9b64ccaa84f1dc9d3054b891cb00000000b273849287dec59acf8a30f7900d42f649590ba1102f348febd6dc67a229b373741e98076004800fe6fbf55cffb1ef067e3c5fe05f1da6159fec808a0895e6779faf169a4db9f428dfdcb0ef454799c8acce141619b69aed5c3d50eec808a6db4680"], 0x24}}, 0x0) listen(r1, 0x7fff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r6 = signalfd(r0, &(0x7f0000000040)={[0x1]}, 0x8) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) kcmp(0x0, 0xffffffffffffffff, 0x6, r0, r0) 08:19:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000747000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:19:42 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x7bf9, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1}}], 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:19:42 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 63) 08:19:42 executing program 3: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) readv(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000250042d8a89b6d01482d0000000000000400000008000000", @ANYRES32, @ANYBLOB='\f\x00'/12], 0x2c}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000140)={0x0, 0xffff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={0x0, r3, "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", "fde5bc2e17feef74dec175ab1375cc46aeabbd47a5b655da9cd9180022cb1e4c85cf780f8251145df1f4e34e46a11c955b30041362dc476f397d0108097a105b29256e6efeddcff71032a949f89ea5c72a79fab7403afb4c517aa3e1952ff804e91857cfe1227a2446a81965672a9110176a4729ded989eddf2d020c1941344091fcbb3c2a60e3d314f9396849f48df22ea60ac91e522658f09ac7316e1bf151151ad7425bf7d8a40f1881a236e1f403769fd12fe8af8a29456be0ae137d1b05b06f9376b2fc9ac889101617b7128029240c88f23ed3ea69ea551264797ae6b88c9dadb48e9db32afaea94ab6dd4b7b9802beb65c9b77fefa0c5e0756b725b91c43fcf3a750251410f6cddabda4878092fedbd07e77e3c5d8230d1ad72b22b202383d846da0107bed48b1f00faed46091980e76f2fea0af02228bcb2ac429e72843bef993f7fc734fd51d4bfb19346de2763c04fccc80d1e830ab054158a7daba675ddb29ed83a799cd3a40d75cc820a5da1ec426f14d083d850b112d17ba2f3d52b7f33b4ad3081083d4464b0be6cab2035b31cc1475e7bb23731e527d43b8ae585cd6753f5ca633362955093bbad18140076d035e544eea2a44b1f92db6544f2acaff4bf9d750c8982da83a86a07fbd305df0f83df566e6f291848551a8255bfdaf536ca16b9660fd0179eb5b56f47103218bafcb0645b4df51f1502c92fe54d647f8f8e6e94ac8a87b8999cdffa17acea3a0429aa122cc555955f4418259e0ad4b374777e6b8434b10896057b0abe259f8e42c2c8cc8c95582382eb438364705cf05cbf677abefd2663000c53bab8a0133c9f8022df26f933bf38f385b043c3e492d84dbc3cecdff8b5c4c9e1d12c5763bd8269f4b2d752b4d3c6d8931808dad5b06f948471c177bc9ff8b3ee11fd24da3ee210fc1c69ff0a464ddfc01995d18fa4b1fa913f6ead5c812983cd9b6503e03c0da24e411cddd6432b7f8cbf96316ccf57f2af098b96bc0ab34924ec7caf3ad68dcd498b54398b8ef4c4ddab99f88f41096f67b26a67a991623de20cb0fcc9a41489f06eaa01d60186b9a7068462e77474b2d5557373cf9756f6f6cca5851e94683e1998da176b36cb17b8e5ab863f61ed00c4739c3ddc6c4c72c4414aab92c7f14761e756da46158211eb33965bd3541ddf76f3c6772a039056a3fd048f5bc2b9143f561a83dd9cce7267e57ef7704eb2a2d263ee93d7de99816b8fe03181eb79568a19bf1cb1a62876f502f4af2faa978370b2866272b4ceb31f9d3289c144df599e7493ea346f4b3b5161953913737e61d7311abad3c9f8e0269f41f992de707907b0c2795eb096b4017942dbe092dbe5dcc7ddef81e4b9f702971c371eae3f6bc232e2db48cedc2feb18c1a82e6e8a3afdcb93927ef03fb23089ccceabac0351cde365a2988eb936786df235ca31f7095453a20d9727954167c01b84d8b7aa59f7c4f818bfee2a315b3bbf5234135405b426215cf1eedf361fb4b9b0664ee4cc5633e2c55525c166f41a0024a0c9910801c8f726f2e5cb38803343c9748d50cd43d141bc963f055986884a690eea5128a9ece1a23b7738ad6d7f91693274785cb4ff2943283623b1a60a9ab5e5f562f8c20f4e702548aba381b328943e716d6050fd48de85f4a01237830d8e791e0447d35c71ba4d347b9ff50901a975b3f4a040fe2a4d790cbd7e916a62268b6b2c2cb6f38fbb2f237978852dd0a69863fcd097b31a92c347bc4c100a71f1e88d42c3dd84aa9e7b4181ca40e93c9be7107e865667cb9dd9cbd0ffccc65b5b725ca794903c91c124c21287d2de70d272d7d3454b70317951c2a72101fdf187532faa5962825bb42272384e1ed8eaf928c1e09e91095fadebe6b3bde1b8ac48f16fbe4c7fc19a8b57b862a472a417c9c8b4538277abc9cd28789f723f05952a3ee8402623b7441053ed36fb262c0e69fd77296bc083034cd8068ef1921806d1ca1f743cd0503c06b074a8e7f2f0b52d7cd63dc4e018e99586a75996d6180ffbe85b50e354167472e1164b430f3b1368513333449deee04f561ca7e384740171f72755c7042e92012c128e290e729be31104c2b746750f4161579a6f7b79ddff5130e66d821e168c4691fadce942933236c7e6e138716fde0ec67cd32bd6224f0f657256b771219f67d2acf69e0ebfee3ae3d6ae4453b6ef71bb76140014b951654ebdb00d2960b25d0ab9a9b81d351036929b6d8b455da382fea12366e0801967b3fcde69249bdd9d2a99e446ad8657f5f5c18b2fe564331a11eeda1165dae1fac0bea7d519b860f5beba06325a896de2e84137ea1bcf04ff7d1e9237e67e427c517ddd91e1e0f53bb73dada54cc96c20afeccb70b316922b71db9c02f31556f70ddf3e8dd73fdc7a51e0dac91ae28389382994b596d30bb2e670d1cc5aa42253a25bdc307f901cc68fc9146216dd33e670840ac72e72ba384fc43433a82780d974fd84c695e5348a0dfb1b23a30e1b71be90376acbfc9c81e7a33260f7d10d513b0fb93ea92bbc138a6671dd2d8098030406b254e2be9bab24513e6001344a5967108ca2d40ee513eb34fb42d1ba51b4611e556428bb23f91a57cab32a0f1d9d795679f236e4d9e504c9e20da37c672ae639534535c275a96e2a66aaa209f9b49c8951c8c0a688f52d98c1b882374db9ce060918069309239cdfbb0324e2dd9d8d41a4b945cff17637cc3d6a21e0a7045df00ee6f08fcbdbee741e655194bbdcdefb6c8d0a3f6e4b8e164d4119bdde0b4a8f56ea56a5675519c41fdf5f45206bc95f4c4bfaa626f8e8e297fedbc4a2997d0d1c6033cb682354805c2d69e7a7535bad555b0435222fe037b725e9d6a3571639dd9db02a6cdce4a3d234339ef677c2a2e54ede3ddeb2cc2bb36d73602241847faca71ff982d8ba6debe5de9f78bf58cc0ae1e7e4eaae3a4e5fb0fce5464f1b1e5601b216703dad5aaf751fd10b819bcea1737ab402b5f4f6410c475d45e5835b8eea6115f29f61d7f5b930f28bcc9c3cf1c467d429485664c9746a9043dd8a4bcea47eb017436b4199d571d39c9b767e143278b9f014dc4598d93934197039fbcde917e951f0185b331dea3a485a013b593282ce2cf674d3bbcceca98ab09d6a2a51f23e597f396828b21cfbb79ec9f26570a3b79a260f20f77a69cc2708ad0149681bfea6a4177a1a7d7d1d41f4165b9ffe40290620600226a8f6d5075640271d08719660940a7d39aa3a3fcdb13655c6b5dc8ca5bdbcbe6dec16b6282fa056577b21eaefc4239ef70d1295b3c59c61af2c383bbf11a2cfd001c21285e84463933953a11c3a726e8108d87dbebb4da0e4ece7e6a17d39c97d52833b42ca12d2396c701735e958265638dd54ae80f43d9938161e287c06d2b42239c8f690d24e91d38202804e9994c5caa9b5e9aaed16eda3b364c3037767836a90c388febacce23ced9cb20a6ba6f9c2e857d292c6b2ee04cdf0ce56bafb68d69952642e9454818ff5f8789a20db7d5ed5e65d263aee32ebf87a338718fb20aaea69b486a4d30a6c03adda3705cb231b5c466ab54a51bb8f370c75de7154e43b5d24229ee424428f8d0b05f5957f67783db1b1e651adb52747e0e2eeaa58bf5368184b18408d3f1d5b44e1bf81db9dcc313722f18eeda2512248e2d7a7ba9cd2d2b52f31d3b9c1e3f7a15e1492fffc39e86966e19599be976e75d1fd712a946bde7bd5d5f52a3d941653c385210bfdb0f179b2046cf72018aa4eca02140c94ca98ff953300a1e5b93198f6e3eaf1b893c2b1884f5cdd3078b86db0ba9cf844c1b0f00505c944189fba23a2705d26dda23b9c4523cd5b3f5df1ef51a701acb3401f2e3c55ed559c4f19c0902f2eafb498c9251e016b8618e8641f40ceffea4fe8ee19c3e7710993b19b10be9fc8b2d1927e87052b04b9068225f4c1b77d9ea45d5075b7a3b0183ad27889fd8e39a471cf76a57f23da3e57c55eb9027ac8514b5422c8624f507cffa765a1601c57d20bdb4e20b7150aa6fde2d4f56af1df78550699593fd0f3d755bd4fc8ecf951c23719f013a9468c72b7010cfec1bf16b9a8f30ef0c0a608b2a2302ece0adb7baad5ceaaac2d0b2abbe01a20bc1080438ff8146719a8535ac37341029913eda00c19a7604bc43294afcd1df4f0aa99b3baf27aa54899ccb2f016831ad4a723291e011c3f6fab52a5ad30ff865ba1db39db7960dd7e6657f606c8b07427d9aace58e49095ceaf3193878db36d423d9602e2d2ee61bfb5f150fc5a9beae46dd962c4b5f99dd8c4b1fe5fac46155f1336064b1d61560685c0f7e7f5f41ed8ff2d5e76618db422077d569e1c08c347dfb789a27b0b21dbd413785bcd4dbdd654225546af213a7fee9c3d8367f72199287917777df54502a65ce81412018faf2d70bd0394b24d030f8a21ae668dcac4a75d4d36fd953d13b18d6bce02440d11f4573e7e31e6a5c0d61153bddaea1010bdb4343afd3de7f6c46d996ad93b5f027c925ce05c2a4b8a0b3740fd159589e471bba73ddfec5c8f7d98eb5593c5be53053c99aff4dbe40b292f66708884f9ebd2194dbd89e0981444a07de241475349e0c3e6378c6bda9082d34f171f72fe3f29eeb662227d902a01afd37840be4b64252788ba76959fe90e12cf807512089b9f0ad2a78665e9a3dd8df516fe676ab7d0715de4ee59fe9b2a521b3745e6e4708000d911b780bcf078f5d2f3ee35c954770d673e3a443040dc3f999043316cfda4540ca42e9e3afe6760a5d0350307e038f12be80afb7c4b2dab15ee9738f55166aa0f6260e42804a7bfa25c81df16c752e002bf05743bbd378bcbc39360fe0f8cbca889d254ae0710278e5264408b702c14863f164c5d9f0bce13964dad31caf45c0ab2e7f5848b5afe0e96ba655e76dec37ddf56cfff05d5090aa2579fc480121bf641a302cba4b232e208a0b75303c74dc4228c348cc5206f5c5efd620464ca2353df4cf48483e3dd97c358210b112ccafad00a82c9555c955fa19635aff5fed9e27a351cdd39b6c103e6038fe7b0bec928d3c4c5d495f6823a261685c20b930a4cd645ccd765f32059e3e7ba0dbd1a4e59bea14c4f6b220b7c60a65c7706eb7af0392c9c04e5312c3cf32b2d16dad70619c29ecc76ffaf66c052174b621a163f3c484a6002020b24930be2b510f47ec42170ef14073082fe5ebe644527f67fdc827dca264f0fd0afe7981051365231e10258ab0dd39da44dabf54a86dab4ea448c04355b4e03fbf3e32697dc5d5e3ab15f9f6434f993157cac7523852a05d42cf97b7494e3b09240d80ce664b1b8d85199282748c3a2b606f0bcf2b1c811b7fb88c25f742a5033b9d935995c6580f62604af09977e8fba23daac58e2067dccd407d9bc661146"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004dac0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004eac0)={0x2d9d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r6}], 0x2, "471be60acf6ca2"}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000058c0)={@local}, &(0x7f0000005900)=0x14) openat(0xffffffffffffffff, &(0x7f0000001140)='./file0\x00', 0x140c0, 0x0) 08:19:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001006c0000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1675.149600] FAULT_INJECTION: forcing a failure. [ 1675.149600] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.151504] CPU: 1 PID: 10979 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1675.152393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1675.153421] Call Trace: [ 1675.153763] dump_stack+0x107/0x167 [ 1675.154230] should_fail.cold+0x5/0xa [ 1675.154718] ? __kernfs_new_node+0xd4/0x860 [ 1675.155268] should_failslab+0x5/0x20 [ 1675.155757] kmem_cache_alloc+0x5b/0x310 [ 1675.160321] __kernfs_new_node+0xd4/0x860 [ 1675.180386] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1675.181002] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1675.181621] ? wait_for_completion_io+0x270/0x270 [ 1675.182241] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1675.182916] kernfs_new_node+0x93/0x120 [ 1675.183431] __kernfs_create_file+0x51/0x350 [ 1675.188027] sysfs_add_file_mode_ns+0x221/0x560 [ 1675.196550] internal_create_group+0x324/0xb30 [ 1675.197138] ? sysfs_remove_group+0x170/0x170 [ 1675.197705] ? kernfs_name_hash+0xe7/0x110 [ 1675.198242] ? kernfs_find_ns+0x256/0x380 [ 1675.198777] sysfs_slab_add+0x188/0x200 [ 1675.199281] __kmem_cache_create+0x3db/0x520 08:19:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_complete(0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000100000018000000", @ANYRES32=0xffffffffffffffff]) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x200, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000540)=@abs, 0x5c, &(0x7f0000001ac0)=[{&(0x7f00000005c0)=""/35, 0x23}, {&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f0000000700)=""/149, 0xa2}, {&(0x7f00000007c0)=""/205, 0xcd}, {&(0x7f00000008c0)=""/207, 0xcf}, {&(0x7f00000009c0)=""/168, 0xa8}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/49, 0x31}], 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000000000000000040000000002a0de9f15d6ddbf583a47c3cd731e0bd377e8a55ca5ddd7b4459d900"/58, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0}, 0x12043) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000001c40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@mmap}, {@dfltgid}, {@access_any}, {@loose}, {@cache_none}], [{@uid_gt={'uid>', r3}}, {@appraise}, {@subj_user={'subj_user', 0x3d, ':'}}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_type={'subj_type', 0x3d, '/dev/sg#\x00'}}, {@audit}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, '('}}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000c7929fa0e6ca71db7d6260ee7fe04e1a4b83435b4b4c0e2a3307926076adb314ca81f9997fc4e1df939b13ae570942da7a56a9df835adb", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x1) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1675.199843] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1675.220283] p9_client_create+0xc2b/0x11c0 [ 1675.220840] ? p9_client_flush+0x430/0x430 [ 1675.221384] ? trace_hardirqs_on+0x5b/0x180 [ 1675.221939] ? lockdep_init_map_type+0x2c7/0x780 [ 1675.222550] ? __raw_spin_lock_init+0x36/0x110 [ 1675.223142] v9fs_session_init+0x1dd/0x1680 [ 1675.223694] ? lock_release+0x680/0x680 [ 1675.236235] ? kmem_cache_alloc_trace+0x151/0x320 [ 1675.236855] ? v9fs_show_options+0x690/0x690 [ 1675.237427] ? trace_hardirqs_on+0x5b/0x180 [ 1675.237985] ? kasan_unpoison_shadow+0x33/0x50 [ 1675.238568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1675.239220] v9fs_mount+0x79/0x8f0 [ 1675.239679] ? v9fs_write_inode+0x60/0x60 [ 1675.240259] legacy_get_tree+0x105/0x220 [ 1675.240773] vfs_get_tree+0x8e/0x300 [ 1675.241252] path_mount+0x13be/0x20b0 [ 1675.241739] ? strncpy_from_user+0x9e/0x470 [ 1675.242285] ? finish_automount+0xa90/0xa90 [ 1675.242825] ? getname_flags.part.0+0x1dd/0x4f0 [ 1675.243412] ? _copy_from_user+0xfb/0x1b0 [ 1675.243963] __x64_sys_mount+0x282/0x300 [ 1675.244494] ? copy_mnt_ns+0xa00/0xa00 [ 1675.244991] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1675.245652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1675.246305] do_syscall_64+0x33/0x40 [ 1675.246781] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1675.247421] RIP: 0033:0x7fef9ce93b19 [ 1675.247896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.250201] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1675.251151] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1675.260043] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1675.260934] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1675.261830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1675.262727] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:19:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xf7ffff7f00000000}}], 0x1, 0x0) 08:19:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000749000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:19:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000380)='./file0\x00') umount2(0x0, 0x4) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x29080, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x430000, 0x98) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) [ 1675.383389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10987 comm=syz-executor.2 [ 1675.401197] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1675.402074] CPU: 1 PID: 10979 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1675.402940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1675.403937] Call Trace: [ 1675.404327] dump_stack+0x107/0x167 [ 1675.404801] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1675.405471] p9_client_create+0xc2b/0x11c0 [ 1675.406017] ? p9_client_flush+0x430/0x430 [ 1675.406557] ? trace_hardirqs_on+0x5b/0x180 [ 1675.407113] ? lockdep_init_map_type+0x2c7/0x780 [ 1675.407722] ? __raw_spin_lock_init+0x36/0x110 [ 1675.416304] v9fs_session_init+0x1dd/0x1680 [ 1675.416863] ? lock_release+0x680/0x680 [ 1675.417388] ? kmem_cache_alloc_trace+0x151/0x320 [ 1675.418006] ? v9fs_show_options+0x690/0x690 [ 1675.418579] ? trace_hardirqs_on+0x5b/0x180 [ 1675.419135] ? kasan_unpoison_shadow+0x33/0x50 [ 1675.419723] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1675.420407] v9fs_mount+0x79/0x8f0 [ 1675.420869] ? v9fs_write_inode+0x60/0x60 [ 1675.421396] legacy_get_tree+0x105/0x220 [ 1675.421909] vfs_get_tree+0x8e/0x300 [ 1675.422390] path_mount+0x13be/0x20b0 [ 1675.422881] ? strncpy_from_user+0x9e/0x470 [ 1675.423448] ? finish_automount+0xa90/0xa90 [ 1675.424014] ? getname_flags.part.0+0x1dd/0x4f0 [ 1675.424598] ? _copy_from_user+0xfb/0x1b0 [ 1675.425132] __x64_sys_mount+0x282/0x300 [ 1675.425641] ? copy_mnt_ns+0xa00/0xa00 [ 1675.426138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1675.426803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1675.427465] do_syscall_64+0x33/0x40 [ 1675.427940] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1675.428610] RIP: 0033:0x7fef9ce93b19 [ 1675.429095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.431417] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1675.432395] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1675.433289] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1675.434182] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1675.435087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1675.436007] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1675.476574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10978 comm=syz-executor.2 08:19:43 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) fallocate(r2, 0x0, 0x9, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xfc, 0x94, 0x81, 0xcb, 0x0, 0x2, 0x88, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40, 0x4, @perf_bp={&(0x7f0000000200), 0x2}, 0x100, 0x1, 0xf654, 0x5, 0xffffffffffffffd5, 0x3ff, 0x401, 0x0, 0x6, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r5) creat(&(0x7f0000000140)='./file0\x00', 0x8) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000ff7f00000500000000000000ffff00000000000008000000000000000104000000000000000000000000000000000000000000000000000000000000090000008100000000000000feff0000001000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003019b2561b2a351000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/512]) 08:19:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x97, 0x0, 0x0, 0x2, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x80) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000000), 0x400000d, 0x100000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000180)={@broadcast, @remote, r2}, 0xc) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r3 = socket(0x4, 0x2, 0x3) shutdown(r3, 0x1) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x5, 0x6, 0x407, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x4000084) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100f00000000000081250700000005732b28e0e3d27427f96ba6734b9b64ccaa84f1dc9d3054b891cb00000000b273849287dec59acf8a30f7900d42f649590ba1102f348febd6dc67a229b373741e98076004800fe6fbf55cffb1ef067e3c5fe05f1da6159fec808a0895e6779faf169a4db9f428dfdcb0ef454799c8acce141619b69aed5c3d50eec808a6db4680"], 0x24}}, 0x0) listen(r1, 0x7fff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r6 = signalfd(r0, &(0x7f0000000040)={[0x1]}, 0x8) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) kcmp(0x0, 0xffffffffffffffff, 0x6, r0, r0) 08:19:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 64) 08:19:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100860000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1676.261594] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1676.261594] program syz-executor.4 not setting count and/or reply_len properly [ 1676.333594] 9pnet: Insufficient options for proto=fd [ 1676.344338] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1676.344338] program syz-executor.4 not setting count and/or reply_len properly [ 1676.643728] FAULT_INJECTION: forcing a failure. [ 1676.643728] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.646576] CPU: 0 PID: 11024 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1676.647769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.649922] Call Trace: [ 1676.650369] dump_stack+0x107/0x167 [ 1676.650905] should_fail.cold+0x5/0xa [ 1676.651446] ? create_object.isra.0+0x3a/0xa20 [ 1676.652130] should_failslab+0x5/0x20 [ 1676.652649] kmem_cache_alloc+0x5b/0x310 [ 1676.653305] create_object.isra.0+0x3a/0xa20 [ 1676.653903] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1676.654581] kmem_cache_alloc+0x159/0x310 [ 1676.655170] __kernfs_new_node+0xd4/0x860 [ 1676.655760] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1676.656507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1676.657165] ? wait_for_completion_io+0x270/0x270 [ 1676.657899] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1676.658611] kernfs_new_node+0x93/0x120 [ 1676.659177] __kernfs_create_file+0x51/0x350 [ 1676.659771] sysfs_add_file_mode_ns+0x221/0x560 [ 1676.660493] internal_create_group+0x324/0xb30 [ 1676.661138] ? sysfs_remove_group+0x170/0x170 [ 1676.661775] ? kernfs_name_hash+0xe7/0x110 [ 1676.662399] ? kernfs_find_ns+0x256/0x380 [ 1676.662977] sysfs_slab_add+0x188/0x200 [ 1676.663527] __kmem_cache_create+0x3db/0x520 [ 1676.664176] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1676.664917] p9_client_create+0xc2b/0x11c0 [ 1676.665533] ? p9_client_flush+0x430/0x430 [ 1676.666104] ? trace_hardirqs_on+0x5b/0x180 [ 1676.666683] ? lockdep_init_map_type+0x2c7/0x780 [ 1676.667380] ? __raw_spin_lock_init+0x36/0x110 [ 1676.668012] v9fs_session_init+0x1dd/0x1680 [ 1676.668591] ? lock_release+0x680/0x680 [ 1676.669303] ? kmem_cache_alloc_trace+0x151/0x320 [ 1676.669935] ? v9fs_show_options+0x690/0x690 [ 1676.670580] ? trace_hardirqs_on+0x5b/0x180 [ 1676.671239] ? kasan_unpoison_shadow+0x33/0x50 [ 1676.671869] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1676.672580] v9fs_mount+0x79/0x8f0 [ 1676.673082] ? v9fs_write_inode+0x60/0x60 [ 1676.673685] legacy_get_tree+0x105/0x220 [ 1676.674319] vfs_get_tree+0x8e/0x300 [ 1676.674788] path_mount+0x13be/0x20b0 [ 1676.675370] ? strncpy_from_user+0x9e/0x470 [ 1676.675969] ? finish_automount+0xa90/0xa90 [ 1676.676569] ? getname_flags.part.0+0x1dd/0x4f0 [ 1676.677270] ? _copy_from_user+0xfb/0x1b0 [ 1676.677834] __x64_sys_mount+0x282/0x300 [ 1676.679258] ? copy_mnt_ns+0xa00/0xa00 [ 1676.679754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1676.681250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.681931] do_syscall_64+0x33/0x40 [ 1676.682444] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1676.683115] RIP: 0033:0x7fef9ce93b19 [ 1676.683659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.686287] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1676.687342] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1676.688327] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1676.689343] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1676.690308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1676.691326] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1676.695451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11020 comm=syz-executor.2 08:20:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfc00000000000000}}], 0x1, 0x0) 08:20:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 65) 08:20:02 executing program 6: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x43}, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xd}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x80) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r2 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x101, 0x0, r2}) dup2(r0, r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0xde, 0x0, 0x0, 0x7fff, r2}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}]}, 0x30}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x24048011) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 08:20:02 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xff, 0x9, 0x6, 0x0, 0x0, 0x10020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x71}, 0x12, 0x8000, 0x3, 0x1, 0x0, 0x8, 0x2, 0x0, 0xa2b80000, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r0, 0x9) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r1) lseek(r1, 0x803, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 08:20:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000074b000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:20:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a0001010000000800"/28], 0x1c}}, 0x0) fallocate(r0, 0x18, 0xfff, 0x4) getpgid(0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) sendmsg$nl_generic(r0, &(0x7f0000000e00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000400)=""/253, 0xfd}], 0x1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0x11, 0x0, @scatter={0x6, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f00000001c0)=""/132, 0x84}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/146, 0x92}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000800)=""/247, 0xf7}]}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x20, 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) unshare(0x48020200) 08:20:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100f00000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:20:02 executing program 2: syz_mount_image$iso9660(&(0x7f0000003dc0), &(0x7f0000003e00)='./file0\x00', 0x0, 0x0, &(0x7f0000005040), 0x0, &(0x7f0000005180)=ANY=[@ANYBLOB]) 08:20:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x1, 0x0, 0x0, 0x5, 0x0, 0x400000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)={0x678, 0x26, 0x101, 0x70bd2a, 0x25dfdbfe, {0x1d}, [@nested={0x661, 0x0, 0x0, 0x1, [@generic="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", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x678}}, 0x1) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="85c4f21b952c26cab8f73a79ab", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf256d00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x8900}, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfec4) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x4000012) syz_io_uring_setup(0x623f, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r2, 0x7ea0, 0x669e, 0x0, &(0x7f0000000240)={[0x7ff]}, 0x8) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, &(0x7f0000000500), 0x0, 0xa63fd6a5717620d2, 0x1}, 0x0) syz_io_uring_setup(0x7f02, &(0x7f0000000340)={0x0, 0xf69e, 0x1, 0x1, 0xea, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x3, 0x0, r10, &(0x7f0000000400), &(0x7f0000000500)='./file1\x00', 0x200, 0x400, 0x1}, 0x6) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 08:20:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfe80000000000000}}], 0x1, 0x0) 08:20:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000300000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1694.855921] FAULT_INJECTION: forcing a failure. [ 1694.855921] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.857602] CPU: 0 PID: 11047 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1694.858396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1694.859360] Call Trace: [ 1694.859677] dump_stack+0x107/0x167 [ 1694.860133] should_fail.cold+0x5/0xa [ 1694.864680] ? __kernfs_new_node+0xd4/0x860 [ 1694.865212] should_failslab+0x5/0x20 [ 1694.865695] kmem_cache_alloc+0x5b/0x310 [ 1694.866203] __kernfs_new_node+0xd4/0x860 [ 1694.866734] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1694.867322] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1694.867960] ? wait_for_completion_io+0x270/0x270 [ 1694.868620] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1694.869283] kernfs_new_node+0x93/0x120 [ 1694.869794] __kernfs_create_file+0x51/0x350 [ 1694.870341] sysfs_add_file_mode_ns+0x221/0x560 [ 1694.870939] internal_create_group+0x324/0xb30 [ 1694.871521] ? sysfs_remove_group+0x170/0x170 [ 1694.872072] ? kernfs_name_hash+0xe7/0x110 [ 1694.876641] ? kernfs_find_ns+0x256/0x380 [ 1694.877161] sysfs_slab_add+0x188/0x200 [ 1694.877698] __kmem_cache_create+0x3db/0x520 [ 1694.878240] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1694.878883] p9_client_create+0xc2b/0x11c0 [ 1694.879414] ? p9_client_flush+0x430/0x430 [ 1694.879951] ? trace_hardirqs_on+0x5b/0x180 [ 1694.880520] ? lockdep_init_map_type+0x2c7/0x780 [ 1694.881112] ? __raw_spin_lock_init+0x36/0x110 [ 1694.881690] v9fs_session_init+0x1dd/0x1680 [ 1694.882223] ? lock_release+0x680/0x680 [ 1694.882736] ? kmem_cache_alloc_trace+0x151/0x320 [ 1694.883323] ? v9fs_show_options+0x690/0x690 [ 1694.883893] ? trace_hardirqs_on+0x5b/0x180 [ 1694.884458] ? kasan_unpoison_shadow+0x33/0x50 [ 1694.885025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1694.885667] v9fs_mount+0x79/0x8f0 [ 1694.886112] ? v9fs_write_inode+0x60/0x60 [ 1694.886643] legacy_get_tree+0x105/0x220 [ 1694.887148] vfs_get_tree+0x8e/0x300 [ 1694.887623] path_mount+0x13be/0x20b0 [ 1694.888100] ? strncpy_from_user+0x9e/0x470 [ 1694.888674] ? finish_automount+0xa90/0xa90 [ 1694.889198] ? getname_flags.part.0+0x1dd/0x4f0 [ 1694.889827] ? _copy_from_user+0xfb/0x1b0 [ 1694.890349] __x64_sys_mount+0x282/0x300 [ 1694.890868] ? copy_mnt_ns+0xa00/0xa00 [ 1694.891356] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1694.892015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1694.892681] do_syscall_64+0x33/0x40 [ 1694.893144] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1694.893811] RIP: 0033:0x7fef9ce93b19 [ 1694.894268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1694.896580] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1694.897517] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1694.898387] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1694.899293] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1694.900228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1694.901112] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1694.916752] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1694.918845] CPU: 0 PID: 11047 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1694.919739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1694.920793] Call Trace: [ 1694.921135] dump_stack+0x107/0x167 [ 1694.921609] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1694.922271] p9_client_create+0xc2b/0x11c0 [ 1694.922811] ? p9_client_flush+0x430/0x430 [ 1694.923344] ? trace_hardirqs_on+0x5b/0x180 [ 1694.923931] ? lockdep_init_map_type+0x2c7/0x780 [ 1694.928576] ? __raw_spin_lock_init+0x36/0x110 [ 1694.929157] v9fs_session_init+0x1dd/0x1680 [ 1694.929743] ? lock_release+0x680/0x680 [ 1694.930262] ? kmem_cache_alloc_trace+0x151/0x320 [ 1694.930862] ? v9fs_show_options+0x690/0x690 [ 1694.931412] ? trace_hardirqs_on+0x5b/0x180 [ 1694.931977] ? kasan_unpoison_shadow+0x33/0x50 [ 1694.932594] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1694.933223] v9fs_mount+0x79/0x8f0 [ 1694.933705] ? v9fs_write_inode+0x60/0x60 [ 1694.934215] legacy_get_tree+0x105/0x220 [ 1694.934762] vfs_get_tree+0x8e/0x300 [ 1694.935234] path_mount+0x13be/0x20b0 [ 1694.935728] ? strncpy_from_user+0x9e/0x470 [ 1694.936289] ? finish_automount+0xa90/0xa90 [ 1694.936837] ? getname_flags.part.0+0x1dd/0x4f0 [ 1694.937416] ? _copy_from_user+0xfb/0x1b0 [ 1694.937941] __x64_sys_mount+0x282/0x300 [ 1694.938436] ? copy_mnt_ns+0xa00/0xa00 [ 1694.938955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1694.939619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1694.940325] do_syscall_64+0x33/0x40 [ 1694.940803] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1694.941432] RIP: 0033:0x7fef9ce93b19 [ 1694.941896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1694.944203] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1694.945196] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1694.946087] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1694.946982] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1694.947864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1694.948795] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:20:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000074d000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:20:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000074b000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:20:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 66) 08:20:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) 08:20:02 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10088, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() r3 = getpgid(0x0) r4 = epoll_create(0x1) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000040)={r4}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x7f, 0xe7, 0x7, 0x0, 0x401, 0x48000, 0x11, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x7, @perf_bp, 0x2040, 0x5, 0x3ff, 0x2, 0x3, 0x8, 0x1, 0x0, 0xfff, 0x0, 0x4e77}, r2, 0x2, r1, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x450, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macsec0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[@ANYBLOB="e6023600410008004b338f1599e024165ff56dc3026fc7270300a28ce2d10d698c37c92a89e0e8006ce92d1ea02d49bcf41c21e99e30bd00ab"], 0x54, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x10180, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) [ 1695.840711] audit: type=1400 audit(1700468403.416:519): avc: denied { tracepoint } for pid=11064 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 1695.852592] FAT-fs (loop4): bogus number of reserved sectors [ 1695.853387] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1695.942914] FAT-fs (loop4): bogus number of reserved sectors [ 1695.943731] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1695.952868] FAULT_INJECTION: forcing a failure. [ 1695.952868] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.957671] CPU: 0 PID: 11072 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1695.958563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1695.959607] Call Trace: [ 1695.959951] dump_stack+0x107/0x167 [ 1695.960468] should_fail.cold+0x5/0xa [ 1695.960982] ? create_object.isra.0+0x3a/0xa20 [ 1695.961570] should_failslab+0x5/0x20 [ 1695.962068] kmem_cache_alloc+0x5b/0x310 [ 1695.962595] create_object.isra.0+0x3a/0xa20 [ 1695.963163] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1695.963823] kmem_cache_alloc+0x159/0x310 [ 1695.972313] __kernfs_new_node+0xd4/0x860 [ 1695.972840] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1695.973431] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1695.974033] ? wait_for_completion_io+0x270/0x270 [ 1695.974666] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1695.975315] kernfs_new_node+0x93/0x120 [ 1695.975859] __kernfs_create_file+0x51/0x350 [ 1695.976457] sysfs_add_file_mode_ns+0x221/0x560 [ 1695.977050] internal_create_group+0x324/0xb30 [ 1695.977627] ? sysfs_remove_group+0x170/0x170 [ 1695.978166] ? kernfs_name_hash+0xe7/0x110 [ 1695.978701] ? kernfs_find_ns+0x256/0x380 [ 1695.979219] sysfs_slab_add+0x188/0x200 [ 1695.979753] __kmem_cache_create+0x3db/0x520 [ 1695.980327] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1695.980997] p9_client_create+0xc2b/0x11c0 [ 1695.981533] ? p9_client_flush+0x430/0x430 [ 1695.982056] ? trace_hardirqs_on+0x5b/0x180 [ 1695.982596] ? lockdep_init_map_type+0x2c7/0x780 [ 1695.983182] ? __raw_spin_lock_init+0x36/0x110 [ 1695.983749] v9fs_session_init+0x1dd/0x1680 [ 1695.984323] ? lock_release+0x680/0x680 [ 1695.984870] ? kmem_cache_alloc_trace+0x151/0x320 [ 1695.985463] ? v9fs_show_options+0x690/0x690 [ 1695.986082] ? trace_hardirqs_on+0x5b/0x180 [ 1695.986634] ? kasan_unpoison_shadow+0x33/0x50 [ 1695.987216] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1695.987851] v9fs_mount+0x79/0x8f0 [ 1695.988313] ? v9fs_write_inode+0x60/0x60 [ 1695.988828] legacy_get_tree+0x105/0x220 [ 1695.989335] vfs_get_tree+0x8e/0x300 [ 1695.989825] path_mount+0x13be/0x20b0 [ 1695.990305] ? strncpy_from_user+0x9e/0x470 [ 1695.990889] ? finish_automount+0xa90/0xa90 [ 1695.991428] ? getname_flags.part.0+0x1dd/0x4f0 [ 1695.991997] ? _copy_from_user+0xfb/0x1b0 [ 1695.992559] __x64_sys_mount+0x282/0x300 [ 1695.993065] ? copy_mnt_ns+0xa00/0xa00 [ 1695.993570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1695.994226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1695.994912] do_syscall_64+0x33/0x40 [ 1695.995373] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1695.996000] RIP: 0033:0x7fef9ce93b19 [ 1695.996486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1695.998774] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1695.999763] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1696.000653] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1696.001520] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1696.002383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1696.003255] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:20:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfec0000000000000}}], 0x1, 0x0) 08:20:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 67) 08:20:21 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x5, 0x8, 0x0, 0x3, 0x0, 0xbe34, 0x48000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x1002, 0x12, 0x9, 0x3, 0x800, 0x80000000, 0x8, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x10, r0, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0xe57a02740aae4181) 08:20:21 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',nvd', @ANYRESHEX]) 08:20:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000500000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:20:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000074f000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:20:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x5, 0xffffffffffffffff, 0xb) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x5, 0x0, 0x0, 0x8000]}, &(0x7f0000000140)=0x78) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0xa0d800, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setresuid(0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$dupfd(r3, 0x0, r3) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x0, &(0x7f00000007c0)="3f7623c0fd5713364c901d3cbce75250", 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x7, 0x4) symlinkat(&(0x7f0000000100)='./file0\x00', r1, 0x0) 08:20:21 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5eaf, 0x1717, 0x2, &(0x7f0000000040)={[0x153f7225]}, 0x8) 08:20:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000600000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:20:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xff00000000000000}}], 0x1, 0x0) 08:20:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, 0x0) lseek(r2, 0x7, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x6}, 0xc080) [ 1713.819829] FAULT_INJECTION: forcing a failure. [ 1713.819829] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.822706] CPU: 1 PID: 11090 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1713.823600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.825031] Call Trace: [ 1713.825839] dump_stack+0x107/0x167 [ 1713.826966] should_fail.cold+0x5/0xa [ 1713.828162] ? __kernfs_new_node+0xd4/0x860 [ 1713.829572] should_failslab+0x5/0x20 [ 1713.830714] kmem_cache_alloc+0x5b/0x310 [ 1713.832003] __kernfs_new_node+0xd4/0x860 [ 1713.833255] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1713.834486] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1713.835737] ? wait_for_completion_io+0x270/0x270 [ 1713.837176] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1713.838531] kernfs_new_node+0x93/0x120 [ 1713.839591] __kernfs_create_file+0x51/0x350 [ 1713.840846] sysfs_add_file_mode_ns+0x221/0x560 [ 1713.842066] internal_create_group+0x324/0xb30 [ 1713.843264] ? sysfs_remove_group+0x170/0x170 [ 1713.844421] ? kernfs_name_hash+0xe7/0x110 [ 1713.845834] ? kernfs_find_ns+0x256/0x380 [ 1713.846937] sysfs_slab_add+0x188/0x200 [ 1713.847983] __kmem_cache_create+0x3db/0x520 [ 1713.849311] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1713.850611] p9_client_create+0xc2b/0x11c0 [ 1713.851707] ? p9_client_flush+0x430/0x430 [ 1713.852960] ? trace_hardirqs_on+0x5b/0x180 [ 1713.854054] ? lockdep_init_map_type+0x2c7/0x780 [ 1713.855256] ? __raw_spin_lock_init+0x36/0x110 [ 1713.856433] v9fs_session_init+0x1dd/0x1680 [ 1713.857703] ? lock_release+0x680/0x680 [ 1713.858686] ? kmem_cache_alloc_trace+0x151/0x320 [ 1713.859931] ? v9fs_show_options+0x690/0x690 [ 1713.861216] ? trace_hardirqs_on+0x5b/0x180 [ 1713.862519] ? kasan_unpoison_shadow+0x33/0x50 [ 1713.863635] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.865008] v9fs_mount+0x79/0x8f0 [ 1713.865493] ? v9fs_write_inode+0x60/0x60 [ 1713.866020] legacy_get_tree+0x105/0x220 [ 1713.866599] vfs_get_tree+0x8e/0x300 [ 1713.867088] path_mount+0x13be/0x20b0 [ 1713.867579] ? strncpy_from_user+0x9e/0x470 [ 1713.868145] ? finish_automount+0xa90/0xa90 [ 1713.868737] ? getname_flags.part.0+0x1dd/0x4f0 [ 1713.869339] ? _copy_from_user+0xfb/0x1b0 [ 1713.869890] __x64_sys_mount+0x282/0x300 [ 1713.870413] ? copy_mnt_ns+0xa00/0xa00 [ 1713.870922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.871582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.872247] do_syscall_64+0x33/0x40 [ 1713.872782] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1713.873467] RIP: 0033:0x7fef9ce93b19 [ 1713.873959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.876275] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1713.877279] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1713.878211] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1713.879130] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1713.880072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.881057] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:20:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000751000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1713.888836] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1713.890449] CPU: 1 PID: 11090 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1713.891339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.892386] Call Trace: [ 1713.892861] dump_stack+0x107/0x167 [ 1713.893361] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1713.894056] p9_client_create+0xc2b/0x11c0 [ 1713.894582] ? p9_client_flush+0x430/0x430 [ 1713.895067] ? trace_hardirqs_on+0x5b/0x180 [ 1713.896084] ? lockdep_init_map_type+0x2c7/0x780 [ 1713.897562] ? __raw_spin_lock_init+0x36/0x110 [ 1713.898956] v9fs_session_init+0x1dd/0x1680 [ 1713.900302] ? lock_release+0x680/0x680 [ 1713.901673] ? kmem_cache_alloc_trace+0x151/0x320 [ 1713.903232] ? v9fs_show_options+0x690/0x690 [ 1713.904682] ? trace_hardirqs_on+0x5b/0x180 [ 1713.905902] ? kasan_unpoison_shadow+0x33/0x50 [ 1713.907341] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.908986] v9fs_mount+0x79/0x8f0 [ 1713.910062] ? v9fs_write_inode+0x60/0x60 [ 1713.911372] legacy_get_tree+0x105/0x220 [ 1713.912682] vfs_get_tree+0x8e/0x300 [ 1713.913798] path_mount+0x13be/0x20b0 [ 1713.915246] ? strncpy_from_user+0x9e/0x470 [ 1713.916657] ? finish_automount+0xa90/0xa90 [ 1713.917997] ? getname_flags.part.0+0x1dd/0x4f0 [ 1713.919354] ? _copy_from_user+0xfb/0x1b0 [ 1713.920637] __x64_sys_mount+0x282/0x300 [ 1713.921925] ? copy_mnt_ns+0xa00/0xa00 [ 1713.923165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.924783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.926354] do_syscall_64+0x33/0x40 [ 1713.927414] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1713.928924] RIP: 0033:0x7fef9ce93b19 [ 1713.929940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.935689] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1713.937910] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1713.940036] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1713.942273] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1713.944512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.946692] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:20:21 executing program 3: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000d08b922e8ceb"], 0x61, 0x0, 0x0) r0 = msgget(0x1, 0x0) msgsnd(r0, &(0x7f0000000340)={0x2, "3bababd725c4286ebc9d3185fd01053716fc631caec32df91cfb541027a3a8d34067c06821660d308b20f2d7193e25fa14d611a957e157bc7c3348b0d0a386c5aca1135b73f3fd7292aefb09d686cc62fb3ce2cee0eb5a615fec102ab7846fa9022ef80f92046f3d7be19b33971d603726c17c2df0725a744cecd479fe59f8b3d79c9aaa24d4573fa63ad21f472b126f0e12217aa5a83141a7c5c983f108003da26d2ca74f6c4de357780cbd126ebf68b6882b41ca57d4d1191dd0c6a2d60190ec4c00db"}, 0xcc, 0x0) getpgrp(0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x12001, &(0x7f0000001c40)={0x0, 0x989680}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x34ca}, {&(0x7f00000000c0)="000000000200000000000000e58ca12e13a240e2b1a22f8d4089dfbbd1a70f418b52553dac0a000000000000", 0x2c, 0x2}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x55e}, {&(0x7f0000000040)="19a6e98a543e3fe84cd5dd4778b0d8889ff25ce1a125fb5a5b71", 0x1a, 0x4f}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d070b464b96fd", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 08:20:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 68) 08:20:21 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000600), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x183a80, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x0, {0x0, r6}}, 0x10001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1714.615795] FAULT_INJECTION: forcing a failure. [ 1714.615795] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.617842] CPU: 1 PID: 11125 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1714.618682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1714.619696] Call Trace: [ 1714.620029] dump_stack+0x107/0x167 [ 1714.620520] should_fail.cold+0x5/0xa [ 1714.620997] ? create_object.isra.0+0x3a/0xa20 [ 1714.621564] should_failslab+0x5/0x20 [ 1714.622040] kmem_cache_alloc+0x5b/0x310 [ 1714.622545] create_object.isra.0+0x3a/0xa20 [ 1714.623086] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1714.624096] kmem_cache_alloc+0x159/0x310 [ 1714.625274] __kernfs_new_node+0xd4/0x860 [ 1714.626469] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1714.627891] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1714.629378] ? wait_for_completion_io+0x270/0x270 [ 1714.630876] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1714.632467] kernfs_new_node+0x93/0x120 [ 1714.633709] __kernfs_create_file+0x51/0x350 [ 1714.635087] sysfs_add_file_mode_ns+0x221/0x560 [ 1714.636722] internal_create_group+0x324/0xb30 [ 1714.638279] ? sysfs_remove_group+0x170/0x170 [ 1714.639706] ? kernfs_name_hash+0xe7/0x110 [ 1714.641084] ? kernfs_find_ns+0x256/0x380 [ 1714.642444] sysfs_slab_add+0x188/0x200 [ 1714.643679] __kmem_cache_create+0x3db/0x520 [ 1714.645126] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1714.646800] p9_client_create+0xc2b/0x11c0 [ 1714.648152] ? p9_client_flush+0x430/0x430 [ 1714.649518] ? trace_hardirqs_on+0x5b/0x180 [ 1714.650848] ? lockdep_init_map_type+0x2c7/0x780 [ 1714.652365] ? __raw_spin_lock_init+0x36/0x110 [ 1714.653946] v9fs_session_init+0x1dd/0x1680 [ 1714.655325] ? lock_release+0x680/0x680 [ 1714.656601] ? kmem_cache_alloc_trace+0x151/0x320 [ 1714.658287] ? v9fs_show_options+0x690/0x690 [ 1714.659752] ? trace_hardirqs_on+0x5b/0x180 [ 1714.661166] ? kasan_unpoison_shadow+0x33/0x50 [ 1714.662689] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1714.664393] v9fs_mount+0x79/0x8f0 [ 1714.665568] ? v9fs_write_inode+0x60/0x60 [ 1714.667068] legacy_get_tree+0x105/0x220 [ 1714.668350] vfs_get_tree+0x8e/0x300 [ 1714.669546] path_mount+0x13be/0x20b0 [ 1714.670773] ? strncpy_from_user+0x9e/0x470 [ 1714.672134] ? finish_automount+0xa90/0xa90 [ 1714.673566] ? getname_flags.part.0+0x1dd/0x4f0 [ 1714.674992] ? _copy_from_user+0xfb/0x1b0 [ 1714.676277] __x64_sys_mount+0x282/0x300 [ 1714.677526] ? copy_mnt_ns+0xa00/0xa00 [ 1714.678046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1714.678694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1714.679342] do_syscall_64+0x33/0x40 [ 1714.679811] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1714.680484] RIP: 0033:0x7fef9ce93b19 [ 1714.680960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1714.683212] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1714.684171] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1714.685149] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1714.686044] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1714.686942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1714.687847] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:20:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x1, 0x0) 08:20:40 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0x9) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbc4df25040000000800020005000000080003000600000008000300080000000400018008000300030000000800030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x8024}, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x8000, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a087092", 0x6e, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x0, 0x1, 0x53, 0x3, 0x0, 0x5, 0x0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100, 0x0, @perf_config_ext={0x7ff, 0x40}, 0x8008, 0x3, 0x80, 0x0, 0xffffffffffff8001, 0x6, 0x7ff, 0x0, 0x20, 0x0, 0x10001}, 0xffffffffffffffff, 0x7, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1293) 08:20:40 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8, 0x0) r2 = openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) openat(r2, &(0x7f0000000180)='./file0\x00', 0x84400, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) r5 = fsmount(r0, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r2, 0x1, 0x4) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000002c0)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000004c0)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000400)=ANY=[@ANYBLOB="6e616d653d2f6465762f736e617073686f74002c6e616d653d68756765746c622c616c6c2c6e6f6e652c6370757365745f76325f6d6f64652c78617474722c6e6f7072656669782c636cdfe7af084ab5f43bf36f6e655f6365746c622c66736e616d653d2f6465762f7a65726f002c736d61636b6673666c6f6f723d2e282b2d5e2c6f626a5f726f6c653d5e282c00c01bb33846a6662412e8d1f8bafc523e011c45bb8386b1254b86bb32f5b5b695499776"]) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) 08:20:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0x38, r2, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc21}]}]}]}, 0x38}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x18800060}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x338, r2, 0x610, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e51b8b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdddd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe300}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4491408e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79b7107c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x124, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3df4a6d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4eae74e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a13dfd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e41d92f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b03d523}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49690558}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x659a8d50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x696e}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29b7bd62}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2abc0f5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x678e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x211c764f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb08a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d14f481}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b03b407}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78bd}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x522acd3b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x457}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28284245}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15b8caf6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73475188}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64b21c59}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24fade4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xeeb9c97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9180}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3065db26}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c5fc6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fb99935}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59a74af9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2673ac22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dc75aba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x444c3867}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34b30b16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7273cf7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43a09fcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41811657}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cddfc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x339ca210}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57d5bf1a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78378edc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2195b8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15b02aef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32cf9983}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ba86e35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c96425}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x4c080}, 0x40041) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000001e9e35dfe1a70687ce6e05e75bccd3659cf3f017fcc6febf33d21c97b70139facfb0f0471c27191df82b04b0276c506", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf250300000008000600ffffff7f080006000500000008000500000000001c000380060007004e21000008000500ffffffff08000500ac14140f"], 0x48}, 0x1, 0x0, 0x0, 0x8811}, 0x8084) 08:20:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 69) 08:20:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000753000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:20:40 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = clone3(&(0x7f0000000340)={0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/98, 0x62, &(0x7f0000000280)=""/73, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) sendmsg$AUDIT_SET(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x3e9, 0x800, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x2, r1, 0x1, 0x2, 0x3, 0x7ff, 0x0, 0x7fffffff}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x91) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r5, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460981011f810000000000000003000600010000007e0200000000000040000000000000001c00000000000000d10000000300380002000100feff0000000000700300000002000000000000000900000000000000030000000000000000000000000000000500000000000000000000000000400000000060ffffffff0800000000000000f2000000000000000000000000000087adeb00030000000000000005000000000000000000000000000000b2d233284f94c91d748c568a67f61ed29aa245adfe3dad698fc8e0c8697cf12a843aea3fee6d798c05a7d605caac539f44fb295b60317716760c429990ccee64c6f90c8e20cff844361e93a4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"/1277], 0x4fd) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) 08:20:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000700000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1732.890174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1732.891567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1732.922725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1732.924090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1732.979943] FAULT_INJECTION: forcing a failure. [ 1732.979943] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.982034] CPU: 0 PID: 11147 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1732.982968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1732.984132] Call Trace: [ 1732.984469] dump_stack+0x107/0x167 [ 1732.989181] should_fail.cold+0x5/0xa [ 1732.989684] ? __kernfs_new_node+0xd4/0x860 [ 1732.990881] should_failslab+0x5/0x20 [ 1732.991356] kmem_cache_alloc+0x5b/0x310 [ 1732.991929] __kernfs_new_node+0xd4/0x860 [ 1732.992445] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1732.993128] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1732.993728] ? wait_for_completion_io+0x270/0x270 [ 1732.994367] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1732.995072] kernfs_new_node+0x93/0x120 [ 1732.995572] __kernfs_create_file+0x51/0x350 [ 1732.996168] sysfs_add_file_mode_ns+0x221/0x560 [ 1732.996866] internal_create_group+0x324/0xb30 [ 1732.997461] ? sysfs_remove_group+0x170/0x170 [ 1732.998096] ? kernfs_name_hash+0xe7/0x110 [ 1732.998617] ? kernfs_find_ns+0x256/0x380 [ 1732.999191] sysfs_slab_add+0x188/0x200 [ 1732.999692] __kmem_cache_create+0x3db/0x520 [ 1733.000291] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1733.001009] p9_client_create+0xc2b/0x11c0 [ 1733.001547] ? p9_client_flush+0x430/0x430 [ 1733.002120] ? trace_hardirqs_on+0x5b/0x180 [ 1733.002994] ? lockdep_init_map_type+0x2c7/0x780 [ 1733.003614] ? __raw_spin_lock_init+0x36/0x110 [ 1733.004235] v9fs_session_init+0x1dd/0x1680 [ 1733.004908] ? lock_release+0x680/0x680 [ 1733.005413] ? kmem_cache_alloc_trace+0x151/0x320 [ 1733.006054] ? v9fs_show_options+0x690/0x690 [ 1733.006609] ? trace_hardirqs_on+0x5b/0x180 [ 1733.007181] ? kasan_unpoison_shadow+0x33/0x50 [ 1733.007723] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1733.008388] v9fs_mount+0x79/0x8f0 [ 1733.008891] ? v9fs_write_inode+0x60/0x60 [ 1733.009396] legacy_get_tree+0x105/0x220 [ 1733.009914] vfs_get_tree+0x8e/0x300 [ 1733.010386] path_mount+0x13be/0x20b0 [ 1733.010890] ? strncpy_from_user+0x9e/0x470 [ 1733.011414] ? finish_automount+0xa90/0xa90 [ 1733.012005] ? getname_flags.part.0+0x1dd/0x4f0 [ 1733.012559] ? _copy_from_user+0xfb/0x1b0 [ 1733.017218] __x64_sys_mount+0x282/0x300 [ 1733.017697] ? copy_mnt_ns+0xa00/0xa00 [ 1733.018215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1733.018901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.019540] do_syscall_64+0x33/0x40 [ 1733.020071] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1733.020683] RIP: 0033:0x7fef9ce93b19 [ 1733.021184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.023406] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1733.024372] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1733.025268] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1733.026173] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1733.027093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.027997] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:20:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000900000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1733.058684] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1733.059562] CPU: 1 PID: 11147 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1733.060403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.061463] Call Trace: [ 1733.061850] dump_stack+0x107/0x167 [ 1733.062313] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1733.062982] p9_client_create+0xc2b/0x11c0 [ 1733.063520] ? p9_client_flush+0x430/0x430 [ 1733.064056] ? trace_hardirqs_on+0x5b/0x180 [ 1733.064587] ? lockdep_init_map_type+0x2c7/0x780 [ 1733.066470] ? __raw_spin_lock_init+0x36/0x110 [ 1733.067112] v9fs_session_init+0x1dd/0x1680 [ 1733.067696] ? lock_release+0x680/0x680 [ 1733.072117] ? kmem_cache_alloc_trace+0x151/0x320 [ 1733.072747] ? v9fs_show_options+0x690/0x690 [ 1733.073408] ? trace_hardirqs_on+0x5b/0x180 [ 1733.076052] ? kasan_unpoison_shadow+0x33/0x50 [ 1733.076643] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1733.078416] v9fs_mount+0x79/0x8f0 [ 1733.079945] ? v9fs_write_inode+0x60/0x60 [ 1733.080485] legacy_get_tree+0x105/0x220 [ 1733.082131] vfs_get_tree+0x8e/0x300 [ 1733.082623] path_mount+0x13be/0x20b0 [ 1733.084183] ? strncpy_from_user+0x9e/0x470 [ 1733.084763] ? finish_automount+0xa90/0xa90 [ 1733.086427] ? getname_flags.part.0+0x1dd/0x4f0 [ 1733.088090] ? _copy_from_user+0xfb/0x1b0 [ 1733.088680] __x64_sys_mount+0x282/0x300 [ 1733.090332] ? copy_mnt_ns+0xa00/0xa00 [ 1733.091906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1733.092577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.094361] do_syscall_64+0x33/0x40 [ 1733.095910] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1733.096566] RIP: 0033:0x7fef9ce93b19 [ 1733.098295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.103858] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1733.105954] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1733.107911] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1733.109994] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1733.110963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.112940] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:20:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000755000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:20:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0) [ 1733.167331] cgroup: Invalid name 08:20:40 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) getdents64(r0, &(0x7f0000001400)=""/53, 0x35) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x5b) r2 = fcntl$getown(r1, 0x9) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_none}], [{@smackfsdef={'smackfsdef', 0x3d, 'mountinfo\x00'}}, {@euid_eq}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x5b) openat(r0, &(0x7f00000011c0)='./file1\x00', 0x2a040, 0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000001180)) r4 = dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x6, 0x1, 0x9, 0x3, 0x0, 0x4, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000010c0), 0x1}, 0x1031a, 0x1, 0x401, 0x9, 0x4, 0x200, 0x3, 0x0, 0x7, 0x0, 0x4}, r2, 0x8, r4, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="400300001400010000000200040000000a00000008000000", @ANYRES32], 0x340}}, 0x41) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) [ 1733.232673] cgroup: Invalid name [ 1733.245894] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz-executor.4: bad orphan inode 301979167 [ 1733.267383] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 08:20:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0100000000080000000000000000"], 0x14}}, 0x0) 08:20:40 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x29, 0x1f, 0x1, 0xbc, 0x2, @local, @mcast1, 0x1, 0x700, 0x20, 0x4}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000580)={@empty, r1}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7fffffff, @private0}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0x130) 08:20:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000a00000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:20:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 70) 08:20:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000757000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1733.480321] 9pnet: Insufficient options for proto=fd [ 1733.527887] 9pnet: Insufficient options for proto=fd [ 1733.660776] FAULT_INJECTION: forcing a failure. [ 1733.660776] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.662690] CPU: 1 PID: 11192 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1733.663555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.664582] Call Trace: [ 1733.664941] dump_stack+0x107/0x167 [ 1733.665402] should_fail.cold+0x5/0xa [ 1733.665891] ? create_object.isra.0+0x3a/0xa20 [ 1733.666461] should_failslab+0x5/0x20 [ 1733.666943] kmem_cache_alloc+0x5b/0x310 [ 1733.667459] create_object.isra.0+0x3a/0xa20 [ 1733.668035] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1733.668706] kmem_cache_alloc+0x159/0x310 [ 1733.669267] __kernfs_new_node+0xd4/0x860 [ 1733.669799] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1733.670407] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1733.671019] ? wait_for_completion_io+0x270/0x270 [ 1733.671635] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1733.672311] kernfs_new_node+0x93/0x120 [ 1733.672847] __kernfs_create_file+0x51/0x350 [ 1733.673412] sysfs_add_file_mode_ns+0x221/0x560 [ 1733.674037] internal_create_group+0x324/0xb30 [ 1733.674619] ? sysfs_remove_group+0x170/0x170 [ 1733.675187] ? kernfs_name_hash+0xe7/0x110 [ 1733.675724] ? kernfs_find_ns+0x256/0x380 [ 1733.676255] sysfs_slab_add+0x188/0x200 [ 1733.676792] __kmem_cache_create+0x3db/0x520 [ 1733.677350] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1733.677982] p9_client_create+0xc2b/0x11c0 [ 1733.678526] ? p9_client_flush+0x430/0x430 [ 1733.679063] ? trace_hardirqs_on+0x5b/0x180 [ 1733.679617] ? lockdep_init_map_type+0x2c7/0x780 [ 1733.680235] ? __raw_spin_lock_init+0x36/0x110 [ 1733.680879] v9fs_session_init+0x1dd/0x1680 [ 1733.681432] ? lock_release+0x680/0x680 [ 1733.681948] ? kmem_cache_alloc_trace+0x151/0x320 [ 1733.682558] ? v9fs_show_options+0x690/0x690 [ 1733.683124] ? trace_hardirqs_on+0x5b/0x180 [ 1733.683678] ? kasan_unpoison_shadow+0x33/0x50 [ 1733.684261] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1733.684932] v9fs_mount+0x79/0x8f0 [ 1733.685392] ? v9fs_write_inode+0x60/0x60 [ 1733.685950] legacy_get_tree+0x105/0x220 [ 1733.686468] vfs_get_tree+0x8e/0x300 [ 1733.686993] path_mount+0x13be/0x20b0 [ 1733.687533] ? strncpy_from_user+0x9e/0x470 [ 1733.688226] ? finish_automount+0xa90/0xa90 [ 1733.689407] ? getname_flags.part.0+0x1dd/0x4f0 [ 1733.690706] ? _copy_from_user+0xfb/0x1b0 [ 1733.691893] __x64_sys_mount+0x282/0x300 [ 1733.693009] ? copy_mnt_ns+0xa00/0xa00 [ 1733.694060] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1733.695504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.696906] do_syscall_64+0x33/0x40 [ 1733.697946] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1733.699358] RIP: 0033:0x7fef9ce93b19 [ 1733.700369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.705502] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1733.707538] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1733.709493] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1733.711498] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1733.713474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.715484] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:20:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000b00000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:20:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 08:20:58 executing program 6: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(r0, r1, r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000200)=0x3) setresuid(r1, r0, r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000940)={{}, 0x0, 0x1a, @inherit={0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000030000000000000001010000000000000180000000000000140000000000000080ffffffffffffff0600000000000000d30500000000000006000000000000000900000000000000030000000000000020"]}, @subvolid=0x4}) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000002c0)={{0x5, 0x3}, 0x100, './file0\x00'}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$security_capability(r6, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x3f, 0x400}]}, 0xc, 0x2) 08:20:58 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) getdents64(r0, &(0x7f0000001400)=""/53, 0x35) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x5b) r2 = fcntl$getown(r1, 0x9) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_none}], [{@smackfsdef={'smackfsdef', 0x3d, 'mountinfo\x00'}}, {@euid_eq}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x5b) openat(r0, &(0x7f00000011c0)='./file1\x00', 0x2a040, 0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000001180)) r4 = dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x6, 0x1, 0x9, 0x3, 0x0, 0x4, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000010c0), 0x1}, 0x1031a, 0x1, 0x401, 0x9, 0x4, 0x200, 0x3, 0x0, 0x7, 0x0, 0x4}, r2, 0x8, r4, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="400300001400010000000200040000000a00000008000000", @ANYRES32], 0x340}}, 0x41) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) 08:20:58 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x1f, 0x2, 0x80, 0x0, 0x7, 0x10000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8000, 0x9}, 0x0, 0xfff, 0x7, 0x0, 0x5d50, 0x1, 0x1, 0x0, 0x22}, 0x0, 0xe, r0, 0x1) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x3, 0x7, 0xaf, 0x4, 0x0, 0xffffffffffffff23, 0x20, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xdb6e, 0x4, @perf_config_ext={0x0, 0x1}, 0x40000, 0x3, 0x3ff, 0x1, 0x4, 0x1ff, 0x7, 0x0, 0xaf00, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x181142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r4, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRESOCT=r1, @ANYRES32=0xee01, @ANYRESHEX]) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) openat(r4, &(0x7f0000000140)='./file1\x00', 0x20000, 0x120) sendfile(r2, r3, 0x0, 0x100000001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) 08:20:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 71) 08:20:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000759000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:20:58 executing program 4: r0 = msgget(0x3, 0x202) msgrcv(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000009de68da1805725294b06a8c5eab60f1740aca5b55e7a81f2b931f3160e05c18481a8baf006aa12d06277e56fc541b6796c7de885a9b7346c0876d17b80b00ccb9b73ed6046585cfea59d177339d2d9bc2a887dd630f56f6a730fc9928bf18120302"], 0x26, 0x0, 0x3000) msgget(0x0, 0x423) msgsnd(r0, &(0x7f0000000100)={0x3, "3f180579abb2e295f6e3ac21afd162f1d00e0c27d3f31fda314e07ce358d619cc7eb5a8367e19589ddbeae23d828025728212779bc2acbd2ec76c2685a79ab1f0120b1dfa2269dd3382c61c9cf92f4714c2e5a839fff1429cc6cc0893ee1ecb4b4f31edb9428d192fdffb37cabf6a382a973aa0cf0d09e79fae4ea9404861e3bddbc1fa380272b3afa526982aff50a1665c2fef91fe5c75edc3f771350962f504b9d333813d214774459b495aadf408f089948f4b1b9da4e7f96998106e44c9ab90ccaf60c7e58151413a4a1c873c6ecea99ad54303d301f93a7ced72fc05532ad95d8"}, 0xeb, 0x800) msgsnd(r0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r1 = msgget(0x0, 0xc) msgctl$IPC_INFO(r1, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) setpriority(0x0, r2, 0x0) pipe(&(0x7f00000002c0)) getpgrp(0x0) getpgrp(0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 08:20:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000f00000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1751.460749] FAULT_INJECTION: forcing a failure. [ 1751.460749] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.466702] CPU: 0 PID: 11214 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1751.467570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1751.468595] Call Trace: [ 1751.468957] dump_stack+0x107/0x167 [ 1751.469460] should_fail.cold+0x5/0xa [ 1751.469941] ? __kernfs_new_node+0xd4/0x860 [ 1751.470496] should_failslab+0x5/0x20 [ 1751.470975] kmem_cache_alloc+0x5b/0x310 [ 1751.471497] __kernfs_new_node+0xd4/0x860 [ 1751.472030] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1751.472634] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1751.473260] ? wait_for_completion_io+0x270/0x270 [ 1751.473872] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1751.474544] kernfs_new_node+0x93/0x120 [ 1751.475054] __kernfs_create_file+0x51/0x350 [ 1751.475619] sysfs_add_file_mode_ns+0x221/0x560 [ 1751.476210] internal_create_group+0x324/0xb30 [ 1751.476802] ? sysfs_remove_group+0x170/0x170 [ 1751.477394] ? kernfs_name_hash+0xe7/0x110 [ 1751.477934] ? kernfs_find_ns+0x256/0x380 [ 1751.478461] sysfs_slab_add+0x188/0x200 [ 1751.478963] __kmem_cache_create+0x3db/0x520 [ 1751.479528] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1751.480170] p9_client_create+0xc2b/0x11c0 [ 1751.480719] ? p9_client_flush+0x430/0x430 [ 1751.481311] ? trace_hardirqs_on+0x5b/0x180 [ 1751.481850] ? lockdep_init_map_type+0x2c7/0x780 [ 1751.482476] ? __raw_spin_lock_init+0x36/0x110 [ 1751.483059] v9fs_session_init+0x1dd/0x1680 [ 1751.483334] 9pnet: Insufficient options for proto=fd [ 1751.483600] ? lock_release+0x680/0x680 [ 1751.483625] ? kmem_cache_alloc_trace+0x151/0x320 [ 1751.485371] ? v9fs_show_options+0x690/0x690 [ 1751.485931] ? trace_hardirqs_on+0x5b/0x180 [ 1751.486508] ? kasan_unpoison_shadow+0x33/0x50 [ 1751.487085] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1751.487736] v9fs_mount+0x79/0x8f0 [ 1751.488190] ? v9fs_write_inode+0x60/0x60 [ 1751.488715] legacy_get_tree+0x105/0x220 [ 1751.489248] vfs_get_tree+0x8e/0x300 [ 1751.489722] path_mount+0x13be/0x20b0 [ 1751.490208] ? strncpy_from_user+0x9e/0x470 [ 1751.490747] ? finish_automount+0xa90/0xa90 [ 1751.491288] ? getname_flags.part.0+0x1dd/0x4f0 [ 1751.491871] ? _copy_from_user+0xfb/0x1b0 [ 1751.492438] __x64_sys_mount+0x282/0x300 [ 1751.501020] ? copy_mnt_ns+0xa00/0xa00 [ 1751.501041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1751.501056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1751.501077] do_syscall_64+0x33/0x40 [ 1751.501096] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1751.503940] RIP: 0033:0x7fef9ce93b19 [ 1751.504446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1751.506789] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1751.507738] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1751.508626] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1751.509558] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1751.510490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1751.511376] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:20:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}], 0x1, 0x0) 08:20:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) pipe2(&(0x7f0000000040), 0x1000) [ 1751.545715] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1751.547450] CPU: 0 PID: 11214 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1751.548313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1751.553368] Call Trace: [ 1751.553710] dump_stack+0x107/0x167 [ 1751.554174] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1751.554867] p9_client_create+0xc2b/0x11c0 [ 1751.555406] ? p9_client_flush+0x430/0x430 [ 1751.555962] ? trace_hardirqs_on+0x5b/0x180 [ 1751.556515] ? lockdep_init_map_type+0x2c7/0x780 [ 1751.557141] ? __raw_spin_lock_init+0x36/0x110 [ 1751.557725] v9fs_session_init+0x1dd/0x1680 [ 1751.558275] ? lock_release+0x680/0x680 [ 1751.558793] ? kmem_cache_alloc_trace+0x151/0x320 [ 1751.559401] ? v9fs_show_options+0x690/0x690 [ 1751.559961] ? trace_hardirqs_on+0x5b/0x180 [ 1751.560543] ? kasan_unpoison_shadow+0x33/0x50 [ 1751.561152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1751.561843] v9fs_mount+0x79/0x8f0 [ 1751.562295] ? v9fs_write_inode+0x60/0x60 [ 1751.562817] legacy_get_tree+0x105/0x220 [ 1751.563330] vfs_get_tree+0x8e/0x300 [ 1751.563805] path_mount+0x13be/0x20b0 [ 1751.564293] ? strncpy_from_user+0x9e/0x470 [ 1751.564841] ? finish_automount+0xa90/0xa90 [ 1751.565427] ? getname_flags.part.0+0x1dd/0x4f0 [ 1751.566014] ? _copy_from_user+0xfb/0x1b0 [ 1751.566590] __x64_sys_mount+0x282/0x300 [ 1751.567103] ? copy_mnt_ns+0xa00/0xa00 [ 1751.567598] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1751.568255] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1751.568914] do_syscall_64+0x33/0x40 [ 1751.569387] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1751.570014] RIP: 0033:0x7fef9ce93b19 [ 1751.570488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1751.572800] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1751.577829] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1751.578713] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1751.579598] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1751.580483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1751.581420] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:20:59 executing program 6: rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r0, 0x40a) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4e23, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffffffe, 0x6e6bba, 0x2}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0xe8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x40081, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x21, @multicast2, 0x4e20, 0x3, 'sh\x00', 0x10, 0xfffffff7, 0x17}, {@multicast2, 0x4e21, 0x2000, 0x400, 0x2, 0x7}}, 0x44) ioctl$SG_IO(r1, 0x2285, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "00bc95e1d7c7526002994560cca3cb55b66678e5eaea2741345629a1cec02f007569e0842af897601b10179ce9c733b49449827210b73d70a774f7e48cea1c35a571cf104a8db9faf6c7f7a86647a7a3a4a1740d6e9722cbf84f0d9ec33b9bab22d97351d38686158264793722ee3b2516645cf01a1a9ae08aa9192b0aa2d521be5340caa28d3e9aca95d6c911bf19b56b60b59d718961708152c187c5ec50437a3df5039deb78aa1ff0d0c1dce7ff26bb1fbbd65861e3bd8db8c3eabd654b68db5d517f3cad2b86c70d81f32e2a06e473b6ca25df162c2c9c07bc413dca11294ad0405edf9d6960235bf04a490a886388edae8fe3dc39031f5cf8d64613ce9bd37486c957324e5f11cb734692496a2ea9f4a345751bc9c2fe871e70c7b6611549350cde91af83ff7b1c57a2b3fa51cb7019e32b4a56fc4a3f0f78c41e923aed5cb89ab79fb2b1d7d2264638ec688486438cb5bfcda5bd3336c0eca5c4eb49ec0284e9b1356de8e47797300221dae6b2dc5998e5616720ffc947ec2810b3c85b606781abf15f61154565f58d2492cc6a2c56dffa9ba7ab98278ed6ee13653b779b893d8494c76cebde9bc51ed405e27e8daf3d6a9c0e3a09f155d92887781b7e1d1bdca9c0618f5ed7e0c97917b349b694a3d9005f9a672cd522aee5946b70b962128c7702b069399bf489ddb076c5ea02fe2b9030823c4247a6d22cd8c59b4290c56d47ccfa5167f94e9bf5e66bf4fb99c0585598f1113e111eb23cff6482c3060b77f79a77f71e9a6d8fdf8a7311ef5c2eaf7b102e638b3cd28644c29855f14b30e9c0631ead0c314870a30615de4c1bda467575f75edaf7569a77ba047b8443d96d8c862006bfcc7c21b848904100527b69d39c5caf1c3aa038fec350da5c1cbcdec3def9c83b0fe0e3d5f044685ca4e3da91622fcf098a3d4a827740c771dcfc67298754a2a1601e363c35ba09e0191097ac1cb793653beb39885a70b00457010111f12223bc6d6b8dfc16c29e31e27a0bf6c35b421907f10cd41cedd40709d56d7b8e9e3531c1acebc0a5ad21dc1a18affe006320ea8b5d7c4fca00ba4028f802c97ca82c5b321867ae14d8ec57614c9bc5a8b0b7df20bc38585a32d3cf58ea3f9402c478d84c9312e1660648f67ad131560dc6a4932657afcda99b9d5cbf9c8d8e19798f86e62c1dcf4e4bfcdedefac0cd9d9d21cc692a1eb6b7d5b1b2c1a1a49ea7c3566fa56a9d2cc025332479e61fe3a750e20446ebece96faaa58a355e59fb83205c2b389243ecf8141c4a75ffe7281adb43074b88a501682b32c5153f9b79441306a130d17536eafbc70bfe91bb34cf4488d8624cc4fa287fa60b6502c2cc1a049b0afc6bee5a6240238d5ef0e762791121ed045a939dafdf1dfe996325fd552570887ffc7f3066e857015ee8cf082339375cc0989afe26e125bd66579d44c56c4ffe86507b5155ac7f47ef66629ed7b6b11db00c40ef262f5609733ef55b27370e8fbfea36500ba3e9687232eb9f2f6af04dfbfa79a64cd7bfab080648330776ff4088b0345f436f869f5aea2dbd1155bcd62cb858f694ea8e8ca34c418dc7ee051a1a041f0521abd04a7319f73d8fb902688e58a69c9043e8392ff1ddb95a9f6f7c72d5ca765c809901b9e4da6929e6ab98fdbed606854e05677b5fc04b46c7e77550bb2cac1747774d9f5bb41071a2edfdf7ca48303b65800ae56b1d4254d504555484040c8a6a7ff987cfd65e29c921d6aa356ab1ab3c9c3f493cb3c55b414d31cde83084e2183bc2e173f5872c252ffbc5c97ff6712d5934fdc512575dc5db977bf7d5d0b92fc13fcdfd04bafb59d28aeac0d8d5c105b1d648f07753c1fb731f883d0957b1c56138847f34b9b669511580ccbe523de0abf33ee0ae793d659cb2fae7bb1e546eb3d9c4b805499627618b9d0400ff60fdafaf975cb3a9663eb1efef94676dce8042f0d93f11e93d7fcd25d7535c7a37f57b2835b2aefa0108924efba0390da2d939630b6047eb7fff3395d421a27412fadd589e4673f4e3b86d92c51b8d2451812ce4623b2c5de86894519f6e72e381c8fa39ef43f95bd4c812936794f709556e89f9f1044fc59237da4b40406d74b630f4b558e0ca5a7e85f45968ee2162c5c787123f3165cea19f4998ba73ea99af14de50017ced399b32c65fcc3b0069f2393958c5b8fae29ce59e3de43ff2fe4f603b264190ca1ebf9763cef6d81b3b16e59210c72f53f064e3e877791cdbb836cfc3fa9ca97c8adf27f1d012fffc243a95e10adb0de9d1b375c15d4b94e6e1ff7a2b1a3162fccab6e526e8db185555acdf449e15f9fb8b60185c61fc2f838e9c258ab52ece9a38214b0e8d100da3681e215eee5a2052de65f2568d49744786e56185416a53934f627f3fbb460880e5e399993743cc048549a08f9a4a1e11210fdf0ed031a3c8f44cee83af55bf74948f51126d53e6808915d630a0ec0e31884c3ea8b9eacfbda96501b44c200bb7caf55032ae99324af341291df2183ef4a6b0cb2f0272007dac9589149953e61f01e027627dacb58d5edc892fbe29146b3bce72431ec4e2fb4fb7a03af2c2e94c7d68cf59c2f618eff3e7e06d0e03608ac678b325dc4c7bf5af32b215b65fa9a1bed17292a56e9131a8af0e22b79a91f66e5294c9dfd0ee6546978e0d3d5420649f10c1b9f917351cf824887011a8b4ed165b5db68d8f8d4dbd87d337e49f05873553fe5d0e34638851a273618f59ce5fe148ca149cce089a8f4301a5507404939cf4993b4afa6f9d2a76c40adcbf4607e0e293483194f7756ac3fa8f7e2eb28be0a251d0e70f428d06731a135a02b239ab8a0a79472002e08291a7242c41251cd36185a1b31a32ba3da99897886dc37fc9c4d2a8d1"}) ftruncate(r1, 0x1000003) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000380)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x17) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) unshare(0x48020200) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="00892e4b6bd8775f2200400000000000000000"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r3, 0x0) 08:20:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000075b000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1751.677443] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1751.679551] ext4 filesystem being mounted at /syzkaller-testdir564230741/syzkaller.W5ntSr/154/file0 supports timestamps until 2038 (0x7fffffff) 08:20:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 72) 08:20:59 executing program 4: r0 = msgget(0x3, 0x202) msgrcv(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000009de68da1805725294b06a8c5eab60f1740aca5b55e7a81f2b931f3160e05c18481a8baf006aa12d06277e56fc541b6796c7de885a9b7346c0876d17b80b00ccb9b73ed6046585cfea59d177339d2d9bc2a887dd630f56f6a730fc9928bf18120302"], 0x26, 0x0, 0x3000) msgget(0x0, 0x423) msgsnd(r0, &(0x7f0000000100)={0x3, "3f180579abb2e295f6e3ac21afd162f1d00e0c27d3f31fda314e07ce358d619cc7eb5a8367e19589ddbeae23d828025728212779bc2acbd2ec76c2685a79ab1f0120b1dfa2269dd3382c61c9cf92f4714c2e5a839fff1429cc6cc0893ee1ecb4b4f31edb9428d192fdffb37cabf6a382a973aa0cf0d09e79fae4ea9404861e3bddbc1fa380272b3afa526982aff50a1665c2fef91fe5c75edc3f771350962f504b9d333813d214774459b495aadf408f089948f4b1b9da4e7f96998106e44c9ab90ccaf60c7e58151413a4a1c873c6ecea99ad54303d301f93a7ced72fc05532ad95d8"}, 0xeb, 0x800) msgsnd(r0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r1 = msgget(0x0, 0xc) msgctl$IPC_INFO(r1, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) setpriority(0x0, r2, 0x0) pipe(&(0x7f00000002c0)) getpgrp(0x0) getpgrp(0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 08:20:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100001100000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1752.548451] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1752.718558] FAULT_INJECTION: forcing a failure. [ 1752.718558] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.720404] CPU: 0 PID: 11248 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1752.721341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.729855] Call Trace: [ 1752.730208] dump_stack+0x107/0x167 [ 1752.730686] should_fail.cold+0x5/0xa [ 1752.731162] ? create_object.isra.0+0x3a/0xa20 [ 1752.731716] should_failslab+0x5/0x20 [ 1752.732197] kmem_cache_alloc+0x5b/0x310 [ 1752.732717] create_object.isra.0+0x3a/0xa20 [ 1752.733292] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.733936] kmem_cache_alloc+0x159/0x310 [ 1752.734466] __kernfs_new_node+0xd4/0x860 [ 1752.734997] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1752.735607] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1752.736213] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1752.736940] ? wait_for_completion_io+0x270/0x270 [ 1752.737548] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1752.738250] kernfs_new_node+0x93/0x120 [ 1752.738760] __kernfs_create_file+0x51/0x350 [ 1752.739318] sysfs_add_file_mode_ns+0x221/0x560 [ 1752.739912] internal_create_group+0x324/0xb30 [ 1752.740499] ? sysfs_remove_group+0x170/0x170 [ 1752.741081] ? kernfs_name_hash+0xe7/0x110 [ 1752.741646] ? kernfs_find_ns+0x256/0x380 [ 1752.742174] sysfs_slab_add+0x188/0x200 [ 1752.742694] __kmem_cache_create+0x3db/0x520 [ 1752.743273] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1752.743908] p9_client_create+0xc2b/0x11c0 [ 1752.744450] ? p9_client_flush+0x430/0x430 [ 1752.745015] ? trace_hardirqs_on+0x5b/0x180 [ 1752.745559] ? lockdep_init_map_type+0x2c7/0x780 [ 1752.746160] ? __raw_spin_lock_init+0x36/0x110 [ 1752.746743] v9fs_session_init+0x1dd/0x1680 [ 1752.747288] ? lock_release+0x680/0x680 [ 1752.747812] ? kmem_cache_alloc_trace+0x151/0x320 [ 1752.748391] ? v9fs_show_options+0x690/0x690 [ 1752.749023] ? trace_hardirqs_on+0x5b/0x180 [ 1752.749572] ? kasan_unpoison_shadow+0x33/0x50 [ 1752.750152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.750795] v9fs_mount+0x79/0x8f0 [ 1752.751247] ? v9fs_write_inode+0x60/0x60 [ 1752.751766] legacy_get_tree+0x105/0x220 [ 1752.752284] vfs_get_tree+0x8e/0x300 [ 1752.752758] path_mount+0x13be/0x20b0 [ 1752.753282] ? strncpy_from_user+0x9e/0x470 [ 1752.753858] ? finish_automount+0xa90/0xa90 [ 1752.754399] ? getname_flags.part.0+0x1dd/0x4f0 [ 1752.755020] ? _copy_from_user+0xfb/0x1b0 [ 1752.755554] __x64_sys_mount+0x282/0x300 [ 1752.756068] ? copy_mnt_ns+0xa00/0xa00 [ 1752.756561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.757242] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.757891] do_syscall_64+0x33/0x40 [ 1752.758361] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1752.759022] RIP: 0033:0x7fef9ce93b19 [ 1752.759490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.761827] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1752.762773] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1752.763666] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1752.764537] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1752.765471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.766388] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1753.026537] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1753.031546] ext4 filesystem being mounted at /syzkaller-testdir564230741/syzkaller.W5ntSr/155/file0 supports timestamps until 2038 (0x7fffffff) 08:21:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe}}], 0x1, 0x0) 08:21:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100006c00000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:21:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000001140)=[{&(0x7f0000000080)="f2", 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x48020}) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x100000001, 0x6, &(0x7f0000000480)=[{&(0x7f00000001c0)="600d15c4457ef86638aaefa64cef6be0a2a9c0b70183ea405a", 0x19, 0x6}, {&(0x7f0000000200)="141a893f2315c46fc0d973cd4aab3527c06c083063285c3cb653d8e4512e5d5eecd14fd979485e9679ebfc80e943e05755cc78fd496b9b049507d0e2b4e2acc3c3ef6d21af8c5a2de5de20f7eddee778283dcf4eb8533dedc4b1a57ca27cf7ad80eaf772e61de5e91ae105e1b9cfababb0cde09970486924a174903893b510f6564feac08e925ee755fc0d6a2a41953539f36b8d95722f9cab857b51ab8c1136931caf23", 0xa4, 0x4}, {&(0x7f00000002c0)="7d72c65c4b21f70a8611b8587c6d38290c6e8a71d8f6113a6110e3a9013e1a019ea7f819b8139718f45d9a83bf3f9358d2a6932bb4db49d982a9a51814c8db6b46cd47e8ff2795eefa62e773c6b94c3c0e5c3fb1549eed1ae62d6551f04917c5afa21663e60f3a48d181e728931596825706774c3b", 0x75, 0x12dd}, {&(0x7f0000000340)="a810a2b091582bf24c3161132e0182c1aa1e050887299ee86c58dff3ca4b5a30852ba00a546c56273243c96e15f67bf16a12a28b6a0989aee7d574a79977817dd666e03429e0ac03a3c9edde6b7617e7d8d94287c9bbea6a091840ee644e8ded45997918d2b531cf2434941ad619580a4b9a019a42265ef2c18f12cd66f7ab7a47d97a884f0746811fd71120", 0x8c, 0x80}, {&(0x7f0000000400)="2ac0da21cfcea622fce20d449f2be3cc1daad5fafd37ce3359705d0e2daae9d5b9c01c9087dcf4e6cdfa7c67d6f5fece8d85f01dfa282dfb46fd84fc4b4b", 0x3e, 0x9}, {&(0x7f0000000440)="0fe9cdb3d125ece224b8774c", 0xc, 0x3}], 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="242c002c002c002c002c002c2c002c646f6e347261697365acc2ff657569", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) openat(r3, &(0x7f0000000580)='./file1\x00', 0x101000, 0x4c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, r0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r6, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100080001000000180000000091189d281cc3d128093affb9683cbdfb3be3fd5903b94672590b0a594b6939f248968c1ba0faaf223a1b086a648d5b1f242f66da884fc3e022c9244db103b6789f6b494c28f4e82b92eb3ca979f525aa699dbc7af7c2a7973c906cefc334658c5606dcdd937754fdae8987373e5d99c5b712a865814ec0b6208c2bc5e79b9ae0f74dfb946eb47e6d0387406aaf769191e6eb4715077b28f0e2a68d68521e3ef081981600844d4bde84984bd0", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r5, 0x5, 0x80000000, 0xffffffff00000001, 0xfffffffffffffffc}) fcntl$setlease(r2, 0x400, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x10001, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000940)={{}, 0x0, 0x1a, @inherit={0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000030000000000000001010000000000000180000000000000140000000000000080ffffffffffffff0600000000000000d30500000000000006000000000000000900000000000000030000000000000020"]}, @subvolid=0x4}) dup2(r5, 0xffffffffffffffff) 08:21:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000075d000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:21:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="dc97086ea95cb084db4c67e29e7240dd386614859e06402bfb88b6c8646fc558c100004eb1896d9f3f027f422cb17fdabb2d034b047fdbd518aa5e8e42c5869007e5e212f48e301fa09a2936cfec386b49a8d852c8630000000000000023a8db263a0d508aa408e2203abede435f8640a2ae98d73285e85fdf173dd641e46ef3ab476109fa78b9fec15e5899f7c68fe009b6a8"], 0x24}}, 0x14050880) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x3f}, 0x40100, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x113e}, 0x0, 0x2, 0xffffffffffffffff, 0x0) inotify_init1(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000007c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="00060000", @ANYRES16=r2, @ANYBLOB="00042dbd7000fbdbdf25390000000800f0af", @ANYRES32=0x0, @ANYBLOB="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"], 0x600}, 0x1, 0x0, 0x0, 0x5}, 0x20008001) socket(0x29, 0x800, 0xfffeffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001d40)={'syztnl1\x00', &(0x7f0000001f00)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x4, 0x200, 0x1, @local, @empty, 0x8000, 0x20, 0x0, 0x6f67e1e1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000002300)={'syztnl1\x00', &(0x7f0000002280)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x1, 0x8, 0x40, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7, 0xcc2, 0xfffffffa}}) 08:21:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) 08:21:18 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000200)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x66, {0x2, 0x4e22, @broadcast}, 'veth0_to_batadv\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth0_virt_wifi\x00'}) flock(r2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', r3, 0x2f, 0x80, 0x9, 0x1, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7, 0x401, 0xfffffa0e}}) syz_open_dev$hiddev(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x2}, 0x59060}, 0x0, 0x5, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0xfffd, &(0x7f00000002c0)=0x2) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000080)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 08:21:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 73) 08:21:18 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x6, r0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe, r3) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x9bbb) 08:21:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100008600000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:21:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x1, 0x0) [ 1770.815796] FAULT_INJECTION: forcing a failure. [ 1770.815796] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.818417] CPU: 0 PID: 11278 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1770.819283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.820304] Call Trace: [ 1770.820656] dump_stack+0x107/0x167 [ 1770.821150] should_fail.cold+0x5/0xa [ 1770.821639] ? __kernfs_new_node+0xd4/0x860 [ 1770.822231] should_failslab+0x5/0x20 [ 1770.822714] kmem_cache_alloc+0x5b/0x310 [ 1770.823237] __kernfs_new_node+0xd4/0x860 [ 1770.823748] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1770.824332] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1770.824945] ? wait_for_completion_io+0x270/0x270 [ 1770.829734] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1770.830483] kernfs_new_node+0x93/0x120 [ 1770.831019] __kernfs_create_file+0x51/0x350 [ 1770.831615] sysfs_add_file_mode_ns+0x221/0x560 [ 1770.832303] internal_create_group+0x324/0xb30 [ 1770.832883] ? sysfs_remove_group+0x170/0x170 [ 1770.833527] ? kernfs_name_hash+0xe7/0x110 [ 1770.834061] ? kernfs_find_ns+0x256/0x380 [ 1770.834640] sysfs_slab_add+0x188/0x200 [ 1770.835147] __kmem_cache_create+0x3db/0x520 [ 1770.835792] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1770.836465] p9_client_create+0xc2b/0x11c0 [ 1770.837043] ? p9_client_flush+0x430/0x430 [ 1770.837642] ? trace_hardirqs_on+0x5b/0x180 [ 1770.838235] ? lockdep_init_map_type+0x2c7/0x780 [ 1770.838840] ? __raw_spin_lock_init+0x36/0x110 [ 1770.839471] v9fs_session_init+0x1dd/0x1680 [ 1770.840012] ? lock_release+0x680/0x680 [ 1770.840602] ? kmem_cache_alloc_trace+0x151/0x320 [ 1770.841279] ? v9fs_show_options+0x690/0x690 [ 1770.841839] ? trace_hardirqs_on+0x5b/0x180 [ 1770.842438] ? kasan_unpoison_shadow+0x33/0x50 [ 1770.843016] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.843711] v9fs_mount+0x79/0x8f0 [ 1770.844163] ? v9fs_write_inode+0x60/0x60 [ 1770.844734] legacy_get_tree+0x105/0x220 [ 1770.845355] vfs_get_tree+0x8e/0x300 [ 1770.845844] path_mount+0x13be/0x20b0 [ 1770.846373] ? strncpy_from_user+0x9e/0x470 [ 1770.846957] ? finish_automount+0xa90/0xa90 [ 1770.847584] ? getname_flags.part.0+0x1dd/0x4f0 [ 1770.848166] ? _copy_from_user+0xfb/0x1b0 [ 1770.848743] __x64_sys_mount+0x282/0x300 [ 1770.849323] ? copy_mnt_ns+0xa00/0xa00 [ 1770.849815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.850555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.851238] do_syscall_64+0x33/0x40 [ 1770.851701] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1770.852409] RIP: 0033:0x7fef9ce93b19 [ 1770.852915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.855350] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1770.856334] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1770.857323] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1770.858301] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1770.859260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.860146] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1770.866836] nfs4: Unknown parameter '$' 08:21:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000075f000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:21:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400000024001f0000000000000000000000001004"], 0x24}}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x4b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4) [ 1770.933954] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1770.935359] CPU: 0 PID: 11278 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1770.936298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.937399] Call Trace: [ 1770.937743] dump_stack+0x107/0x167 [ 1770.938256] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1770.938924] p9_client_create+0xc2b/0x11c0 [ 1770.939527] ? p9_client_flush+0x430/0x430 [ 1770.940052] ? trace_hardirqs_on+0x5b/0x180 [ 1770.940657] ? lockdep_init_map_type+0x2c7/0x780 [ 1770.941322] ? __raw_spin_lock_init+0x36/0x110 [ 1770.941904] v9fs_session_init+0x1dd/0x1680 [ 1770.942502] ? lock_release+0x680/0x680 [ 1770.943017] ? kmem_cache_alloc_trace+0x151/0x320 [ 1770.943667] ? v9fs_show_options+0x690/0x690 [ 1770.944339] ? trace_hardirqs_on+0x5b/0x180 [ 1770.944882] ? kasan_unpoison_shadow+0x33/0x50 [ 1770.945571] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.946258] v9fs_mount+0x79/0x8f0 [ 1770.946714] ? v9fs_write_inode+0x60/0x60 [ 1770.947288] legacy_get_tree+0x105/0x220 [ 1770.947802] vfs_get_tree+0x8e/0x300 [ 1770.948329] path_mount+0x13be/0x20b0 [ 1770.948815] ? strncpy_from_user+0x9e/0x470 [ 1770.949489] ? finish_automount+0xa90/0xa90 [ 1770.950032] ? getname_flags.part.0+0x1dd/0x4f0 [ 1770.950714] ? _copy_from_user+0xfb/0x1b0 [ 1770.951295] __x64_sys_mount+0x282/0x300 [ 1770.951809] ? copy_mnt_ns+0xa00/0xa00 [ 1770.952356] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.953010] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.953760] do_syscall_64+0x33/0x40 [ 1770.954312] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1770.954932] RIP: 0033:0x7fef9ce93b19 [ 1770.955495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.957874] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1770.958917] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1770.959858] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1770.960802] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1770.961786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.962728] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:21:18 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000200)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x66, {0x2, 0x4e22, @broadcast}, 'veth0_to_batadv\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth0_virt_wifi\x00'}) flock(r2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', r3, 0x2f, 0x80, 0x9, 0x1, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7, 0x401, 0xfffffa0e}}) syz_open_dev$hiddev(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x2}, 0x59060}, 0x0, 0x5, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0xfffd, &(0x7f00000002c0)=0x2) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000080)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 08:21:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 74) 08:21:18 executing program 4: stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2820, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix,access=user,fscache,version=9p2000.u,loose,dfltuid=', @ANYRESHEX=r0, @ANYBLOB=',loose,dfltuid=', @ANYRESHEX=r0, @ANYBLOB="2c64652b1ccda15537841dd28da11bb36275673d30783030303030304b8d3030304c6bd151023d099e6673636f6e746578743d73746166665f752c6f626a5f747970653d407b7b7b2b5e24"]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(0xffffffffffffffff, r2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/223, 0xdf}], 0x1, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x121) statx(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x0, 0x200, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000600), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x44000, &(0x7f0000000880)={'trans=virtio,', {[{@version_9p2000}, {@cachetag={'cachetag', 0x3d, '9p\x00'}}, {@cache_none}, {@cache_none}, {@cachetag={'cachetag', 0x3d, '\'-\x8b\x95(\'!@$\\$'}}, {@fscache}, {@loose}, {@debug={'debug', 0x3d, 0x54a89ec1}}, {@noextend}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_gt={'fowner>', r2}}]}}) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000580)={{0x1, r3, r1, r0, r4, 0x105}, 0x80000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80}) r6 = syz_io_uring_setup(0x6f14, &(0x7f0000000980), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/214, 0xd6}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="bc0000000100003127c11e5942860762cee18998e0a1595a0018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) sendfile(r7, r6, &(0x7f0000000640)=0x5, 0x2956ee1e) [ 1771.644631] FAULT_INJECTION: forcing a failure. [ 1771.644631] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.650430] CPU: 0 PID: 11313 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1771.657893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1771.658927] Call Trace: [ 1771.659274] dump_stack+0x107/0x167 [ 1771.659714] should_fail.cold+0x5/0xa [ 1771.660202] ? __kernfs_new_node+0xd4/0x860 [ 1771.660758] should_failslab+0x5/0x20 [ 1771.665276] kmem_cache_alloc+0x5b/0x310 [ 1771.665799] __kernfs_new_node+0xd4/0x860 [ 1771.666334] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1771.666942] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1771.667564] ? wait_for_completion_io+0x270/0x270 [ 1771.668178] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1771.668880] kernfs_new_node+0x93/0x120 [ 1771.669419] __kernfs_create_file+0x51/0x350 [ 1771.669986] sysfs_add_file_mode_ns+0x221/0x560 [ 1771.670588] internal_create_group+0x324/0xb30 [ 1771.671175] ? sysfs_remove_group+0x170/0x170 [ 1771.671743] ? kernfs_name_hash+0xe7/0x110 [ 1771.672283] ? kernfs_find_ns+0x256/0x380 [ 1771.672822] sysfs_slab_add+0x188/0x200 [ 1771.673365] __kmem_cache_create+0x3db/0x520 [ 1771.673933] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1771.674605] p9_client_create+0xc2b/0x11c0 [ 1771.675151] ? p9_client_flush+0x430/0x430 [ 1771.675734] ? trace_hardirqs_on+0x5b/0x180 [ 1771.676269] ? lockdep_init_map_type+0x2c7/0x780 [ 1771.676876] ? __raw_spin_lock_init+0x36/0x110 [ 1771.677506] v9fs_session_init+0x1dd/0x1680 [ 1771.678059] ? lock_release+0x680/0x680 [ 1771.678572] ? kmem_cache_alloc_trace+0x151/0x320 [ 1771.679183] ? v9fs_show_options+0x690/0x690 [ 1771.679753] ? trace_hardirqs_on+0x5b/0x180 [ 1771.680309] ? kasan_unpoison_shadow+0x33/0x50 [ 1771.680892] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1771.681585] v9fs_mount+0x79/0x8f0 [ 1771.682044] ? v9fs_write_inode+0x60/0x60 [ 1771.682618] legacy_get_tree+0x105/0x220 [ 1771.683142] vfs_get_tree+0x8e/0x300 [ 1771.683622] path_mount+0x13be/0x20b0 [ 1771.684117] ? strncpy_from_user+0x9e/0x470 [ 1771.684670] ? finish_automount+0xa90/0xa90 [ 1771.685241] ? getname_flags.part.0+0x1dd/0x4f0 [ 1771.685835] ? _copy_from_user+0xfb/0x1b0 [ 1771.686374] __x64_sys_mount+0x282/0x300 [ 1771.686894] ? copy_mnt_ns+0xa00/0xa00 [ 1771.687420] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1771.688082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1771.688864] do_syscall_64+0x33/0x40 [ 1771.689367] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1771.690018] RIP: 0033:0x7fef9ce93b19 [ 1771.690501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1771.692769] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1771.693751] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1771.694676] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1771.695575] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1771.696468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1771.697392] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1771.701584] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1771.702444] CPU: 0 PID: 11313 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1771.703342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1771.704386] Call Trace: [ 1771.704736] dump_stack+0x107/0x167 [ 1771.705228] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1771.705904] p9_client_create+0xc2b/0x11c0 [ 1771.706462] ? p9_client_flush+0x430/0x430 [ 1771.707015] ? trace_hardirqs_on+0x5b/0x180 [ 1771.707571] ? lockdep_init_map_type+0x2c7/0x780 [ 1771.708189] ? __raw_spin_lock_init+0x36/0x110 [ 1771.708806] v9fs_session_init+0x1dd/0x1680 [ 1771.709394] ? lock_release+0x680/0x680 [ 1771.709938] ? kmem_cache_alloc_trace+0x151/0x320 [ 1771.710541] ? v9fs_show_options+0x690/0x690 [ 1771.711105] ? trace_hardirqs_on+0x5b/0x180 [ 1771.711649] ? kasan_unpoison_shadow+0x33/0x50 [ 1771.712224] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1771.712867] v9fs_mount+0x79/0x8f0 [ 1771.713351] ? v9fs_write_inode+0x60/0x60 [ 1771.713877] legacy_get_tree+0x105/0x220 [ 1771.714396] vfs_get_tree+0x8e/0x300 [ 1771.714870] path_mount+0x13be/0x20b0 [ 1771.715378] ? strncpy_from_user+0x9e/0x470 [ 1771.715931] ? finish_automount+0xa90/0xa90 [ 1771.716459] ? getname_flags.part.0+0x1dd/0x4f0 [ 1771.717073] ? _copy_from_user+0xfb/0x1b0 [ 1771.717666] __x64_sys_mount+0x282/0x300 [ 1771.718187] ? copy_mnt_ns+0xa00/0xa00 [ 1771.718690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1771.719355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1771.720015] do_syscall_64+0x33/0x40 [ 1771.720494] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1771.721148] RIP: 0033:0x7fef9ce93b19 [ 1771.721696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1771.724030] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1771.725004] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1771.725944] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1771.726868] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1771.727815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1771.728770] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:21:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001200010000f000000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:21:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 75) 08:21:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)='I\f', 0x2}], 0x1}}, {{&(0x7f0000000700), 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x15, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x28}}], 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x20000000}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4008041) 08:21:36 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000761000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:21:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00}}], 0x1, 0x0) 08:21:36 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x17, 0x10001) openat(0xffffffffffffffff, 0x0, 0x80001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0xffffffffffffff65, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x17, 0x10001) renameat2(0xffffffffffffffff, 0x0, r2, 0x0, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="ea322ba8ac8f784a499745baa017af645d5489ef02ac709f8c2c76"]) 08:21:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='#\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20080, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x120) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x5, 0x4, 0x4b, 0x0, 0x0, 0xfff, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x75, 0x4, @perf_config_ext={0x6, 0x4}, 0x800, 0x9, 0x3f, 0x2, 0x101, 0x8, 0x5, 0x0, 0xb, 0x0, 0x9}, r2, 0xf, 0xffffffffffffffff, 0xd) 08:21:36 executing program 6: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, r4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r8, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xc480}, {}, {0xffffffffffffffff, 0x8008}, {0xffffffffffffffff, 0x401}, {r8}, {r0, 0xc28a}], 0x6, &(0x7f0000000180)={r9, r10+10000000}, &(0x7f00000001c0)={[0xffffffffffff8000]}, 0x8) 08:21:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100004003000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:21:36 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000763000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:21:36 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f800002000400000000000000000000100", 0x26}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011100)) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sendfile(r1, r2, 0x0, 0x100000001) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 08:21:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80}}], 0x1, 0x0) [ 1789.368677] FAULT_INJECTION: forcing a failure. [ 1789.368677] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.370631] CPU: 0 PID: 11328 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1789.371469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1789.372464] Call Trace: [ 1789.372799] dump_stack+0x107/0x167 [ 1789.373253] should_fail.cold+0x5/0xa [ 1789.373750] ? __kernfs_new_node+0xd4/0x860 [ 1789.374282] should_failslab+0x5/0x20 [ 1789.374749] kmem_cache_alloc+0x5b/0x310 [ 1789.375256] __kernfs_new_node+0xd4/0x860 [ 1789.375774] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1789.376363] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1789.376958] ? wait_for_completion_io+0x270/0x270 [ 1789.377572] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1789.378232] kernfs_new_node+0x93/0x120 [ 1789.378729] __kernfs_create_file+0x51/0x350 [ 1789.379275] sysfs_add_file_mode_ns+0x221/0x560 [ 1789.379860] internal_create_group+0x324/0xb30 [ 1789.380432] ? sysfs_remove_group+0x170/0x170 [ 1789.381030] ? kernfs_find_ns+0x256/0x380 [ 1789.381658] sysfs_slab_add+0x188/0x200 [ 1789.382714] __kmem_cache_create+0x3db/0x520 [ 1789.384041] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1789.385511] p9_client_create+0xc2b/0x11c0 [ 1789.386760] ? p9_client_flush+0x430/0x430 [ 1789.388016] ? trace_hardirqs_on+0x5b/0x180 [ 1789.389270] ? lockdep_init_map_type+0x2c7/0x780 [ 1789.390659] ? __raw_spin_lock_init+0x36/0x110 [ 1789.391990] v9fs_session_init+0x1dd/0x1680 [ 1789.393243] ? quarantine_reduce+0x18c/0x210 [ 1789.394522] ? v9fs_show_options+0x690/0x690 [ 1789.395816] ? trace_hardirqs_on+0x5b/0x180 [ 1789.397076] ? v9fs_write_inode+0x60/0x60 [ 1789.398292] ? quarantine_reduce+0x1ad/0x210 [ 1789.399562] ? kasan_unpoison_shadow+0x33/0x50 [ 1789.400887] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1789.402370] v9fs_mount+0x79/0x8f0 [ 1789.403408] ? v9fs_write_inode+0x60/0x60 [ 1789.404605] legacy_get_tree+0x105/0x220 [ 1789.405788] vfs_get_tree+0x8e/0x300 [ 1789.406878] path_mount+0x13be/0x20b0 [ 1789.407994] ? strncpy_from_user+0x9e/0x470 [ 1789.409236] ? finish_automount+0xa90/0xa90 [ 1789.410497] ? getname_flags.part.0+0x1dd/0x4f0 [ 1789.411839] ? _copy_from_user+0xfb/0x1b0 [ 1789.413053] __x64_sys_mount+0x282/0x300 [ 1789.414247] ? copy_mnt_ns+0xa00/0xa00 [ 1789.415418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1789.416936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1789.418446] do_syscall_64+0x33/0x40 [ 1789.419522] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1789.421014] RIP: 0033:0x7fef9ce93b19 [ 1789.422125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1789.427529] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1789.429753] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1789.431834] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1789.433915] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1789.435982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1789.438055] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1789.442550] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1789.445445] CPU: 1 PID: 11328 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1789.446508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1789.447644] Call Trace: [ 1789.448038] dump_stack+0x107/0x167 [ 1789.448563] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1789.449365] p9_client_create+0xc2b/0x11c0 [ 1789.450864] ? p9_client_flush+0x430/0x430 [ 1789.452167] ? trace_hardirqs_on+0x5b/0x180 [ 1789.453586] ? lockdep_init_map_type+0x2c7/0x780 [ 1789.455157] ? __raw_spin_lock_init+0x36/0x110 [ 1789.456604] v9fs_session_init+0x1dd/0x1680 [ 1789.457992] ? quarantine_reduce+0x18c/0x210 [ 1789.459515] ? v9fs_show_options+0x690/0x690 [ 1789.460933] ? trace_hardirqs_on+0x5b/0x180 [ 1789.464779] ? v9fs_write_inode+0x60/0x60 [ 1789.466235] ? quarantine_reduce+0x1ad/0x210 [ 1789.467692] ? kasan_unpoison_shadow+0x33/0x50 [ 1789.474340] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1789.475946] v9fs_mount+0x79/0x8f0 [ 1789.477025] ? v9fs_write_inode+0x60/0x60 [ 1789.478435] legacy_get_tree+0x105/0x220 [ 1789.479726] vfs_get_tree+0x8e/0x300 [ 1789.480961] path_mount+0x13be/0x20b0 [ 1789.482450] ? strncpy_from_user+0x9e/0x470 [ 1789.483889] ? finish_automount+0xa90/0xa90 [ 1789.485394] ? getname_flags.part.0+0x1dd/0x4f0 [ 1789.486906] ? _copy_from_user+0xfb/0x1b0 [ 1789.488278] __x64_sys_mount+0x282/0x300 [ 1789.489679] ? copy_mnt_ns+0xa00/0xa00 [ 1789.490953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1789.492975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1789.499511] do_syscall_64+0x33/0x40 [ 1789.501588] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1789.504438] RIP: 0033:0x7fef9ce93b19 [ 1789.506691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1789.513449] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 08:21:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0xffffff81, @empty, 0x8e33}, 0x1c) r4 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0) [ 1789.516074] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1789.525142] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1789.529385] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1789.534244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1789.537956] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:21:37 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 76) [ 1789.674138] 9pnet: Insufficient options for proto=fd [ 1789.735311] 9pnet: Insufficient options for proto=fd 08:21:37 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@private0, r0}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rpc\x00') readv(r2, &(0x7f0000002a80)=[{0x0}, {&(0x7f0000000840)=""/4080, 0xff0}], 0x2) sendmsg$nl_generic(r2, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x11c, 0x26, 0x400, 0x70bd2d, 0x25dfdbfb, {0x16}, [@generic="a2cb5b19dd21f54cf66d833b9b16c2202410695a07cb15d56156418587261129d62fe62c389bbd2dbf9208325925d8e16a13802de16f223f7c531a727382d11f1c1fb05b9014bd45aeb6db3ff47909707c4c048250a29111650d66e717fdb0a5baa68c5ddf81d7814d64cb5104f3032118131c4d6ff31b15a82fffd405b5afe1855c9db8d77c8dd92cbfefb3f143b191bea68940e14be45b73216ed1e9a2121426d4d3471dd87afea482016b0cbaec9b47889f26ffc07038bff1c7dcdb10ae1594e6e910057147119002415fdf494824236dff1ab7cdd25c1d1d519237cd1a25c0e033bff346fadb02a7251f48769b8f7f46dff0f13d1e59ba560dacb7c453", @generic, @generic="a1f22e497271c5d607"]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) fchmod(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x4}]}, 0x20}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000180)="a57a65569418c4b169dc2ce2544416015726d1e40b48da4ae6276398a6ec06ddd7c8e0becb7072fc59067e99eec3f4b0fd50ffe9c5674b23532fa7d0d12b0d152267494e19a87f0232a87623e24808b265c489589e7c2be9db983c766b6feda6f58ff5b9ce3cf38f5bcb6f1542f059aace9cea2aaffebb28676f1c69d64d68cc6b0e05e7f8b8b3298b9ede8a893fd8388c9b", 0x92}, {&(0x7f0000000240)="c98a349acc08306206bf76687a8d1223f6007b1959863c94486456249d31e77d97500ae050097588fc08f00aafffd58bedee4632c5c29f685652d5921781160f910c6c67ae2b28984395f182c3ae7959162dfd562e00f2fdbccf0b9b59b6bcc9ff6d5646dbc64668b96530eb25533524a1fa01a92998d902149f2652dae988be52893dfc9d845f096143301fd233febb1f810154efd749665b8702", 0x9b}, {&(0x7f0000000300)="f754c102d2a01d5b5818de2063894df04ff306f683c072ae5769fb75c1269bc2ebfd54b707f584970d81e95a8afc999f027b2206ecc3eea642274fbb053dd8ed6e8bbe5b6e088f14b7caced5e42284eeac5c231751da4e535b8bae45153235fc23f0875ed8c87af402454c8eae800e194ea23899067c5eb59f2f21f24258dc9d9df1408d2036125fd80b990b16160bd5b855764b722358d53d09331d8b8be54fda2f23684d090f56b1e87f23b0e79b33a4452998966fb3baf1c5ffbb2a51f4a98f221207a772a6bb80e8e4ce6ccd3065a5ba7e2518440acf1e6f0ed8461c6c26da", 0xe1}, {&(0x7f0000000400)="69880fe6a9ec76b06df624f4d5ff0c6e1c2603b3ceeb227cf849daf22163699955dae5035cd212f47d6e4875e76919c2139e2bfad81dbe38fbce62eff2a14e1a57c96e0c5ef8048e1b3b8bf15703c20620e42167eb5198eab1b0cd7eab4a556ced1426874c2e2d2c92ce1d97b8defdbab5748729027bbf7ed334226db413a7476b80821e258798c4677d7b8315cc6f8a90803f9ed64b4efff4720966b8cbce21749fb8d4210f1dc7e7d14e966cd9e5d0e8eca6", 0xb3}, {&(0x7f00000004c0)="6544d9b2013684b6119eb2e23fc1ac8a7200889991cd4893e24cf4ebe899dff1c1b8af4b3adfce6ed05e336378e31df8847624a5de07cd85228e2000f8e34fc84d3af209fe18e33d0b8805694d80571b78ffe3f61b41b2c7c990e52e4baf4eff3f4b4285783a03660b78d5cb522c4b128114febbf7534c389166f083dbd80019a11e90d624053ee6d67008ef6572629283ef2420219814939c50c38161470f72972ae0f52413afaa8dff02be6981714c95c80983e4cc39cacb56c1ddec70eda8b630c86db015eb79e1", 0xc9}], 0x5) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0xf) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1789.989789] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:21:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0}}], 0x1, 0x0) 08:21:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000008000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1790.200525] FAULT_INJECTION: forcing a failure. [ 1790.200525] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.204724] CPU: 0 PID: 11366 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1790.206923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1790.209536] Call Trace: [ 1790.210381] dump_stack+0x107/0x167 [ 1790.211545] should_fail.cold+0x5/0xa [ 1790.212752] ? create_object.isra.0+0x3a/0xa20 [ 1790.214264] should_failslab+0x5/0x20 [ 1790.215454] kmem_cache_alloc+0x5b/0x310 [ 1790.216701] create_object.isra.0+0x3a/0xa20 [ 1790.218108] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1790.219680] kmem_cache_alloc+0x159/0x310 [ 1790.220977] __kernfs_new_node+0xd4/0x860 [ 1790.222249] ? trace_hardirqs_on+0x5b/0x180 [ 1790.223532] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1790.224999] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1790.226517] ? wait_for_completion_io+0x270/0x270 [ 1790.228005] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1790.229673] kernfs_new_node+0x93/0x120 [ 1790.230922] __kernfs_create_file+0x51/0x350 [ 1790.232257] sysfs_add_file_mode_ns+0x221/0x560 [ 1790.233713] internal_create_group+0x324/0xb30 [ 1790.235141] ? sysfs_remove_group+0x170/0x170 [ 1790.236534] ? kernfs_name_hash+0xe7/0x110 [ 1790.237800] ? kernfs_find_ns+0x256/0x380 [ 1790.238943] sysfs_slab_add+0x188/0x200 [ 1790.240170] __kmem_cache_create+0x3db/0x520 [ 1790.241550] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1790.242919] p9_client_create+0xc2b/0x11c0 [ 1790.244163] ? p9_client_flush+0x430/0x430 [ 1790.245521] ? trace_hardirqs_on+0x5b/0x180 [ 1790.246818] ? lockdep_init_map_type+0x2c7/0x780 [ 1790.248254] ? __raw_spin_lock_init+0x36/0x110 [ 1790.249684] v9fs_session_init+0x1dd/0x1680 [ 1790.250943] ? lock_release+0x680/0x680 [ 1790.252109] ? kmem_cache_alloc_trace+0x151/0x320 [ 1790.253609] ? v9fs_show_options+0x690/0x690 [ 1790.254979] ? trace_hardirqs_on+0x5b/0x180 [ 1790.256401] ? kasan_unpoison_shadow+0x33/0x50 [ 1790.258066] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1790.259739] v9fs_mount+0x79/0x8f0 [ 1790.260830] ? v9fs_write_inode+0x60/0x60 [ 1790.262091] legacy_get_tree+0x105/0x220 [ 1790.263285] vfs_get_tree+0x8e/0x300 [ 1790.264407] path_mount+0x13be/0x20b0 [ 1790.265602] ? strncpy_from_user+0x9e/0x470 [ 1790.266906] ? finish_automount+0xa90/0xa90 [ 1790.268185] ? getname_flags.part.0+0x1dd/0x4f0 [ 1790.269599] ? _copy_from_user+0xfb/0x1b0 [ 1790.270906] __x64_sys_mount+0x282/0x300 [ 1790.272129] ? copy_mnt_ns+0xa00/0xa00 [ 1790.273309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1790.274904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1790.276481] do_syscall_64+0x33/0x40 [ 1790.277649] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1790.279199] RIP: 0033:0x7fef9ce93b19 [ 1790.280300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1790.285671] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1790.288013] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1790.290187] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1790.292354] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1790.294546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1790.296652] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1790.307481] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:21:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}}], 0x1, 0x0) 08:21:53 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000765000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:21:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000340000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:21:53 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc0000001e00852e000000000000000000000000080000000000000008121bea", @ANYRES32=0x0, @ANYBLOB="d8e1b95d7093b2a4c0df9804000000cac5c525ce503c89652c95ec4319edba7c3920007e0e3eaffcca2e6f91000000000000009d23359eb148938043833c394cc87ac45d1286d4848367a739468ccbc5fa8286e4b1e055977e5c936f4434acb3f87b303c34dab72bd87f070600000090d9f2dfaf6f2571dcd8a553fefeeb0900a308d9c8afc60ec6d46f46b9f7ef23fd730ea9931c1ed9e9"], 0xbc}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_io_uring_setup(0x1433, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000001300)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) fallocate(r2, 0x4, 0x7, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xa5) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x20000000000081}}, r4, 0x0, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x33c, 0x42, 0x100, 0x70bd2c, 0x25dfdbfd, {0x1}, [@generic="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", @nested={0x58, 0x4d, 0x0, 0x1, [@generic="4f23409c8871553dd72e4263384d3d20f6f0949a0d72b1b5d1ad7c4ab50dfdc576bc6cc3b2bf4dfeb6ea4f01b989df8f734a735c", @typed={0x8, 0x25, 0x0, 0x0, @pid}, @typed={0x8, 0x43, 0x0, 0x0, @pid=r4}, @typed={0xc, 0x27, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x4, 0xf}]}, @nested={0x179, 0x32, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="7dac03b7dce52c687d6355b4002f7d5efd53b3e2237c08f77891131bae1cb881232f15e6881887ec83d89f467fa6202e28db6bc4309efc854986e9c80963a1a4452d87a623aff31262d1de7320d754a5ec54da669e5fcada05b2d231e3727510b76ced8c83165a72d230ce6ff57075fa604f0c49974276f44ba4261a", @generic="01f380dcff4a8b8017f90983c38f4ef8fcba7c351a965caebb31fbab244f907988bb05f573176521d911c16c84505887d176cd378d129c92da2502e464e9028b18b46dbbd1a5641790e6f2c001a1c5cf5e1ca5a4e69b8662952c72d22e4e1f6ad3985a75c6a854782fe21722d98dacc67584ec00a614091103c71f894a82c8b3cce6dc60e46ea5bac2550a5f24f927fc7814c0d5d0d0b33dffa843ceada6c06c3adbdcbbe1c07736825f01f166c7bc0ff4f57525194259eb422db88687bd8b0f9888ac7ec1b88ecec0d3bc19c0a29ac0948fcedde1f300ff62d0218c833019650e62c4f231813d5a7b19eaa7029a2fd3b5"]}, @generic="00b67d182cf90f08d1f0fde0dfa7ecb19088f0a963629c536755830e2eff6ddf835292fa07b59dd11104304dcb90114d2d0c1474fcb7b0556011c7cff38ac1eb96f6f1200d647cefd66d3e20852638d81a6e0f"]}, 0x33c}, 0x1, 0x0, 0x0, 0x4048004}, 0x84) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1081030000000000) 08:21:53 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2000, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 08:21:53 executing program 4: socket$inet(0xa, 0x3, 0xff) epoll_create(0x4) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) fchmod(r1, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "e0175f2e294d09000000010000000dd0e285657698b18800004000", [0x2, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00 \b\x00\x00\x00\x00\x00\x00\x00\x00{', @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"]) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000040)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc6a07, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x2f, 0x0) syz_io_uring_setup(0x3167, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000340)=0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) socket$inet(0x2, 0xa, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0) 08:21:53 executing program 3: ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x400) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x482242, 0x4) sendfile(r0, r2, 0x0, 0x100000007) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "77d91397e4fffb9f6b2c10a70016a4a78e0dd0e27ec67698b18800", [0xff, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000940)=ANY=[@ANYBLOB="77e27dc2ba1ed01309e0e0f10a68c8429ccb5ade655c0119f06ebe000000182000005bda290af07f", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r4, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x9}}, './file1\x00'}) 08:21:53 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 77) [ 1806.373272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1806.409407] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.6'. 08:21:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) [ 1806.463745] FAULT_INJECTION: forcing a failure. [ 1806.463745] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.466441] CPU: 1 PID: 11389 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1806.467487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1806.468709] Call Trace: [ 1806.469108] dump_stack+0x107/0x167 [ 1806.469663] should_fail.cold+0x5/0xa [ 1806.470223] ? __kernfs_new_node+0xd4/0x860 [ 1806.470865] should_failslab+0x5/0x20 [ 1806.471451] kmem_cache_alloc+0x5b/0x310 [ 1806.472081] __kernfs_new_node+0xd4/0x860 [ 1806.472702] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1806.473426] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1806.486011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1806.487283] ? wait_for_completion_io+0x270/0x270 [ 1806.488013] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1806.488813] kernfs_new_node+0x93/0x120 [ 1806.489436] __kernfs_create_file+0x51/0x350 [ 1806.490446] sysfs_add_file_mode_ns+0x221/0x560 [ 1806.491166] internal_create_group+0x324/0xb30 [ 1806.491859] ? sysfs_remove_group+0x170/0x170 [ 1806.492538] ? kernfs_name_hash+0xe7/0x110 [ 1806.493164] ? kernfs_find_ns+0x256/0x380 [ 1806.493822] sysfs_slab_add+0x188/0x200 [ 1806.494432] __kmem_cache_create+0x3db/0x520 [ 1806.495140] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1806.495906] p9_client_create+0xc2b/0x11c0 [ 1806.496587] ? p9_client_flush+0x430/0x430 [ 1806.497238] ? trace_hardirqs_on+0x5b/0x180 [ 1806.497916] ? lockdep_init_map_type+0x2c7/0x780 [ 1806.498639] ? __raw_spin_lock_init+0x36/0x110 [ 1806.499364] v9fs_session_init+0x1dd/0x1680 [ 1806.500033] ? lock_release+0x680/0x680 [ 1806.500676] ? kmem_cache_alloc_trace+0x151/0x320 [ 1806.501402] ? v9fs_show_options+0x690/0x690 [ 1806.502105] ? trace_hardirqs_on+0x5b/0x180 [ 1806.502776] ? kasan_unpoison_shadow+0x33/0x50 [ 1806.503491] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1806.504296] v9fs_mount+0x79/0x8f0 [ 1806.504839] ? v9fs_write_inode+0x60/0x60 [ 1806.505466] legacy_get_tree+0x105/0x220 [ 1806.506102] vfs_get_tree+0x8e/0x300 [ 1806.506655] path_mount+0x13be/0x20b0 [ 1806.507246] ? strncpy_from_user+0x9e/0x470 [ 1806.507888] ? finish_automount+0xa90/0xa90 [ 1806.508547] ? getname_flags.part.0+0x1dd/0x4f0 [ 1806.509265] ? _copy_from_user+0xfb/0x1b0 [ 1806.509928] __x64_sys_mount+0x282/0x300 [ 1806.510540] ? copy_mnt_ns+0xa00/0xa00 [ 1806.511165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1806.511955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1806.512744] do_syscall_64+0x33/0x40 [ 1806.513311] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1806.514096] RIP: 0033:0x7fef9ce93b19 [ 1806.514650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1806.517412] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1806.517429] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1806.517438] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1806.517447] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1806.517455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1806.517464] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1806.530771] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1806.532395] CPU: 1 PID: 11389 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1806.533742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1806.535283] Call Trace: [ 1806.535678] dump_stack+0x107/0x167 [ 1806.536296] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1806.537176] p9_client_create+0xc2b/0x11c0 [ 1806.537897] ? p9_client_flush+0x430/0x430 [ 1806.538535] ? trace_hardirqs_on+0x5b/0x180 [ 1806.539252] ? lockdep_init_map_type+0x2c7/0x780 [ 1806.540036] ? __raw_spin_lock_init+0x36/0x110 [ 1806.540899] v9fs_session_init+0x1dd/0x1680 [ 1806.541568] ? lock_release+0x680/0x680 [ 1806.542269] ? kmem_cache_alloc_trace+0x151/0x320 [ 1806.543045] ? v9fs_show_options+0x690/0x690 [ 1806.543903] ? trace_hardirqs_on+0x5b/0x180 [ 1806.544684] ? kasan_unpoison_shadow+0x33/0x50 [ 1806.545557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1806.546482] v9fs_mount+0x79/0x8f0 [ 1806.547172] ? v9fs_write_inode+0x60/0x60 [ 1806.547912] legacy_get_tree+0x105/0x220 [ 1806.548681] vfs_get_tree+0x8e/0x300 [ 1806.549351] path_mount+0x13be/0x20b0 [ 1806.550121] ? strncpy_from_user+0x9e/0x470 [ 1806.551011] ? finish_automount+0xa90/0xa90 [ 1806.551722] ? getname_flags.part.0+0x1dd/0x4f0 [ 1806.552570] ? _copy_from_user+0xfb/0x1b0 [ 1806.553495] __x64_sys_mount+0x282/0x300 [ 1806.554278] ? copy_mnt_ns+0xa00/0xa00 [ 1806.555029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1806.555866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1806.556637] do_syscall_64+0x33/0x40 [ 1806.557364] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1806.558370] RIP: 0033:0x7fef9ce93b19 [ 1806.559045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1806.562262] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1806.563430] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1806.564400] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1806.565389] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1806.566462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1806.567958] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:21:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100ffffc9000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:21:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000767000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1806.650979] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.6'. 08:21:54 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 08:21:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100fffff0000000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:21:54 executing program 6: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mbind(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x7fffffff, 0x4, 0x2) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() 08:21:54 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 78) [ 1807.004894] FAULT_INJECTION: forcing a failure. [ 1807.004894] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.006768] CPU: 0 PID: 11428 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1807.007838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1807.009099] Call Trace: [ 1807.009501] dump_stack+0x107/0x167 [ 1807.010099] should_fail.cold+0x5/0xa [ 1807.010691] ? create_object.isra.0+0x3a/0xa20 [ 1807.011375] should_failslab+0x5/0x20 [ 1807.011953] kmem_cache_alloc+0x5b/0x310 [ 1807.012581] create_object.isra.0+0x3a/0xa20 [ 1807.013279] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1807.014107] kmem_cache_alloc+0x159/0x310 [ 1807.014753] __kernfs_new_node+0xd4/0x860 [ 1807.015384] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1807.016102] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1807.016829] ? wait_for_completion_io+0x270/0x270 [ 1807.017575] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1807.018400] kernfs_new_node+0x93/0x120 [ 1807.019027] __kernfs_create_file+0x51/0x350 [ 1807.019692] sysfs_add_file_mode_ns+0x221/0x560 [ 1807.020412] internal_create_group+0x324/0xb30 [ 1807.021127] ? sysfs_remove_group+0x170/0x170 [ 1807.021805] ? kernfs_name_hash+0xe7/0x110 [ 1807.022441] ? kernfs_find_ns+0x256/0x380 [ 1807.023078] sysfs_slab_add+0x188/0x200 [ 1807.023684] __kmem_cache_create+0x3db/0x520 [ 1807.024358] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1807.025126] p9_client_create+0xc2b/0x11c0 [ 1807.025796] ? p9_client_flush+0x430/0x430 [ 1807.026450] ? trace_hardirqs_on+0x5b/0x180 [ 1807.027115] ? lockdep_init_map_type+0x2c7/0x780 [ 1807.027839] ? __raw_spin_lock_init+0x36/0x110 [ 1807.028538] v9fs_session_init+0x1dd/0x1680 [ 1807.029193] ? lock_release+0x680/0x680 [ 1807.029820] ? kmem_cache_alloc_trace+0x151/0x320 [ 1807.030540] ? v9fs_show_options+0x690/0x690 [ 1807.031228] ? trace_hardirqs_on+0x5b/0x180 [ 1807.031888] ? kasan_unpoison_shadow+0x33/0x50 [ 1807.032580] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1807.033380] v9fs_mount+0x79/0x8f0 [ 1807.033944] ? v9fs_write_inode+0x60/0x60 [ 1807.034578] legacy_get_tree+0x105/0x220 [ 1807.035199] vfs_get_tree+0x8e/0x300 [ 1807.035766] path_mount+0x13be/0x20b0 [ 1807.036364] ? strncpy_from_user+0x9e/0x470 [ 1807.037025] ? finish_automount+0xa90/0xa90 [ 1807.037685] ? getname_flags.part.0+0x1dd/0x4f0 [ 1807.038379] ? _copy_from_user+0xfb/0x1b0 [ 1807.039014] __x64_sys_mount+0x282/0x300 [ 1807.039614] ? copy_mnt_ns+0xa00/0xa00 [ 1807.040223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1807.041011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1807.041792] do_syscall_64+0x33/0x40 [ 1807.042374] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1807.043148] RIP: 0033:0x7fef9ce93b19 [ 1807.043705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1807.046495] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1807.047662] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1807.048738] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1807.049814] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1807.050884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1807.051948] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:22:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 79) 08:22:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 08:22:10 executing program 6: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) fallocate(r2, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) renameat2(r3, 0x0, r0, &(0x7f00000000c0)='./file1\x00', 0x9) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x3, &(0x7f0000001340)=[{0x0}, {0x0}, {&(0x7f0000001240)}], 0x10058, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x4840, 0x2d) sendfile(r1, r4, 0x0, 0x100000001) utimes(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{0x77359400}}) 08:22:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000010000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:22:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000769000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:22:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xe000000000000000) 08:22:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r4, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) sendmsg$inet6(r4, &(0x7f0000000640)={&(0x7f0000000040)={0xa, 0x4e24, 0x40, @local, 0x2c}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000016c0)="76786fbe578e3a3286fd276f7097c556ae10dbc7fcd690e2bda227d4953aea2bcc7ff7639c70004ab22d5db20f7480b514d306a72d26cf1686f910ca9da14f7f12ac53ecc34835432d08b4f04df4bf3c1d5040fbd7f2dc534753ee80f103e628576a3e2566189c73ec9a77222f403e0b67df8ffbb050b768c9eaee9da1d9195c174b3c47c1311cf4717107d2598fae9daa906a7085852aa228c5cbbb300001da18f4446d940c44693083591ec553297d48467dc6abbe7fa8a3b9f8c89d7cf1709ba6b22c469892038969b60cc29224226808d5e0", 0xd4}, {&(0x7f0000001e00)="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", 0x1064}, {&(0x7f0000000180)="43fbfb799fccf56eabb1e30aedbbbbf220140d28adab1b530778bceddd50a15a167c27e65a9b45c0486872e10e9722648fc47295a71f8f2e441f4185c093935dbf0e85cacede8c7d8466964d8f8862fbc375b91b1b0f3c6056555880057d82f2e17887719150b8f861f0a1d72e3e8dd9a32c821d71eb94f602024be69b8785b1e092fb9ec11992b7795f88be5df689fe80865be599a84a64c9ee0ecb1d146e3dde19654c8336438e61eb5ce1473807249b5f6f4357083dc2de9194d1792bf3a42321ab0ba60effd004b682c0d19169c9c2134a504b17dc7d19eb922718c348", 0xdf}, {&(0x7f0000000280)="6dea105b03d694a2654c23defeba877931499793a56bbb68bf68862382e101356940e69eb178b99ce099f273fdc6a7f7bb809f84c55ca3d77bef8b8912aeac85f1dd7715324c00cd614250754aecc8343c47987f3a1354fd5518663ebe566141a918c96851c29c6cd639a8", 0x6b}, {&(0x7f0000000300)="a97253bcf0977f6e6c6dc7f001e4eec12402f3712eb0283e0aaa0d2121332614cb0d0d8ea8451c", 0x27}, {&(0x7f0000000440)="724f053d8a360908ef262e38a63784dd9663286276a68b039391135a3744a68f0106177c8e1594f3959577b00c76c05fd070bc4081d17d1923d30b0a079c55e497a144127fb37cdbd2be9d2cea45307eba15b45efc4f059966769bf16378e3a3684449e9742793cc66a7aa64d199bd9b166b372a9b52cf9e42b84077ac9a9025c8168fe543eb89e5d786aa9c53b3e0764fdadde1312573c6518a1e9356b1bbcdfacd53031df7ddc0c13473f35b", 0xad}], 0x6, &(0x7f0000000940)=[@tclass={{0x14, 0x29, 0x43, 0xffffffff}}, @rthdr={{0x38, 0x29, 0x39, {0x78, 0x4, 0x0, 0x80, 0x0, [@local, @local]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0x20}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3ff}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000000}}], 0x98}, 0x40080) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c045503006f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da", 0x30}], 0x2) 08:22:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) sendmmsg$inet6(r2, &(0x7f0000001f00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x7, @mcast2, 0x64c}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000640)="acaf469dc2b7e5a0e98332b42e93ed31abf290fa03dd01fd8a19cb63ad69594217a145550a4169ba88e1d4150e5ef4fbb25ff25728ec6d7118893f33f2c290539cbaf22026ec9ec1d216b1a85fe9c6dd43dbfbb1e1a568a3013ec5bcbd046154ea2b13d814b60f95ef83fd562a02fe0371642a4542f1a85f664471fd768cb63cd68bc00edc34546974049152bcb9190ae9a3153995a5d038e7efa514cbe76861f6599c3471c4462e7000eccbd8a151333c18edeb97046e9d841bdd2812", 0xbd}, {&(0x7f0000000700)="158988e142d4cf32227ce4b9862d149e0b232d95ba989de0cb7482126daf3836f7d1f6ee8aac5fdfe6f266f34171ed5666de475a9ab32193fcd4c26754f2deb873032295a6320ccf577265d07ec334f420ae26750c8f4aba4171425ec95162c992dc4ea77ba1f000b46ede2f716ba90034510ea1c30fadcbf042e8c95cd3fdde83a1f0b910f67cb339255ef6ce7a0d479edcda9efa96c223fa97844c5f04dca29068d59a1d8eb073b40617ebdd439d57291b", 0xb2}, {&(0x7f00000007c0)="70fb1018a4bd8e6254af4b813055", 0xe}, {&(0x7f0000000800)="365b7f1d3e180d8061752df854f5dcd487f9f796b8f4d9ab27dda3d0589d2e3cb4db7fd0249654c12fb2d1b17d4368c46eb608adf168da9ad3317bf3c50694c537db3ff1a36b40ea09306c4b60c5a56cebb23743ac8d5ce2e2a79f02ec4a3baabec844f7cc70e9cc04a0fc2962bb6ea6de0368d8c3d5bbe059cbedf116eeb22100830465bac7e9c38b22e632ffca1936926a0c60484a397a54f1a3b06ed91afce66c55", 0xa3}, {&(0x7f00000008c0)="c04accfe92c7df6c8dca6a820663788ded299bd463c386fc135669eccd918af33fec88545f357f16d6b32e0d51cc5ae6403538b9f6e5799d55e036aca72d4bb3df4c3688952162d8781f8c3b8d8069c5553785b5f96e71d343782a83f1ecb9cbec575062aa73877e79d2144ee4be5031da9dd4fd2f", 0x75}, {&(0x7f0000000940)="e17a96590fa83e17de9f886bb89e81394396dfb519458ce19bb61619dde58a92fa78595e3a06041c6ad89d4596a63808f73d259d20b1ee19f8f726dfbb2c5a3dfaf9d560b6c896694775eccb4ab43c81ef0ce2a6b8ea0b9857522dfaf9985ed37fb4d44e0455a49c770d1495e4dbddadf320be849ee28dcd422f", 0x7a}], 0x6}}, {{&(0x7f0000000a40)={0xa, 0x4e23, 0x401, @local, 0xe6c}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000000a80)="f880c4cf89b56a19edaa51746c57b9ffdb7f01b3aa1d20b034e965c18ff9dee61da5fc58", 0x24}, {&(0x7f0000000ac0)="48e3838580b79dd8a9752a58681d5a862da09b781de98c14054216c865e3c9de79691f40aa", 0x25}, {&(0x7f0000000b00)="30fe37b906081034e2f1431ac6dab6169fea35d3049a2c9774f5854e7343b51face8e473d90abe1311a49d90f094f59e1cbb4219d38d399fc8f40994bc31306a24390e3f34a6e79802f5887202f79566711a241f75ec349dac2d98a4bb5fcafb9a596c54d81022361181f3cdf76ebd6f156e528f9ba3526bbea4e86276dc8160598604ffab77dcc697ee6bddfcf5bd7f364a3f8f88aae172722afcfe76424ecdb74c5fe2ec0d34b9ae8a9ba0f7947e76b05af5b762021a81d2308021a9ac483e2529997dee32442311f7f0122a3742139a59a76df2c999cf42b0", 0xda}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="e676cd6524b9809b4bb908d08aa453651044f5b93fb2cadfccab9f265c5eac9c4c859e5e6e65561935ace6f6ff139d5a17a0091d3ce12885f0111109d2a544bf2b3fe8b65f", 0x45}, {&(0x7f0000001c80)="7023563445930e0782359f2d93d9c1c4177e5352fe97cefbc6632ec15ea2d107cff3ce98468ba1b54f894cb6d3011d5e05606ec35af66a5a0d235d9d63a9e3ac16042fdf5fae4476a41b4f70a4e0b04bce7ae0dd583483a54325dfa314e9b9a868509a5c30b91c60b736d8243f88cb8925638ee51f92db76ba24419b80f5cba16fbc199411fcd60d6e4fe594f0747de674d0327b87a46b276db423f28c2de42f26ba585eca8770aef1a91dfa93d151381ef22104fa42b62536aa66fd1a433285fbb0edffb49c", 0xc6}], 0x6, &(0x7f0000001e80)=[@tclass={{0x14, 0x29, 0x43, 0x100}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x4, 0x8, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x5, 0x0, [0x3560ca42]}}]}}}], 0x78}}], 0x2, 0x40000) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_io_uring_complete(0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="2df9adc074348a737e16a7770f2d1f250fbfe8ab80890f04af5d7528acb120da25"]) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000600)={0xa, 0x4e23, 0xfffffffc, @mcast1}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="53f6d5178acd91ff03374dd30d4b3794ab5e3bf94d3a40680af738b94f19e2b172049f8cba51b8", 0x27}, {&(0x7f0000000200)="b183be44e3bd081da4aa72d5bbe8f1b4bf18af3798517f6e451eed0916c788d2f93dd2d47716a952a2d173510fd89c6715bcc628c8e16834d7f08e41e448f41f4363412c7e4fe78e541a735238230b7bbec830d6e95d2f888b6d36318640d3e258680c880d96038f8854bbe93c268510b94da82707c0e1b0a94485df2744908a3448a54b319f8edb53ccb72317679e13b5f0aee4b5892f76dbc53037e918dd872a3096cc819727ef3cbb1f24add491d4e4eb19a788830a3c4d693759ba354569e6d8459a9741232aefab58429ee59de22febda837b91e0c186b7", 0xda}, {&(0x7f0000000300)="dfe218c4bb478155bbfb37e9cdaa2073be64d4d9eb15cc2cef5a4ac570a150471df64d88ef16a4addc2e59b97f609de5bb038a01d7e2c3996915271d454e6dadbae7bcfc035b191b55746ca2732854cdd101a9c7cab164c8b0bed4b77fbe462e3a185c24584f4ef503d2b8e2be3cc8b9c32cdc5fe73dfe9154dab91ff5cc30d28a3da98bfe05f33e1523a429704d8040a0db4423dd94be526f8fc4ef30b0df33e402da54e8a7625f00"/181, 0xb5}, {&(0x7f00000003c0)="99a8f5facdc835f64438de5300da7c88904742f05be5a8975e912460d5151308e5a6b228255a8d52c033ccb26ec4e7488a397f4e82a39143b4bde632217f63b69deaa6ce250362178b8cbbba417145f2539c2dc26de81c0ff5ff705e4fd3c63dad72c6b0190965cb2b8430f13dfab007e1b1f374d4950bc0030320a18e5e63d279562da026a1a2def19e05db4dfb4c24df055abb5cd0e99275921144990bbd3c7b131a66f77a4ce6c034502f27668c081701ae22a107116ab3be026ab4e1926f", 0xc0}, {&(0x7f0000000480)="4b0180f37c1dff09d20c39e790c10063e65a8e7f14ce13a756adc9ec2c39f8", 0x1f}, {&(0x7f00000004c0)="199b8b995ef742c6138c3a4e7b121ff392afb4e18bf251847b38712d2308a06d74c94bce742b0aa48ceb55a828fc106e20005902c0f6a683d7c4d9b819d2af278c6be96a40e98d6c5e23a90c742e06e40e97b3d8d1ed1a5a95cca7293be3c3d461cad5d43ff12fd86cb10344783e7385481bcab59e", 0x75}], 0x6}}, {{0x0, 0x0, &(0x7f0000000900)}}], 0x3, 0x9000) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000140)=0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1823.054815] FAULT_INJECTION: forcing a failure. [ 1823.054815] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.056275] CPU: 0 PID: 11445 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1823.057216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.058342] Call Trace: [ 1823.058701] dump_stack+0x107/0x167 [ 1823.059195] should_fail.cold+0x5/0xa [ 1823.059714] ? __kernfs_new_node+0xd4/0x860 [ 1823.060296] should_failslab+0x5/0x20 [ 1823.060803] kmem_cache_alloc+0x5b/0x310 [ 1823.061365] __kernfs_new_node+0xd4/0x860 [ 1823.061940] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1823.062598] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1823.063268] ? wait_for_completion_io+0x270/0x270 [ 1823.063964] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1823.064575] kernfs_new_node+0x93/0x120 [ 1823.065089] __kernfs_create_file+0x51/0x350 [ 1823.065670] sysfs_add_file_mode_ns+0x221/0x560 [ 1823.066248] internal_create_group+0x324/0xb30 [ 1823.066770] ? sysfs_remove_group+0x170/0x170 [ 1823.067335] ? kernfs_name_hash+0xe7/0x110 [ 1823.067824] ? kernfs_find_ns+0x256/0x380 [ 1823.068305] sysfs_slab_add+0x188/0x200 [ 1823.068762] __kmem_cache_create+0x3db/0x520 [ 1823.069280] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1823.069869] p9_client_create+0xc2b/0x11c0 [ 1823.070365] ? p9_client_flush+0x430/0x430 [ 1823.070865] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1823.071465] ? lockdep_init_map_type+0x2c7/0x780 [ 1823.072012] ? __raw_spin_lock_init+0x36/0x110 [ 1823.072519] v9fs_session_init+0x1dd/0x1680 [ 1823.073005] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1823.073598] ? trace_hardirqs_on+0x5b/0x180 [ 1823.074098] ? v9fs_show_options+0x690/0x690 [ 1823.074608] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1823.075186] ? kasan_unpoison_shadow+0x33/0x50 [ 1823.075702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1823.076287] v9fs_mount+0x79/0x8f0 [ 1823.076703] ? v9fs_write_inode+0x60/0x60 [ 1823.077175] legacy_get_tree+0x105/0x220 [ 1823.077627] vfs_get_tree+0x8e/0x300 [ 1823.078057] path_mount+0x13be/0x20b0 [ 1823.078488] ? strncpy_from_user+0x9e/0x470 [ 1823.078969] ? finish_automount+0xa90/0xa90 [ 1823.079447] ? getname_flags.part.0+0x1dd/0x4f0 [ 1823.079985] ? _copy_from_user+0xfb/0x1b0 [ 1823.080456] __x64_sys_mount+0x282/0x300 [ 1823.080902] ? copy_mnt_ns+0xa00/0xa00 [ 1823.081350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.081953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.082529] do_syscall_64+0x33/0x40 [ 1823.082954] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1823.083529] RIP: 0033:0x7fef9ce93b19 [ 1823.083974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.086055] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1823.086942] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1823.087755] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1823.088582] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1823.089403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.090226] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:22:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000020000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:22:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000000000005e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x40000000000000}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000000000000001000004d20a0061002d245ec72ab9e0ba00000000000000000300"/64], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {0x7ffffffe}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}, @lastused={0xc}]}, 0x184}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="425b52ee81368fcbc5ba1c2285c55336e616917a96d4720a0a9add5c971dbdc94c4560931e89a14e8f9447b2b4ae73f0f94058ec45d6ef7242dd345c0ddd2ba5f4f908db0aae86c3391a0091737b41f03b8a4259372118576143ad9f0ce7abbf1aefd60c20211ddbf3e3540a3b412e005fa59afb877794f5b6a6a68b", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b000100696d0000000f0002006e6574646576736d6d30000008000b008000e2ff070001007063690011000200303030303a30303a31302e3000000071668aa461a6c4d154bf030d3a53cf0008000b00aeffffff"], 0x84}}, 0x24048015) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000940)=ANY=[@ANYBLOB="010000e53d474d7a000100000018000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460981011f810000000000000003000600010000007e0200000000000040000000000000001c00000000000000d10000000300380002000100feff0000000000700300000002000000000000000900000000000000030000000000000000000000000000000500000000000000000000000000400000000060ffffffff0800000000000000f2000000000000000000000000000087adeb00030000000000000005000000000000000000000000000000b2d233284f94c91d748c568a67f61ed29aa245adfe3dad698fc8e0c8697cf12a843aea3fee6d798c05a7d605caac539f44fb295b60317716760c429990ccee64c6f90c8e20cff844361e93a4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"/1277], 0x4fd) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10000, 0x164) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x46e0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup2(r2, 0xffffffffffffffff) flistxattr(r3, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1823.107594] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1823.108436] CPU: 0 PID: 11445 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1823.109216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.110193] Call Trace: [ 1823.110495] dump_stack+0x107/0x167 [ 1823.110926] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1823.111518] p9_client_create+0xc2b/0x11c0 [ 1823.112007] ? p9_client_flush+0x430/0x430 [ 1823.112493] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1823.113084] ? lockdep_init_map_type+0x2c7/0x780 [ 1823.113617] ? __raw_spin_lock_init+0x36/0x110 [ 1823.114159] v9fs_session_init+0x1dd/0x1680 [ 1823.114646] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1823.115271] ? trace_hardirqs_on+0x5b/0x180 [ 1823.115770] ? v9fs_show_options+0x690/0x690 [ 1823.116275] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1823.116876] ? kasan_unpoison_shadow+0x33/0x50 [ 1823.117401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1823.117988] v9fs_mount+0x79/0x8f0 [ 1823.118383] ? v9fs_write_inode+0x60/0x60 [ 1823.118868] legacy_get_tree+0x105/0x220 [ 1823.119326] vfs_get_tree+0x8e/0x300 [ 1823.119768] path_mount+0x13be/0x20b0 [ 1823.120219] ? strncpy_from_user+0x9e/0x470 [ 1823.120696] ? finish_automount+0xa90/0xa90 [ 1823.121176] ? getname_flags.part.0+0x1dd/0x4f0 [ 1823.121715] ? _copy_from_user+0xfb/0x1b0 [ 1823.122232] __x64_sys_mount+0x282/0x300 [ 1823.122697] ? copy_mnt_ns+0xa00/0xa00 [ 1823.123133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.123743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.124352] do_syscall_64+0x33/0x40 [ 1823.124771] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1823.125368] RIP: 0033:0x7fef9ce93b19 [ 1823.125822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.128073] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1823.128937] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1823.129766] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1823.130613] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1823.131418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.132259] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:22:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000076b000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:22:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 08:22:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') faccessat(r0, &(0x7f0000000000)='./file1\x00', 0x80) fcntl$getown(r0, 0x9) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/../file0\x00', 0x30140, 0x16) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000940)={{}, 0x0, 0x1a, @inherit={0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000030000000000000001010000000000000180000000000000140000000000000080ffffffffffffff0600000000000000d30500000000000006000000000000000900000000000000030000000000000020"]}, @subvolid=0x4}) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x890d}, @void, @ipv6=@tipc_packet={0x1, 0x6, "b4ad69", 0x400, 0x6, 0xff, @local, @dev={0xfe, 0x80, '\x00', 0x38}, {[@srh={0x73, 0x4, 0x4, 0x2, 0x6, 0x20, 0x80, [@ipv4={'\x00', '\xff\xff', @remote}, @empty]}, @srh={0x32, 0x2, 0x4, 0x1, 0x0, 0x38, 0x1, [@remote]}, @dstopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x4, 0x1f, [0x5, 0x0, 0x8000, 0x1ff, 0x20, 0x10000, 0x1ff, 0xe03]}}]}, @fragment={0x39, 0x0, 0x2, 0x0, 0x0, 0x4, 0x65}, @hopopts={0x89, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0xa4}, @ra={0x5, 0x2, 0xdf5}, @calipso={0x7, 0x40, {0x2, 0xe, 0x40, 0x7, [0x8b, 0x5, 0x6, 0xffffffffffffa728, 0x6a31, 0x50e, 0x2]}}]}, @dstopts={0x6c, 0x20, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x4, 0xc633, [0x1f, 0x2, 0x3, 0x0, 0x9, 0x3]}}, @generic={0x8, 0x9f, "10464e340adcf095b144b572e418305f9bc9bd773784a3c59a1fd4e0f97d6eee4a629389116dfa49f74357d222bcd78cd6808c0ecaee1164122e8252eb8cff4a3452c1e8e2850157b92dba0ac7b00ca53813d88a7c57fb21c314240ec8c58b47297a15cf746d55e3368c6e08fd6a2f466ff5b04f5a7204bd4a98823d36c76bb069f46cfd2e2a550b943d54e50087712f4e8af9c50cf826321097f752f373da"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x2, 0x9, [0x200, 0x0]}}]}, @hopopts={0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}, @hopopts={0x29, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7f}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x8}]}, @hopopts={0x3b, 0x10, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x2, 0x5, [0x5, 0x4, 0x4, 0x9]}}, @pad1, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0xb38}]}, @hopopts={0x0, 0x1b, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x1, 0xb6, "758629aa163d14b3b63bf1abf0a201d2ce1a9cc74c2e292cd5bdd99ecf9d08e643424b9b01e856167748f90113e65a5c10a3de628f867fa4ed0ebff2caa85ed4e0a293c2f63edaec3e7821d6fcc15c360f231f475aa986b67cb7ed1c8edb95dde3b4d41f8f8695b46d2fad7ce79ac26e9efb1dd28b6678685e885f390814952418520fa50702fb708d9c7df4faa8adab0debd12df4fb0a270553df6ea995059b2be3635603eb3d557cb3719edf6b817dc39f87cfa1e6"}, @enc_lim={0x4, 0x1, 0x1f}, @calipso={0x7, 0x8, {0x2, 0x0, 0x0, 0x3f}}, @jumbo={0xc2, 0x4, 0x1000}, @ra, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @payload_mcast={{{{{{0x30, 0x0, 0x0, 0x1, 0x1, 0xb, 0x0, 0x2, 0x4, 0x0, 0x0, 0x7, 0x6, 0x1, 0x4, 0x5, 0x3, 0x4e22, 0x4e21}, 0x1, 0x1}, 0x4, 0x3}, 0x3}}, [0x0, 0x0, 0x0, 0x0]}}}}, 0x42c) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) 08:22:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 80) 08:22:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000030000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1823.486690] FAULT_INJECTION: forcing a failure. [ 1823.486690] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.488156] CPU: 0 PID: 11484 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1823.488970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.489930] Call Trace: [ 1823.490233] dump_stack+0x107/0x167 [ 1823.490646] should_fail.cold+0x5/0xa [ 1823.491105] ? create_object.isra.0+0x3a/0xa20 [ 1823.491629] should_failslab+0x5/0x20 [ 1823.492072] kmem_cache_alloc+0x5b/0x310 [ 1823.492537] create_object.isra.0+0x3a/0xa20 [ 1823.493047] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1823.493627] kmem_cache_alloc+0x159/0x310 [ 1823.494142] __kernfs_new_node+0xd4/0x860 [ 1823.494617] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1823.495185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1823.495742] ? wait_for_completion_io+0x270/0x270 [ 1823.496298] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1823.496904] kernfs_new_node+0x93/0x120 [ 1823.497366] __kernfs_create_file+0x51/0x350 [ 1823.497888] sysfs_add_file_mode_ns+0x221/0x560 [ 1823.498425] internal_create_group+0x324/0xb30 [ 1823.498960] ? sysfs_remove_group+0x170/0x170 [ 1823.499464] ? kernfs_name_hash+0xe7/0x110 [ 1823.499961] ? kernfs_find_ns+0x256/0x380 [ 1823.500443] sysfs_slab_add+0x188/0x200 [ 1823.500907] __kmem_cache_create+0x3db/0x520 [ 1823.501404] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1823.501989] p9_client_create+0xc2b/0x11c0 [ 1823.502491] ? p9_client_flush+0x430/0x430 [ 1823.502991] ? trace_hardirqs_on+0x5b/0x180 [ 1823.503483] ? lockdep_init_map_type+0x2c7/0x780 [ 1823.504038] ? __raw_spin_lock_init+0x36/0x110 [ 1823.504568] v9fs_session_init+0x1dd/0x1680 [ 1823.505056] ? lock_release+0x680/0x680 [ 1823.505518] ? kmem_cache_alloc_trace+0x151/0x320 [ 1823.506082] ? v9fs_show_options+0x690/0x690 [ 1823.506587] ? trace_hardirqs_on+0x5b/0x180 [ 1823.507090] ? kasan_unpoison_shadow+0x33/0x50 [ 1823.507610] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1823.508202] v9fs_mount+0x79/0x8f0 [ 1823.508605] ? v9fs_write_inode+0x60/0x60 [ 1823.509081] legacy_get_tree+0x105/0x220 [ 1823.509546] vfs_get_tree+0x8e/0x300 [ 1823.509995] path_mount+0x13be/0x20b0 [ 1823.510429] ? strncpy_from_user+0x9e/0x470 [ 1823.510920] ? finish_automount+0xa90/0xa90 [ 1823.511429] ? getname_flags.part.0+0x1dd/0x4f0 [ 1823.511956] ? _copy_from_user+0xfb/0x1b0 [ 1823.512427] __x64_sys_mount+0x282/0x300 [ 1823.512896] ? copy_mnt_ns+0xa00/0xa00 [ 1823.513346] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.513961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.514551] do_syscall_64+0x33/0x40 [ 1823.514988] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1823.515562] RIP: 0033:0x7fef9ce93b19 [ 1823.515996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.518079] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1823.518948] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1823.519724] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1823.520538] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1823.521343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.522168] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:22:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="22d4177de0da4e2a2a330fc898"]) 08:22:24 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 81) 08:22:24 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000100)={0x6, 0x1ff, 0x8}, 0xc) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r1, 0x1) 08:22:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc8, 0x7}}}, 0x7) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)) 08:22:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000076d000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:22:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x0) 08:22:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000040000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:22:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1979cfb7}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xd07}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000c011) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x4, &(0x7f0000001540)=[{&(0x7f0000001080)="dd", 0x1}, {&(0x7f0000001180)="d2", 0x1}, {&(0x7f0000001380)="88", 0x1}, {&(0x7f0000001440)="dd", 0x1}], 0x0, 0x0) [ 1836.755710] audit: type=1400 audit(1700468544.329:520): avc: denied { create } for pid=11489 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=tcp_socket permissive=1 [ 1836.759304] audit: type=1400 audit(1700468544.330:521): avc: denied { bind } for pid=11489 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=tcp_socket permissive=1 [ 1836.779046] audit: type=1400 audit(1700468544.331:522): avc: denied { name_bind } for pid=11489 comm="syz-executor.4" src=20001 scontext=system_u:object_r:system_dbusd_var_lib_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1 [ 1836.791599] FAULT_INJECTION: forcing a failure. [ 1836.791599] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.792981] CPU: 1 PID: 11492 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1836.793871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1836.794932] Call Trace: [ 1836.795255] dump_stack+0x107/0x167 [ 1836.795672] should_fail.cold+0x5/0xa [ 1836.796174] ? __kernfs_new_node+0xd4/0x860 [ 1836.796639] should_failslab+0x5/0x20 [ 1836.797046] kmem_cache_alloc+0x5b/0x310 [ 1836.797484] __kernfs_new_node+0xd4/0x860 [ 1836.798017] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1836.798616] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1836.799135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1836.799703] ? wait_for_completion_io+0x270/0x270 [ 1836.800231] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1836.800817] kernfs_new_node+0x93/0x120 [ 1836.801245] __kernfs_create_file+0x51/0x350 [ 1836.801718] sysfs_add_file_mode_ns+0x221/0x560 [ 1836.802282] internal_create_group+0x324/0xb30 [ 1836.802806] ? sysfs_remove_group+0x170/0x170 [ 1836.803297] ? kernfs_find_ns+0x256/0x380 [ 1836.803835] sysfs_slab_add+0x188/0x200 [ 1836.804314] __kmem_cache_create+0x3db/0x520 [ 1836.804814] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1836.805577] p9_client_create+0xc2b/0x11c0 [ 1836.806119] ? p9_client_flush+0x430/0x430 [ 1836.806667] ? trace_hardirqs_on+0x5b/0x180 [ 1836.807219] ? lockdep_init_map_type+0x2c7/0x780 [ 1836.807870] ? __raw_spin_lock_init+0x36/0x110 [ 1836.808604] v9fs_session_init+0x1dd/0x1680 [ 1836.809124] ? lock_release+0x680/0x680 [ 1836.809618] ? kmem_cache_alloc_trace+0x151/0x320 [ 1836.810323] ? v9fs_show_options+0x690/0x690 [ 1836.810946] ? trace_hardirqs_on+0x5b/0x180 [ 1836.811484] ? kasan_unpoison_shadow+0x33/0x50 [ 1836.812087] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1836.812783] v9fs_mount+0x79/0x8f0 [ 1836.813167] ? v9fs_write_inode+0x60/0x60 [ 1836.813621] legacy_get_tree+0x105/0x220 [ 1836.814073] vfs_get_tree+0x8e/0x300 [ 1836.814477] path_mount+0x13be/0x20b0 [ 1836.814899] ? strncpy_from_user+0x9e/0x470 [ 1836.815409] ? finish_automount+0xa90/0xa90 [ 1836.815964] ? getname_flags.part.0+0x1dd/0x4f0 [ 1836.816537] ? user_path_at_empty+0x26/0x100 [ 1836.817105] __x64_sys_mount+0x282/0x300 [ 1836.817545] ? copy_mnt_ns+0xa00/0xa00 [ 1836.817988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1836.818661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1836.819284] do_syscall_64+0x33/0x40 [ 1836.819711] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1836.820375] RIP: 0033:0x7fef9ce93b19 [ 1836.820797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1836.822815] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1836.823658] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1836.824437] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1836.825216] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1836.826038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1836.826989] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1836.844779] audit: type=1400 audit(1700468544.331:523): avc: denied { node_bind } for pid=11489 comm="syz-executor.4" saddr=224.0.0.1 src=20001 scontext=system_u:object_r:system_dbusd_var_lib_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=tcp_socket permissive=1 [ 1836.854382] audit: type=1400 audit(1700468544.331:524): avc: denied { connect } for pid=11489 comm="syz-executor.4" laddr=224.0.0.1 lport=20001 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=tcp_socket permissive=1 08:22:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000050000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:22:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="141000000000001b0002000000000000000000008b3fae3c1cd731e35628c932f1fe6cd5bf440a3b94fe67f01c776fc6b83c8c0f2f8a93cb40fd4ad150e2ac3df0688bdb22acaa9d12cef8dc"], 0x14}}, 0x0) [ 1836.865849] audit: type=1400 audit(1700468544.331:525): avc: denied { name_connect } for pid=11489 comm="syz-executor.4" dest=20001 scontext=system_u:object_r:system_dbusd_var_lib_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1 08:22:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000}}], 0x1, 0x0) [ 1836.879048] audit: type=1400 audit(1700468544.331:526): avc: denied { shutdown } for pid=11489 comm="syz-executor.4" laddr=172.20.20.170 lport=20001 faddr=172.20.20.170 fport=20001 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=tcp_socket permissive=1 08:22:24 executing program 4: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0xc1b2, 0xfffffffffffffeff, 0xffffffffffffff38, 0x9d, 0x5, 0x5, 0x8}, &(0x7f0000001400)={0x0, 0x9, 0x4ff8, 0x7, 0x0, 0x3f, 0x6}, &(0x7f0000001440)={0xe5, 0x38c00000, 0x0, 0x4, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0x0, 0x0) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r3, &(0x7f0000001380)) fchmod(0xffffffffffffffff, 0x30) close_range(r2, r0, 0x0) mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r4}}, 0x400) socket$inet6_icmp(0xa, 0x2, 0x3a) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x20, &(0x7f0000000240)={'trans=unix,', {[{@access_any}], [{@smackfsroot={'smackfsroot', 0x3d, '\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '^'}}, {@fsname={'fsname', 0x3d, '@]'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x0, 0xfe2d, 0x0, 0x1d}}) unshare(0x48020200) [ 1836.926870] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1836.928359] CPU: 1 PID: 11492 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1836.929357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1836.930422] Call Trace: [ 1836.930757] dump_stack+0x107/0x167 [ 1836.931227] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1836.932045] p9_client_create+0xc2b/0x11c0 [ 1836.932586] ? p9_client_flush+0x430/0x430 [ 1836.933151] ? trace_hardirqs_on+0x5b/0x180 [ 1836.933796] ? lockdep_init_map_type+0x2c7/0x780 [ 1836.934522] ? __raw_spin_lock_init+0x36/0x110 [ 1836.935113] v9fs_session_init+0x1dd/0x1680 [ 1836.935591] ? lock_release+0x680/0x680 [ 1836.936121] ? kmem_cache_alloc_trace+0x151/0x320 08:22:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x5) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x40000002}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6, 0x0, 0x0) [ 1836.936833] ? v9fs_show_options+0x690/0x690 [ 1836.937526] ? trace_hardirqs_on+0x5b/0x180 08:22:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='children\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000a00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xff, 0x24}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9ad4, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000300)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="ddd8d9dcb0db6fe80935b0d58a635d76c8b6964010c7caa89f069ea6dc17d4607c0230ded2077198adfbee75ccef21c181f7fb5c7109c7b15dc819b9ae12", 0x3e}, {&(0x7f0000000080)="8e7a8dbcaec7d5cd46033ec932d2484fedddb2c3d61ab52c10fd0a4fdc4a112a9d47", 0x22}, {&(0x7f00000000c0)}, {&(0x7f0000000140)="0c68d577386f7d1f5a279181dfe4376168319645514333e7e1eb4780a37393530f12c91ef753e580d6df687bac356f0a271b055516eb566fdce68ec0761b49c05b5562ce4de00aa90461521c6560b6f2281df19f6a00d3e830783d0e93", 0x5d}, {&(0x7f00000001c0)="1e516334e79d7656c60e92f0bcce5b9be3837c9f24", 0x15}], 0x5) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r4, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460981011f810000000000000003000600010000007e0200000000000040000000000000001c00000000000000d10000000300380002000100feff0000000000700300000002000000000000000900000000000000030000000000000000000000000000000500000000000000000000000000400000000060ffffffff0800000000000000f2000000000000000000000000000087adeb00030000000000000005000000000000000000000000000000b2d233284f94c91d748c568a67f61ed29aa245adfe3dad698fc8e0c8697cf12a843aea3fee6d798c05a7d605caac539f44fb295b60317716760c429990ccee64c6f90c8e20cff844361e93a4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"/1277], 0x4fd) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc1}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe512}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbb1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48001}, 0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000380), 0xf13, 0x20000) r6 = openat(r5, &(0x7f00000000c0)='./file0/file0\x00', 0x800, 0x35) getsockopt$IP_SET_OP_GET_BYNAME(r6, 0x1, 0x53, &(0x7f00000002c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000340)=0x28) [ 1836.938200] ? kasan_unpoison_shadow+0x33/0x50 [ 1836.938862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 08:22:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000076f000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1836.939515] v9fs_mount+0x79/0x8f0 [ 1836.939979] ? v9fs_write_inode+0x60/0x60 [ 1836.940431] legacy_get_tree+0x105/0x220 [ 1836.940885] vfs_get_tree+0x8e/0x300 [ 1836.941292] path_mount+0x13be/0x20b0 [ 1836.941706] ? strncpy_from_user+0x9e/0x470 [ 1836.942201] ? finish_automount+0xa90/0xa90 08:22:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x8cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = dup(0xffffffffffffffff) ftruncate(r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0xff) sendfile(r0, r1, &(0x7f0000000340)=0x1f, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000200)={0x6, 'gre0\x00', {0xfa}, 0x7}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x18000, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0x674, 0x8}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000003c0)={0xffffffffffffffff, 0x4, 0x1f}) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000100)=0xfffffff8, 0x19) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) [ 1836.942679] ? getname_flags.part.0+0x1dd/0x4f0 [ 1836.943307] ? user_path_at_empty+0x26/0x100 [ 1836.943791] __x64_sys_mount+0x282/0x300 [ 1836.944232] ? copy_mnt_ns+0xa00/0xa00 [ 1836.944655] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1836.945226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1836.945806] do_syscall_64+0x33/0x40 [ 1836.946224] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1836.946876] RIP: 0033:0x7fef9ce93b19 [ 1836.947347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1836.949473] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1836.950307] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1836.951084] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1836.951863] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1836.952647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1836.953414] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:22:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000}}], 0x1, 0x0) 08:22:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1, @private1}, 0x1c, 0x0}}], 0x1, 0x8000004) socket$inet6_tcp(0xa, 0x1, 0x0) 08:22:38 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) 08:22:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000771000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:22:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000060000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:22:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x5) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x40000002}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6, 0x0, 0x0) 08:22:38 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 82) 08:22:38 executing program 4: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0xc1b2, 0xfffffffffffffeff, 0xffffffffffffff38, 0x9d, 0x5, 0x5, 0x8}, &(0x7f0000001400)={0x0, 0x9, 0x4ff8, 0x7, 0x0, 0x3f, 0x6}, &(0x7f0000001440)={0xe5, 0x38c00000, 0x0, 0x4, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0x0, 0x0) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r3, &(0x7f0000001380)) fchmod(0xffffffffffffffff, 0x30) close_range(r2, r0, 0x0) mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r4}}, 0x400) socket$inet6_icmp(0xa, 0x2, 0x3a) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x20, &(0x7f0000000240)={'trans=unix,', {[{@access_any}], [{@smackfsroot={'smackfsroot', 0x3d, '\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '^'}}, {@fsname={'fsname', 0x3d, '@]'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x0, 0xfe2d, 0x0, 0x1d}}) unshare(0x48020200) 08:22:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000}}], 0x1, 0x0) 08:22:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x5) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x40000002}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6, 0x0, 0x0) 08:22:38 executing program 3: flistxattr(0xffffffffffffffff, &(0x7f0000000080)=""/24, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x121341, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x800, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(r2, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)=""/46) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000002c0)={'ipvs\x00'}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x84, @broadcast, 0x4e24, 0x3, 'wrr\x00', 0x28, 0x8, 0x47}, 0x2c) sendfile(r1, r4, 0x0, 0x100000001) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000070a01030078ed35bdb261942e0000030800094000000000630a64d381214cc94689c72119420d309945448504a3fb83141e082bc0d43b99cde044026bde536febc870a81470fa3cb3ed25c9391587a26a76926b2d9ed2fe429503726d12a9f9a7598d2667a4b17e2d9ab5028da5081f93a13e9e5cd108a3e7fdae61973584dde895404dd5a9bf62d2dcbabba60ee6be6dcbf99d9b2c0d5cd99d8a150043ef1d3ad66b31c23a92230ec411da647ab45933af2c5a18cde62417537800000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x40800) 08:22:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000070000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:22:38 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3e4553a4f481f3e3c11756000000000000001f5e264d22dcc4654a0864a948f035d698f547585cd9481ad1d5562c3b63787e2bdb66832d2d0a1710fb14d8b579ee07e7df728515c11cfa0d5b289c6677d9e751a023fe9a4889ca8adac989d6dbe8f420d4aa26569b035c2c3d952f9e0f6c9c913b7bae6f75c9c89673f572db6275836a125afd7935339eed6f75d2235841486cdabac5af9673ff469d6fc886c6e4d8c86bb2809b71a4b3906a"]) socket$netlink(0x10, 0x3, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x18, 0x0, 0x2, 0x7f, 0x0, 0x5, 0x8012a, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x5}, 0x400, 0x0, 0x7, 0x4, 0x0, 0xffff, 0x8, 0x0, 0x1, 0x0, 0x81}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(0x0, 0xf4) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x20000000000081}}, r3, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0xdd, 0x3, 0xe8, 0x0, 0x8001, 0x2b000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x57ec, 0x4, @perf_config_ext={0x17, 0xfff}, 0x1000, 0xfb7, 0x80, 0x1, 0x5, 0x1, 0x8, 0x0, 0xe2, 0x0, 0x25}, r3, 0xd, r0, 0xa) 08:22:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000773000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1850.875673] FAULT_INJECTION: forcing a failure. [ 1850.875673] name failslab, interval 1, probability 0, space 0, times 0 [ 1850.877842] CPU: 0 PID: 11554 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1850.878923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1850.880203] Call Trace: [ 1850.880609] dump_stack+0x107/0x167 [ 1850.881179] should_fail.cold+0x5/0xa [ 1850.881768] ? create_object.isra.0+0x3a/0xa20 [ 1850.882462] should_failslab+0x5/0x20 [ 1850.883064] kmem_cache_alloc+0x5b/0x310 [ 1850.883676] create_object.isra.0+0x3a/0xa20 [ 1850.884311] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1850.885046] kmem_cache_alloc+0x159/0x310 [ 1850.885658] __kernfs_new_node+0xd4/0x860 [ 1850.886318] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1850.887030] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1850.887755] ? wait_for_completion_io+0x270/0x270 [ 1850.888486] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1850.889273] kernfs_new_node+0x93/0x120 [ 1850.889874] __kernfs_create_file+0x51/0x350 [ 1850.890543] sysfs_add_file_mode_ns+0x221/0x560 [ 1850.891242] internal_create_group+0x324/0xb30 [ 1850.891922] ? sysfs_remove_group+0x170/0x170 [ 1850.892604] ? kernfs_find_ns+0x256/0x380 [ 1850.893247] sysfs_slab_add+0x188/0x200 [ 1850.893849] __kmem_cache_create+0x3db/0x520 [ 1850.894537] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1850.895293] p9_client_create+0xc2b/0x11c0 [ 1850.895918] ? p9_client_flush+0x430/0x430 [ 1850.896534] ? trace_hardirqs_on+0x5b/0x180 [ 1850.897165] ? lockdep_init_map_type+0x2c7/0x780 [ 1850.897867] ? __raw_spin_lock_init+0x36/0x110 [ 1850.898563] v9fs_session_init+0x1dd/0x1680 [ 1850.899209] ? lock_release+0x680/0x680 [ 1850.899824] ? kmem_cache_alloc_trace+0x151/0x320 [ 1850.900551] ? v9fs_show_options+0x690/0x690 [ 1850.901218] ? trace_hardirqs_on+0x5b/0x180 [ 1850.901862] ? kasan_unpoison_shadow+0x33/0x50 [ 1850.902545] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1850.903302] v9fs_mount+0x79/0x8f0 [ 1850.903828] ? v9fs_write_inode+0x60/0x60 [ 1850.904444] legacy_get_tree+0x105/0x220 [ 1850.905066] vfs_get_tree+0x8e/0x300 [ 1850.905634] path_mount+0x13be/0x20b0 [ 1850.906262] ? strncpy_from_user+0x9e/0x470 [ 1850.906923] ? finish_automount+0xa90/0xa90 [ 1850.907572] ? getname_flags.part.0+0x1dd/0x4f0 [ 1850.908278] ? _copy_from_user+0xfb/0x1b0 [ 1850.908899] __x64_sys_mount+0x282/0x300 [ 1850.909488] ? copy_mnt_ns+0xa00/0xa00 [ 1850.910076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1850.910865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1850.911638] do_syscall_64+0x33/0x40 [ 1850.912206] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1850.912968] RIP: 0033:0x7fef9ce93b19 [ 1850.913511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1850.916209] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1850.917357] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1850.918406] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1850.919444] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1850.920469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1850.921506] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:22:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) 08:22:38 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x7fc00, 0x26a3c2) recvmmsg$unix(r0, &(0x7f0000003a40)=[{{&(0x7f0000000180), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000240)=""/197, 0xc5}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/159, 0x9f}, {&(0x7f0000000500)=""/68, 0x44}, {&(0x7f0000000580)=""/53, 0x35}, {&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001800)=""/2, 0x2}, {&(0x7f0000001840)=""/65, 0x41}, {&(0x7f00000018c0)=""/37, 0x25}, {&(0x7f0000001900)=""/140, 0x8c}, {&(0x7f00000019c0)=""/226, 0xe2}], 0x5, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/23, 0x17}, {&(0x7f0000001c80)=""/98, 0x62}], 0x2, &(0x7f0000001d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000001e00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000001e80)=""/173, 0xad}, {&(0x7f0000001f40)=""/4096, 0x1000}], 0x2, &(0x7f0000002f80)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002800ffff0000002abf1c8e0001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x68}}, {{&(0x7f0000003000)=@abs, 0x6e, &(0x7f0000003380)=[{&(0x7f0000003080)=""/20, 0x14}, {&(0x7f00000030c0)=""/7, 0x7}, {&(0x7f0000003100)=""/48, 0x30}, {&(0x7f0000003140)=""/136, 0x88}, {&(0x7f0000003200)=""/33, 0x21}, {&(0x7f0000003240)=""/62, 0x3e}, {&(0x7f0000003280)=""/236, 0xec}], 0x7, &(0x7f0000003400)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000003500), 0x6e, &(0x7f0000003600)=[{&(0x7f0000003580)=""/87, 0x57}], 0x1, &(0x7f0000003640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000003700), 0x6e, &(0x7f0000003900)=[{&(0x7f0000003780)=""/51, 0x33}, {&(0x7f00000037c0)=""/191, 0xbf}, {&(0x7f0000003880)=""/118, 0x76}], 0x3, &(0x7f0000003940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x7, 0x2122, &(0x7f0000003c00)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000003c40)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000003c80)={{r2}, r4, 0x0, @unused=[0x4, 0x800, 0x101, 0x4], @subvolid=0x7}) open(&(0x7f0000004c80)='./file0\x00', 0x0, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140)=0xfff, 0x4) fcntl$dupfd(r1, 0x0, r3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000080)={[{@delalloc}, {@sysvgroups}, {@delalloc}, {@stripe={'stripe', 0x3d, 0x9}}, {@oldalloc}, {@usrquota}, {@jqfmt_vfsold}]}) 08:22:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x5) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x40000002}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6, 0x0, 0x0) 08:22:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000080000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:22:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000775000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:22:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) 08:22:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r3 = socket(0xb, 0x6, 0x1) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x20000000000081}}, r5, 0x0, r4, 0x0) fcntl$setown(r1, 0x8, r5) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r3}]}]}, 0x28}}, 0x0) [ 1851.184015] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 08:22:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000090000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:22:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) epoll_create1(0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) [ 1851.353378] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 08:22:39 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 83) 08:22:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x2) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7ffd, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xe) fallocate(r0, 0x0, 0x0, 0x4) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') creat(&(0x7f0000000200)='./file1\x00', 0x2) chroot(&(0x7f0000000280)='./file2\x00') chroot(&(0x7f0000000300)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r1, &(0x7f0000000380)="0249e99a7f0211ef77a2e6ddf80889819eecd945439d8a17fd966a028b5a0d7d6da10a8b16bf2bf2b67ed8b591", 0x2d) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) sendfile(r1, r2, 0x0, 0x100000001) 08:22:39 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000777000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1851.562712] FAULT_INJECTION: forcing a failure. [ 1851.562712] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.564461] CPU: 0 PID: 11614 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1851.565320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1851.566291] Call Trace: [ 1851.566598] dump_stack+0x107/0x167 [ 1851.567027] should_fail.cold+0x5/0xa [ 1851.567465] ? __kernfs_new_node+0xd4/0x860 [ 1851.567959] should_failslab+0x5/0x20 [ 1851.568404] kmem_cache_alloc+0x5b/0x310 [ 1851.568867] __kernfs_new_node+0xd4/0x860 [ 1851.569356] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1851.569904] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1851.570472] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1851.571094] ? wait_for_completion_io+0x270/0x270 [ 1851.571665] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1851.572271] kernfs_new_node+0x93/0x120 [ 1851.572724] __kernfs_create_file+0x51/0x350 [ 1851.573208] sysfs_add_file_mode_ns+0x221/0x560 [ 1851.573747] internal_create_group+0x324/0xb30 [ 1851.574305] ? sysfs_remove_group+0x170/0x170 [ 1851.574817] ? kernfs_name_hash+0xe7/0x110 [ 1851.575294] ? kernfs_find_ns+0x256/0x380 [ 1851.575779] sysfs_slab_add+0x188/0x200 [ 1851.576222] __kmem_cache_create+0x3db/0x520 [ 1851.576724] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1851.577309] p9_client_create+0xc2b/0x11c0 [ 1851.577762] ? p9_client_flush+0x430/0x430 [ 1851.578256] ? trace_hardirqs_on+0x5b/0x180 [ 1851.578726] ? lockdep_init_map_type+0x2c7/0x780 [ 1851.579283] ? __raw_spin_lock_init+0x36/0x110 [ 1851.579778] v9fs_session_init+0x1dd/0x1680 [ 1851.580271] ? lock_release+0x680/0x680 [ 1851.580704] ? kmem_cache_alloc_trace+0x151/0x320 [ 1851.581237] ? v9fs_show_options+0x690/0x690 [ 1851.581711] ? trace_hardirqs_on+0x5b/0x180 [ 1851.582234] ? kasan_unpoison_shadow+0x33/0x50 [ 1851.582727] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1851.583324] v9fs_mount+0x79/0x8f0 [ 1851.583727] ? v9fs_write_inode+0x60/0x60 [ 1851.584191] legacy_get_tree+0x105/0x220 [ 1851.584649] vfs_get_tree+0x8e/0x300 [ 1851.585075] path_mount+0x13be/0x20b0 [ 1851.585508] ? strncpy_from_user+0x9e/0x470 [ 1851.585994] ? finish_automount+0xa90/0xa90 [ 1851.586496] ? getname_flags.part.0+0x1dd/0x4f0 [ 1851.587022] ? _copy_from_user+0xfb/0x1b0 [ 1851.587505] __x64_sys_mount+0x282/0x300 [ 1851.587977] ? copy_mnt_ns+0xa00/0xa00 [ 1851.588419] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1851.588997] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1851.589580] do_syscall_64+0x33/0x40 [ 1851.589994] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1851.590575] RIP: 0033:0x7fef9ce93b19 [ 1851.590992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1851.593059] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1851.593908] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1851.598985] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1851.600073] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1851.601126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1851.602219] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1851.607750] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1851.608592] CPU: 0 PID: 11614 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1851.609378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1851.610337] Call Trace: [ 1851.610637] dump_stack+0x107/0x167 [ 1851.611125] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1851.612378] p9_client_create+0xc2b/0x11c0 [ 1851.613401] ? p9_client_flush+0x430/0x430 [ 1851.614423] ? trace_hardirqs_on+0x5b/0x180 [ 1851.615455] ? lockdep_init_map_type+0x2c7/0x780 [ 1851.616589] ? __raw_spin_lock_init+0x36/0x110 [ 1851.617681] v9fs_session_init+0x1dd/0x1680 [ 1851.618842] ? lock_release+0x680/0x680 [ 1851.619381] ? kmem_cache_alloc_trace+0x151/0x320 [ 1851.619924] ? v9fs_show_options+0x690/0x690 [ 1851.620426] ? trace_hardirqs_on+0x5b/0x180 [ 1851.620903] ? kasan_unpoison_shadow+0x33/0x50 [ 1851.621413] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1851.621998] v9fs_mount+0x79/0x8f0 [ 1851.622404] ? v9fs_write_inode+0x60/0x60 [ 1851.622862] legacy_get_tree+0x105/0x220 [ 1851.623322] vfs_get_tree+0x8e/0x300 [ 1851.623741] path_mount+0x13be/0x20b0 [ 1851.624155] ? strncpy_from_user+0x9e/0x470 [ 1851.624642] ? finish_automount+0xa90/0xa90 [ 1851.625134] ? getname_flags.part.0+0x1dd/0x4f0 [ 1851.625653] ? _copy_from_user+0xfb/0x1b0 [ 1851.626143] __x64_sys_mount+0x282/0x300 [ 1851.626623] ? copy_mnt_ns+0xa00/0xa00 [ 1851.627074] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1851.627676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1851.628275] do_syscall_64+0x33/0x40 [ 1851.628702] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1851.629293] RIP: 0033:0x7fef9ce93b19 [ 1851.629721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1851.631745] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1851.632593] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1851.633430] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1851.634249] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1851.635039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1851.635850] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:22:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x0) 08:22:52 executing program 2: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000100)) r2 = dup2(0xffffffffffffffff, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x0, 0x4}, {0x5}]}, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/52, 0x34) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 08:22:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000779000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:22:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000000000a0000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:22:52 executing program 3: write(0xffffffffffffffff, &(0x7f00000004c0)="5b7ff40eaf13edaed4fd2a4c7508456bfca08b4cae0951e4a709132367b1b68f131bac908c1c365b49784a9ff29d4f2f445597248f2a3e964779002476ca3d72ac17f4341f7c6d3ea1bbbe7abda7e2ca461ca01c4c1c9ca7e3bf9b838f6ca2dd90334a0a7f48d89461d5f2bc826e256b7288fd9151b9dbc6356836e4c57b0fa702e779bb5c274b894ac2aa829ad6f84b72ec97eecec1ae345830a052c2f95e3df13677c0f316551b5f00", 0xaa) r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r1) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e2ef61012131415161718191a85b3c8061aebcb422ac91b1c1d1e1f20210000b2c1262728292a2b2c2d2e2f30313233343536663f2d43a093d73dab040415b0324e74df87a3e9a67027278bec17a638236d6da857909efabb58979ccc40936a157706ef29b84ac88a7637358ab49f25c9536ec24faf77e04122df5ba9da5e6c18078769b22acec0fbd9e267661d6b58e8bdf0d603518a1cde3818502a88e1871b5d532e57164ae679800ec73de82ad2648079f5e44f6fc34d66e19ac3a4b73eef967187054fe6e32f9be33b80ddb6e8a81359c18e1609e456cd232c91f1a48e29ee49ad471fef7d334dcd2a471ef456b09a08bb4cff664da7cd34cd3ed66a1fb4d9db826c6a22c537e5ccd4646e5afd0529393892d3bb197edeb97c9364eb2e9e4cc2ed567cef584fda468f17e245991cf495a27b0490e32db0d3e8"], 0x48, r0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r3) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r4) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r5) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='id_resolver\x00', 0x0) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:22:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) epoll_create1(0x0) r0 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) 08:22:52 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'netdevsim0\x00', 0xca4}) pipe(&(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fb, 0x0, 0x0, @u32}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 08:22:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 84) [ 1864.665465] Option ' ð~à÷ü¦ VO®î¯¤@' to dns_resolver key: bad/missing value 08:22:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) epoll_create1(0x0) r0 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) [ 1864.761739] FAULT_INJECTION: forcing a failure. [ 1864.761739] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.764450] CPU: 0 PID: 11637 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1864.765940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.767822] Call Trace: [ 1864.768398] dump_stack+0x107/0x167 [ 1864.769186] should_fail.cold+0x5/0xa [ 1864.770011] ? create_object.isra.0+0x3a/0xa20 [ 1864.771009] should_failslab+0x5/0x20 [ 1864.771825] kmem_cache_alloc+0x5b/0x310 [ 1864.772699] create_object.isra.0+0x3a/0xa20 [ 1864.773641] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.774756] kmem_cache_alloc+0x159/0x310 [ 1864.775662] __kernfs_new_node+0xd4/0x860 [ 1864.776560] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1864.777587] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1864.778632] ? wait_for_completion_io+0x270/0x270 [ 1864.779673] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1864.780812] kernfs_new_node+0x93/0x120 [ 1864.781673] __kernfs_create_file+0x51/0x350 [ 1864.782637] sysfs_add_file_mode_ns+0x221/0x560 [ 1864.783653] internal_create_group+0x324/0xb30 [ 1864.784640] ? sysfs_remove_group+0x170/0x170 [ 1864.785600] ? kernfs_name_hash+0xe7/0x110 [ 1864.786517] ? kernfs_find_ns+0x256/0x380 [ 1864.787417] sysfs_slab_add+0x188/0x200 [ 1864.788284] __kmem_cache_create+0x3db/0x520 [ 1864.789234] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1864.790327] p9_client_create+0xc2b/0x11c0 [ 1864.791248] ? p9_client_flush+0x430/0x430 [ 1864.792154] ? trace_hardirqs_on+0x5b/0x180 [ 1864.793085] ? lockdep_init_map_type+0x2c7/0x780 [ 1864.794109] ? __raw_spin_lock_init+0x36/0x110 [ 1864.795107] v9fs_session_init+0x1dd/0x1680 [ 1864.796034] ? lock_release+0x680/0x680 [ 1864.796898] ? kmem_cache_alloc_trace+0x151/0x320 [ 1864.797932] ? v9fs_show_options+0x690/0x690 [ 1864.798891] ? trace_hardirqs_on+0x5b/0x180 [ 1864.799820] ? kasan_unpoison_shadow+0x33/0x50 [ 1864.800799] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.801892] v9fs_mount+0x79/0x8f0 [ 1864.802676] ? v9fs_write_inode+0x60/0x60 [ 1864.803566] legacy_get_tree+0x105/0x220 [ 1864.804437] vfs_get_tree+0x8e/0x300 [ 1864.805244] path_mount+0x13be/0x20b0 [ 1864.806069] ? strncpy_from_user+0x9e/0x470 [ 1864.807007] ? finish_automount+0xa90/0xa90 [ 1864.807930] ? getname_flags.part.0+0x1dd/0x4f0 [ 1864.808923] ? _copy_from_user+0xfb/0x1b0 [ 1864.809827] __x64_sys_mount+0x282/0x300 [ 1864.810708] ? copy_mnt_ns+0xa00/0xa00 [ 1864.811549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.812672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.813783] do_syscall_64+0x33/0x40 [ 1864.814600] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1864.815694] RIP: 0033:0x7fef9ce93b19 [ 1864.816495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.820419] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1864.822046] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1864.823585] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1864.825113] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1864.826647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1864.828171] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1865.091079] Option ' ð~à÷ü¦ VO®î¯¤@' to dns_resolver key: bad/missing value 08:23:07 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 85) 08:23:07 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0800e4ffffffffff3d4b7658abd0c34e981a32b8a61904cb04f64e0cd3bed473953917cf790024ac1e67fb30dd30c3e27fb8e027f4b6e46c4d80da9f0bbf43cc16d8ed255f322c98a9f472a3b35af2a2423fa816ffb732010010a3c424bbc4856d6591f4571944a3234fae118139e80f7437406597e97b7cb5a6fe0a7ca26e80b46ec68c32c04c2a044a51d1fd06bac07a8fca89dff71b49523227f60768ad574156f055912f8c013c90917a2a252efdd8051399ad40901276b20e71c816c91cf96d6ff958679676c936cfd56b6fcfb33c33bb08d40adaec1729cc8b620471b64e1b8e7d6a9aae833b88e384446ede0225da3c73829e8e28fce4e39a1c8be892caad5c0d14d224d0de253e38ad2916f8d7a0c41beb4d590580435997da86ce493af157da6c125a1c67b875fcc38612f02350a8ba44d90df2a466fa6a4bc0b00500000000000000c21e594d568815b58db41500b8f2eab28ec5884c758418ef4c893c5e40031daa4c8e33412ee89471d3d7"]) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'netdevsim0\x00', 0xca4}) pipe(&(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fb, 0x0, 0x0, @u32}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 08:23:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0xa, 0x0, 0x0) readahead(r1, 0x9, 0x6) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req={0x4, 0x7, 0xc9ee, 0x401}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20c00, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000940)={{}, 0x0, 0x1a, @inherit={0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000030000000000000001010000000000000180000000000000140000000000000080ffffffffffffff0600000000000000d30500000000000006000000000000000900000000000000030000000000000020"]}, @subvolid=0x4}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x4, 0x0, 0x0, 0x8}) 08:23:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000077b000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:23:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000000000b0000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:23:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x3, &(0x7f0000001200)={0x0, 0x24, 0x0, @thr={&(0x7f00000001c0)="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", &(0x7f00000011c0)="b297feb97007f9568d111f37f64db3e5090493607981d09896a1b6c79967548cc2e1e45681c4d4b05873372abf65"}}, &(0x7f0000001240)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x20000000000081}}, r2, 0x0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file2\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1f, 0xf, 0x1, 0x0, 0x3, 0x2000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x40420, 0x9, 0x1, 0x2, 0xfffffffffffffbff, 0x2, 0x8001, 0x0, 0x4, 0x0, 0x2}, r2, 0x5, r3, 0x8) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r4) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="fe", 0x1, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x1, 0x0) r5 = creat(&(0x7f0000000080)='./file2\x00', 0x5b) fallocate(0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x7) ioctl$CDROM_SELECT_DISK(r5, 0x5322, 0xdc2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) 08:23:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) epoll_create1(0x0) r0 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) 08:23:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}], 0x1, 0x0) 08:23:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f00000000}}], 0x1, 0x0) [ 1880.496407] FAULT_INJECTION: forcing a failure. [ 1880.496407] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.499298] CPU: 1 PID: 11665 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1880.500790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.502590] Call Trace: [ 1880.503165] dump_stack+0x107/0x167 [ 1880.503964] should_fail.cold+0x5/0xa [ 1880.504804] ? __kernfs_new_node+0xd4/0x860 [ 1880.505739] should_failslab+0x5/0x20 [ 1880.506574] kmem_cache_alloc+0x5b/0x310 [ 1880.507468] __kernfs_new_node+0xd4/0x860 [ 1880.508363] ? trace_hardirqs_on+0x5b/0x180 [ 1880.509417] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1880.510781] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1880.511810] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1880.512853] ? wait_for_completion_io+0x270/0x270 [ 1880.513892] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1880.515042] kernfs_new_node+0x93/0x120 [ 1880.515904] __kernfs_create_file+0x51/0x350 [ 1880.516990] sysfs_add_file_mode_ns+0x221/0x560 [ 1880.518127] internal_create_group+0x324/0xb30 [ 1880.519158] ? sysfs_remove_group+0x170/0x170 [ 1880.520124] ? kernfs_name_hash+0xe7/0x110 [ 1880.521052] ? kernfs_find_ns+0x256/0x380 [ 1880.521960] sysfs_slab_add+0x188/0x200 [ 1880.522827] __kmem_cache_create+0x3db/0x520 [ 1880.523780] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1880.524891] p9_client_create+0xc2b/0x11c0 [ 1880.525824] ? p9_client_flush+0x430/0x430 [ 1880.526757] ? trace_hardirqs_on+0x5b/0x180 [ 1880.527702] ? lockdep_init_map_type+0x2c7/0x780 [ 1880.528847] ? __raw_spin_lock_init+0x36/0x110 [ 1880.529940] v9fs_session_init+0x1dd/0x1680 [ 1880.530883] ? lock_release+0x680/0x680 [ 1880.531753] ? kmem_cache_alloc_trace+0x151/0x320 [ 1880.532795] ? v9fs_show_options+0x690/0x690 [ 1880.533761] ? trace_hardirqs_on+0x5b/0x180 [ 1880.534719] ? kasan_unpoison_shadow+0x33/0x50 [ 1880.535721] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1880.537026] v9fs_mount+0x79/0x8f0 [ 1880.537802] ? v9fs_write_inode+0x60/0x60 [ 1880.538709] legacy_get_tree+0x105/0x220 [ 1880.539592] vfs_get_tree+0x8e/0x300 [ 1880.540398] path_mount+0x13be/0x20b0 [ 1880.541229] ? strncpy_from_user+0x9e/0x470 [ 1880.542245] ? finish_automount+0xa90/0xa90 [ 1880.543341] ? getname_flags.part.0+0x1dd/0x4f0 [ 1880.544342] ? _copy_from_user+0xfb/0x1b0 [ 1880.545257] __x64_sys_mount+0x282/0x300 [ 1880.546138] ? copy_mnt_ns+0xa00/0xa00 [ 1880.547032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.548365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.549476] do_syscall_64+0x33/0x40 [ 1880.550286] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1880.551412] RIP: 0033:0x7fef9ce93b19 [ 1880.552219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.556423] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1880.558058] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1880.559779] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1880.561378] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1880.562927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.564465] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1880.686549] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1880.688109] CPU: 1 PID: 11665 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1880.689598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.691402] Call Trace: [ 1880.691972] dump_stack+0x107/0x167 [ 1880.692764] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1880.693908] p9_client_create+0xc2b/0x11c0 [ 1880.694840] ? p9_client_flush+0x430/0x430 [ 1880.695793] ? trace_hardirqs_on+0x5b/0x180 [ 1880.696731] ? lockdep_init_map_type+0x2c7/0x780 [ 1880.697787] ? __raw_spin_lock_init+0x36/0x110 [ 1880.698799] v9fs_session_init+0x1dd/0x1680 [ 1880.699732] ? lock_release+0x680/0x680 [ 1880.700606] ? kmem_cache_alloc_trace+0x151/0x320 [ 1880.701675] ? v9fs_show_options+0x690/0x690 [ 1880.702641] ? trace_hardirqs_on+0x5b/0x180 [ 1880.703593] ? kasan_unpoison_shadow+0x33/0x50 [ 1880.704586] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1880.705735] v9fs_mount+0x79/0x8f0 [ 1880.706514] ? v9fs_write_inode+0x60/0x60 [ 1880.707438] legacy_get_tree+0x105/0x220 [ 1880.708310] vfs_get_tree+0x8e/0x300 [ 1880.709152] path_mount+0x13be/0x20b0 [ 1880.709984] ? strncpy_from_user+0x9e/0x470 [ 1880.710943] ? finish_automount+0xa90/0xa90 [ 1880.711877] ? getname_flags.part.0+0x1dd/0x4f0 [ 1880.712922] ? _copy_from_user+0xfb/0x1b0 [ 1880.713830] __x64_sys_mount+0x282/0x300 [ 1880.714736] ? copy_mnt_ns+0xa00/0xa00 [ 1880.715581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.716757] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.717871] do_syscall_64+0x33/0x40 [ 1880.718699] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1880.719803] RIP: 0033:0x7fef9ce93b19 [ 1880.720606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.724575] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1880.726217] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1880.727759] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1880.729288] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1880.730844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.732382] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:23:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) epoll_create1(0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x40000002}) 08:23:24 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 86) 08:23:24 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="e80100003b00100025bd7000ffdbdf251b00000021017f80dccd32ac50b3ef0decd101596c2b7affe5d8b4aab9550bebd8b69c7e9591ff5680b9ff4b04cfc7dae09b636613dafa2fc3a046f1489eaedb193b407393ebd7fe125b8c7ce2bd2276ee1ed0c4f6dd5dde8dff444b93e955acc94fc33109abecdc8895a5a6ce143ffb3ab5ad464de67c10a9d0c27682839e7871bd33b3311406721c65c0b6b5acab9950b6cc7f36376d34c88618d776ebead551d72639eaed0791a11015093c509ccf18acbaf11eb9a8165571352991b828cfdb2c78d027c7abe363f6b20896ac922119c0d93ea57800b7c0394537858f25efd0b0b0f7c3c306bb398d59426086a34f708faf08000900", @ANYRES32, @ANYBLOB="18003b005c31bf81f4b54d404ab2879464b931ae7ce57bbafc448bfde650436fb05775ac8ddbdf44f78e45338b8bee15123781bbda7ed5026f1712e20a3d9bf2fe159db9534212ea7a8cb9ba1e6ada710100000011a2b917d62bb10b42dad1add8dbfde2ff448d52b280d1180cc867f76162dbb38b1ba962f3429a8338faab88613fd8c3e731cf93cedaca308075cfef444b7c2871d4d915a96e8efe0f0b22dc14f1ecf0cc98", @ANYRES32, @ANYBLOB="f2ba57618d812befee1aaf1c3834fc76fdfeb294ae04be530d3eea12529e839c8ab70000003e7129f03b598d56b5ba2aa5edd8b00b909c8a31f2b4669efcc8d68938e7a0dcf89422358c423da4c49d527799a31648482e555587ad20896bb6489d98ab949cbe8960854f11e48ac31a28db2dc22c7ff05c9571a1ea5025e5077301e11f9b4aef7d9b07c6b12d97843ec67b0a27861d53f16fec51b8f16a7ee269d8a4a45c78fbce63021a33a2b57dce7700d897b986eb222919332ee2bb02dba25cf26fb04e571f9b"], 0x1e8}}, 0x4008040) creat(&(0x7f0000000340)='./file1\x00', 0x19) 08:23:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000077d000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:23:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000000000f0000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:23:24 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'netdevsim0\x00', 0xca4}) pipe(&(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fb, 0x0, 0x0, @u32}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 08:23:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000}}], 0x1, 0x0) 08:23:24 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x4, 0x0, 0x0, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x2d0d) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) faccessat2(r1, &(0x7f0000000480)='./file2\x00', 0x9, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0xc2080, 0x0) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000003c0)={{r5}, 0x5, &(0x7f0000000380)=[0x6, 0x10001, 0x4, 0x6, 0xdf], 0x0, 0x2, [0x6, 0x4c, 0x1ff, 0x3]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20602, 0x11f) r7 = socket$packet(0x11, 0x3, 0x300) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000440)) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x6, 0x80}}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x6, 0xb0, 0x5}) openat$incfs(r6, &(0x7f0000000240)='.pending_reads\x00', 0xf0540, 0x88) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x40, 0x2, 0x1, 0x0, 0x80000000, 0x10, 0x11, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x3}, 0x18000, 0x0, 0x6, 0x3, 0x9, 0xfffffff9, 0x5405, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x2) sendfile(r1, r2, 0x0, 0x100000001) 08:23:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000}}], 0x1, 0x0) 08:23:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000100000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:23:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) epoll_create1(0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x40000002}) [ 1896.857899] FAULT_INJECTION: forcing a failure. [ 1896.857899] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.859370] CPU: 0 PID: 11690 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1896.860296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.861271] Call Trace: [ 1896.861595] dump_stack+0x107/0x167 [ 1896.862036] should_fail.cold+0x5/0xa [ 1896.862508] ? create_object.isra.0+0x3a/0xa20 [ 1896.863057] should_failslab+0x5/0x20 [ 1896.863513] kmem_cache_alloc+0x5b/0x310 [ 1896.863999] create_object.isra.0+0x3a/0xa20 [ 1896.864523] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1896.865126] kmem_cache_alloc+0x159/0x310 [ 1896.865629] __kernfs_new_node+0xd4/0x860 [ 1896.866123] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1896.866696] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1896.867266] ? wait_for_completion_io+0x270/0x270 [ 1896.867848] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1896.868474] kernfs_new_node+0x93/0x120 [ 1896.868943] __kernfs_create_file+0x51/0x350 [ 1896.869465] sysfs_add_file_mode_ns+0x221/0x560 [ 1896.870034] internal_create_group+0x324/0xb30 [ 1896.870579] ? sysfs_remove_group+0x170/0x170 [ 1896.871143] ? kernfs_name_hash+0xe7/0x110 [ 1896.871676] ? kernfs_find_ns+0x256/0x380 [ 1896.872196] sysfs_slab_add+0x188/0x200 [ 1896.872691] __kmem_cache_create+0x3db/0x520 [ 1896.873257] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1896.873882] p9_client_create+0xc2b/0x11c0 [ 1896.874425] ? p9_client_flush+0x430/0x430 [ 1896.874960] ? trace_hardirqs_on+0x5b/0x180 [ 1896.875496] ? lockdep_init_map_type+0x2c7/0x780 [ 1896.876091] ? __raw_spin_lock_init+0x36/0x110 [ 1896.876671] v9fs_session_init+0x1dd/0x1680 [ 1896.877218] ? lock_release+0x680/0x680 [ 1896.877730] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1896.878396] ? trace_hardirqs_on+0x5b/0x180 [ 1896.878913] ? v9fs_show_options+0x690/0x690 [ 1896.879440] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1896.880039] ? kasan_unpoison_shadow+0x33/0x50 [ 1896.880583] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1896.881182] v9fs_mount+0x79/0x8f0 [ 1896.881616] ? v9fs_write_inode+0x60/0x60 [ 1896.882103] legacy_get_tree+0x105/0x220 [ 1896.882584] vfs_get_tree+0x8e/0x300 [ 1896.883038] path_mount+0x13be/0x20b0 [ 1896.883493] ? strncpy_from_user+0x9e/0x470 [ 1896.884000] ? finish_automount+0xa90/0xa90 [ 1896.884505] ? getname_flags.part.0+0x1dd/0x4f0 [ 1896.885049] ? _copy_from_user+0xfb/0x1b0 [ 1896.885541] __x64_sys_mount+0x282/0x300 [ 1896.886019] ? copy_mnt_ns+0xa00/0xa00 [ 1896.886481] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.887113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.887732] do_syscall_64+0x33/0x40 [ 1896.888172] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1896.888776] RIP: 0033:0x7fef9ce93b19 [ 1896.889216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.891433] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1896.892365] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1896.893250] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1896.894132] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1896.894139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1896.894147] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:23:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc9000077f000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:23:24 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'netdevsim0\x00', 0xca4}) pipe(&(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fb, 0x0, 0x0, @u32}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 08:23:24 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="18003b005c31bf81f4b54d404ab2879464b931ae7ce57bbafc448bfde650436fb05775ac8ddbdf44f78e45338b8bee15123781bbda7ed5026f1712e20a3d9bf2fe159db9534212ea7a8cb9ba1e6ada710100000011a2b917d62bb10b42dad1add8dbfde2ff448d52b280d1180cc867f76162dbb38b1ba962f3429a8338faab88613fd8c3e731cf93cedaca308075cfef444b7c2871d4d915a96e8efe0f0b22dc14f1ecf0cc98", @ANYRES32, @ANYBLOB="f2ba57618d812befee1aaf1c3834fc76fdfeb294ae04be530d3eea12529e839c8ab70000003e7129f03b598d56b5ba2aa5edd8b00b909c8a31f2b4669efcc8d68938e7a0dcf89422358c423da4c49d527799a31648482e555587ad20896bb6489d98ab949cbe8960854f11e48ac31a28db2dc22c7ff05c9571a1ea5025e5077301e11f9b4aef7d9b07c6b12d97843ec67b0a27861d53f16fec51b8f16a7ee269d8a4a45c78fbce63021a33a2b57dce7700d897b986eb222919332ee2bb02dba25cf26fb04e571f9b"], 0x1e8}}, 0x4008040) creat(&(0x7f0000000340)='./file1\x00', 0x19) 08:23:24 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 87) 08:23:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000110000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:23:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000}}], 0x1, 0x0) 08:23:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) epoll_create1(0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x40000002}) 08:23:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000781000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:23:24 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'netdevsim0\x00', 0xca4}) pipe(&(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fb, 0x0, 0x0, @u32}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) 08:23:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000}}], 0x1, 0x0) 08:23:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001000000006c0000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1897.442922] FAULT_INJECTION: forcing a failure. [ 1897.442922] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.445883] CPU: 1 PID: 11724 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1897.447367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.449094] Call Trace: [ 1897.449656] dump_stack+0x107/0x167 [ 1897.450435] should_fail.cold+0x5/0xa [ 1897.451277] ? __kernfs_new_node+0xd4/0x860 [ 1897.452186] should_failslab+0x5/0x20 [ 1897.453003] kmem_cache_alloc+0x5b/0x310 [ 1897.453879] __kernfs_new_node+0xd4/0x860 [ 1897.454781] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1897.455794] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1897.456823] ? wait_for_completion_io+0x270/0x270 [ 1897.457849] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1897.458996] kernfs_new_node+0x93/0x120 [ 1897.459844] __kernfs_create_file+0x51/0x350 [ 1897.460791] sysfs_add_file_mode_ns+0x221/0x560 [ 1897.461805] internal_create_group+0x324/0xb30 [ 1897.462805] ? sysfs_remove_group+0x170/0x170 [ 1897.463769] ? kernfs_name_hash+0xe7/0x110 [ 1897.464681] ? kernfs_find_ns+0x256/0x380 [ 1897.465592] sysfs_slab_add+0x188/0x200 [ 1897.466450] __kmem_cache_create+0x3db/0x520 [ 1897.467426] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1897.468525] p9_client_create+0xc2b/0x11c0 [ 1897.469460] ? p9_client_flush+0x430/0x430 [ 1897.470381] ? trace_hardirqs_on+0x5b/0x180 [ 1897.471328] ? lockdep_init_map_type+0x2c7/0x780 [ 1897.472362] ? __raw_spin_lock_init+0x36/0x110 [ 1897.473364] v9fs_session_init+0x1dd/0x1680 [ 1897.474298] ? lock_release+0x680/0x680 [ 1897.475192] ? kmem_cache_alloc_trace+0x151/0x320 [ 1897.476247] ? v9fs_show_options+0x690/0x690 [ 1897.477224] ? trace_hardirqs_on+0x5b/0x180 [ 1897.478168] ? kasan_unpoison_shadow+0x33/0x50 [ 1897.479186] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1897.480308] v9fs_mount+0x79/0x8f0 [ 1897.481094] ? v9fs_write_inode+0x60/0x60 [ 1897.482017] legacy_get_tree+0x105/0x220 [ 1897.482930] vfs_get_tree+0x8e/0x300 [ 1897.483762] path_mount+0x13be/0x20b0 [ 1897.484609] ? strncpy_from_user+0x9e/0x470 [ 1897.485477] ? finish_automount+0xa90/0xa90 [ 1897.486429] ? getname_flags.part.0+0x1dd/0x4f0 [ 1897.487471] ? _copy_from_user+0xfb/0x1b0 [ 1897.488414] __x64_sys_mount+0x282/0x300 [ 1897.489324] ? copy_mnt_ns+0xa00/0xa00 [ 1897.490196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.491355] do_syscall_64+0x33/0x40 [ 1897.492186] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1897.493317] RIP: 0033:0x7fef9ce93b19 [ 1897.494148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.498238] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1897.499956] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1897.501558] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1897.503175] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1897.504774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1897.506398] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:23:25 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000042000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000940)={{}, 0x0, 0x1a, @inherit={0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000030000000000000001010000000000000180000000000000140000000000000080ffffffffffffff0600000000000000d30500000000000006000000000000000900000000000000030000000000000020"]}, @subvolid=0x4}) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r5, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001e00)={{r5}, r6, 0x1a, @inherit={0x58, &(0x7f0000000140)={0x1, 0x2, 0x81, 0x1, {0x3, 0x1, 0x1, 0x10001, 0x400c7e56}, [0x0, 0x18117711]}}, @devid}) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000000)={0x7, 0x3, 0x9, {0x9, 0x4}, 0x3, 0x6}) 08:23:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) [ 1897.601877] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1897.603754] CPU: 0 PID: 11724 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1897.605171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.606865] Call Trace: [ 1897.607408] dump_stack+0x107/0x167 [ 1897.608153] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1897.609220] p9_client_create+0xc2b/0x11c0 [ 1897.610088] ? p9_client_flush+0x430/0x430 [ 1897.610968] ? trace_hardirqs_on+0x5b/0x180 [ 1897.611847] ? lockdep_init_map_type+0x2c7/0x780 [ 1897.612814] ? __raw_spin_lock_init+0x36/0x110 [ 1897.613747] v9fs_session_init+0x1dd/0x1680 [ 1897.614619] ? lock_release+0x680/0x680 [ 1897.615462] ? kmem_cache_alloc_trace+0x151/0x320 [ 1897.616432] ? v9fs_show_options+0x690/0x690 [ 1897.617331] ? trace_hardirqs_on+0x5b/0x180 [ 1897.618195] ? kasan_unpoison_shadow+0x33/0x50 [ 1897.619144] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1897.620167] v9fs_mount+0x79/0x8f0 [ 1897.620897] ? v9fs_write_inode+0x60/0x60 [ 1897.621730] legacy_get_tree+0x105/0x220 [ 1897.622557] vfs_get_tree+0x8e/0x300 [ 1897.623326] path_mount+0x13be/0x20b0 [ 1897.624111] ? strncpy_from_user+0x9e/0x470 [ 1897.624978] ? finish_automount+0xa90/0xa90 [ 1897.625854] ? getname_flags.part.0+0x1dd/0x4f0 [ 1897.626808] ? _copy_from_user+0xfb/0x1b0 [ 1897.627665] __x64_sys_mount+0x282/0x300 [ 1897.628489] ? copy_mnt_ns+0xa00/0xa00 [ 1897.629294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.630329] do_syscall_64+0x33/0x40 [ 1897.631095] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1897.632124] RIP: 0033:0x7fef9ce93b19 [ 1897.632884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.636550] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1897.638239] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1897.639671] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1897.641119] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1897.642545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1897.643999] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:23:25 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="18003b005c31bf81f4b54d404ab2879464b931ae7ce57bbafc448bfde650436fb05775ac8ddbdf44f78e45338b8bee15123781bbda7ed5026f1712e20a3d9bf2fe159db9534212ea7a8cb9ba1e6ada710100000011a2b917d62bb10b42dad1add8dbfde2ff448d52b280d1180cc867f76162dbb38b1ba962f3429a8338faab88613fd8c3e731cf93cedaca308075cfef444b7c2871d4d915a96e8efe0f0b22dc14f1ecf0cc98", @ANYRES32, @ANYBLOB="f2ba57618d812befee1aaf1c3834fc76fdfeb294ae04be530d3eea12529e839c8ab70000003e7129f03b598d56b5ba2aa5edd8b00b909c8a31f2b4669efcc8d68938e7a0dcf89422358c423da4c49d527799a31648482e555587ad20896bb6489d98ab949cbe8960854f11e48ac31a28db2dc22c7ff05c9571a1ea5025e5077301e11f9b4aef7d9b07c6b12d97843ec67b0a27861d53f16fec51b8f16a7ee269d8a4a45c78fbce63021a33a2b57dce7700d897b986eb222919332ee2bb02dba25cf26fb04e571f9b"], 0x1e8}}, 0x4008040) creat(&(0x7f0000000340)='./file1\x00', 0x19) 08:23:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000783000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:23:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000860000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:23:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x1, 0x0) 08:23:25 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'netdevsim0\x00', 0xca4}) pipe(&(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r3, 0x0, r3) 08:23:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 88) 08:23:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000300)={0x15127980, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x3, &(0x7f0000000700)=0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000100), 0x3ff, 0xc000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x2200, 0x0) io_submit(r0, 0x2, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r1, &(0x7f0000000080)="0c26d3e393", 0x5, 0xffffffff00000000, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000140)="7842e728a7988b2942b791f5897d190dd71b86c493bb3d828b9305911fe9d4a11ac43fcdc828a1a96288adfaa64c0f273e8de1c0", 0x34, 0x3, 0x0, 0x0, r3}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0xce, r4, 0x0}]) 08:23:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) 08:23:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000785000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:23:40 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="18003b005c31bf81f4b54d404ab2879464b931ae7ce57bbafc448bfde650436fb05775ac8ddbdf44f78e45338b8bee15123781bbda7ed5026f1712e20a3d9bf2fe159db9534212ea7a8cb9ba1e6ada710100000011a2b917d62bb10b42dad1add8dbfde2ff448d52b280d1180cc867f76162dbb38b1ba962f3429a8338faab88613fd8c3e731cf93cedaca308075cfef444b7c2871d4d915a96e8efe0f0b22dc14f1ecf0cc98", @ANYRES32, @ANYBLOB="f2ba57618d812befee1aaf1c3834fc76fdfeb294ae04be530d3eea12529e839c8ab70000003e7129f03b598d56b5ba2aa5edd8b00b909c8a31f2b4669efcc8d68938e7a0dcf89422358c423da4c49d527799a31648482e555587ad20896bb6489d98ab949cbe8960854f11e48ac31a28db2dc22c7ff05c9571a1ea5025e5077301e11f9b4aef7d9b07c6b12d97843ec67b0a27861d53f16fec51b8f16a7ee269d8a4a45c78fbce63021a33a2b57dce7700d897b986eb222919332ee2bb02dba25cf26fb04e571f9b"], 0x1e8}}, 0x4008040) creat(&(0x7f0000000340)='./file1\x00', 0x19) 08:23:40 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'netdevsim0\x00', 0xca4}) pipe(&(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) 08:23:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:23:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100ffffff9e0000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:23:40 executing program 6: r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) [ 1912.935931] FAULT_INJECTION: forcing a failure. [ 1912.935931] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.938415] CPU: 1 PID: 11774 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1912.939261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1912.940254] Call Trace: [ 1912.940572] dump_stack+0x107/0x167 [ 1912.941009] should_fail.cold+0x5/0xa [ 1912.941466] ? create_object.isra.0+0x3a/0xa20 [ 1912.942012] should_failslab+0x5/0x20 [ 1912.942463] kmem_cache_alloc+0x5b/0x310 [ 1912.942957] create_object.isra.0+0x3a/0xa20 [ 1912.943476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1912.944209] kmem_cache_alloc+0x159/0x310 [ 1912.944819] __kernfs_new_node+0xd4/0x860 [ 1912.945385] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1912.945972] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1912.946657] ? wait_for_completion_io+0x270/0x270 [ 1912.947376] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1912.948110] kernfs_new_node+0x93/0x120 [ 1912.948585] __kernfs_create_file+0x51/0x350 [ 1912.949230] sysfs_add_file_mode_ns+0x221/0x560 [ 1912.949851] internal_create_group+0x324/0xb30 [ 1912.950529] ? sysfs_remove_group+0x170/0x170 [ 1912.951069] ? kernfs_name_hash+0xe7/0x110 [ 1912.951678] ? kernfs_find_ns+0x256/0x380 [ 1912.952197] sysfs_slab_add+0x188/0x200 [ 1912.952690] __kmem_cache_create+0x3db/0x520 [ 1912.953241] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1912.954016] p9_client_create+0xc2b/0x11c0 [ 1912.954583] ? p9_client_flush+0x430/0x430 [ 1912.955110] ? trace_hardirqs_on+0x5b/0x180 [ 1912.955744] ? lockdep_init_map_type+0x2c7/0x780 [ 1912.956401] ? __raw_spin_lock_init+0x36/0x110 [ 1912.957089] v9fs_session_init+0x1dd/0x1680 [ 1912.957617] ? lock_release+0x680/0x680 [ 1912.958201] ? kmem_cache_alloc_trace+0x151/0x320 [ 1912.958882] ? v9fs_show_options+0x690/0x690 [ 1912.959554] ? trace_hardirqs_on+0x5b/0x180 [ 1912.960091] ? kasan_unpoison_shadow+0x33/0x50 [ 1912.960678] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1912.961380] v9fs_mount+0x79/0x8f0 [ 1912.961815] ? v9fs_write_inode+0x60/0x60 [ 1912.962328] legacy_get_tree+0x105/0x220 [ 1912.962918] vfs_get_tree+0x8e/0x300 [ 1912.963471] path_mount+0x13be/0x20b0 [ 1912.963945] ? strncpy_from_user+0x9e/0x470 [ 1912.964473] ? finish_automount+0xa90/0xa90 [ 1912.965040] ? getname_flags.part.0+0x1dd/0x4f0 [ 1912.965684] ? _copy_from_user+0xfb/0x1b0 [ 1912.966298] __x64_sys_mount+0x282/0x300 [ 1912.966940] ? copy_mnt_ns+0xa00/0xa00 [ 1912.967423] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1912.968066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1912.968704] do_syscall_64+0x33/0x40 [ 1912.969257] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1912.969946] RIP: 0033:0x7fef9ce93b19 [ 1912.970502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1912.972808] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1912.973746] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1912.974611] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1912.975482] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1912.976313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1912.977175] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:23:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100fffffff00000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:23:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 89) 08:23:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="18003b005c31bf81f4b54d404ab2879464b931ae7ce57bbafc448bfde650436fb05775ac8ddbdf44f78e45338b8bee15123781bbda7ed5026f1712e20a3d9bf2fe159db9534212ea7a8cb9ba1e6ada710100000011a2b917d62bb10b42dad1add8dbfde2ff448d52b280d1180cc867f76162dbb38b1ba962f3429a8338faab88613fd8c3e731cf93cedaca308075cfef444b7c2871d4d915a96e8efe0f0b22dc14f1ecf0cc98", @ANYRES32, @ANYBLOB="f2ba57618d812befee1aaf1c3834fc76fdfeb294ae04be530d3eea12529e839c8ab70000003e7129f03b598d56b5ba2aa5edd8b00b909c8a31f2b4669efcc8d68938e7a0dcf89422358c423da4c49d527799a31648482e555587ad20896bb6489d98ab949cbe8960854f11e48ac31a28db2dc22c7ff05c9571a1ea5025e5077301e11f9b4aef7d9b07c6b12d97843ec67b0a27861d53f16fec51b8f16a7ee269d8a4a45c78fbce63021a33a2b57dce7700d897b986eb222919332ee2bb02dba25cf26fb04e571f9b"], 0x1e8}}, 0x4008040) 08:23:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000300)={0x15127980, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x3, &(0x7f0000000700)=0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000100), 0x3ff, 0xc000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x2200, 0x0) io_submit(r0, 0x2, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r1, &(0x7f0000000080)="0c26d3e393", 0x5, 0xffffffff00000000, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000140)="7842e728a7988b2942b791f5897d190dd71b86c493bb3d828b9305911fe9d4a11ac43fcdc828a1a96288adfaa64c0f273e8de1c0", 0x34, 0x3, 0x0, 0x0, r3}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0xce, r4, 0x0}]) 08:23:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:23:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0) 08:23:55 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'netdevsim0\x00', 0xca4}) pipe(&(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) 08:23:55 executing program 6: r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) 08:23:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001200010000f0ffff0000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:23:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x101, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00']) 08:23:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 08:23:55 executing program 6: r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) [ 1928.036209] audit: type=1326 audit(1700468635.611:527): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11798 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3ca960b19 code=0x0 [ 1928.078628] FAULT_INJECTION: forcing a failure. [ 1928.078628] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.081797] CPU: 1 PID: 11806 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1928.083219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1928.084865] Call Trace: [ 1928.085397] dump_stack+0x107/0x167 [ 1928.086132] should_fail.cold+0x5/0xa [ 1928.086896] ? __kernfs_new_node+0xd4/0x860 [ 1928.087777] should_failslab+0x5/0x20 [ 1928.088538] kmem_cache_alloc+0x5b/0x310 [ 1928.089360] __kernfs_new_node+0xd4/0x860 [ 1928.090196] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1928.091161] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1928.092143] ? wait_for_completion_io+0x270/0x270 [ 1928.093116] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1928.094185] kernfs_new_node+0x93/0x120 [ 1928.094986] __kernfs_create_file+0x51/0x350 [ 1928.095914] sysfs_add_file_mode_ns+0x221/0x560 [ 1928.096858] internal_create_group+0x324/0xb30 [ 1928.097778] ? sysfs_remove_group+0x170/0x170 [ 1928.098670] ? kernfs_name_hash+0xe7/0x110 [ 1928.099524] ? kernfs_find_ns+0x256/0x380 [ 1928.100364] sysfs_slab_add+0x188/0x200 [ 1928.101165] __kmem_cache_create+0x3db/0x520 [ 1928.102048] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1928.103074] p9_client_create+0xc2b/0x11c0 [ 1928.103936] ? p9_client_flush+0x430/0x430 [ 1928.104805] ? trace_hardirqs_on+0x5b/0x180 [ 1928.105668] ? lockdep_init_map_type+0x2c7/0x780 [ 1928.106643] ? __raw_spin_lock_init+0x36/0x110 [ 1928.107571] v9fs_session_init+0x1dd/0x1680 [ 1928.108445] ? lock_release+0x680/0x680 [ 1928.109250] ? kmem_cache_alloc_trace+0x151/0x320 [ 1928.110239] ? v9fs_show_options+0x690/0x690 [ 1928.111138] ? trace_hardirqs_on+0x5b/0x180 [ 1928.112007] ? kasan_unpoison_shadow+0x33/0x50 [ 1928.112918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1928.113938] v9fs_mount+0x79/0x8f0 [ 1928.114653] ? v9fs_write_inode+0x60/0x60 [ 1928.115499] legacy_get_tree+0x105/0x220 [ 1928.116311] vfs_get_tree+0x8e/0x300 [ 1928.117059] path_mount+0x13be/0x20b0 [ 1928.117826] ? strncpy_from_user+0x9e/0x470 [ 1928.118688] ? finish_automount+0xa90/0xa90 [ 1928.119558] ? getname_flags.part.0+0x1dd/0x4f0 [ 1928.120485] ? _copy_from_user+0xfb/0x1b0 [ 1928.121324] __x64_sys_mount+0x282/0x300 [ 1928.122142] ? copy_mnt_ns+0xa00/0xa00 [ 1928.122922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1928.123972] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1928.125008] do_syscall_64+0x33/0x40 [ 1928.125758] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1928.126773] RIP: 0033:0x7fef9ce93b19 [ 1928.127546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1928.131190] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1928.132710] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1928.134124] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1928.135551] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1928.136970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1928.138389] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1928.144487] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1928.146002] CPU: 0 PID: 11806 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1928.147258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1928.148756] Call Trace: [ 1928.149236] dump_stack+0x107/0x167 [ 1928.149864] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1928.150820] p9_client_create+0xc2b/0x11c0 [ 1928.151559] ? p9_client_flush+0x430/0x430 [ 1928.152319] ? trace_hardirqs_on+0x5b/0x180 [ 1928.153049] ? lockdep_init_map_type+0x2c7/0x780 [ 1928.153902] ? __raw_spin_lock_init+0x36/0x110 [ 1928.154686] v9fs_session_init+0x1dd/0x1680 [ 1928.155474] ? lock_release+0x680/0x680 [ 1928.156159] ? kmem_cache_alloc_trace+0x151/0x320 [ 1928.157015] ? v9fs_show_options+0x690/0x690 [ 1928.157763] ? trace_hardirqs_on+0x5b/0x180 [ 1928.158543] ? kasan_unpoison_shadow+0x33/0x50 [ 1928.159334] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1928.160250] v9fs_mount+0x79/0x8f0 [ 1928.160886] ? v9fs_write_inode+0x60/0x60 [ 1928.161640] legacy_get_tree+0x105/0x220 [ 1928.162350] vfs_get_tree+0x8e/0x300 [ 1928.163027] path_mount+0x13be/0x20b0 [ 1928.163710] ? strncpy_from_user+0x9e/0x470 [ 1928.164466] ? finish_automount+0xa90/0xa90 [ 1928.165219] ? getname_flags.part.0+0x1dd/0x4f0 [ 1928.166064] ? _copy_from_user+0xfb/0x1b0 [ 1928.166802] __x64_sys_mount+0x282/0x300 [ 1928.167543] ? copy_mnt_ns+0xa00/0xa00 [ 1928.168254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1928.169183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1928.170109] do_syscall_64+0x33/0x40 [ 1928.170763] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1928.171694] RIP: 0033:0x7fef9ce93b19 [ 1928.172359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1928.175652] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1928.177014] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1928.178274] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1928.179538] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1928.180846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1928.182013] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1928.184045] audit: type=1326 audit(1700468635.722:528): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11798 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3ca960b19 code=0x0 08:24:14 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 90) 08:24:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001007fffffff0000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:24:14 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) 08:24:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:24:14 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'netdevsim0\x00', 0xca4}) pipe(&(0x7f0000000140)) 08:24:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) r3 = fcntl$dupfd(r0, 0x406, r1) write$binfmt_elf32(r3, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="11473288ec7fc9c5ff2ccdbf1dd1f43e4d9e49db2f1900477a601546222310f9eaa2882d0bb71224fa471bc1a973277adc18c776aed9120d73766ccf6a4e050ece5cb3f91479102551a28278d1577ee3b858ff5d336524ca3600012ce837f68da6d3593a14741678ae461bcf7b6e707c3b749a84386729e21e2493ec514f17d590fbed126172ac1f8fa09577ae", @ANYBLOB="7e3b71a6840febf770387a628e423669596a9fcad97a96f3f0672f7858d4684329a9bcc681123d12d64f0a23ee0acd995e69a28508b750be52110939de0633aa5a2b2250c61740130d69e8e17752dec1e6ee9dda11697d9c5bf566699e6893146dc9931d0d305f660cdc800d516048ae13aac0300a1ace92afdd2c343d59237db271e9b6891fbf9e782936247580473751e08d398abeb014bbb5ccf7564bfff4c285aa3ac4c69717ad344edafd88b24b45b9839f7c6dd17143ab5acd2719bee0c2e6aaac3d217d4594ed51a1565d2aa499816c402f38724b9d199462b4783f0faf8b080e8a716e184e2dd2dc92aaff", @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT=r2, @ANYRES64=r1, @ANYRESOCT], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 08:24:14 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) 08:24:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}], 0x1, 0x0) [ 1947.316959] audit: type=1326 audit(1700468654.892:529): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11828 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3ca960b19 code=0x0 08:24:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000120001009effffff0000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:24:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe}}], 0x1, 0x0) 08:24:15 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'netdevsim0\x00', 0xca4}) 08:24:15 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) [ 1947.462604] FAULT_INJECTION: forcing a failure. [ 1947.462604] name failslab, interval 1, probability 0, space 0, times 0 [ 1947.465491] CPU: 1 PID: 11837 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1947.466905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1947.468598] Call Trace: [ 1947.469142] dump_stack+0x107/0x167 [ 1947.469892] should_fail.cold+0x5/0xa [ 1947.470672] ? __kernfs_new_node+0xd4/0x860 [ 1947.471568] should_failslab+0x5/0x20 [ 1947.472341] kmem_cache_alloc+0x5b/0x310 [ 1947.473184] __kernfs_new_node+0xd4/0x860 [ 1947.474031] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1947.475000] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1947.475977] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1947.477127] ? wait_for_completion_io+0x270/0x270 [ 1947.478225] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1947.479510] kernfs_new_node+0x93/0x120 [ 1947.480320] __kernfs_create_file+0x51/0x350 [ 1947.481209] sysfs_add_file_mode_ns+0x221/0x560 [ 1947.482160] internal_create_group+0x324/0xb30 [ 1947.483091] ? sysfs_remove_group+0x170/0x170 [ 1947.484008] ? kernfs_name_hash+0xe7/0x110 [ 1947.484868] ? kernfs_find_ns+0x256/0x380 [ 1947.485839] sysfs_slab_add+0x188/0x200 [ 1947.486652] __kmem_cache_create+0x3db/0x520 [ 1947.487778] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1947.488792] p9_client_create+0xc2b/0x11c0 [ 1947.489660] ? p9_client_flush+0x430/0x430 [ 1947.490520] ? trace_hardirqs_on+0x5b/0x180 [ 1947.491402] ? lockdep_init_map_type+0x2c7/0x780 [ 1947.492367] ? __raw_spin_lock_init+0x36/0x110 [ 1947.493299] v9fs_session_init+0x1dd/0x1680 [ 1947.494304] ? kmem_cache_alloc_trace+0x151/0x320 [ 1947.495438] ? v9fs_show_options+0x690/0x690 [ 1947.496408] ? trace_hardirqs_on+0x5b/0x180 [ 1947.497290] ? kasan_unpoison_shadow+0x33/0x50 [ 1947.498217] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1947.499248] v9fs_mount+0x79/0x8f0 [ 1947.499986] ? v9fs_write_inode+0x60/0x60 [ 1947.500824] legacy_get_tree+0x105/0x220 [ 1947.501645] vfs_get_tree+0x8e/0x300 [ 1947.502464] path_mount+0x13be/0x20b0 [ 1947.503303] ? strncpy_from_user+0x9e/0x470 [ 1947.504361] ? finish_automount+0xa90/0xa90 [ 1947.505256] ? getname_flags.part.0+0x1dd/0x4f0 [ 1947.506185] ? _copy_from_user+0xfb/0x1b0 [ 1947.507050] __x64_sys_mount+0x282/0x300 [ 1947.507881] ? copy_mnt_ns+0xa00/0xa00 [ 1947.508669] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1947.509724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1947.510912] do_syscall_64+0x33/0x40 [ 1947.511725] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1947.512932] RIP: 0033:0x7fef9ce93b19 [ 1947.513685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1947.517363] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1947.519085] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1947.520692] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1947.522127] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1947.523579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1947.525124] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1947.549651] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1947.551575] CPU: 1 PID: 11837 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1947.552964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1947.554747] Call Trace: [ 1947.555291] dump_stack+0x107/0x167 [ 1947.556032] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1947.557088] p9_client_create+0xc2b/0x11c0 [ 1947.557948] ? p9_client_flush+0x430/0x430 [ 1947.558820] ? trace_hardirqs_on+0x5b/0x180 [ 1947.559701] ? lockdep_init_map_type+0x2c7/0x780 [ 1947.560664] ? __raw_spin_lock_init+0x36/0x110 [ 1947.561590] v9fs_session_init+0x1dd/0x1680 [ 1947.562476] ? kmem_cache_alloc_trace+0x151/0x320 [ 1947.563463] ? v9fs_show_options+0x690/0x690 [ 1947.564357] ? trace_hardirqs_on+0x5b/0x180 [ 1947.565228] ? kasan_unpoison_shadow+0x33/0x50 [ 1947.566153] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1947.567182] v9fs_mount+0x79/0x8f0 [ 1947.567918] ? v9fs_write_inode+0x60/0x60 [ 1947.568747] legacy_get_tree+0x105/0x220 [ 1947.569561] vfs_get_tree+0x8e/0x300 [ 1947.570315] path_mount+0x13be/0x20b0 [ 1947.571082] ? strncpy_from_user+0x9e/0x470 [ 1947.571973] ? finish_automount+0xa90/0xa90 [ 1947.572840] ? getname_flags.part.0+0x1dd/0x4f0 [ 1947.573772] ? _copy_from_user+0xfb/0x1b0 [ 1947.574617] __x64_sys_mount+0x282/0x300 [ 1947.575474] ? copy_mnt_ns+0xa00/0xa00 [ 1947.576261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1947.577311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1947.578346] do_syscall_64+0x33/0x40 [ 1947.579100] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1947.580136] RIP: 0033:0x7fef9ce93b19 [ 1947.580884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1947.584590] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1947.586117] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1947.587543] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1947.588963] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1947.590391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1947.591816] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:24:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x13) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)=""/237, 0xed}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000004c0)=""/227, 0xe3}], 0x4, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000780)=""/191, 0xbf}, {&(0x7f0000000840)=""/199, 0xc7}, {&(0x7f0000000240)=""/8, 0x8}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/130, 0x82}, {&(0x7f0000001a80)=""/54, 0x36}, {&(0x7f0000001ac0)=""/163, 0xa3}], 0x9, &(0x7f0000001c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001d80)=""/173, 0xad}, {&(0x7f0000001e40)=""/246, 0xf6}, {&(0x7f0000001f40)=""/57, 0x39}, {&(0x7f0000001f80)=""/9, 0x9}], 0x4, &(0x7f0000002000)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000002080), 0x6e, &(0x7f0000004540)=[{&(0x7f0000002100)=""/214, 0xd6}, {&(0x7f0000002200)=""/157, 0x9d}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/252, 0xfc}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/122, 0x7a}, {&(0x7f0000004440)=""/228, 0xe4}], 0x7, &(0x7f00000045c0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x4002, &(0x7f0000004700)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000004740)=0x3ff, 0x4) r3 = creat(&(0x7f0000000940)='./file0\x00', 0x1) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000048c0)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004880)={&(0x7f00000047c0)={0xac, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x62b}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffc}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4085) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x4001820}, 0xc) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r5, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000004a00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x40) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000004900)={0x0, r1, 0x7fffffff, 0x8, 0xc26, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) 08:24:15 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) 08:24:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100f0ffffff0000000000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:24:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x1, 0x0) 08:24:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 91) 08:24:15 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) 08:24:15 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) [ 1948.181837] FAULT_INJECTION: forcing a failure. [ 1948.181837] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.184819] CPU: 0 PID: 11878 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1948.186234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1948.187951] Call Trace: [ 1948.188497] dump_stack+0x107/0x167 [ 1948.189249] should_fail.cold+0x5/0xa [ 1948.190029] ? create_object.isra.0+0x3a/0xa20 [ 1948.190979] should_failslab+0x5/0x20 [ 1948.191758] kmem_cache_alloc+0x5b/0x310 [ 1948.192591] create_object.isra.0+0x3a/0xa20 [ 1948.193479] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1948.194510] kmem_cache_alloc+0x159/0x310 [ 1948.195372] __kernfs_new_node+0xd4/0x860 [ 1948.196220] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1948.197186] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1948.198159] ? wait_for_completion_io+0x270/0x270 [ 1948.199164] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1948.200240] kernfs_new_node+0x93/0x120 [ 1948.201046] __kernfs_create_file+0x51/0x350 [ 1948.201933] sysfs_add_file_mode_ns+0x221/0x560 [ 1948.202879] internal_create_group+0x324/0xb30 [ 1948.203814] ? sysfs_remove_group+0x170/0x170 [ 1948.204716] ? kernfs_name_hash+0xe7/0x110 [ 1948.205575] ? kernfs_find_ns+0x256/0x380 [ 1948.206418] sysfs_slab_add+0x188/0x200 [ 1948.207223] __kmem_cache_create+0x3db/0x520 [ 1948.208131] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1948.209139] p9_client_create+0xc2b/0x11c0 [ 1948.210004] ? p9_client_flush+0x430/0x430 [ 1948.210857] ? trace_hardirqs_on+0x5b/0x180 [ 1948.211740] ? lockdep_init_map_type+0x2c7/0x780 [ 1948.212702] ? __raw_spin_lock_init+0x36/0x110 [ 1948.213627] v9fs_session_init+0x1dd/0x1680 [ 1948.214496] ? lock_release+0x680/0x680 [ 1948.215360] ? kmem_cache_alloc_trace+0x151/0x320 [ 1948.216579] ? v9fs_show_options+0x690/0x690 [ 1948.217661] ? trace_hardirqs_on+0x5b/0x180 [ 1948.218710] ? kasan_unpoison_shadow+0x33/0x50 [ 1948.219854] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1948.221098] v9fs_mount+0x79/0x8f0 [ 1948.221972] ? v9fs_write_inode+0x60/0x60 [ 1948.222979] legacy_get_tree+0x105/0x220 [ 1948.223978] vfs_get_tree+0x8e/0x300 [ 1948.224898] path_mount+0x13be/0x20b0 [ 1948.225830] ? strncpy_from_user+0x9e/0x470 [ 1948.226880] ? finish_automount+0xa90/0xa90 [ 1948.227934] ? getname_flags.part.0+0x1dd/0x4f0 [ 1948.229067] ? _copy_from_user+0xfb/0x1b0 [ 1948.230089] __x64_sys_mount+0x282/0x300 [ 1948.231087] ? copy_mnt_ns+0xa00/0xa00 [ 1948.232070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1948.233164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1948.234205] do_syscall_64+0x33/0x40 [ 1948.234968] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1948.236023] RIP: 0033:0x7fef9ce93b19 [ 1948.236800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1948.240569] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1948.242118] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1948.243589] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1948.245049] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1948.246504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1948.247960] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:24:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000080000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:24:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x13) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)=""/237, 0xed}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000004c0)=""/227, 0xe3}], 0x4, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000780)=""/191, 0xbf}, {&(0x7f0000000840)=""/199, 0xc7}, {&(0x7f0000000240)=""/8, 0x8}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/130, 0x82}, {&(0x7f0000001a80)=""/54, 0x36}, {&(0x7f0000001ac0)=""/163, 0xa3}], 0x9, &(0x7f0000001c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001d80)=""/173, 0xad}, {&(0x7f0000001e40)=""/246, 0xf6}, {&(0x7f0000001f40)=""/57, 0x39}, {&(0x7f0000001f80)=""/9, 0x9}], 0x4, &(0x7f0000002000)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000002080), 0x6e, &(0x7f0000004540)=[{&(0x7f0000002100)=""/214, 0xd6}, {&(0x7f0000002200)=""/157, 0x9d}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/252, 0xfc}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/122, 0x7a}, {&(0x7f0000004440)=""/228, 0xe4}], 0x7, &(0x7f00000045c0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x4002, &(0x7f0000004700)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000004740)=0x3ff, 0x4) r3 = creat(&(0x7f0000000940)='./file0\x00', 0x1) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000048c0)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004880)={&(0x7f00000047c0)={0xac, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x62b}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffc}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4085) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x4001820}, 0xc) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) ioctl$LOOP_SET_STATUS(r5, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000019c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000d2dde880019b3feeccf46a3e8d051c1e2840da997f8be8e1171887b0b32ce65b52c79d98e72437c18837b215ce5705439b0921ad6b16349d6abd605dbdffd3d590c609f4aa71de372cb21239312a0740ce134300441f719e69255b9e29975e2dd8db7a7e9e5a57ab1a1de260f98ed010106b745321d68b42d1f323f404404fa5f59cbd3b88454c4650b4b1cfe344502d181c2fa4636c000000000000000000000000bd65fdb9df02207dc2a4d636969947a33d1438d1e0735d79131dc2ebad55d3fc611b202cbddba720ce2d68da3ea90d87944335586d901be80f90b9f3f7e8345515f439d34cf350a3365b34e635"]) write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1277], 0x4fd) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000004a00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x40) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000004900)={0x0, r1, 0x7fffffff, 0x8, 0xc26, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) 08:24:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00}}], 0x1, 0x0) 08:24:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 92) 08:24:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:24:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7}, 0x7) fallocate(r0, 0x20, 0x0, 0x8000) 08:24:31 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r6}}, 0x7) 08:24:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) 08:24:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000003400000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:24:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80}}], 0x1, 0x0) [ 1964.127470] audit: type=1326 audit(1700468671.691:530): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11891 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3ca960b19 code=0x0 [ 1964.161112] audit: type=1326 audit(1700468671.735:531): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11891 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3ca960b19 code=0x0 08:24:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) fallocate(r0, 0x20, 0x0, 0x8000) 08:24:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) 08:24:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 1964.202381] FAULT_INJECTION: forcing a failure. [ 1964.202381] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.204573] CPU: 0 PID: 11901 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1964.205608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.206760] Call Trace: [ 1964.207128] dump_stack+0x107/0x167 [ 1964.207646] should_fail.cold+0x5/0xa [ 1964.208184] ? create_object.isra.0+0x3a/0xa20 [ 1964.208833] should_failslab+0x5/0x20 [ 1964.209371] kmem_cache_alloc+0x5b/0x310 [ 1964.209944] create_object.isra.0+0x3a/0xa20 [ 1964.210570] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1964.211278] kmem_cache_alloc+0x159/0x310 [ 1964.211864] ? mark_lock+0xf5/0x2df0 [ 1964.212390] __kernfs_new_node+0xd4/0x860 [ 1964.212970] ? lock_chain_count+0x20/0x20 [ 1964.213548] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1964.214213] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1964.214894] ? wait_for_completion_io+0x270/0x270 [ 1964.215578] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1964.216320] kernfs_new_node+0x93/0x120 [ 1964.216877] __kernfs_create_file+0x51/0x350 [ 1964.217490] sysfs_add_file_mode_ns+0x221/0x560 [ 1964.218146] internal_create_group+0x324/0xb30 [ 1964.218785] ? sysfs_remove_group+0x170/0x170 [ 1964.219414] ? kernfs_name_hash+0xe7/0x110 [ 1964.220007] ? kernfs_find_ns+0x256/0x380 [ 1964.220589] sysfs_slab_add+0x188/0x200 [ 1964.221143] __kmem_cache_create+0x3db/0x520 [ 1964.221754] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1964.222453] p9_client_create+0xc2b/0x11c0 [ 1964.223052] ? p9_client_flush+0x430/0x430 [ 1964.223663] ? trace_hardirqs_on+0x5b/0x180 [ 1964.224266] ? lockdep_init_map_type+0x2c7/0x780 [ 1964.224924] ? __raw_spin_lock_init+0x36/0x110 [ 1964.225567] v9fs_session_init+0x1dd/0x1680 [ 1964.226162] ? lock_release+0x680/0x680 [ 1964.226718] ? kmem_cache_alloc_trace+0x151/0x320 [ 1964.227386] ? v9fs_show_options+0x690/0x690 [ 1964.228013] ? trace_hardirqs_on+0x5b/0x180 [ 1964.228617] ? kasan_unpoison_shadow+0x33/0x50 [ 1964.229252] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1964.229960] v9fs_mount+0x79/0x8f0 [ 1964.230451] ? v9fs_write_inode+0x60/0x60 [ 1964.231026] legacy_get_tree+0x105/0x220 [ 1964.231603] vfs_get_tree+0x8e/0x300 [ 1964.232123] path_mount+0x13be/0x20b0 [ 1964.232668] ? strncpy_from_user+0x9e/0x470 [ 1964.233269] ? finish_automount+0xa90/0xa90 [ 1964.233868] ? getname_flags.part.0+0x1dd/0x4f0 [ 1964.234512] ? _copy_from_user+0xfb/0x1b0 [ 1964.235099] __x64_sys_mount+0x282/0x300 [ 1964.235698] ? copy_mnt_ns+0xa00/0xa00 [ 1964.236248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1964.236976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1964.237700] do_syscall_64+0x33/0x40 [ 1964.238224] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1964.238939] RIP: 0033:0x7fef9ce93b19 [ 1964.239454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.242006] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1964.243075] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1964.244078] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1964.245073] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1964.246058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1964.247077] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:24:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:24:31 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 08:24:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100fffffffffffff00000000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:24:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 93) [ 1964.444139] audit: type=1326 audit(1700468672.019:532): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11912 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3ca960b19 code=0x0 [ 1964.465182] audit: type=1326 audit(1700468672.040:533): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11913 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc525cc1b19 code=0x0 [ 1964.516696] audit: type=1326 audit(1700468672.090:534): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11913 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc525cc1b19 code=0x0 [ 1964.586470] FAULT_INJECTION: forcing a failure. [ 1964.586470] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.588441] CPU: 0 PID: 11925 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1964.589230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.590133] Call Trace: [ 1964.590436] dump_stack+0x107/0x167 [ 1964.590838] should_fail.cold+0x5/0xa [ 1964.591261] ? __kernfs_new_node+0xd4/0x860 [ 1964.591740] should_failslab+0x5/0x20 [ 1964.592161] kmem_cache_alloc+0x5b/0x310 [ 1964.592602] __kernfs_new_node+0xd4/0x860 [ 1964.593052] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1964.593574] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1964.594094] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1964.594687] ? wait_for_completion_io+0x270/0x270 [ 1964.595214] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1964.595798] kernfs_new_node+0x93/0x120 [ 1964.596236] __kernfs_create_file+0x51/0x350 [ 1964.596720] sysfs_add_file_mode_ns+0x221/0x560 [ 1964.597240] internal_create_group+0x324/0xb30 [ 1964.597734] ? sysfs_remove_group+0x170/0x170 [ 1964.598216] ? kernfs_name_hash+0xe7/0x110 [ 1964.598678] ? kernfs_find_ns+0x256/0x380 [ 1964.599136] sysfs_slab_add+0x188/0x200 [ 1964.599583] __kmem_cache_create+0x3db/0x520 [ 1964.600061] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1964.600595] p9_client_create+0xc2b/0x11c0 [ 1964.601057] ? p9_client_flush+0x430/0x430 [ 1964.601513] ? trace_hardirqs_on+0x5b/0x180 [ 1964.601985] ? lockdep_init_map_type+0x2c7/0x780 [ 1964.602502] ? __raw_spin_lock_init+0x36/0x110 [ 1964.603003] v9fs_session_init+0x1dd/0x1680 [ 1964.603466] ? lock_release+0x680/0x680 [ 1964.603922] ? kmem_cache_alloc_trace+0x151/0x320 [ 1964.604440] ? v9fs_show_options+0x690/0x690 [ 1964.604919] ? trace_hardirqs_on+0x5b/0x180 [ 1964.605390] ? kasan_unpoison_shadow+0x33/0x50 [ 1964.605883] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1964.606432] v9fs_mount+0x79/0x8f0 [ 1964.606822] ? v9fs_write_inode+0x60/0x60 [ 1964.607282] legacy_get_tree+0x105/0x220 [ 1964.607732] vfs_get_tree+0x8e/0x300 [ 1964.608134] path_mount+0x13be/0x20b0 [ 1964.608552] ? strncpy_from_user+0x9e/0x470 [ 1964.609021] ? finish_automount+0xa90/0xa90 [ 1964.609486] ? getname_flags.part.0+0x1dd/0x4f0 [ 1964.609980] ? _copy_from_user+0xfb/0x1b0 [ 1964.610430] __x64_sys_mount+0x282/0x300 [ 1964.610861] ? copy_mnt_ns+0xa00/0xa00 [ 1964.611287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1964.611857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1964.612413] do_syscall_64+0x33/0x40 [ 1964.612815] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1964.613365] RIP: 0033:0x7fef9ce93b19 [ 1964.613765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.615723] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1964.616531] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1964.617287] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1964.618046] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1964.618802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1964.619579] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 1964.641873] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1964.642934] CPU: 0 PID: 11925 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1964.643683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.644573] Call Trace: [ 1964.644854] dump_stack+0x107/0x167 [ 1964.645244] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1964.645795] p9_client_create+0xc2b/0x11c0 [ 1964.646255] ? p9_client_flush+0x430/0x430 [ 1964.646707] ? trace_hardirqs_on+0x5b/0x180 [ 1964.647165] ? lockdep_init_map_type+0x2c7/0x780 [ 1964.647689] ? __raw_spin_lock_init+0x36/0x110 [ 1964.648179] v9fs_session_init+0x1dd/0x1680 [ 1964.648632] ? lock_release+0x680/0x680 [ 1964.649063] ? kmem_cache_alloc_trace+0x151/0x320 [ 1964.649578] ? v9fs_show_options+0x690/0x690 [ 1964.650052] ? trace_hardirqs_on+0x5b/0x180 [ 1964.650511] ? kasan_unpoison_shadow+0x33/0x50 [ 1964.650996] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1964.651555] v9fs_mount+0x79/0x8f0 [ 1964.651934] ? v9fs_write_inode+0x60/0x60 [ 1964.652375] legacy_get_tree+0x105/0x220 [ 1964.652826] vfs_get_tree+0x8e/0x300 [ 1964.653220] path_mount+0x13be/0x20b0 [ 1964.653625] ? strncpy_from_user+0x9e/0x470 [ 1964.654084] ? finish_automount+0xa90/0xa90 [ 1964.654542] ? getname_flags.part.0+0x1dd/0x4f0 [ 1964.655034] ? _copy_from_user+0xfb/0x1b0 [ 1964.655478] __x64_sys_mount+0x282/0x300 [ 1964.655925] ? copy_mnt_ns+0xa00/0xa00 [ 1964.656346] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1964.656894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1964.657444] do_syscall_64+0x33/0x40 [ 1964.657835] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1964.658455] RIP: 0033:0x7fef9ce93b19 [ 1964.658943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.660870] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1964.661665] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1964.662453] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1964.663202] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1964.663970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1964.664714] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:24:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) fallocate(r0, 0x20, 0x0, 0x8000) 08:24:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:24:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0}}], 0x1, 0x0) 08:24:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 94) 08:24:46 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) 08:24:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000000100000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:24:46 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 08:24:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) 08:24:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) fallocate(r0, 0x20, 0x0, 0x8000) 08:24:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) 08:24:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}}], 0x1, 0x0) 08:24:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x10, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:24:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000000200000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 1979.334960] FAULT_INJECTION: forcing a failure. [ 1979.334960] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.338428] CPU: 0 PID: 11947 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1979.339993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1979.341690] Call Trace: [ 1979.342244] dump_stack+0x107/0x167 [ 1979.342995] should_fail.cold+0x5/0xa [ 1979.343835] ? create_object.isra.0+0x3a/0xa20 [ 1979.344939] should_failslab+0x5/0x20 [ 1979.345859] kmem_cache_alloc+0x5b/0x310 [ 1979.346845] create_object.isra.0+0x3a/0xa20 [ 1979.347924] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1979.347963] kmem_cache_alloc+0x159/0x310 [ 1979.348005] __kernfs_new_node+0xd4/0x860 [ 1979.351234] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1979.352415] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1979.353566] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1979.354875] ? wait_for_completion_io+0x270/0x270 [ 1979.356103] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1979.357221] kernfs_new_node+0x93/0x120 [ 1979.358028] __kernfs_create_file+0x51/0x350 [ 1979.358939] sysfs_add_file_mode_ns+0x221/0x560 [ 1979.359901] internal_create_group+0x324/0xb30 [ 1979.360877] ? sysfs_remove_group+0x170/0x170 [ 1979.361807] ? kernfs_find_ns+0x256/0x380 [ 1979.362660] sysfs_slab_add+0x188/0x200 [ 1979.363482] __kmem_cache_create+0x3db/0x520 [ 1979.364566] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1979.365591] p9_client_create+0xc2b/0x11c0 [ 1979.366469] ? p9_client_flush+0x430/0x430 [ 1979.367331] ? trace_hardirqs_on+0x5b/0x180 [ 1979.368215] ? lockdep_init_map_type+0x2c7/0x780 [ 1979.369184] ? __raw_spin_lock_init+0x36/0x110 [ 1979.370112] v9fs_session_init+0x1dd/0x1680 [ 1979.370983] ? lock_release+0x680/0x680 [ 1979.371811] ? kmem_cache_alloc_trace+0x151/0x320 [ 1979.372785] ? v9fs_show_options+0x690/0x690 [ 1979.373726] ? trace_hardirqs_on+0x5b/0x180 [ 1979.374596] ? kasan_unpoison_shadow+0x33/0x50 [ 1979.375519] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1979.376561] v9fs_mount+0x79/0x8f0 [ 1979.377290] ? v9fs_write_inode+0x60/0x60 [ 1979.378122] legacy_get_tree+0x105/0x220 [ 1979.378945] vfs_get_tree+0x8e/0x300 [ 1979.379718] path_mount+0x13be/0x20b0 [ 1979.380499] ? strncpy_from_user+0x9e/0x470 [ 1979.381373] ? finish_automount+0xa90/0xa90 [ 1979.382242] ? getname_flags.part.0+0x1dd/0x4f0 [ 1979.383171] ? _copy_from_user+0xfb/0x1b0 [ 1979.384031] __x64_sys_mount+0x282/0x300 [ 1979.384845] ? copy_mnt_ns+0xa00/0xa00 [ 1979.385630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1979.386677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1979.387745] do_syscall_64+0x33/0x40 [ 1979.388511] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1979.389542] RIP: 0033:0x7fef9ce93b19 [ 1979.390300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1979.393989] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1979.395518] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1979.396985] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1979.398416] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1979.399852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1979.401280] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:24:46 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) 08:24:47 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 08:24:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) [ 1979.649425] audit: type=1326 audit(1700468687.225:535): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11958 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3ca960b19 code=0x0 08:25:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) 08:25:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x210, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:25:01 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e3, &(0x7f0000000580)=0x0) pipe(0x0) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x20000000000081}}, r4, 0x0, r3, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x75, 0xf0, 0x3f, 0x9, 0x0, 0x401, 0x8008, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x5}, 0x8, 0x200, 0x6, 0x3, 0xa0, 0x21, 0x10, 0x0, 0x9, 0x0, 0x10}, r4, 0x1, r0, 0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 08:25:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 95) 08:25:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) 08:25:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000000300000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:25:01 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 08:25:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 08:25:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) [ 1994.398740] serio: Serial port tty25 [ 1994.430880] FAULT_INJECTION: forcing a failure. [ 1994.430880] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.432776] CPU: 1 PID: 11987 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 1994.433845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.434969] Call Trace: [ 1994.435393] dump_stack+0x107/0x167 [ 1994.436017] should_fail.cold+0x5/0xa [ 1994.436483] ? create_object.isra.0+0x3a/0xa20 [ 1994.437190] should_failslab+0x5/0x20 [ 1994.437656] kmem_cache_alloc+0x5b/0x310 [ 1994.438349] create_object.isra.0+0x3a/0xa20 [ 1994.438952] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1994.439570] kmem_cache_alloc+0x159/0x310 [ 1994.440250] __kernfs_new_node+0xd4/0x860 [ 1994.440779] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1994.441378] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1994.441997] ? wait_for_completion_io+0x270/0x270 [ 1994.442611] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1994.443372] kernfs_new_node+0x93/0x120 [ 1994.444058] __kernfs_create_file+0x51/0x350 [ 1994.444618] sysfs_add_file_mode_ns+0x221/0x560 [ 1994.445212] internal_create_group+0x324/0xb30 [ 1994.445800] ? sysfs_remove_group+0x170/0x170 [ 1994.446448] ? kernfs_name_hash+0xe7/0x110 [ 1994.447051] ? kernfs_find_ns+0x256/0x380 [ 1994.447761] sysfs_slab_add+0x188/0x200 [ 1994.448363] __kmem_cache_create+0x3db/0x520 [ 1994.448911] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1994.449524] p9_client_create+0xc2b/0x11c0 [ 1994.450046] ? p9_client_flush+0x430/0x430 [ 1994.450568] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1994.451253] ? lockdep_init_map_type+0x2c7/0x780 [ 1994.451923] ? __raw_spin_lock_init+0x36/0x110 [ 1994.452679] v9fs_session_init+0x1dd/0x1680 [ 1994.453298] ? lock_release+0x680/0x680 [ 1994.453789] ? kmem_cache_alloc_trace+0x151/0x320 [ 1994.454384] ? v9fs_show_options+0x690/0x690 [ 1994.454934] ? trace_hardirqs_on+0x5b/0x180 [ 1994.455464] ? kasan_unpoison_shadow+0x33/0x50 [ 1994.456032] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1994.456665] v9fs_mount+0x79/0x8f0 [ 1994.457124] ? v9fs_write_inode+0x60/0x60 [ 1994.457654] legacy_get_tree+0x105/0x220 [ 1994.458178] vfs_get_tree+0x8e/0x300 [ 1994.458662] path_mount+0x13be/0x20b0 [ 1994.459155] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1994.459803] ? trace_hardirqs_on+0x5b/0x180 [ 1994.460375] ? finish_automount+0xa90/0xa90 [ 1994.460944] ? __x64_sys_mount+0x1f6/0x300 [ 1994.461500] ? __x64_sys_mount+0x26d/0x300 [ 1994.462051] __x64_sys_mount+0x282/0x300 [ 1994.462574] ? copy_mnt_ns+0xa00/0xa00 [ 1994.463082] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.463765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.464439] do_syscall_64+0x33/0x40 [ 1994.464927] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1994.465546] RIP: 0033:0x7fef9ce93b19 [ 1994.466030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.468404] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1994.469376] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 1994.470291] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1994.471206] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 1994.472137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1994.473045] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 08:25:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 08:25:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) [ 1994.495343] serio: Serial port tty25 08:25:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x292, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) 08:25:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000000400000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:25:02 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 08:25:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) 08:25:18 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) 08:25:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 96) 08:25:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000000500000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) 08:25:18 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x142}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 08:25:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) 08:25:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x0) 08:25:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2b9, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 2011.345127] [ 2011.345438] ====================================================== [ 2011.346330] WARNING: possible circular locking dependency detected [ 2011.347146] 5.10.200 #1 Not tainted [ 2011.347655] ------------------------------------------------------ [ 2011.348550] syz-executor.2/12027 is trying to acquire lock: [ 2011.349335] ffff8880158f0b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2011.350792] [ 2011.350792] but task is already holding lock: 08:25:18 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7}, 0x7) fallocate(r0, 0x20, 0x0, 0x8000) [ 2011.351633] ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2011.353082] [ 2011.353082] which lock already depends on the new lock. [ 2011.353082] [ 2011.354225] [ 2011.354225] the existing dependency chain (in reverse order) is: [ 2011.357745] [ 2011.357745] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 2011.358698] __mutex_lock+0x13d/0x10b0 [ 2011.359311] rfkill_register+0x36/0xa10 [ 2011.359970] hci_register_dev+0x42e/0xc00 [ 2011.360655] __vhci_create_device+0x2c8/0x5c0 [ 2011.361341] vhci_open_timeout+0x38/0x50 [ 2011.361978] process_one_work+0x9a9/0x14b0 [ 2011.362641] worker_thread+0x61d/0x1310 [ 2011.363259] kthread+0x38f/0x470 [ 2011.363824] ret_from_fork+0x22/0x30 [ 2011.364467] [ 2011.364467] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 2011.365366] __mutex_lock+0x13d/0x10b0 [ 2011.365984] vhci_send_frame+0x63/0xa0 [ 2011.366605] hci_send_frame+0x1b9/0x320 [ 2011.367209] hci_tx_work+0x10af/0x1660 [ 2011.367814] process_one_work+0x9a9/0x14b0 [ 2011.368485] worker_thread+0x61d/0x1310 [ 2011.369093] kthread+0x38f/0x470 [ 2011.369631] ret_from_fork+0x22/0x30 [ 2011.370206] [ 2011.370206] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2011.371272] __flush_work+0x105/0xa90 [ 2011.371879] hci_dev_do_close+0x131/0x1240 [ 2011.372585] hci_unregister_dev+0x149/0x430 [ 2011.373269] vhci_release+0x70/0xf0 [ 2011.373850] __fput+0x285/0x980 [ 2011.374372] task_work_run+0xe2/0x1a0 [ 2011.374955] do_exit+0xb6f/0x2600 [ 2011.375551] do_group_exit+0x125/0x310 [ 2011.376146] __x64_sys_exit_group+0x3a/0x50 [ 2011.376790] do_syscall_64+0x33/0x40 [ 2011.377371] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2011.378127] [ 2011.378127] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 2011.379012] __mutex_lock+0x13d/0x10b0 [ 2011.379659] bg_scan_update+0x82/0x500 [ 2011.380270] process_one_work+0x9a9/0x14b0 [ 2011.380970] worker_thread+0x61d/0x1310 [ 2011.381612] kthread+0x38f/0x470 [ 2011.382148] ret_from_fork+0x22/0x30 [ 2011.382729] 08:25:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x4) [ 2011.382729] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 2011.384136] __lock_acquire+0x29e7/0x5b00 [ 2011.384784] lock_acquire+0x197/0x470 08:25:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100000000000000000600000000000000000000000000000000000000000200000014000d"], 0x3c}}, 0x0) [ 2011.385384] __flush_work+0x105/0xa90 [ 2011.386092] __cancel_work_timer+0x368/0x4c0 [ 2011.386785] hci_request_cancel_all+0x73/0x230 08:25:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000}}], 0x1, 0x0) [ 2011.387477] hci_dev_do_close+0xd9/0x1240 [ 2011.388329] hci_rfkill_set_block+0x166/0x1a0 [ 2011.389026] rfkill_set_block+0x1fd/0x540 [ 2011.389670] rfkill_fop_write+0x253/0x4b0 [ 2011.390327] vfs_write+0x29a/0xa70 [ 2011.390906] ksys_write+0x1f6/0x260 [ 2011.391481] do_syscall_64+0x33/0x40 [ 2011.392124] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2011.392917] [ 2011.392917] other info that might help us debug this: [ 2011.392917] [ 2011.394024] Chain exists of: [ 2011.394024] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 2011.394024] [ 2011.395910] Possible unsafe locking scenario: [ 2011.395910] [ 2011.396770] CPU0 CPU1 [ 2011.397402] ---- ---- [ 2011.398018] lock(rfkill_global_mutex); [ 2011.398604] lock(&data->open_mutex); [ 2011.399471] lock(rfkill_global_mutex); [ 2011.400418] lock((work_completion)(&hdev->bg_scan_update)); [ 2011.401229] [ 2011.401229] *** DEADLOCK *** [ 2011.401229] [ 2011.402061] 1 lock held by syz-executor.2/12027: [ 2011.402708] #0: ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2011.404017] [ 2011.404017] stack backtrace: [ 2011.404647] CPU: 1 PID: 12027 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2011.405591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2011.406777] Call Trace: [ 2011.407159] dump_stack+0x107/0x167 [ 2011.407696] check_noncircular+0x263/0x2e0 [ 2011.408310] ? register_lock_class+0xbb/0x17b0 [ 2011.408948] ? print_circular_bug+0x470/0x470 [ 2011.409592] ? perf_tp_event+0x5ce/0xc00 [ 2011.410157] ? find_first_zero_bit+0x94/0xb0 [ 2011.410782] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 2011.411419] __lock_acquire+0x29e7/0x5b00 [ 2011.412017] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2011.412676] ? SOFTIRQ_verbose+0x10/0x10 [ 2011.413117] ? __lockdep_reset_lock+0x180/0x180 [ 2011.413625] lock_acquire+0x197/0x470 [ 2011.414036] ? __flush_work+0xdd/0xa90 [ 2011.414455] ? lock_release+0x680/0x680 [ 2011.414897] ? __flush_work+0x78c/0xa90 [ 2011.415339] ? lock_downgrade+0x6d0/0x6d0 [ 2011.415799] __flush_work+0x105/0xa90 [ 2011.416243] ? __flush_work+0xdd/0xa90 [ 2011.416661] ? lock_chain_count+0x20/0x20 [ 2011.417108] ? queue_delayed_work_on+0xe0/0xe0 [ 2011.417608] ? mark_lock+0xf5/0x2df0 [ 2011.418014] ? mark_lock+0xf5/0x2df0 [ 2011.418421] ? lock_chain_count+0x20/0x20 [ 2011.418861] ? perf_trace_lock+0xac/0x490 [ 2011.419310] ? lock_chain_count+0x20/0x20 [ 2011.419771] ? mark_held_locks+0x9e/0xe0 [ 2011.420355] __cancel_work_timer+0x368/0x4c0 [ 2011.420947] ? try_to_grab_pending+0xe0/0xe0 [ 2011.421556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2011.422280] ? cancel_delayed_work+0x24d/0x2b0 [ 2011.422916] ? trace_hardirqs_on+0x5b/0x180 [ 2011.423518] ? cancel_delayed_work+0x1b8/0x2b0 [ 2011.424210] ? cancel_delayed_work_sync+0x20/0x20 [ 2011.424889] hci_request_cancel_all+0x73/0x230 [ 2011.425526] hci_dev_do_close+0xd9/0x1240 [ 2011.426105] ? rfkill_set_block+0x18f/0x540 [ 2011.426707] ? hci_dev_open+0x350/0x350 [ 2011.427270] ? mark_held_locks+0x9e/0xe0 [ 2011.427867] hci_rfkill_set_block+0x166/0x1a0 [ 2011.428515] ? hci_power_off+0x20/0x20 [ 2011.429054] rfkill_set_block+0x1fd/0x540 [ 2011.429622] rfkill_fop_write+0x253/0x4b0 [ 2011.430198] ? rfkill_sync_work+0xa0/0xa0 [ 2011.430770] ? security_file_permission+0x24e/0x570 [ 2011.431464] ? rfkill_sync_work+0xa0/0xa0 [ 2011.432049] vfs_write+0x29a/0xa70 [ 2011.432598] ksys_write+0x1f6/0x260 [ 2011.433107] ? __ia32_sys_read+0xb0/0xb0 [ 2011.433711] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2011.434461] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2011.435184] do_syscall_64+0x33/0x40 [ 2011.435708] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2011.436449] RIP: 0033:0x7fc525cc1b19 [ 2011.436969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2011.439498] RSP: 002b:00007fc523237188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2011.440580] RAX: ffffffffffffffda RBX: 00007fc525dd4f60 RCX: 00007fc525cc1b19 [ 2011.441568] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2011.442568] RBP: 00007fc525d1bf6d R08: 0000000000000000 R09: 0000000000000000 [ 2011.443598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2011.444606] R13: 00007fffe61e7bcf R14: 00007fc523237300 R15: 0000000000022000 [ 2011.466736] FAULT_INJECTION: forcing a failure. [ 2011.466736] name failslab, interval 1, probability 0, space 0, times 0 [ 2011.468951] CPU: 0 PID: 12028 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 2011.470064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2011.471262] Call Trace: [ 2011.471672] dump_stack+0x107/0x167 [ 2011.472231] should_fail.cold+0x5/0xa [ 2011.472770] ? create_object.isra.0+0x3a/0xa20 [ 2011.473418] should_failslab+0x5/0x20 [ 2011.473990] kmem_cache_alloc+0x5b/0x310 [ 2011.474596] create_object.isra.0+0x3a/0xa20 [ 2011.475248] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2011.475954] kmem_cache_alloc+0x159/0x310 [ 2011.476561] ? lock_release+0x4d1/0x680 [ 2011.477159] __kernfs_new_node+0xd4/0x860 [ 2011.477763] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2011.478439] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2011.479087] ? kernfs_add_one+0x124/0x4d0 [ 2011.479667] ? wait_for_completion_io+0x270/0x270 [ 2011.484442] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2011.485015] kernfs_new_node+0x93/0x120 [ 2011.485439] __kernfs_create_file+0x51/0x350 [ 2011.485929] sysfs_add_file_mode_ns+0x221/0x560 [ 2011.486426] internal_create_group+0x324/0xb30 [ 2011.486914] ? sysfs_remove_group+0x170/0x170 [ 2011.487390] ? kernfs_find_ns+0x256/0x380 [ 2011.487846] sysfs_slab_add+0x188/0x200 [ 2011.488303] __kmem_cache_create+0x3db/0x520 [ 2011.488774] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2011.489312] p9_client_create+0xc2b/0x11c0 [ 2011.489806] ? p9_client_flush+0x430/0x430 [ 2011.490270] ? trace_hardirqs_on+0x5b/0x180 [ 2011.490760] ? lockdep_init_map_type+0x2c7/0x780 [ 2011.491265] ? __raw_spin_lock_init+0x36/0x110 [ 2011.491817] v9fs_session_init+0x1dd/0x1680 [ 2011.492382] ? lock_release+0x680/0x680 [ 2011.492942] ? __kthread_should_park+0x81/0xd0 [ 2011.493576] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2011.494357] ? trace_hardirqs_on+0x5b/0x180 [ 2011.494949] ? v9fs_show_options+0x690/0x690 [ 2011.495561] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 2011.496309] ? kasan_unpoison_shadow+0x33/0x50 [ 2011.496937] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2011.497672] v9fs_mount+0x79/0x8f0 [ 2011.498154] ? v9fs_write_inode+0x60/0x60 [ 2011.498706] legacy_get_tree+0x105/0x220 [ 2011.499269] ? vfs_get_tree+0x7b/0x300 [ 2011.499823] vfs_get_tree+0x8e/0x300 [ 2011.500387] path_mount+0x13be/0x20b0 [ 2011.500909] ? strncpy_from_user+0x9e/0x470 [ 2011.501505] ? finish_automount+0xa90/0xa90 [ 2011.502110] ? getname_flags.part.0+0x1dd/0x4f0 [ 2011.502753] ? _copy_from_user+0xfb/0x1b0 [ 2011.503340] __x64_sys_mount+0x282/0x300 [ 2011.503942] ? copy_mnt_ns+0xa00/0xa00 [ 2011.504522] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 2011.505261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2011.506005] do_syscall_64+0x33/0x40 [ 2011.506531] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2011.507221] RIP: 0033:0x7fef9ce93b19 [ 2011.507743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2011.510279] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2011.511304] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 2011.512339] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2011.513296] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 2011.514255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2011.515206] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 2011.519709] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 2011.520859] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 2011.522054] PM: hibernation: Basic memory bitmaps created 08:25:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000002}) [ 2011.529893] PM: hibernation: Basic memory bitmaps freed 08:25:19 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xa10, 0x0, 0x74, 0x40080000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) 08:25:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 97) 08:25:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000}}], 0x1, 0x0) [ 2011.844725] FAULT_INJECTION: forcing a failure. [ 2011.844725] name failslab, interval 1, probability 0, space 0, times 0 [ 2011.846263] CPU: 0 PID: 12055 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 2011.847178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2011.848342] Call Trace: [ 2011.848706] dump_stack+0x107/0x167 [ 2011.849201] should_fail.cold+0x5/0xa [ 2011.849725] ? __kernfs_new_node+0xd4/0x860 [ 2011.850316] should_failslab+0x5/0x20 [ 2011.850850] kmem_cache_alloc+0x5b/0x310 [ 2011.851406] ? lock_release+0x4d1/0x680 [ 2011.851943] __kernfs_new_node+0xd4/0x860 [ 2011.852535] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2011.853181] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2011.853836] ? wait_for_completion_io+0x270/0x270 [ 2011.854488] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2011.855207] kernfs_new_node+0x93/0x120 [ 2011.855755] __kernfs_create_file+0x51/0x350 [ 2011.856392] sysfs_add_file_mode_ns+0x221/0x560 [ 2011.856997] internal_create_group+0x324/0xb30 [ 2011.857607] ? sysfs_remove_group+0x170/0x170 [ 2011.858225] sysfs_slab_add+0x188/0x200 [ 2011.858757] __kmem_cache_create+0x3db/0x520 [ 2011.859347] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2011.860012] p9_client_create+0xc2b/0x11c0 [ 2011.860604] ? p9_client_flush+0x430/0x430 [ 2011.861160] ? trace_hardirqs_on+0x5b/0x180 [ 2011.861732] ? lockdep_init_map_type+0x2c7/0x780 [ 2011.862367] ? __raw_spin_lock_init+0x36/0x110 [ 2011.862991] v9fs_session_init+0x1dd/0x1680 [ 2011.863610] ? lock_release+0x680/0x680 [ 2011.864184] ? lock_release+0x4d1/0x680 [ 2011.864715] ? stack_trace_save+0x8c/0xc0 [ 2011.865358] ? kmem_cache_alloc_trace+0x151/0x320 [ 2011.866101] ? v9fs_show_options+0x690/0x690 [ 2011.866696] ? trace_hardirqs_on+0x5b/0x180 [ 2011.867275] ? kasan_unpoison_shadow+0x33/0x50 [ 2011.867866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2011.868582] v9fs_mount+0x79/0x8f0 [ 2011.869061] ? v9fs_write_inode+0x60/0x60 [ 2011.869629] legacy_get_tree+0x105/0x220 [ 2011.870198] vfs_get_tree+0x8e/0x300 [ 2011.870699] path_mount+0x13be/0x20b0 [ 2011.871218] ? strncpy_from_user+0x9e/0x470 [ 2011.871840] ? finish_automount+0xa90/0xa90 [ 2011.872458] ? getname_flags.part.0+0x1dd/0x4f0 [ 2011.873064] ? _copy_from_user+0xfb/0x1b0 [ 2011.873616] __x64_sys_mount+0x282/0x300 [ 2011.874139] ? copy_mnt_ns+0xa00/0xa00 [ 2011.874703] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 2011.875430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2011.876126] do_syscall_64+0x33/0x40 [ 2011.876636] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2011.877290] RIP: 0033:0x7fef9ce93b19 [ 2011.877833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2011.880245] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2011.881262] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 2011.882258] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2011.883210] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 2011.884263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2011.885227] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 [ 2011.964864] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 2011.966629] CPU: 0 PID: 12055 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 2011.967730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2011.968866] Call Trace: [ 2011.969157] dump_stack+0x107/0x167 [ 2011.969551] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2011.970117] p9_client_create+0xc2b/0x11c0 [ 2011.970577] ? p9_client_flush+0x430/0x430 [ 2011.971023] ? trace_hardirqs_on+0x5b/0x180 [ 2011.971487] ? lockdep_init_map_type+0x2c7/0x780 [ 2011.972001] ? __raw_spin_lock_init+0x36/0x110 [ 2011.972522] v9fs_session_init+0x1dd/0x1680 [ 2011.973015] ? lock_release+0x680/0x680 [ 2011.973466] ? lock_release+0x4d1/0x680 [ 2011.973921] ? stack_trace_save+0x8c/0xc0 [ 2011.974387] ? kmem_cache_alloc_trace+0x151/0x320 [ 2011.974930] ? v9fs_show_options+0x690/0x690 [ 2011.975437] ? trace_hardirqs_on+0x5b/0x180 [ 2011.975931] ? kasan_unpoison_shadow+0x33/0x50 [ 2011.976600] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2011.977292] v9fs_mount+0x79/0x8f0 [ 2011.977793] ? v9fs_write_inode+0x60/0x60 [ 2011.978327] legacy_get_tree+0x105/0x220 [ 2011.978871] vfs_get_tree+0x8e/0x300 [ 2011.979382] path_mount+0x13be/0x20b0 [ 2011.979931] ? strncpy_from_user+0x9e/0x470 [ 2011.980566] ? finish_automount+0xa90/0xa90 [ 2011.981157] ? getname_flags.part.0+0x1dd/0x4f0 [ 2011.981803] ? _copy_from_user+0xfb/0x1b0 [ 2011.982328] __x64_sys_mount+0x282/0x300 [ 2011.982833] ? copy_mnt_ns+0xa00/0xa00 [ 2011.983427] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 2011.984119] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2011.984798] do_syscall_64+0x33/0x40 [ 2011.985312] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2011.986009] RIP: 0033:0x7fef9ce93b19 [ 2011.986556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2011.989127] RSP: 002b:00007fef9a409188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2011.990130] RAX: ffffffffffffffda RBX: 00007fef9cfa6f60 RCX: 00007fef9ce93b19 [ 2011.991062] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2011.992007] RBP: 00007fef9a4091d0 R08: 0000000020000280 R09: 0000000000000000 [ 2011.992980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2011.993920] R13: 00007ffface505bf R14: 00007fef9a409300 R15: 0000000000022000 VM DIAGNOSIS: 08:25:19 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff815fac5c RDX=0000000000000000 RSI=0000000000000004 RDI=ffffea0001144e30 RBP=ffffea0001144e00 RSP=ffff88803da2f748 R8 =0000000000000000 R9 =ffffea0001144e30 R10=0000000000000000 R11=0000000000000001 R12=ffffea0001144e30 R13=ffff88803daa5118 R14=dffffc0000000000 R15=00007f31c0624000 RIP=ffffffff816c4cc3 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555556d39c58 CR3=0000000046738000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822ca1e1 RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff88803da071c8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000069 R13=0000000000000069 R14=ffffffff879e81a0 R15=dffffc0000000000 RIP=ffffffff822ca238 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc523237700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564ee9ef1c88 CR3=0000000042bf6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000