x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) 11:00:17 executing program 6: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') write$bt_hci(r0, 0x0, 0x0) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}, {&(0x7f00000007c0)=""/115, 0x73}, {0x0}], 0x6) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80000) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0xa) 11:00:17 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x0, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) [ 1061.991664] FAULT_INJECTION: forcing a failure. [ 1061.991664] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.993404] CPU: 0 PID: 21379 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1061.994420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1061.995658] Call Trace: [ 1061.996066] dump_stack+0x107/0x167 [ 1061.996618] should_fail.cold+0x5/0xa [ 1061.997201] ? create_object.isra.0+0x3a/0xa20 [ 1061.997895] should_failslab+0x5/0x20 [ 1061.998480] kmem_cache_alloc+0x5b/0x310 [ 1061.999105] create_object.isra.0+0x3a/0xa20 [ 1061.999761] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1062.000532] kmem_cache_alloc+0x159/0x310 [ 1062.001181] __kernfs_new_node+0xd4/0x860 [ 1062.001817] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1062.002538] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1062.003342] ? kernfs_add_one+0x124/0x4d0 [ 1062.003984] ? kernfs_create_dir_ns+0x10b/0x160 [ 1062.004691] kernfs_new_node+0x18d/0x250 [ 1062.005324] __kernfs_create_file+0x51/0x350 [ 1062.005987] sysfs_add_file_mode_ns+0x221/0x560 [ 1062.006715] internal_create_group+0x324/0xb30 11:00:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) [ 1062.007424] ? sysfs_remove_group+0x170/0x170 [ 1062.008209] ? kernfs_name_hash+0xe7/0x110 [ 1062.008852] ? kernfs_find_ns+0x256/0x380 [ 1062.009494] sysfs_slab_add+0x188/0x200 [ 1062.010142] __kmem_cache_create+0x3db/0x520 [ 1062.010813] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1062.011681] p9_client_create+0xc2b/0x11c0 [ 1062.012404] ? p9_client_flush+0x430/0x430 [ 1062.013045] ? trace_hardirqs_on+0x5b/0x180 [ 1062.013698] ? lockdep_init_map_type+0x2c7/0x780 [ 1062.014423] ? __raw_spin_lock_init+0x36/0x110 [ 1062.015135] v9fs_session_init+0x1dd/0x1680 [ 1062.015784] ? lock_release+0x680/0x680 [ 1062.016405] ? kmem_cache_alloc_trace+0x151/0x320 [ 1062.017119] ? v9fs_show_options+0x690/0x690 [ 1062.017798] ? trace_hardirqs_on+0x5b/0x180 [ 1062.018449] ? kasan_unpoison_shadow+0x33/0x50 [ 1062.019143] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1062.019950] v9fs_mount+0x79/0x8f0 [ 1062.020498] ? v9fs_write_inode+0x60/0x60 [ 1062.021116] legacy_get_tree+0x105/0x220 [ 1062.021733] vfs_get_tree+0x8e/0x300 [ 1062.022302] path_mount+0x1429/0x2120 [ 1062.022907] ? strncpy_from_user+0x9e/0x470 [ 1062.023557] ? finish_automount+0xa90/0xa90 [ 1062.024199] ? getname_flags.part.0+0x1dd/0x4f0 [ 1062.024888] ? _copy_from_user+0xfb/0x1b0 [ 1062.025529] __x64_sys_mount+0x282/0x300 [ 1062.026138] ? copy_mnt_ns+0xa00/0xa00 [ 1062.026735] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1062.027516] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1062.028299] do_syscall_64+0x33/0x40 [ 1062.028857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1062.029617] RIP: 0033:0x7f0377362b19 [ 1062.030175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1062.032865] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1062.033985] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1062.035036] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1062.036083] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1062.037140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1062.038186] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:00:18 executing program 6: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') write$bt_hci(r0, 0x0, 0x0) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}, {&(0x7f00000007c0)=""/115, 0x73}, {0x0}], 0x6) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80000) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0xa) 11:00:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="011504020000f0acac8a1d0551e9be142975b04d7eedc23c15d93ff94354713e3752a5d6c80270733406b27878974a5cec"], 0x6) 11:00:18 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) 11:00:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x50181, 0x40) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$bt_hci(r1, &(0x7f0000000000)={0x1, @role_discovery={{0x809, 0x2}, {0xc8}}}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3400, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="f7bb79e6", 0x4}], 0x810010, &(0x7f00000003c0)={[{@nocompress}, {@dmode={'dmode', 0x3d, 0x6}}], [{@pcr={'pcr', 0x3d, 0x1d}}, {@audit}, {@pcr={'pcr', 0x3d, 0x35}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:00:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$sock(r3, &(0x7f0000000000)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x80000001, @private2, 0xd2b6, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)="3959b8b954527d6f859e280b2e4db6db690358e69d7300ff886c66cadd4ee818b473d23d8ae59791b7ba366ae67e7b896e85116289a44a56edb5b051fd015e3650df0f38588231bc0530fee4125a6e57ebd51647d3c51b774fa23e6dc7fcc2905b9a89e5b2d52b6eaf2058f00b91ac61ff3cd9b85bd43a1a9321d17570854b3b2765117fbe0efc47b1d03ef561d721db707359a4e6df44e70a5e4cef79a51628ec432209b62587f7b155d29482c1a12af82c90b0b6f0ed3756b3df48a830a3ca7e18a8daa0741a23dac6909a0a581fc6", 0xd0}, {&(0x7f0000000240)="815dfdfbf97968a5ce614dc83457940a6cddc4673213821447b6d3fffdd3de39525ed098927f5ea84d11480512a4f880a0a976b1e4c086b6b76ebc6693d0b801974ac46018c3877fcb4232975c5a08de7b45cd0e89623a808a7be1", 0x5b}, {&(0x7f00000002c0)="14efae0a65aa3ae2bf915c0fff42f56988984dc0eb96df00fbfd10444812d82016624115fb6805189555ab4366162b14d27aa463ec8bdf682a2a8fe050486bafa8e23246d2606a5c97bfdd4918303b8391ab6c654e8c9fc2c5157b2508386a7e3b85f814d6f3ccf9f366f1579821a1eecc95e411186f502dba69dd47a40802d739976ab9b8ee378ec3394044a276990bd2a1e07c6d70697fe587372aaaee6008edc18f2246851e0c2aa5533050412090b463d6fdd9ed3fc2559145481c", 0xbd}, {&(0x7f0000000380)="6ffd6f0e0b6b5c4fd747fd59fce1efa5cf1a9b52424bb6d4f3fb5276410715a5b16b666819ddd07a3c52904a947621f0a32931b75d96ce92a2df0b9269dceab98549f6d2f7248de05913fc8a1e47a4e09b502c725f31d33bbdbb1cd28124c08b55f5bb7c8b869efa47564af3e7184c31d8cfb694926aeea440a084f8fa417f2e6db9171764eb13", 0x87}, {&(0x7f0000000440)="08dec868fcde82e66d17de6417249202a55cc5a19ec094f33410b0a579557316127c843e884a8d74dd7a4593f8fcf8d7794cc5ef0d77041469a92d8fbff26b2731d90a35649c601e4940e4279e58e7b345d2f00376d5e48afdb4b787038a515af7bc76e615c5196d7f9d1f8d37ef4a1f062a512cb193ea5949b541c0f89e0e450aeb5e4488e6aa79b49495031db2216cc9bffb26d91b3580d08b407aa26ab43ca383190b862e4d8b0cda823cb7970bd65ce96a5beee94b25862eb2561036387141585b9e347fc3f126bb392a380ff5a1cacf8a1c1b8219eeaefd0af1b131e30bcc65d893c9b90cf69e312e704725b0fec406597b", 0xf4}], 0x5, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffeffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x407}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xd8}, 0x8040) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:00:18 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:00:18 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:00:18 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) 11:00:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 62) 11:00:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000000)="f8e91dfa07812176e40d7f93") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x882, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x3, 0x7fff, "7d1532", 0x1f, 0x2}) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="87f1eb674e71791373efdcae5260a149e23d5f07ad2a8aeba34c22225f1bf21866c77eb95ef4fe26a47d33ff322796791057f3fbc6b179c2eb9db540f149c1c6a52c35810e6ced387a25725eb70fffea83774149587d7a6b8d2d64287812c23dd0562e9e4c927b1021d104bbf709b3cea762c8e48e3148e5c261fba34f0395540393d1c192c95f47611c145e40a6458aecca9c764374db8f386f64631b44d2efeb2ed69c1621e220709909bfdc404958c7dd25d9d0ea1e5567f3ecaa4380b8731638bc21c2ffa1ec1bfbb562a0f1baacbddfb249"], 0x6) 11:00:32 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:00:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x50181, 0x40) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$bt_hci(r1, &(0x7f0000000000)={0x1, @role_discovery={{0x809, 0x2}, {0xc8}}}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3400, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="f7bb79e6", 0x4}], 0x810010, &(0x7f00000003c0)={[{@nocompress}, {@dmode={'dmode', 0x3d, 0x6}}], [{@pcr={'pcr', 0x3d, 0x1d}}, {@audit}, {@pcr={'pcr', 0x3d, 0x35}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:00:32 executing program 7: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4082, 0xff2}], 0x6) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80000) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0xa) 11:00:32 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:00:32 executing program 0: r0 = gettid() ptrace(0x8, r0) process_vm_readv(r0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f00000008c0)=""/109, 0x6d}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f0000000480)=""/202, 0xca}, {&(0x7f00000003c0)=""/32, 0x20}], 0x7, &(0x7f0000000880)=[{&(0x7f0000000780)=""/224, 0xe0}, {0x0}], 0x2, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) kcmp(0x0, r0, 0x6, 0xffffffffffffffff, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0115a566c90f13144ac4c05138ae39d02051e4cc3631258240d2bbfb6edd82ee859e98ec4bae22d0f471babc181038b26c8e00441ea804248f323fed16222c4eda14372374d42c46506e83760ed44238b2f63517326b8d07dea7ff10e1cca3fb2ceba1"], 0x6) 11:00:32 executing program 6: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4082, 0xff2}], 0x6) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80000) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0xa) [ 1076.447511] FAULT_INJECTION: forcing a failure. [ 1076.447511] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.449290] CPU: 0 PID: 21636 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1076.450286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.451471] Call Trace: [ 1076.451863] dump_stack+0x107/0x167 [ 1076.452399] should_fail.cold+0x5/0xa [ 1076.452960] ? create_object.isra.0+0x3a/0xa20 [ 1076.453629] should_failslab+0x5/0x20 [ 1076.454185] kmem_cache_alloc+0x5b/0x310 [ 1076.454797] create_object.isra.0+0x3a/0xa20 [ 1076.455437] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1076.456181] kmem_cache_alloc+0x159/0x310 [ 1076.456809] __kernfs_new_node+0xd4/0x860 [ 1076.457427] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1076.458113] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1076.458895] ? kernfs_add_one+0x124/0x4d0 [ 1076.459520] ? kernfs_create_dir_ns+0x10b/0x160 [ 1076.460211] kernfs_new_node+0x18d/0x250 [ 1076.460819] __kernfs_create_file+0x51/0x350 [ 1076.461467] sysfs_add_file_mode_ns+0x221/0x560 [ 1076.462166] internal_create_group+0x324/0xb30 [ 1076.462854] ? sysfs_remove_group+0x170/0x170 [ 1076.463503] ? kernfs_name_hash+0xe7/0x110 [ 1076.464130] ? kernfs_find_ns+0x256/0x380 [ 1076.464751] sysfs_slab_add+0x188/0x200 [ 1076.465344] __kmem_cache_create+0x3db/0x520 [ 1076.465992] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1076.466737] p9_client_create+0xc2b/0x11c0 [ 1076.467376] ? p9_client_flush+0x430/0x430 [ 1076.467996] ? trace_hardirqs_on+0x5b/0x180 [ 1076.468631] ? lockdep_init_map_type+0x2c7/0x780 [ 1076.469327] ? __raw_spin_lock_init+0x36/0x110 [ 1076.470005] v9fs_session_init+0x1dd/0x1680 [ 1076.470646] ? lock_release+0x680/0x680 [ 1076.471250] ? kmem_cache_alloc_trace+0x151/0x320 [ 1076.471949] ? v9fs_show_options+0x690/0x690 [ 1076.472610] ? trace_hardirqs_on+0x5b/0x180 [ 1076.473244] ? kasan_unpoison_shadow+0x33/0x50 [ 1076.473908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1076.474663] v9fs_mount+0x79/0x8f0 [ 1076.475198] ? v9fs_write_inode+0x60/0x60 [ 1076.475803] legacy_get_tree+0x105/0x220 [ 1076.476400] vfs_get_tree+0x8e/0x300 [ 1076.476941] path_mount+0x1429/0x2120 [ 1076.477509] ? strncpy_from_user+0x9e/0x470 [ 1076.478137] ? finish_automount+0xa90/0xa90 [ 1076.478769] ? getname_flags.part.0+0x1dd/0x4f0 [ 1076.479439] ? _copy_from_user+0xfb/0x1b0 [ 1076.480062] __x64_sys_mount+0x282/0x300 [ 1076.480650] ? copy_mnt_ns+0xa00/0xa00 [ 1076.481223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1076.481982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1076.482740] do_syscall_64+0x33/0x40 [ 1076.483283] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1076.484015] RIP: 0033:0x7f0377362b19 [ 1076.484554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.487149] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1076.488242] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1076.489258] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1076.490272] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1076.491293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1076.492309] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:00:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = getpgid(0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0xc) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r2, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x4, 0x213, "3d8717", 0x6, 0x5d}) 11:00:32 executing program 6: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4082, 0xff2}], 0x6) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80000) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0xa) 11:00:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) syz_io_uring_setup(0x4d98, &(0x7f00000000c0)={0x0, 0xc281, 0x2, 0x3, 0x22a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, &(0x7f0000000400)="fd5b8f80afe333e7302b6557a3f9b7837d9f43ec2048b74a29799a5ad38ed07801eeaf9ec02d6f0ee624e84e3cd4968b5ccba49ee7de9862c343c684d98eafa37e5d1034a6f2332e1f33d0884bdc1fd7f3dd50c590183c91f46d19df20c431f8ee417a7bd5b801d418e94f348e", 0x6d, 0x12, 0x1, {0x0, r4}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001480)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="a86b250a0b673d58e647d59aa3ed1ce829f488df1b605168be3b4565051bc04aa6713448cf73a670e9ec210605032f05ca6acb0da7fec68dd53250af6a048bc360359cd1cb2de0b474278c0bf7939208fe49442fae2a4c67f092053db682aef034c592981849e226a8d3163f0eb99952a89e3fcb3cb3fc809626a09380ec9683b29838473ac8f631fc9779557e75851df910a6a77858c1f68629a16c76fc077223f2cfe70758efb50f7c1a05d2723db625a4ecabada70e5ccc83a4f41149b5edb74e09e265e299511435baa459e0aa5cd752f1fa8d6e8fc69748e8fee543011540e4c64164964080d5b8939783516aa486afe3440d4219eb52e204a9b5a2683f76686c2262a5aa76081304305b713b08d6fb8f9d60102888f12cce73bd619d0f9db59daab98bfce53bce107a48c7008511663cfca06af0898fcc2c1e045f1bdcd608c52fa12f52737810a4bdcef4b12e9a0eba82b22f7fcc2f328c03b00f796f2a7af07292cce2ff2bd6c0ea18298aa5551c0e3f52e2785fca169338d6be171506ddfb25970d435da36a51ee54c2158c6dfa67896601f4c389a431bae999b429641b8f47143e339940169699b8f9345d2df361ca4e0bf20c8c01d5c9610fb34e16ea9aa531fb785f62cccec66537a9d1411f6be290b998aa618077483eea143dcd00e9ae4be179834eed71a6710a0314f4dfb4dc1a4652dbcfd613b56adceeaddc76bdd4b53f6a3cac0acfd03fc6a3120fc2bcd37b20a221cd63712021b95d6c5c0d1bca39a556a0ffddbd4c5801b6e5a9b401bcdade9a5eaf48e09b966c3eb58e2ded8106a28c9204f394c01928c556acd0c6aae81e4e3856c622214132cc5a9abf18c5eaef88661405cc30f0cdf8a264b2590cd2e335a13a703bc506d97430168a64deb2f852624cec1d993c05c3e17fd2eba3235d9b188ff419bbf2e08676c109cc33b747b668ea16af294e7ca2b373a94a3e7160a6232c46544c1b67e96822c08c7a1431329be0a341e483fb615ced56b5d6592d7b0f8502604eb2fcba5c6a7a66a5ab86ea9542dbd6f5bec4070e4d73a762070dd800adef5ae8a2797c2607c4c7bc350afb6257e9dce527a8931451c8216b7bc39c36c051fee01af5b45b6019a421b51472b6578707ca00cb1635bf4e08a938c96ceee8e8dca38f5a16f7c96ff565521b5f6f1742df63ec0011c5647272fac4208dde74089c496281683bbf18f3284f9395574b5bf77d937c3ba3562a5d79d613787992e3798a918ddd9558015c1398cfc970704aeb848d065e869753870448a381e22e780b22f857e29aea44018dd276d1132934b1e8b0a30e20847c8b7e633614e59a77196039c7eccc2d641cdc0b545fd2faed306d76a60c3f8431ffde5d8c90fdb273dc17a29a106839e87b4de39c8b1f79d7f0b511c8882757d203cda79f4a733a7395c08f72ed6c29ddbbbca13aa71817448812e1d6d6aa1a698f16c7281788632db33df5daf6a9ffec6d5367f422fe038e176417c3c7f57acbfc35db4ebed337ced045b51509e335a9fc538bb24dbadc5a8e4dad926e0bd77d4c10aba5f72e452bf74940dbaeed3b2247273a2e5d3ae944d9dc10069377fe7cec6e49f2b463babd7b1837f0e997b172f4971e2db378575030d28b4872864a59be37f2332e79b951e681f0cbbbedb385d48da7d53586d5c239244abeae8e6ab1efeaab21af28d94b55f21a7dfda8e09d42756eec9c28ea67a7092e316a507f8770efc040f5994335b23646ebd722c9e810b2d6afeedce9cf0d181d667c903a258b9faa7eb51a149293e295983e4a302305bb145d08348aea9ce33c31266016731b2c1d475ed35e6b91a47acb3ff86aa6e3a348f9c3f72ba51136395737e3ffb5c2c680e303a80063ddc960d2203170e171a7bbc5e401ae0ec48e09bd235757dd0b036064b2faaa364230c62ab976d09f39821aa7074f1822101ff1d3f0ffb55d8ec3ebd6651d8ce724f3d2c462f490a39da182bba80bebc2877ce44d25a8e5ba1b2c608b1b9b6033f3c02ca23f3cf63fbe105251a246bc98b4d28202912060258099ae35b4aa8e720c9ca6b2fa6ea75dda3f7d4178fb83d0c9e86f552153d33e161889e7652f0c64f139970bc7c252db9b09bf8ab166e42eba3f3ca5716e7651ed585658921c55f4f20570ff0067d43cb25e157c91df4fc57b4386a4b9c3c6bca269f12842a2aba34bd5ab28fe54c4335026807c1a59c08fd8084a860bc32a6a85402fd8f6766b07bcb4d149bf70cc7b02a6630b037c7ff118ef92e9fa770373ae184606391f7444ce5301f7294c341299ad3d077dc93f334924079dd4d4df5fb501aa312f6b7dcc5f06fae87defeb23b0f6b70dd468aca34b3cb799badcbf8cd879f0418fe0d9bb083c92ed315b51e10da7dead45f8f6ee81a1539bae17b9434f6ab54a80e871b3e2f5ae30efcd42a84dbac70c6f9dee684e1ca33a2af8ea93cc233131a433b8ffe901d958edd2c5c7d535453c5fbd7f3d367d810a91111c10128d3ced036bb7cab0aa0bf89325f44bdf942e8bde68df8f193cc41e8e6b18c4265e7fc5a46b2ba4b896c0844d9960093211558e512d0a53ad790716797ddb3522106776165d8e73c51ef321a9d4ac3a1d5bf01db5e045781fda1a4ddafa96581aad251926170f12d3ad87d0342b9b092fc2754e3ac30911280b84285740c0503fb6f59cdbdc34d0d7c4ef46953f7bc203fdfb6e285a108e03995d31cc7da4aeea31d9bab5d5cb896dac0fd7ca2abd3033943ed5423def9d4a12fab54489385de56e0b91a8f02e381f48cc0c117fb6f3c56a11bc99980a82d3d4c99f30a52bd16b38902d29fb84125b20e0052eba9b88354edfda3d8ff6407bcd4efe01d38ce1f336c061d8bff072fd6220c1468850db2065dfdf33bf036c9d33ad9d18f34a74e48dc9e2356ddaeb2bbfefbe8c36c8f203a39ff8c0273bf48d28ebe1d820d87721bbf8bbbd5e91fc8c4584ced9cb58773fe19a19dcfb8b48b302c3659020269a9373b4823a0bd5377e8fda1bb4ae3649b73029b6f875dd8a5659514093fbe83e7220ebb8f1e66755e6d334837c1c731077c0330ff59c6b0dd8224bfa0ac0a9000332d6f2e49361cd43d4e31da299f8a6544d3ddd3635c6e378ff960a4ecd9e6c497a9a78f4b781bdf04c092402799cd10a2276895ae723785c26e5a0e1f0de6cf5709c402816646a88cdbc468e1cc8dbc722466595d59fd04f12ba9be2ee47730125906ebb164bfe7d0eba805a53b59a88d2e40659ceae721450fdcfd800cba045d6af5fc8a473e6614c649d6a5b9c982fab9a397f23d62907cff91ab676c9941635d5442c792624f56681d9b49de7aeac67f758783c9bc87a0e4f16e0f5dc6b047ccf9d8494c53cf3befb568a856b052fc1ff93eb199aee7442ae6986cc735ca737f6cd22231a962017dd9edaf4041a4fc8af3de6fc3915ceede9ad0058529620de374a6c8410312bcc44f4cfb7fac75cf3508cd22a0c81a75e21bd1738f11353796764f446489a91ffd0ca35ead7cd2fbec8d43cfec8aac975746164c3cadb8800bf51658fb8fb3c4c6d7be05cb3e16af0dfc59b38a56803e6fe88c432cbb20da1dcfc3a605f0c7c5fe984c5a01e7b073ffad3acaab4961077c4ff0a92b19a0894648df78806cdbae05d0f4e8ff3910b579348f8d32646ba2beb9542962c07d0bfd9c3350436314ae8d428d552ffffe3f50f12d422b9a2f1446582ac417fdbe56dc8cf1768af982b9bcf969e30d0fdd1e35b035d8800636fa15c134ad4f94f92f9a43401c505c5ad64003b9f4ebf77ff472fb6f45d18a7be0cf9b5beb26b26d648836c9b78f8c65a53bcc27959cf9178bbf71445f8cdc334ef31d414f5518e3a10768a97a7628a118279d66b4d81a9447d3060d9d2d09ef4e34063c51d284aee1a77babba353ae7dfdf8f07dd7d3419bbb0fb5eed19c911d8747773b8a5cb71441e2c459fc05e83ce603a021bdd91f004a7e13310144d70c13693852640c67f5a2b8ef8a2e67a5e21a9bc679a664bcbd7f1dbe751a0063f49f803eff2dfbe801a798bb5f5c3eaf14767179b10b71f42a16256e99d5d586440484b6161cc600247464ca29202036b0acc5bfd662dc08adc974219dc6dac3e9286aa8966ad116d3814324a8d06e62afd33ec76ee66d29fb2d332458d7ee0d94a77eb7b269e3d6acd48c5c2f1b820e0d40e6ae53a561188dcda0fba9364073d4aa699cb856c5d30d47587ba80b34c1822f45bb597ffa814f39a462a33195d7ccbfecffa3dfaa29e03a4a5384f469f1b6d2821a57ca3877129d575db6f5b9219c67abf949d06ef41fd3057b39fe02c85d627c162e3651b8ab64cdb5ee657ead475ea41ad913d02d9968af7359799bd6d7dcdd9e2229313b26be77f4ed53d8301b567bff8a4381ecbc7cd1834e2d163db0611b619bb30f66d9e16c34f304c4429512ff36ac7cbe7f9507135fcff8e252e52d8949573498ce3f1f471075ddb631ad74accf5187fce49d11576ba9a49395a34637b8388afbdc6e66ca3bf8cf17288d9a68805d9bee3de9d4f169298f0939f569cf5309b168c7cbbce7607ee9bd745372c393efd3804686559db86458cf6b0ea44008cd895396b7694ab603a96ea462de428f9053cf8d7af46ea627a9f7433cccfb8b4e6256a97010f13fb09c9b28fdaf8840cdc3f00ec0960af2d6afbb1374592a24521861e6af17e74b7307c237b78f36910c80c48cc922ee655d51ef8f2fc03410685bbc15aacac888452a188fb91740a3bc4b731f569e7932984102552e1447f9d75d841da8cb32bf54ebbf33c5f7d856ebf76b23a7bca5c630f9ed012998b321f3869cbfca131a446014d0ee654e66dbad639c8e70f80fd23edd83984b493b2675b644b964bad0cc86aa088735248537e63472fd8407212997367e2b9fff141a8ccf8f18540e428a3efe154d3d7a20e570cfb18d3b2f8710809f1f6e21183299f5cbdc2e0ffa773b7e3f1cb894784dd6739f9f2617fa8ef386720b1e78a0a6b176fd7dcabaae18c77d16b68ceaba83adf53238027efc6c215a33aba968e35ddce62edc7ddc6092b329162290bddef6e27a18ec6f2d08938f56a8c84466fc4b9011070114c56d849297f328bc4f1bc0d7ef12849c4ff51d4c7cae1bce613b32986ef4c386bdaefc2f2751629fbdd90d90c94652a4f0ae476cbe57b31d96420d078c3caf16877472942bafa6345fcdb38d34c4b33527798674befceaa8cb43ec8905df9fc34ce7ecfd26160d9eeec749c569f7a30036353d1ffa9ce8b8e9508520ebf59a4cdef13b152d5c78133e9f35c0974a4e251f676e12832150fa7ac6c3771a099df1ad833ffcee36d1cde2cde88321f1b07940666621e012d5bfffcc3185606e7b0e8de13586c29e9b99b8e121034d643b669eab174156864facf6b90e8d5f5ef904be655deb0a17a7fe1c2b764daf677462d37918f70cf8823034fde7c36cceaea3d878be9738c54c2a23a98cdce4e0947c083413ab3b8f3664884aa70e3a45bcf4ad4134cee918d7197ee97cff5b5e02831cc7a1d2dfe365d7f8e7fe60a82b2c01bbd7fabb73808e6aacccd31a8751c8793876dacfe51b3ed6f593dd1ce8f1d95e00f002cc9fd78ba4bf0be7a9d478fff662c619853e286c3cb235c02123ee154bcc68f4920ab9d0adafc1a770185618410984b76c0e1b5ea1acf2c02946330918383aaccf26540fb649e1a271dbb7970de9bc567ed971ce1c161ef35d3966ab14331133eccce89a0ae4850417b9d36c0015af0bcdbc40ca3a98ccfbadd2dd", 0x1000, 0x40000002, 0x3, {0x0, r4}}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, 0x0, 0x1, {0x0, r4}}, 0x4) 11:00:32 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x50181, 0x40) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$bt_hci(r0, &(0x7f0000000000)={0x1, @role_discovery={{0x809, 0x2}, {0xc8}}}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3400, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="f7bb79e6", 0x4}], 0x810010, &(0x7f00000003c0)={[{@nocompress}, {@dmode={'dmode', 0x3d, 0x6}}], [{@pcr={'pcr', 0x3d, 0x1d}}, {@audit}, {@pcr={'pcr', 0x3d, 0x35}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 11:00:32 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:00:32 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:00:32 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r2, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:00:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 1078.501919] Bluetooth: hci0: command 0x0415 tx timeout 11:00:46 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:00:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x2}, {0x101}, 0x1, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="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", 0xfd, 0x0, &(0x7f00000001c0)={0x2, 0x1a0, {0x1, 0xc, 0xb3, "9bc689b672d317604ac83bdd97a4a79ea30b5a517f52151d9ff859b27275697021b629e6137f223011bacb957c6453f6daa29b7217f7a73f6d89aea9cd4879ee0b8ffad9ba25bcf61cb5b40988c1035f29e8a75eb2f413cf5fe3846889c8010273ca0f27ceb24b12d7955c6315fcfc775c61c58b17dd808f5d1c72d919d7cdd92b5f25713d11229e4ed6e130e5fb6ce35081c82f0a7a1761508b4f050c310e3cbf139eac77ca110a7f8f90f75ff9ab098b074a", 0xe0, "e687dd6fdab65d965d61162b539943fa877cdf24fc2a004975376d27daf44468a44ad8558c7ef42b2272fee92989116595833887020059a1a80c739dfd188b0b12ba866cbc2358bef8c69ed8f870deef4af681989711f5a919e3ac9c4fe5875995955a31721f1bf3f8bb737127cce151ada0ef0004bb02c2d8671a028df023bcf4de283667cd104ae620ff59f81791945cd27663d84fd1a6c548288290ea9ce7be7dfed093965ff8449fb68535dad979b052988444ce1f44809a1d17a297bd112dace379924e6bac298aed996742028e52b18b52360f2c8af3d748dd37735ed5"}, 0x13, "b4d1b684e7a8ab8fa9678cfc643049d6cadba5"}, 0x1bf}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x4) write$bt_hci(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x6) 11:00:46 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:00:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000000c0)=0x28) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:00:46 executing program 7: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4082, 0xff2}], 0x6) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80000) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0xa) 11:00:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 63) 11:00:46 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x50181, 0x40) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$bt_hci(r0, &(0x7f0000000000)={0x1, @role_discovery={{0x809, 0x2}, {0xc8}}}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3400, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="f7bb79e6", 0x4}], 0x810010, &(0x7f00000003c0)={[{@nocompress}, {@dmode={'dmode', 0x3d, 0x6}}], [{@pcr={'pcr', 0x3d, 0x1d}}, {@audit}, {@pcr={'pcr', 0x3d, 0x35}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}) 11:00:46 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r2, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 1090.387130] FAULT_INJECTION: forcing a failure. [ 1090.387130] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.388438] CPU: 1 PID: 21985 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1090.389232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.390175] Call Trace: [ 1090.390418] dump_stack+0x107/0x167 [ 1090.390853] should_fail.cold+0x5/0xa [ 1090.391300] ? __kernfs_new_node+0xd4/0x860 [ 1090.391802] should_failslab+0x5/0x20 [ 1090.392242] kmem_cache_alloc+0x5b/0x310 [ 1090.392719] __kernfs_new_node+0xd4/0x860 [ 1090.393208] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1090.393763] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1090.394213] ? wait_for_completion_io+0x270/0x270 [ 1090.394775] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1090.395239] kernfs_new_node+0x18d/0x250 [ 1090.395705] __kernfs_create_file+0x51/0x350 [ 1090.396213] sysfs_add_file_mode_ns+0x221/0x560 [ 1090.396755] internal_create_group+0x324/0xb30 [ 1090.397292] ? sysfs_remove_group+0x170/0x170 [ 1090.397808] ? kernfs_name_hash+0xe7/0x110 [ 1090.398298] ? kernfs_find_ns+0x256/0x380 [ 1090.398791] sysfs_slab_add+0x188/0x200 [ 1090.399166] __kmem_cache_create+0x3db/0x520 [ 1090.399676] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1090.400250] p9_client_create+0xc2b/0x11c0 [ 1090.400745] ? p9_client_flush+0x430/0x430 [ 1090.401232] ? trace_hardirqs_on+0x5b/0x180 [ 1090.401729] ? lockdep_init_map_type+0x2c7/0x780 [ 1090.402276] ? __raw_spin_lock_init+0x36/0x110 [ 1090.402810] v9fs_session_init+0x1dd/0x1680 [ 1090.403213] ? lock_release+0x680/0x680 [ 1090.403676] ? kmem_cache_alloc_trace+0x151/0x320 [ 1090.404089] ? v9fs_show_options+0x690/0x690 [ 1090.404603] ? trace_hardirqs_on+0x5b/0x180 [ 1090.405006] ? kasan_unpoison_shadow+0x33/0x50 [ 1090.405539] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1090.406014] v9fs_mount+0x79/0x8f0 [ 1090.406433] ? v9fs_write_inode+0x60/0x60 [ 1090.406800] legacy_get_tree+0x105/0x220 [ 1090.407276] vfs_get_tree+0x8e/0x300 [ 1090.407624] path_mount+0x1429/0x2120 [ 1090.408082] ? strncpy_from_user+0x9e/0x470 [ 1090.408457] ? finish_automount+0xa90/0xa90 [ 1090.408971] ? getname_flags.part.0+0x1dd/0x4f0 [ 1090.409371] ? _copy_from_user+0xfb/0x1b0 [ 1090.409859] __x64_sys_mount+0x282/0x300 [ 1090.410236] ? copy_mnt_ns+0xa00/0xa00 [ 1090.410687] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1090.411143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1090.411734] do_syscall_64+0x33/0x40 [ 1090.412082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1090.412663] RIP: 0033:0x7f0377362b19 [ 1090.413010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.415120] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1090.415992] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1090.416795] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1090.417592] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1090.418401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1090.419213] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 [ 1090.450500] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1090.451279] CPU: 1 PID: 21985 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1090.452062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.452996] Call Trace: [ 1090.453228] dump_stack+0x107/0x167 [ 1090.453647] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1090.454242] p9_client_create+0xc2b/0x11c0 [ 1090.454733] ? p9_client_flush+0x430/0x430 [ 1090.455223] ? trace_hardirqs_on+0x5b/0x180 [ 1090.455719] ? lockdep_init_map_type+0x2c7/0x780 [ 1090.456260] ? __raw_spin_lock_init+0x36/0x110 [ 1090.456789] v9fs_session_init+0x1dd/0x1680 [ 1090.457278] ? lock_release+0x680/0x680 [ 1090.457618] ? kmem_cache_alloc_trace+0x151/0x320 [ 1090.458172] ? v9fs_show_options+0x690/0x690 [ 1090.458671] ? trace_hardirqs_on+0x5b/0x180 [ 1090.459044] ? kasan_unpoison_shadow+0x33/0x50 [ 1090.459552] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1090.460123] v9fs_mount+0x79/0x8f0 [ 1090.460527] ? v9fs_write_inode+0x60/0x60 [ 1090.460986] legacy_get_tree+0x105/0x220 [ 1090.461434] vfs_get_tree+0x8e/0x300 [ 1090.461851] path_mount+0x1429/0x2120 [ 1090.462283] ? strncpy_from_user+0x9e/0x470 [ 1090.462769] ? finish_automount+0xa90/0xa90 [ 1090.463140] ? getname_flags.part.0+0x1dd/0x4f0 [ 1090.463665] ? _copy_from_user+0xfb/0x1b0 [ 1090.464135] __x64_sys_mount+0x282/0x300 [ 1090.464592] ? copy_mnt_ns+0xa00/0xa00 [ 1090.465027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1090.465619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1090.466192] do_syscall_64+0x33/0x40 [ 1090.466608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1090.467071] RIP: 0033:0x7f0377362b19 [ 1090.467496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:00:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="4574cb923e73042fddb5134ad2930ad0dd0150788a1a861f5db3797ac8a66d7ffd41f2a2cbbe69879ebc253bc942b3addf124c803830e7438662ad6d930a54a68d857e9c982fa4a5b8d386a99861bff778f0e548d184f36b37b4597113dd6ea7d346fa50a7474fa5c36af3bafe6b6c5c3c890add173a9d17c8037585be55f071f7733f87fe3c753b9b8628565841ff0bc8d38ae2f230227275232a9dfc143ae634155d7dbffb0220d168b43b002692a83eafdf9d3ee993cbca5f8c411ffcf66ceff8850080"], 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80, 0x0) [ 1090.469547] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1090.470606] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1090.471414] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1090.472059] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1090.472859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1090.473502] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:00:46 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r2, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:00:46 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x50181, 0x40) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$bt_hci(r0, &(0x7f0000000000)={0x1, @role_discovery={{0x809, 0x2}, {0xc8}}}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11:00:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r2, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 1092.453886] Bluetooth: hci0: command 0x0415 tx timeout 11:01:01 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:01:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="c005dbb3231e00000000b162f090"], 0x6) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'bond_slave_1\x00', {}, 0xff81}) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x40080, 0x40) fsmount(r1, 0x0, 0xc) 11:01:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:01:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x50181, 0x40) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$bt_hci(r0, &(0x7f0000000000)={0x1, @role_discovery={{0x809, 0x2}, {0xc8}}}, 0x6) [ 1105.712188] FAULT_INJECTION: forcing a failure. [ 1105.712188] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.714055] CPU: 1 PID: 22122 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1105.715059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.716237] Call Trace: [ 1105.716634] dump_stack+0x107/0x167 [ 1105.717171] should_fail.cold+0x5/0xa 11:01:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 64) 11:01:01 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:01:01 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r2, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:01:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6f, 0x400000) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x88) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r3, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) accept$packet(r2, 0x0, &(0x7f00000025c0)) sendmsg$nl_generic(r1, &(0x7f0000002580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002600)={0x141c, 0x2c, 0x1, 0x70bd2a, 0x25dfdbff, {0xc}, [@generic="984d1f2c0c3eea5d6edbcdfd81c4cca8afaa3d562ad826a17c649030bfc0b3f7711f32ec7045674b3b248bdff4a6b3f8087e607b5ff2365b7f30ee1ff313e9c89ebe460e0ef1ed9294827185d1d417b5a82a857359216799eabfc4578f4eb36bf3501c3a3d220143574974ee130f4dedf2e42d933f912347d348", @generic="6758574cc381374292cdcc2d5892e5936ff6488e356cec24cd8a67b82bcbe21eb44294697d4d12d5c48bacb7ddbcedf62e2eb6323499c36600b1814f3d2bebcc20be455a48486eafddc4cc59dcdc457bf77ad36a600c4f5bc33e5ac0efe751dbcabd", @nested={0x1f1, 0x76, 0x0, 0x1, [@typed={0x8, 0x49, 0x0, 0x0, @ipv4=@remote}, @generic="18592791bd7f2b59427d214cd0519a97764c5899a78f98d928e23b6d26d2b9e916b3711ed99ca116c189a3f687db603c40f07fb29ec8fec230b3c83f6dd685fb8127217d4fd355936afeca5154c5566903b2f0e5d07fe0870fb8d38a4066c235e73e71b87c957756df10bec22e1eb2b8105e49fdf72ae3c64565351cb8ecd294ab43fcc48605c1a918c3ee90a508aa8044c811ccf76750c012566d702ee6e6d33bbdfe21fffb108cec6688cece49a46a68f62e894246cb433b234c7be374385ce0f188ba5b274d0deeaba03c5497f8ae8f6948d624c5638e65db2990dab7a464400e4d108bdedd49384330ad3e17adce37afdd6f5ebdfb69", @generic="91f4ec686e22c211a413029306efe4f2d5a744b675fb8f47439c3350f472407ee90100803a549fb1bae954bca82dffd35e3ac55abfe7a432d51255d998f6c30139c80f6292e67ff11a5c3796758adf23ba0b7fc80995895942cdb343161019c268aa1b449778c990d46069cdffb41bf7bde8ae41903268023d602c40b5ac0ae8e563ab8242e8d01efdf5684916b3b5aa9d67f3105d74a0eab0bd8f84212477b525ec2538999f38dcfa95962696ce20485a03c26858590c9215d7a72596ff4587ef67b90969c1f844e1f43597e77e78454ebe3bbdad4bf300d6a84d0b7ba12e3dc38328e05aeaf2d1a12e7189e4"]}, @nested={0xc, 0x22, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @pid}]}, @nested={0x112b, 0x4d, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@local}, @generic="373bc3f422c882067e4058c7950f4a3a4969fd548b01c7c1d23fc35a9ee9748b77d59fa63149c50a62eabd719d7286b3fbb67f1952aedeb57d4b19882c338fc9e181ca1c034da7259521970f2f60e69c856c3f639a7d0e9345394a01054e8a56ba211977fd742ec7e91732db1812724e1f661b4f6c2368e599a0e47b8dc7e42f8e08cfc45539f4399399300d4a11bb605d68b51a9135017af99ab06f246518fb75f146ef7763c0ca718f43b410222ebc8533cf6bff3f3d8f28b0c0ef2d0886b1d0ec4f3498b2d85826364cc31dd7", @generic="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", @generic, @generic="dfe26fb6ab60c788a70cbd2ab9dbf141404cb7573dc247a743e4379f4dade178da797a51236a73b3517f40b102094a56c51ab25a0250e5b09cebc89f3768d9d2dadc1b808181ec77bd6440d8d5", @typed={0x4, 0x75}]}]}, 0x141c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000100)) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 1105.717922] ? create_object.isra.0+0x3a/0xa20 [ 1105.718686] should_failslab+0x5/0x20 [ 1105.719250] kmem_cache_alloc+0x5b/0x310 [ 1105.719846] ? __lockdep_reset_lock+0x180/0x180 [ 1105.720518] create_object.isra.0+0x3a/0xa20 [ 1105.721154] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1105.721888] kmem_cache_alloc+0x159/0x310 [ 1105.722499] __kernfs_new_node+0xd4/0x860 [ 1105.723120] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1105.723806] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1105.724509] ? wait_for_completion_io+0x270/0x270 [ 1105.725212] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1105.725972] kernfs_new_node+0x18d/0x250 [ 1105.726568] __kernfs_create_file+0x51/0x350 [ 1105.727224] sysfs_add_file_mode_ns+0x221/0x560 [ 1105.727908] internal_create_group+0x324/0xb30 [ 1105.728579] ? sysfs_remove_group+0x170/0x170 [ 1105.729222] ? kernfs_name_hash+0xe7/0x110 [ 1105.729841] ? kernfs_find_ns+0x256/0x380 [ 1105.730452] sysfs_slab_add+0x188/0x200 [ 1105.731047] __kmem_cache_create+0x3db/0x520 [ 1105.731694] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1105.732427] p9_client_create+0xc2b/0x11c0 [ 1105.733056] ? p9_client_flush+0x430/0x430 [ 1105.733673] ? trace_hardirqs_on+0x5b/0x180 [ 1105.734297] ? lockdep_init_map_type+0x2c7/0x780 [ 1105.735008] ? __raw_spin_lock_init+0x36/0x110 [ 1105.735684] v9fs_session_init+0x1dd/0x1680 [ 1105.736308] ? lock_release+0x680/0x680 [ 1105.736903] ? kmem_cache_alloc_trace+0x151/0x320 [ 1105.737599] ? v9fs_show_options+0x690/0x690 [ 1105.738258] ? trace_hardirqs_on+0x5b/0x180 [ 1105.738894] ? kasan_unpoison_shadow+0x33/0x50 [ 1105.739567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1105.740308] v9fs_mount+0x79/0x8f0 [ 1105.740829] ? v9fs_write_inode+0x60/0x60 [ 1105.741446] legacy_get_tree+0x105/0x220 [ 1105.742042] vfs_get_tree+0x8e/0x300 [ 1105.742579] path_mount+0x1429/0x2120 [ 1105.743153] ? strncpy_from_user+0x9e/0x470 [ 1105.743781] ? finish_automount+0xa90/0xa90 [ 1105.744414] ? getname_flags.part.0+0x1dd/0x4f0 [ 1105.745082] ? _copy_from_user+0xfb/0x1b0 [ 1105.745697] __x64_sys_mount+0x282/0x300 [ 1105.746289] ? copy_mnt_ns+0xa00/0xa00 [ 1105.746858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1105.747631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.748378] do_syscall_64+0x33/0x40 [ 1105.748920] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1105.749657] RIP: 0033:0x7f0377362b19 [ 1105.750193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.752825] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1105.753919] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1105.754937] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1105.755966] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1105.756986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1105.758004] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:01:01 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:01:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x50181, 0x40) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:01:01 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r2, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:01:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 11:01:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0115040200003bca509930ed4debdcb38a31885bf39ac2ee4af1eb7225b520cddfdc85b9745176b6ae24a1c49d523aa5c88c9486193ad0daffc0cd35e8036c667ebb64e4cb62463ef7df794d619f92f68c12779a01e3c525c18fae13d0bee3bb6cb0dd840faac3715c7557810779d74635f30848f01fcdd7c1f35dbee3b221244b5a"], 0x6) 11:01:01 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:01:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:01:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="31e3a04e8177bcc14483f5a7efc54e0fc5a13d31cbfa3efa6692c0c203e1e9147f9c8b50d28d1a4027eb8edce28dc2926f57156a46aabd80710e76305668a0acc18fa1f76dad7432359f9c8300000000"], 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'wg0\x00', @ifru_hwaddr=@multicast}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000180)={0x1, @write_local_name={{0xc13, 0xf8}, {"b0fc75421a8658151b4381b7f82a70c9ba0da09e599ad3701373b5d222e8862639990abf2416243b6e271c769e4d147bfb020901fb56a4239133623c0deaf5687b4c17bd3fbe9583e0123d045d24fd64e3677a08ab7769ee2af556c0e695ce5bb543adf6c2e4748e0b0b04036414078f2d35c99e833ead62a69c6e7cd2497b3cd2d95da8b6952478246635ca211183478ae72e99fb1a0ada8d6bc80fe2fc87806021669c952447c5c15cc977a4aa8e5906e0b18b87e29684d22f4b4f478784bd094e34a567bb0e39d28f1d1dab628816e93b3d4cb3946aeb8d54b0501651d746dfe14e93c4a891a24ef149a621a80e5064bb10b5bb6f7911"}}}, 0xfc) 11:01:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:01:16 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:01:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:01:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:01:16 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}}) 11:01:16 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:01:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:01:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 65) [ 1120.244641] 9pnet: Insufficient options for proto=fd [ 1120.260371] FAULT_INJECTION: forcing a failure. [ 1120.260371] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.262076] CPU: 0 PID: 22279 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1120.263102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.264328] Call Trace: [ 1120.264736] dump_stack+0x107/0x167 [ 1120.265290] should_fail.cold+0x5/0xa [ 1120.265873] ? __kernfs_new_node+0xd4/0x860 [ 1120.266521] should_failslab+0x5/0x20 [ 1120.267090] kmem_cache_alloc+0x5b/0x310 [ 1120.267721] __kernfs_new_node+0xd4/0x860 [ 1120.268353] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1120.269059] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1120.269785] ? wait_for_completion_io+0x270/0x270 [ 1120.270508] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1120.271313] kernfs_new_node+0x18d/0x250 [ 1120.271940] __kernfs_create_file+0x51/0x350 [ 1120.272609] sysfs_add_file_mode_ns+0x221/0x560 [ 1120.273329] internal_create_group+0x324/0xb30 [ 1120.274034] ? sysfs_remove_group+0x170/0x170 [ 1120.274700] ? kernfs_name_hash+0xe7/0x110 [ 1120.275332] ? kernfs_find_ns+0x256/0x380 [ 1120.275973] sysfs_slab_add+0x188/0x200 [ 1120.276579] __kmem_cache_create+0x3db/0x520 [ 1120.277246] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1120.278014] p9_client_create+0xc2b/0x11c0 [ 1120.278674] ? p9_client_flush+0x430/0x430 [ 1120.279323] ? trace_hardirqs_on+0x5b/0x180 [ 1120.279975] ? lockdep_init_map_type+0x2c7/0x780 [ 1120.280697] ? __raw_spin_lock_init+0x36/0x110 [ 1120.281395] v9fs_session_init+0x1dd/0x1680 [ 1120.282027] ? lock_release+0x680/0x680 [ 1120.282648] ? kmem_cache_alloc_trace+0x151/0x320 [ 1120.283373] ? v9fs_show_options+0x690/0x690 [ 1120.284056] ? trace_hardirqs_on+0x5b/0x180 [ 1120.284715] ? kasan_unpoison_shadow+0x33/0x50 [ 1120.285398] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1120.286173] v9fs_mount+0x79/0x8f0 [ 1120.286717] ? v9fs_write_inode+0x60/0x60 [ 1120.287350] legacy_get_tree+0x105/0x220 [ 1120.287966] vfs_get_tree+0x8e/0x300 [ 1120.288525] path_mount+0x1429/0x2120 [ 1120.289109] ? strncpy_from_user+0x9e/0x470 [ 1120.289753] ? finish_automount+0xa90/0xa90 [ 1120.290398] ? getname_flags.part.0+0x1dd/0x4f0 [ 1120.291088] ? _copy_from_user+0xfb/0x1b0 [ 1120.291738] __x64_sys_mount+0x282/0x300 [ 1120.292344] ? copy_mnt_ns+0xa00/0xa00 [ 1120.292938] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1120.293716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1120.294494] do_syscall_64+0x33/0x40 [ 1120.295052] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1120.295821] RIP: 0033:0x7f0377362b19 [ 1120.296381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.299061] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1120.300200] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1120.301256] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1120.302304] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1120.303364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.304415] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:01:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:01:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 1120.373272] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1120.374322] CPU: 1 PID: 22279 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1120.375439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.376611] Call Trace: [ 1120.376996] dump_stack+0x107/0x167 [ 1120.377551] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1120.378322] p9_client_create+0xc2b/0x11c0 [ 1120.378942] ? p9_client_flush+0x430/0x430 [ 1120.379582] ? trace_hardirqs_on+0x5b/0x180 [ 1120.380202] ? lockdep_init_map_type+0x2c7/0x780 [ 1120.380907] ? __raw_spin_lock_init+0x36/0x110 [ 1120.381588] v9fs_session_init+0x1dd/0x1680 [ 1120.382211] ? lock_release+0x680/0x680 [ 1120.382805] ? kmem_cache_alloc_trace+0x151/0x320 [ 1120.383524] ? v9fs_show_options+0x690/0x690 [ 1120.384167] ? trace_hardirqs_on+0x5b/0x180 [ 1120.384805] ? kasan_unpoison_shadow+0x33/0x50 [ 1120.385481] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1120.386208] v9fs_mount+0x79/0x8f0 [ 1120.386744] ? v9fs_write_inode+0x60/0x60 [ 1120.387377] legacy_get_tree+0x105/0x220 [ 1120.387967] vfs_get_tree+0x8e/0x300 [ 1120.388516] path_mount+0x1429/0x2120 [ 1120.389080] ? strncpy_from_user+0x9e/0x470 [ 1120.389724] ? finish_automount+0xa90/0xa90 [ 1120.390360] ? getname_flags.part.0+0x1dd/0x4f0 [ 1120.391021] ? _copy_from_user+0xfb/0x1b0 [ 1120.391657] __x64_sys_mount+0x282/0x300 [ 1120.392238] ? copy_mnt_ns+0xa00/0xa00 [ 1120.392813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1120.393585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1120.394342] do_syscall_64+0x33/0x40 [ 1120.394876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1120.395635] RIP: 0033:0x7f0377362b19 [ 1120.396173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.398805] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1120.399925] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1120.400945] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1120.401980] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1120.403010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.404049] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:01:16 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11:01:16 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}}) 11:01:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:01:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 1120.484937] 9pnet: Insufficient options for proto=fd 11:01:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:01:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:01:16 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}}) 11:01:16 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:01:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000000c0)="8686eb2dac6c83f992312e217805caa1adf5696188c1c5d12b1d69be21f7850800c9226f8be2cfe74de4ac9cc62dc376b1d7329dbe14023c54de3b811cb0514a7f56519c8d05aff5d2ef8775f5b769aa9812d288a4e35eaac36f6bbd1a47341cc298e93d354c8fa30f1bc957a42792693bb508ba6b6517c31a7004445d3848ec47da1773174526903f8ee36d7d0f9c2c42c2ba1c5d4e2bd41c8f883a8f9dc0a87a1649869a708da4ab2a8f9cf29cf8aea0527c731a0d577d3eaac43df83283306bea560febf696f2b28834ae7c5994962ac6d38e29cdfcab969209c77c9dbd0471c05e1588abb7234f0b3aa253af888130063eeb") write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30001eb82055bcc58164141b4fd6ee56502e83cc960000000000000000005cd99c042ed031ed1cf3799787b0b096860177a58606aa583a99ab5e93b3673898e74f7eb05b905953cf3702f4129e92c3ba1b30ad2e3acad6fecbcb0582b5410034e0282733e8adeeb8e9b2f1651251f8e7616c3536b1cce8912c62583792ff68a4a97c9cca40d8593f130600000000000000b97469bc972d0000000100000000a6b0db945e4e335f37d62339f1e6e783f89849f1b433e8860e5ccf3c61c20ddc71418edcd6815b6bf8ab4e4a01e000f706e93f92c1588045579b910b3aac00"/241], 0x5) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x40, 0x3, 0x4, 0x0, 0x8000, 0x30000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfc000000, 0x4, @perf_bp, 0x50, 0x0, 0xffffffff, 0x0, 0x3f, 0x5, 0xf001, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) dup2(r1, r1) r2 = dup2(r1, 0xffffffffffffffff) pidfd_getfd(r2, r2, 0x0) ioctl$HIDIOCINITREPORT(r2, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000003c0)={0x7000000, 0x10, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000240)="30483da8a5315f98fc83a9bdbf3295515f65e0a465a4c820288bef348dbd05248e4866d53dd2d25110559e7332dcb2dd64bb22d5c977f4147aec848b513903b84b6be0012e51827fb09c19df30c343cc251075e622f8fce64ad5ab86b804edac41f2a63fc6955b716d8ce932b672c995b964c1601b04016951ff") [ 1120.671193] 9pnet: Insufficient options for proto=fd 11:01:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 66) 11:01:16 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) [ 1120.829946] FAULT_INJECTION: forcing a failure. [ 1120.829946] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.831637] CPU: 0 PID: 22448 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1120.832658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.833833] Call Trace: [ 1120.834242] dump_stack+0x107/0x167 [ 1120.834799] should_fail.cold+0x5/0xa [ 1120.835376] ? create_object.isra.0+0x3a/0xa20 [ 1120.836060] ? create_object.isra.0+0x3a/0xa20 [ 1120.836722] should_failslab+0x5/0x20 [ 1120.837294] kmem_cache_alloc+0x5b/0x310 [ 1120.837918] create_object.isra.0+0x3a/0xa20 [ 1120.838554] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1120.839327] kmem_cache_alloc+0x159/0x310 [ 1120.839962] __kernfs_new_node+0xd4/0x860 [ 1120.840564] ? rwlock_bug.part.0+0x90/0x90 [ 1120.841203] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1120.841882] ? wake_up_q+0xab/0x110 [ 1120.842424] ? do_raw_spin_unlock+0x4f/0x220 [ 1120.843092] ? __mutex_unlock_slowpath+0x2a9/0x600 [ 1120.843815] ? wait_for_completion_io+0x270/0x270 [ 1120.844540] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1120.845337] kernfs_new_node+0x18d/0x250 [ 1120.845938] __kernfs_create_file+0x51/0x350 [ 1120.846605] sysfs_add_file_mode_ns+0x221/0x560 [ 1120.847331] internal_create_group+0x324/0xb30 [ 1120.848032] ? sysfs_remove_group+0x170/0x170 [ 1120.848678] ? kernfs_name_hash+0xe7/0x110 [ 1120.849314] ? kernfs_find_ns+0x256/0x380 [ 1120.849938] sysfs_slab_add+0x188/0x200 [ 1120.850538] __kmem_cache_create+0x3db/0x520 [ 1120.851197] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1120.851954] p9_client_create+0xc2b/0x11c0 [ 1120.852592] ? p9_client_flush+0x430/0x430 [ 1120.853241] ? trace_hardirqs_on+0x5b/0x180 [ 1120.853890] ? lockdep_init_map_type+0x2c7/0x780 [ 1120.854587] ? __raw_spin_lock_init+0x36/0x110 [ 1120.855295] v9fs_session_init+0x1dd/0x1680 [ 1120.855936] ? lock_release+0x680/0x680 [ 1120.856527] ? kmem_cache_alloc_trace+0x151/0x320 [ 1120.857253] ? v9fs_show_options+0x690/0x690 [ 1120.857930] ? trace_hardirqs_on+0x5b/0x180 [ 1120.858560] ? kasan_unpoison_shadow+0x33/0x50 [ 1120.859249] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1120.860011] v9fs_mount+0x79/0x8f0 [ 1120.860536] ? v9fs_write_inode+0x60/0x60 [ 1120.861159] legacy_get_tree+0x105/0x220 [ 1120.861753] vfs_get_tree+0x8e/0x300 [ 1120.862310] path_mount+0x1429/0x2120 [ 1120.862873] ? strncpy_from_user+0x9e/0x470 [ 1120.863522] ? finish_automount+0xa90/0xa90 [ 1120.864163] ? getname_flags.part.0+0x1dd/0x4f0 [ 1120.864834] ? _copy_from_user+0xfb/0x1b0 [ 1120.865478] __x64_sys_mount+0x282/0x300 [ 1120.866086] ? copy_mnt_ns+0xa00/0xa00 [ 1120.866656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1120.867434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1120.868210] do_syscall_64+0x33/0x40 [ 1120.868746] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1120.869500] RIP: 0033:0x7f0377362b19 [ 1120.870039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.872714] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1120.873831] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1120.874878] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1120.875925] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1120.876979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.878021] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:01:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 67) 11:01:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000001c0)={0x0, 0x7}) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @write_local_name={{0xc13, 0xf8}, {"a3ee1f3e39f8d922db202ce21d34b102cd42221f5b8f41ff9dfeb1ae80e69c48011d461366c817034417a3f8e930d019172bbee023456ce9b37cacc0883bb6cecd41fdc751a133b41f468188a04287a917a3204f403bca7992aca58a06b0a854faf67efcf6053697e2408e292e1a8217bf0e0ce2baaa44b8b8edfc493b3473cbacb8d0e8cadfb7fb85e42ddbe0393c8ea5c077f7a1a023c3814aa5a18b04a451eb3d9f0dd934ac26e04b107812e03c5ea8d620171213a4b11d95cb1714048a08291d0b2be4cb595ac24e80d39a57988f21195e6d862d5f2d7ce23970f751f0618a4885e337133eef8dc4348d7a49af5342395019c86aecc3"}}}, 0xfc) 11:01:32 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:01:32 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 11:01:32 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:01:32 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:01:32 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:01:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffc1, 0x2}, 0x6) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3fffc000}}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) signalfd4(r2, &(0x7f00000001c0), 0x8, 0x800) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 1136.721307] 9pnet: Insufficient options for proto=fd [ 1136.731950] FAULT_INJECTION: forcing a failure. [ 1136.731950] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.733715] CPU: 1 PID: 22539 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1136.734750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1136.735988] Call Trace: [ 1136.736386] dump_stack+0x107/0x167 [ 1136.736932] should_fail.cold+0x5/0xa [ 1136.737502] ? __kernfs_new_node+0xd4/0x860 [ 1136.738150] should_failslab+0x5/0x20 [ 1136.738721] kmem_cache_alloc+0x5b/0x310 [ 1136.739349] __kernfs_new_node+0xd4/0x860 [ 1136.739985] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1136.740700] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1136.741428] ? wait_for_completion_io+0x270/0x270 [ 1136.742154] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1136.742947] kernfs_new_node+0x18d/0x250 [ 1136.743570] __kernfs_create_file+0x51/0x350 [ 1136.744238] sysfs_add_file_mode_ns+0x221/0x560 [ 1136.744945] internal_create_group+0x324/0xb30 [ 1136.745639] ? sysfs_remove_group+0x170/0x170 [ 1136.746309] ? kernfs_name_hash+0xe7/0x110 [ 1136.746927] ? kernfs_find_ns+0x256/0x380 [ 1136.747570] sysfs_slab_add+0x188/0x200 [ 1136.748168] __kmem_cache_create+0x3db/0x520 [ 1136.748834] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1136.749589] p9_client_create+0xc2b/0x11c0 [ 1136.750230] ? p9_client_flush+0x430/0x430 [ 1136.750865] ? trace_hardirqs_on+0x5b/0x180 [ 1136.751518] ? lockdep_init_map_type+0x2c7/0x780 [ 1136.752233] ? __raw_spin_lock_init+0x36/0x110 [ 1136.752925] v9fs_session_init+0x1dd/0x1680 [ 1136.753575] ? lock_release+0x680/0x680 [ 1136.754181] ? kmem_cache_alloc_trace+0x151/0x320 [ 1136.754890] ? v9fs_show_options+0x690/0x690 [ 1136.755566] ? trace_hardirqs_on+0x5b/0x180 [ 1136.756216] ? kasan_unpoison_shadow+0x33/0x50 [ 1136.756902] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1136.757657] v9fs_mount+0x79/0x8f0 [ 1136.758195] ? v9fs_write_inode+0x60/0x60 [ 1136.758818] legacy_get_tree+0x105/0x220 [ 1136.759435] vfs_get_tree+0x8e/0x300 [ 1136.760002] path_mount+0x1429/0x2120 [ 1136.760576] ? strncpy_from_user+0x9e/0x470 [ 1136.761223] ? finish_automount+0xa90/0xa90 [ 1136.761864] ? getname_flags.part.0+0x1dd/0x4f0 [ 1136.762542] ? _copy_from_user+0xfb/0x1b0 [ 1136.763176] __x64_sys_mount+0x282/0x300 [ 1136.763776] ? copy_mnt_ns+0xa00/0xa00 [ 1136.764365] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1136.765139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1136.765907] do_syscall_64+0x33/0x40 [ 1136.766466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1136.767221] RIP: 0033:0x7f0377362b19 [ 1136.767788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1136.770475] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1136.771615] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1136.772661] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1136.773709] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1136.774758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1136.775827] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:01:32 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 11:01:32 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:01:32 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1136.875410] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1136.876672] CPU: 0 PID: 22539 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1136.877923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1136.879439] Call Trace: [ 1136.879932] dump_stack+0x107/0x167 [ 1136.880617] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1136.881595] p9_client_create+0xc2b/0x11c0 [ 1136.882399] ? p9_client_flush+0x430/0x430 [ 1136.883189] ? trace_hardirqs_on+0x5b/0x180 [ 1136.883991] ? lockdep_init_map_type+0x2c7/0x780 [ 1136.884873] ? __raw_spin_lock_init+0x36/0x110 [ 1136.885719] v9fs_session_init+0x1dd/0x1680 [ 1136.886515] ? lock_release+0x680/0x680 [ 1136.887272] ? kmem_cache_alloc_trace+0x151/0x320 [ 1136.888163] ? v9fs_show_options+0x690/0x690 [ 1136.888994] ? trace_hardirqs_on+0x5b/0x180 [ 1136.889785] ? kasan_unpoison_shadow+0x33/0x50 [ 1136.890625] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1136.891567] v9fs_mount+0x79/0x8f0 [ 1136.892230] ? v9fs_write_inode+0x60/0x60 [ 1136.892988] legacy_get_tree+0x105/0x220 [ 1136.893739] vfs_get_tree+0x8e/0x300 [ 1136.894424] path_mount+0x1429/0x2120 [ 1136.895134] ? strncpy_from_user+0x9e/0x470 [ 1136.895931] ? finish_automount+0xa90/0xa90 [ 1136.896718] ? getname_flags.part.0+0x1dd/0x4f0 [ 1136.897561] ? _copy_from_user+0xfb/0x1b0 [ 1136.898344] __x64_sys_mount+0x282/0x300 [ 1136.899086] ? copy_mnt_ns+0xa00/0xa00 [ 1136.899818] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1136.900773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1136.901727] do_syscall_64+0x33/0x40 [ 1136.902379] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1136.903305] RIP: 0033:0x7f0377362b19 [ 1136.903998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1136.907297] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1136.908681] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1136.909956] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1136.911248] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1136.912538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1136.913808] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 [ 1136.928940] 9pnet: Insufficient options for proto=fd 11:01:49 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 11:01:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="f6", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) getsockname(r0, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0x80) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:01:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 68) 11:01:49 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:01:49 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:01:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:01:49 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:01:49 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="011504020000b6516e546b378965720ddd00ecf126317b0330daa8a626d2ce00d17ecbe196213e537e1b1468257b3bf966be5c5220a8fb7689171a404bfe5eb2a888a1689cff5bccdb31bdb3400bf9cdb53a4d4ffa8f03e3428d7f6d1f104dbc05f362b148bbd36fc94515c08957665e7e5ed989a187208a9eb8da0becfcc6"], 0x6) [ 1153.484876] 9pnet: Insufficient options for proto=fd [ 1153.493696] FAULT_INJECTION: forcing a failure. [ 1153.493696] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.495498] CPU: 0 PID: 22665 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1153.496518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1153.497724] Call Trace: [ 1153.498121] dump_stack+0x107/0x167 [ 1153.498671] should_fail.cold+0x5/0xa [ 1153.499237] ? create_object.isra.0+0x3a/0xa20 [ 1153.499925] should_failslab+0x5/0x20 [ 1153.500490] kmem_cache_alloc+0x5b/0x310 [ 1153.501108] create_object.isra.0+0x3a/0xa20 [ 1153.501760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1153.502524] kmem_cache_alloc+0x159/0x310 [ 1153.503154] __kernfs_new_node+0xd4/0x860 [ 1153.503794] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1153.504499] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1153.505225] ? wait_for_completion_io+0x270/0x270 [ 1153.505945] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1153.506734] kernfs_new_node+0x18d/0x250 [ 1153.507354] __kernfs_create_file+0x51/0x350 [ 1153.508025] sysfs_add_file_mode_ns+0x221/0x560 [ 1153.508745] internal_create_group+0x324/0xb30 [ 1153.509440] ? sysfs_remove_group+0x170/0x170 [ 1153.510097] ? kernfs_name_hash+0xe7/0x110 [ 1153.510738] ? kernfs_find_ns+0x256/0x380 [ 1153.511373] sysfs_slab_add+0x188/0x200 [ 1153.511988] __kmem_cache_create+0x3db/0x520 [ 1153.512659] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1153.513415] p9_client_create+0xc2b/0x11c0 [ 1153.514073] ? p9_client_flush+0x430/0x430 [ 1153.514714] ? trace_hardirqs_on+0x5b/0x180 [ 1153.515380] ? lockdep_init_map_type+0x2c7/0x780 [ 1153.516091] ? __raw_spin_lock_init+0x36/0x110 [ 1153.516787] v9fs_session_init+0x1dd/0x1680 [ 1153.517427] ? lock_release+0x680/0x680 [ 1153.518040] ? kmem_cache_alloc_trace+0x151/0x320 [ 1153.518760] ? v9fs_show_options+0x690/0x690 [ 1153.519441] ? trace_hardirqs_on+0x5b/0x180 [ 1153.520091] ? kasan_unpoison_shadow+0x33/0x50 [ 1153.520767] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1153.521526] v9fs_mount+0x79/0x8f0 [ 1153.522066] ? v9fs_write_inode+0x60/0x60 [ 1153.522676] legacy_get_tree+0x105/0x220 [ 1153.523289] vfs_get_tree+0x8e/0x300 [ 1153.523844] path_mount+0x1429/0x2120 [ 1153.524430] ? strncpy_from_user+0x9e/0x470 [ 1153.525069] ? finish_automount+0xa90/0xa90 [ 1153.525716] ? getname_flags.part.0+0x1dd/0x4f0 [ 1153.526391] ? _copy_from_user+0xfb/0x1b0 [ 1153.527032] __x64_sys_mount+0x282/0x300 [ 1153.527642] ? copy_mnt_ns+0xa00/0xa00 [ 1153.528233] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1153.528997] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1153.529768] do_syscall_64+0x33/0x40 [ 1153.530311] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1153.531069] RIP: 0033:0x7f0377362b19 [ 1153.531662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1153.534330] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1153.535420] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1153.536467] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1153.537501] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1153.538538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1153.539582] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:01:49 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:01:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:01:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x4}, 0x9}) 11:01:49 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:01:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{0x800, 0x0, 0x10001}, {0x800, 0x0, 0x40000001ffffffd}]}) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01240cc973236f5ced5d34bbf7b8117822bf0380"], 0x7) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:01:49 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:01:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:01:49 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:01:49 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:01:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:01:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 69) [ 1153.830281] FAULT_INJECTION: forcing a failure. [ 1153.830281] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.831291] CPU: 1 PID: 22799 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1153.831860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1153.832527] Call Trace: [ 1153.832748] dump_stack+0x107/0x167 [ 1153.833048] should_fail.cold+0x5/0xa [ 1153.833367] ? __kernfs_new_node+0xd4/0x860 [ 1153.833727] should_failslab+0x5/0x20 [ 1153.834040] kmem_cache_alloc+0x5b/0x310 [ 1153.834376] __kernfs_new_node+0xd4/0x860 [ 1153.834722] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1153.835117] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1153.835515] ? wait_for_completion_io+0x270/0x270 [ 1153.835919] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1153.836351] kernfs_new_node+0x18d/0x250 [ 1153.836685] __kernfs_create_file+0x51/0x350 [ 1153.837053] sysfs_add_file_mode_ns+0x221/0x560 [ 1153.837445] internal_create_group+0x324/0xb30 [ 1153.837827] ? sysfs_remove_group+0x170/0x170 [ 1153.838195] ? kernfs_name_hash+0xe7/0x110 [ 1153.838543] ? kernfs_find_ns+0x256/0x380 [ 1153.838889] sysfs_slab_add+0x188/0x200 [ 1153.839220] __kmem_cache_create+0x3db/0x520 [ 1153.839589] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1153.840004] p9_client_create+0xc2b/0x11c0 [ 1153.840362] ? p9_client_flush+0x430/0x430 [ 1153.840704] ? trace_hardirqs_on+0x5b/0x180 [ 1153.841065] ? lockdep_init_map_type+0x2c7/0x780 [ 1153.841457] ? __raw_spin_lock_init+0x36/0x110 [ 1153.841832] v9fs_session_init+0x1dd/0x1680 [ 1153.842184] ? lock_release+0x680/0x680 [ 1153.842519] ? kmem_cache_alloc_trace+0x151/0x320 [ 1153.842912] ? v9fs_show_options+0x690/0x690 [ 1153.843279] ? trace_hardirqs_on+0x5b/0x180 [ 1153.843638] ? kasan_unpoison_shadow+0x33/0x50 [ 1153.844016] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1153.844439] v9fs_mount+0x79/0x8f0 [ 1153.844733] ? v9fs_write_inode+0x60/0x60 [ 1153.845074] legacy_get_tree+0x105/0x220 [ 1153.845411] vfs_get_tree+0x8e/0x300 [ 1153.845714] path_mount+0x1429/0x2120 [ 1153.846032] ? strncpy_from_user+0x9e/0x470 [ 1153.846389] ? finish_automount+0xa90/0xa90 [ 1153.846755] ? getname_flags.part.0+0x1dd/0x4f0 [ 1153.847138] ? _copy_from_user+0xfb/0x1b0 [ 1153.847492] __x64_sys_mount+0x282/0x300 [ 1153.847831] ? copy_mnt_ns+0xa00/0xa00 [ 1153.848154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1153.848583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1153.849013] do_syscall_64+0x33/0x40 [ 1153.849321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1153.849745] RIP: 0033:0x7f0377362b19 [ 1153.850050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1153.851541] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1153.852161] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1153.852742] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1153.853317] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1153.853898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1153.854481] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 [ 1153.856334] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1153.857380] CPU: 0 PID: 22799 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1153.858398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1153.859620] Call Trace: [ 1153.860026] dump_stack+0x107/0x167 [ 1153.860583] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1153.861372] p9_client_create+0xc2b/0x11c0 [ 1153.862024] ? p9_client_flush+0x430/0x430 [ 1153.862656] ? trace_hardirqs_on+0x5b/0x180 [ 1153.863309] ? lockdep_init_map_type+0x2c7/0x780 [ 1153.864033] ? __raw_spin_lock_init+0x36/0x110 [ 1153.864726] v9fs_session_init+0x1dd/0x1680 [ 1153.865366] ? lock_release+0x680/0x680 [ 1153.865981] ? kmem_cache_alloc_trace+0x151/0x320 [ 1153.866687] ? v9fs_show_options+0x690/0x690 [ 1153.867369] ? trace_hardirqs_on+0x5b/0x180 [ 1153.868037] ? kasan_unpoison_shadow+0x33/0x50 [ 1153.868713] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1153.869483] v9fs_mount+0x79/0x8f0 [ 1153.870028] ? v9fs_write_inode+0x60/0x60 [ 1153.870649] legacy_get_tree+0x105/0x220 [ 1153.871258] vfs_get_tree+0x8e/0x300 [ 1153.871820] path_mount+0x1429/0x2120 [ 1153.872395] ? strncpy_from_user+0x9e/0x470 [ 1153.873020] ? finish_automount+0xa90/0xa90 [ 1153.873658] ? getname_flags.part.0+0x1dd/0x4f0 [ 1153.874348] ? _copy_from_user+0xfb/0x1b0 [ 1153.874984] __x64_sys_mount+0x282/0x300 [ 1153.875595] ? copy_mnt_ns+0xa00/0xa00 [ 1153.876183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1153.876953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1153.877707] do_syscall_64+0x33/0x40 [ 1153.878262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1153.878996] RIP: 0033:0x7f0377362b19 [ 1153.879556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1153.882137] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1153.883261] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1153.884319] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1153.885367] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1153.886410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1153.887465] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:02:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:02:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 70) 11:02:01 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:02:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x22041, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000440)=ANY=[@ANYBLOB="0100040001040030c3d7e74018000000edd0", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="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"]) fcntl$lock(r2, 0x2, &(0x7f0000000140)={0x2, 0x1, 0x7e00000, 0x161, 0xffffffffffffffff}) r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee01}}, './file1\x00'}) r8 = signalfd4(r7, &(0x7f0000000240)={[0x200]}, 0x8, 0x80800) sendfile(r6, r0, &(0x7f0000000100)=0xffffffffffff0001, 0xffffffffffffffe0) fremovexattr(r8, &(0x7f0000000400)=@random={'user.', '^\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xee, 0x40, 0x3, 0xff, 0x0, 0x4, 0x90, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0x2}, 0x100, 0x294, 0x9, 0x9, 0xc59, 0x80000001, 0x9, 0x0, 0xdc43, 0x0, 0x9}, 0xffffffffffffffff, 0xc, r3, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="27310200ffff"], 0x6) r9 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder-control\x00', 0x0, 0x0) dup2(r1, r9) 11:02:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:02:01 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:02:01 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:02:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000200)={{r0}, "85a47195134ebf6f7700db6c436fa57d92e78c6daafb80617edfed8918fdbee866eb787f6ab54f09cee009f5cca45208d5c5f4d839699832741ad96ffe7256ec375c75667f70505991e4da7400009335cdd8672c008dad7ea5e60e7d278fb95148a3702eb790a93776f9934dc5a6853edb6f50b2c48d0f2917b11a5b47ef808f84d3cd080850423a10b60020c60beadcb84a048a12bd4df3b60e159bda5e77df3c5ef930924a72e982036dacaef8fca21a04c5bca354946b3f251d2d3069ad46e773774357830b4706bdeaef8d47c6942d4c110e805193c2a350bfdd4dd1aa866e5be494b707b057b7aadeb69380930a874a0cd545de6790f8266b31239495e25266a37e1624b25e738faa8e81fbf40ea6c47653032dff4889494974beddd1c95f1821c45a2e1925889a493c5497653bd6aea23eb8c1c0c00c0e7b8bfd6d89a0e0665f2ba81a0eec71efca21042bbdd02c03847341f4dcbce45a71f4ffbfa1be11c59903d9a7ab430021a18ab8f79d3087a68c423a2e5e9488b14fd2160cadd22b31030f410ccf0cd44991312a9d6adb4af657af7b03fe0f3f65dbda7c925aee2e0400ab8362660cd29f8703ae07d81c1f9c49b1c47a32f3fa6b8251dfc4260de7242006d069dfaccf353411548857fd31391f05e92591aebea27803363f6baf318c5892a3da1eace45f0ef597fa9c901a44cc0c7db006c05badf1af08bbe19b5baa8c494b9a1c89dd38cfd12688292ac4ad6dee42b8c7e8810f813602bdf8388379da6f55b57a7ee86b8433022e5ecae90f688cdee011f1ab0e0257309f986315f767def227b2dce47a1661db43ac6bda5b66097675bc7cfc2eaba9194fc943749d9898c2006453bcc0c6b464a53d33a69d3243fe5a092922edabba8876e0031cff25f6f789372c7491a71c77681482971f093d78da3f4327aeb890a48189a237c05cd71fcc5d8ff419dadbda10c828c79630013831e10cf3e01dae93685920bf90cb01416eb1a9ec8db847f86403027d38d7e593e093f75ee9917b00d417dbd1ff4228562c5fa264bfc23f0f201c23f935166b50f1cdd4bafafae8540fd9d9ee13745e56ef9989c4c959a0a8045efb9f20662f9edf055baefa66ff3bd4ce119d3cf0c4724effcea56bfe0f7dc952268494885ac0e9771ecea849d104adb5cc26cea320938f37c89b89c495d7c3aa20ad22cdadbc5ab7ab034fac3af67125fed17eda7d2d29d42f0ca7bd2ca50e5d7008eaf19cc6c248ed9c05358591366e9d4cc7628c72177f91c46c2a0051eeb2b6b2be3edeb7b74a443bf01da48a0008f5e8f74bb15787c7b033f1cfbdbb6151b6a5bc349dccfb8841ea650ed99b7cced9ed60990aa9e374e12e956bd5a63098e0c64cd2052f9f033a5a3c5fcf54a5362e34814719f262ec6741ef1bbc196aaf62d229aebe2c543b9f083f993fd1690f4a27fae099ceb6fea07442fda9f02c2cf97638c439d988e294f4471b3864ce124620c02737987e8cd591e20bba8892d1004abd42dae904fcbe701d6f344fe87883b3dc272b34df955c7ddd9de1cba13dcf11f2da20d09a5093758d38cc51b95e05ca3a6b1847d9e494e3d220d2c21f9ceaab3e6d1d35f511563f8eddbfea9d46e1eae25a475140403159213837b3ef0057acb553406d83092a9fc6c35a9fe951c7ad1a9c31056a942ebe5252f8e8366be3514f01c2271303c3dfde9be90d84a5c6543e55f69e314e4502b019727fd9af75771fa49764b20d97cfd94ff44b8634b4e0ec42c98f66cc78cb0259d7376828ce4e3dbec0f331a61416fa7fbf3ea20de7222e00ce8a89e42fb9e21b744f9992d6e057fc19caafc2f18191f090114a4dec89423906a88b31cf21ad8f149d67d1907ef7a6ba172c75eabe235e0b8f9f6ea2ff8de6990649a6617d335c7e556b0c72b8c948771d02b44f5678c6f2f1a57b2be2865131106a23155dcf2de0d1b0b5fe26316a0af84d34938f49d25ca790313a279c03e06b35c4b7c23d9d5b893cc4cb76723d1b30c95f0fd9a2f33de468bc26254fd5e7d0a54ca4b3645c9b1e4909ffe97bc7588bbd15977d6a8c48690d353d622bcc2febfc43106b9c0b40f86bf4adb146da1bb9e61feb4a3735aaa8ed76fc3dd9ac16afe344d103fad9a0e2fe3ce6721ecbfa80d9aa0769e9a6e3d7405d11c69aef1647bbe1da06e6b73a218f59b2a357cbcdc912cbce94c7bcb6f01e737f377a61a5fd3f91f086ed6697c1aa2a13385c4768a6abc58c0b817ce3bad4960611c510981d0493b6dadae078763f0140cbae4b12ed42e9aea117722ee864b5336c9963162e1ba329915321b71f1d9ef264a7bf2abaf2ff185d790892afe4f6d5bf4d6803888522c6759a045aef78917cf76a77ede468f435d43272ec4401c077a89d9d72fbc526dcec7783bfdf2137cd180070a6812039c231ec30ad547d4fd33955940f317052f9699e3d4f6805f8e17cd0480225fd53839e485bf6de3f4cde900b8d2b5cf918780c836ee99aa94523b190191a9ab80de397c654798a34c5ea010e4fd1641508695abbe18e1a4324ae61c75c17294b7ec0b9a1d0c5bec656aef0f94e69fe1857cd7fae3a3b8fa093ea9fdc12c6580ad661cad6e1b21df55e0a007a25d7cf7324918e6458b44ce2a2e443cf8604c9c318aab059991e1b8326246ecc7cd69cd271a291bc8cc2c87a3b968a69b22ec6f10c24ba82e433016c0927349dad68b5ecc220c5ec8ea5f9817474cd6607802ffd70e1ead4a693f95d1b9009de037d368aca726931b0c85750747841f015ba74b0157c55b36974645b4d1a5369318111a53697915fcc025d097b7605a4608d5c6603e1423bfbe4e0993f1f7e7fb0b438e9b415c13ba3e532a30ac250cd27bdf5bb08f11affc1525156cf6b738678eabfe65dc147f36172c29333af65c967db8e79ac86d4e7044b9c4f8187da2df748136d5bea5cc4e2c830b37407f4ca1407501d03a204b559e329069cd0c34bf2c1a99cdbda5ba377c4b059dcd129cb75a6b17a7b8d7a354830f4aaf4697f33e5cdbfab9e1e916894bbae7436ca7b3a9945e967a106694d737de03bfa7211ec0eaf6e57e19311201aa5dd2b8041847c0554147b79cda242d048799087863adefe2484c3b44bbbca4c1cd2fb9ee73e55f1f0bf1f386b8adc5f992d0d83e111a50643d618d9a7d0776a8992024db1c11394eb7310bd931099f17ce654df3bc36ea7e8127f2d797c4796ea5d71153789f56c941d2c1f89473328e8e6f31bb25fee4023831b98f5689ebea1748924e86be32df90bf9a88fad78a1b6ef12676d05f9d8994be172162511366c519430fd5723301c4566f0f932b8bac0087c91041381f6710168950f26739ff38c6e294d61dd658d7ab78073a0af1c01f97644dde0799cd9bcb9e3d5485cc4627419595531db4a0f183e6c57c0612e5381042327c3caa4985e413420b5a489031e7425994f23b367ba44b9ab69f3d2379b3c3680bca953d5c7380c0832fbf61d2b1c75cb55c1e2c8e89d6d65a455e867a0f91f0db4ba2b8dc231c1c928169e281468a40e4ac4d3cc34e23c932ab4aa6bf69b2a824e6f7b4ad8363183809f3febfd5ac9aca1cbeed6e68360174d22db904779021f168c73a31fe79e88baf8fc80385b6b5ca275a9b5d39998eda9d21322fcc1a378519d643e9e41903aee797affbf6b886d11658635004ec2b55220f6160691b4af7d08d76805fa7cb135d69eed63123fe2d23a3fec2c095ab00fe7c6f14a5bd99cd4d9c72573d778c8670222df952d26a9a748542b536840b7bc4ca760b1f5a0338328235e7d7328c91ca22a5e06f50b17f2d8d1f5b661e439d60e87b209ba45e9e542e55d03961e144fe0b88391770e5f4c3150054f43c5873d7a2bebc72085f4fe3b8ea27486bcffce391096dcd6c39b484e0014f464382b179b947f630edbb5fb5974412416764eb4445a889776ddaeff54c490c55103d3c551e7b97b85e1038ba0f073999ace1ce19a3ead8be6614174077d32c3575228641a91298ebc3c7d02a9b97fcdac416864135ca5254a73658be588d84f5cd5a1d3e0f660539ea74cdbb94d99b52dc83efde80a53881cc93ea4ea9cf4952583c4e55dbe84e07fc59fd1125dc308c4ffc24fcd893a7a6f43458001d3d21e1c66254008b812f1fd9b2ba37fe1a00cc67f65c9f3b9f9f5e2f3f856b44469c46d6c5b82d66332db98fa1f99e949d25e4b710aac750213213208a7c64acf5f14830abfc46ce2b1f9d555eed9e80b0cbe33180ee302dda0042075b6cf494ba7e0e0de7d60fd8c929bfffd8665ece65e562984edcfa19eb2f489a72ad9afc02f86dec2df42877cf5c5cdf7995853298bc8d25936cebc6e13d5f05037c56d68d91107007371ca02dea6aaf315fca094406485217a3f0342a59133cb8642d576ed6209406c1d0f7f524150cdc2d4072f600e80e0554013cbf4bb1c4b4817ca8f341c15441560d87852cd8a3bdfca178ebcdc34ae3ebce1def6e04cdc68147ac7315ca0b2a99562f085fc1ee795e2e5407214af56559fbb08787e7a6aad9129b5e1efcf7cd185bf0abf8aa99270002e1c4a64411fa13120c4c7451b7bcc59d8d576dcb8fc80f272664c6ffbcfdd818e7043378d4b71c2e74b77de1f7ffc372d145e75feebd55b8b628f96a454f9dff3a7c81a09a9fa1f8a5c9388a716ef5f36e29dc03a625bfc5653a76d3a728c6cbe0cc3c5a5f211c0fa0a0d6dd32d43cba95879ce8e5996b0faa735335be44f725310dc60ce06cfac8260deb56a463b64fcb589a49cb13916d383a6b46de9c6dfb6179b04d858f5b1789716c81ffecc169897f5b21253a6a628cc47799c20d6e8083e29cfeb3126b09f8604382ecbb0e6484a51132e5c12584e0b6cb31ccade11cdfa94de9e0816bcf10816d06f84727b6bbd8fcfe9502a35961c5b1725c64666dfc36a0fb70d79ba901392db54e7365b9d22b16fe80504ffefa5a5460aba4cdfb79bdd3bdc7b4b4e7bade1bcb3404fdf54618f5f9eb38c797bf93d75794b237c18ce2025f464b4c815855871899dabad235d6c3687642cd183bd372c82c6b0d9a80941e831440ed1fe6a75da75e139d73b1e2147cf64b67da2ac04e3c2c2062cd6b617ace79d3d988d9bac56a912b498befaf1bd3e4b67cc3914fcdeb3f0ab284b5b0bb2298a80dab485772f5b97c2769fe59e79c6b79a7c2d6e5ce4c0b8571f402460c70b482262143ba237cad3e54450e14f31cf5ea3f0b27e2cae2c43c7517b88aed735a99c169bf49c9f7ea20cb488bb5c9e1e0a26253c434a669d325879abcccc0faf3f913d018ad778636dde10f613e08054cd6e5132e2e01d1733b24ee959fee51d26c2e6dde685f22273cec7a6e8f87eed8511ae3f01a900a34922341fc7753fb5f3534782f477b7e026dc4c32fabeefa1c6e974d2d40f0103fa9dd9ca6dc1ad5529954c954a0352a74f1f88ae1fe5fae5b23781374bda70aa5362c8487e55af9240279dc91a8b2363bff93440352b1698bcf9c9fb1c3151aaa2f1a7408715fa67386af228cd9ca3f5a350e20be81b46148486d72e5cf2b1a2e804808263ab436bd87895863bdb301203840078baf3ee21a2f91d0a4a6ffd1c1a4639542d411d389f0b2551913397f567a7c406042d4b886ec0709941a80a884582c2cb23c034f613bb9ebd530c69656a48f111a07ede6355e5ba09480474993956e64f20e2cbb27a7d0dd7361a0ee8c71afa983b6d2d42307f10f14a9aa1bc00849cc13bc69786044202b655d1198415c48df2af965f90df29"}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffd, 0x4}, 0x59) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r2, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) write$bt_hci(r2, &(0x7f0000000080)={0x1, @sniff_subrate={{0x811, 0x8}, {0xc8, 0x1f, 0x83, 0x201}}}, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x80, 0x2) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, {0x306, @random="85e2d7858567"}, 0x24, {0x2, 0x4e21, @remote}, 'team_slave_0\x00'}) 11:02:01 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1166.102052] FAULT_INJECTION: forcing a failure. [ 1166.102052] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.104100] CPU: 1 PID: 22819 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1166.105253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1166.106631] Call Trace: [ 1166.107087] dump_stack+0x107/0x167 [ 1166.107719] should_fail.cold+0x5/0xa [ 1166.108364] ? create_object.isra.0+0x3a/0xa20 [ 1166.109135] should_failslab+0x5/0x20 [ 1166.109778] kmem_cache_alloc+0x5b/0x310 [ 1166.110466] ? __lockdep_reset_lock+0x180/0x180 [ 1166.111258] create_object.isra.0+0x3a/0xa20 [ 1166.112008] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1166.112877] kmem_cache_alloc+0x159/0x310 [ 1166.113596] __kernfs_new_node+0xd4/0x860 [ 1166.114313] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1166.115130] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1166.115958] ? wait_for_completion_io+0x270/0x270 [ 1166.116775] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1166.117668] kernfs_new_node+0x18d/0x250 [ 1166.118367] __kernfs_create_file+0x51/0x350 [ 1166.119115] sysfs_add_file_mode_ns+0x221/0x560 [ 1166.119922] internal_create_group+0x324/0xb30 [ 1166.120706] ? sysfs_remove_group+0x170/0x170 [ 1166.121470] ? kernfs_name_hash+0xe7/0x110 [ 1166.122195] ? kernfs_find_ns+0x256/0x380 [ 1166.122911] sysfs_slab_add+0x188/0x200 [ 1166.123598] __kmem_cache_create+0x3db/0x520 [ 1166.124356] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1166.125212] p9_client_create+0xc2b/0x11c0 [ 1166.125942] ? p9_client_flush+0x430/0x430 [ 1166.126654] ? trace_hardirqs_on+0x5b/0x180 [ 1166.127377] ? lockdep_init_map_type+0x2c7/0x780 [ 1166.128189] ? __raw_spin_lock_init+0x36/0x110 [ 1166.128977] v9fs_session_init+0x1dd/0x1680 [ 1166.129702] ? lock_release+0x680/0x680 [ 1166.130379] ? kmem_cache_alloc_trace+0x151/0x320 [ 1166.131189] ? v9fs_show_options+0x690/0x690 [ 1166.131943] ? trace_hardirqs_on+0x5b/0x180 [ 1166.132685] ? kasan_unpoison_shadow+0x33/0x50 [ 1166.133445] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1166.134300] v9fs_mount+0x79/0x8f0 [ 1166.134903] ? v9fs_write_inode+0x60/0x60 [ 1166.135609] legacy_get_tree+0x105/0x220 [ 1166.136303] vfs_get_tree+0x8e/0x300 [ 1166.136930] path_mount+0x1429/0x2120 [ 1166.137580] ? strncpy_from_user+0x9e/0x470 [ 1166.138305] ? finish_automount+0xa90/0xa90 [ 1166.139027] ? getname_flags.part.0+0x1dd/0x4f0 [ 1166.139812] ? _copy_from_user+0xfb/0x1b0 [ 1166.140513] __x64_sys_mount+0x282/0x300 [ 1166.141192] ? copy_mnt_ns+0xa00/0xa00 [ 1166.141847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1166.142724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1166.143587] do_syscall_64+0x33/0x40 [ 1166.144225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1166.145078] RIP: 0033:0x7f0377362b19 [ 1166.145702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1166.148710] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1166.149976] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1166.151161] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1166.152347] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1166.153532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1166.154723] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:02:02 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:02:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:02:02 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:02:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfffd, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011e51"], 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_read_iso_tx_sync={{0x2061, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="bd9d5e9309ee016d0c027f4069a57cf8eb4cd14d8a23558542a3376893dcc0409ea4aa7aa822561b428a1f9ef218305ab68f67db8c5f3b87b8b6a11810d1b3053445eb7f689f6b453a4d6fe688a090f32012b656d5094974f5117104a14bbb22a8699c87ec9190e90c1a37cc22bc8a89167168892786b8faf5ac80cf487e7e2dc79f51b22a556a308c04e54652b05895834712a3d7df471a058ee91844c8b40c571dd9e55abebf459e211d2b743b566f0a5c3783d0f01d5d436b6db35c6882c7979c883f94fb61facf7540066c762db380dbbbd5c01d0a484787df40b4d919aad7d42e527e9f1693e7b6663c960fbe702c4bd36e0cc051fce663c157e25e5592b48c2f1a82c65913c7f4df9f38b2b3a16e882e"], 0x6) 11:02:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01082020012fa6467432acabc6f581627a9784134958ae0f74195f6fa4c8c28b49cf7a74"], 0x24) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400880, 0x0) 11:02:02 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:02:02 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:02:17 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:02:17 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:02:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 71) 11:02:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:02:17 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:02:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000002c6ec9b6", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$bt_hci(r3, &(0x7f0000000000)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:02:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:02:17 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x0, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1181.625305] FAULT_INJECTION: forcing a failure. [ 1181.625305] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.626969] CPU: 0 PID: 22866 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1181.627971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1181.629155] Call Trace: [ 1181.629554] dump_stack+0x107/0x167 [ 1181.630098] should_fail.cold+0x5/0xa [ 1181.630667] ? __kernfs_new_node+0xd4/0x860 [ 1181.631302] should_failslab+0x5/0x20 [ 1181.631880] kmem_cache_alloc+0x5b/0x310 [ 1181.632468] __kernfs_new_node+0xd4/0x860 [ 1181.633086] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1181.633761] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1181.634468] ? wait_for_completion_io+0x270/0x270 [ 1181.635146] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1181.635939] kernfs_new_node+0x18d/0x250 [ 1181.636517] __kernfs_create_file+0x51/0x350 [ 1181.637171] sysfs_add_file_mode_ns+0x221/0x560 [ 1181.637845] internal_create_group+0x324/0xb30 [ 1181.638527] ? sysfs_remove_group+0x170/0x170 [ 1181.639147] ? kernfs_name_hash+0xe7/0x110 [ 1181.639803] sysfs_slab_add+0x188/0x200 [ 1181.640374] __kmem_cache_create+0x3db/0x520 [ 1181.641027] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1181.641773] p9_client_create+0xc2b/0x11c0 [ 1181.642396] ? p9_client_flush+0x430/0x430 [ 1181.643016] ? trace_hardirqs_on+0x5b/0x180 [ 1181.643620] ? lockdep_init_map_type+0x2c7/0x780 [ 1181.644333] ? __raw_spin_lock_init+0x36/0x110 [ 1181.645019] v9fs_session_init+0x1dd/0x1680 [ 1181.645654] ? lock_release+0x680/0x680 [ 1181.646254] ? kmem_cache_alloc_trace+0x151/0x320 [ 1181.646930] ? v9fs_show_options+0x690/0x690 [ 1181.647599] ? trace_hardirqs_on+0x5b/0x180 [ 1181.648247] ? kasan_unpoison_shadow+0x33/0x50 [ 1181.648886] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1181.649640] v9fs_mount+0x79/0x8f0 [ 1181.650156] ? v9fs_write_inode+0x60/0x60 [ 1181.650764] legacy_get_tree+0x105/0x220 [ 1181.651338] vfs_get_tree+0x8e/0x300 [ 1181.651887] path_mount+0x1429/0x2120 [ 1181.652459] ? strncpy_from_user+0x9e/0x470 [ 1181.653092] ? finish_automount+0xa90/0xa90 [ 1181.653700] ? getname_flags.part.0+0x1dd/0x4f0 [ 1181.654377] ? _copy_from_user+0xfb/0x1b0 [ 1181.654979] __x64_sys_mount+0x282/0x300 [ 1181.655577] ? copy_mnt_ns+0xa00/0xa00 [ 1181.656140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1181.656905] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1181.657657] do_syscall_64+0x33/0x40 [ 1181.658179] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1181.658924] RIP: 0033:0x7f0377362b19 [ 1181.659439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1181.662053] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1181.663149] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1181.664177] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1181.665205] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1181.666230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1181.667251] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:02:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:02:17 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:02:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:02:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) syz_io_uring_setup(0x1c, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ff2000/0xc000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2162}, 0x0) r4 = syz_io_uring_complete(r1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$sock_bt_hci(r5, 0x800448d5, &(0x7f0000000200)="3c15940516b37691e8dd88b9069654002134c37034c55a193eaaddd4f388c801cb3725842d1bc9ea3aef2bcdcaadbbaac48afdc598ff0f8b05a044cc773327bc31f4ec1d5d70b9e85f3ef850c19208df9a29b9b90319e322b740d913587ec6810a0846a0103e40e8c68e0894a81be131857d632e19564f7a32fc4146789010a8fafe16f6b442eab1e879a7c337d2ce65386b522bdfbaf14b8376ada738020c6da4cf1717edf8d6ea2fc2a19284ec90d3ee94371ea25f75735f5efa09c16823d7486da112fa4f455526e2ea0210b08fedb0ca726e7f755df4d9fcf9af81d8a08b03e6") [ 1181.716230] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1181.717381] CPU: 1 PID: 22866 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1181.718428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1181.719677] Call Trace: [ 1181.720108] dump_stack+0x107/0x167 [ 1181.720672] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1181.721478] p9_client_create+0xc2b/0x11c0 [ 1181.722133] ? p9_client_flush+0x430/0x430 [ 1181.722781] ? trace_hardirqs_on+0x5b/0x180 [ 1181.723438] ? lockdep_init_map_type+0x2c7/0x780 [ 1181.724187] ? __raw_spin_lock_init+0x36/0x110 [ 1181.724891] v9fs_session_init+0x1dd/0x1680 [ 1181.725547] ? lock_release+0x680/0x680 [ 1181.726162] ? kmem_cache_alloc_trace+0x151/0x320 [ 1181.726892] ? v9fs_show_options+0x690/0x690 [ 1181.727572] ? trace_hardirqs_on+0x5b/0x180 [ 1181.728252] ? kasan_unpoison_shadow+0x33/0x50 [ 1181.728953] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1181.729728] v9fs_mount+0x79/0x8f0 [ 1181.730273] ? v9fs_write_inode+0x60/0x60 [ 1181.730905] legacy_get_tree+0x105/0x220 [ 1181.731526] vfs_get_tree+0x8e/0x300 [ 1181.732115] path_mount+0x1429/0x2120 [ 1181.732699] ? strncpy_from_user+0x9e/0x470 [ 1181.733348] ? finish_automount+0xa90/0xa90 [ 1181.734002] ? getname_flags.part.0+0x1dd/0x4f0 [ 1181.734700] ? _copy_from_user+0xfb/0x1b0 [ 1181.735335] __x64_sys_mount+0x282/0x300 [ 1181.735973] ? copy_mnt_ns+0xa00/0xa00 [ 1181.736565] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1181.737356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1181.738137] do_syscall_64+0x33/0x40 [ 1181.738703] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1181.739471] RIP: 0033:0x7f0377362b19 [ 1181.740057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1181.742807] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1181.743978] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1181.745049] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1181.746111] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1181.747170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1181.748257] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:02:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11:02:31 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:02:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 72) 11:02:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$bt_hci(r3, &(0x7f0000000000)={0x1, @remote_name_req={{0x419, 0xa}, {@none, 0x1, 0x3, 0x4}}}, 0xe) 11:02:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:02:31 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:02:31 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x0, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:02:31 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:02:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 1195.636542] FAULT_INJECTION: forcing a failure. [ 1195.636542] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.638374] CPU: 0 PID: 22999 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1195.639462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.640775] Call Trace: [ 1195.641205] dump_stack+0x107/0x167 [ 1195.641793] should_fail.cold+0x5/0xa [ 1195.642409] ? create_object.isra.0+0x3a/0xa20 [ 1195.643124] should_failslab+0x5/0x20 [ 1195.643700] kmem_cache_alloc+0x5b/0x310 [ 1195.644326] ? __lockdep_reset_lock+0x180/0x180 [ 1195.645058] create_object.isra.0+0x3a/0xa20 [ 1195.645743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1195.646558] kmem_cache_alloc+0x159/0x310 [ 1195.647235] __kernfs_new_node+0xd4/0x860 [ 1195.647910] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1195.648656] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1195.649396] ? wait_for_completion_io+0x270/0x270 [ 1195.650128] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1195.650986] kernfs_new_node+0x18d/0x250 [ 1195.651620] __kernfs_create_file+0x51/0x350 [ 1195.652326] sysfs_add_file_mode_ns+0x221/0x560 [ 1195.653061] internal_create_group+0x324/0xb30 [ 1195.653769] ? sysfs_remove_group+0x170/0x170 [ 1195.654450] ? kernfs_name_hash+0xe7/0x110 [ 1195.655147] sysfs_slab_add+0x188/0x200 [ 1195.655791] __kmem_cache_create+0x3db/0x520 [ 1195.656476] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1195.657259] p9_client_create+0xc2b/0x11c0 [ 1195.657934] ? p9_client_flush+0x430/0x430 [ 1195.658588] ? trace_hardirqs_on+0x5b/0x180 [ 1195.659252] ? lockdep_init_map_type+0x2c7/0x780 [ 1195.659990] ? __raw_spin_lock_init+0x36/0x110 [ 1195.660714] v9fs_session_init+0x1dd/0x1680 [ 1195.661374] ? lock_release+0x680/0x680 [ 1195.662000] ? kmem_cache_alloc_trace+0x151/0x320 [ 1195.662729] ? v9fs_show_options+0x690/0x690 [ 1195.663451] ? trace_hardirqs_on+0x5b/0x180 [ 1195.664170] ? kasan_unpoison_shadow+0x33/0x50 [ 1195.664912] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1195.665696] v9fs_mount+0x79/0x8f0 [ 1195.666249] ? v9fs_write_inode+0x60/0x60 [ 1195.666905] legacy_get_tree+0x105/0x220 [ 1195.667529] vfs_get_tree+0x8e/0x300 [ 1195.668106] path_mount+0x1429/0x2120 [ 1195.668697] ? strncpy_from_user+0x9e/0x470 [ 1195.669377] ? finish_automount+0xa90/0xa90 [ 1195.670064] ? getname_flags.part.0+0x1dd/0x4f0 [ 1195.670794] ? _copy_from_user+0xfb/0x1b0 [ 1195.671471] __x64_sys_mount+0x282/0x300 [ 1195.672123] ? copy_mnt_ns+0xa00/0xa00 [ 1195.672756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1195.673538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1195.674381] do_syscall_64+0x33/0x40 [ 1195.674977] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1195.675770] RIP: 0033:0x7f0377362b19 [ 1195.676370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.679085] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1195.680279] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1195.681353] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1195.682402] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1195.683455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1195.684552] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 [ 1195.698492] 9pnet: Insufficient options for proto=fd 11:02:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) write$bt_hci(r0, &(0x7f0000000000)={0x1, @auth_requested={{0x411, 0x2}, {0xc9}}}, 0x6) 11:02:31 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:02:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:02:31 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:02:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x7}}}, 0xb) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01150429ee00"], 0x6) 11:02:31 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x0, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1195.872916] 9pnet: Insufficient options for proto=fd 11:02:31 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:02:31 executing program 6: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:02:44 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:02:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0115d513ab5b0a35934ad18eaf11c1010004020000"], 0x6) 11:02:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000100)) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendfile(r1, r3, &(0x7f0000000000)=0x4, 0x100000001) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="fc7004020000"], 0x6) 11:02:44 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x0, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:02:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:02:44 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) 11:02:44 executing program 6: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:02:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 73) [ 1209.097667] 9pnet: Insufficient options for proto=fd [ 1209.122088] FAULT_INJECTION: forcing a failure. [ 1209.122088] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.123192] CPU: 1 PID: 23350 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1209.123836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1209.124610] Call Trace: [ 1209.124862] dump_stack+0x107/0x167 [ 1209.125217] should_fail.cold+0x5/0xa [ 1209.125584] ? __kernfs_new_node+0xd4/0x860 [ 1209.125993] should_failslab+0x5/0x20 [ 1209.126352] kmem_cache_alloc+0x5b/0x310 [ 1209.126736] __kernfs_new_node+0xd4/0x860 [ 1209.127135] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1209.127586] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1209.128041] ? wait_for_completion_io+0x270/0x270 [ 1209.128491] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1209.128987] kernfs_new_node+0x18d/0x250 [ 1209.129368] __kernfs_create_file+0x51/0x350 [ 1209.129785] sysfs_add_file_mode_ns+0x221/0x560 [ 1209.130223] internal_create_group+0x324/0xb30 [ 1209.130660] ? sysfs_remove_group+0x170/0x170 [ 1209.131076] ? kernfs_name_hash+0xe7/0x110 [ 1209.131471] ? kernfs_find_ns+0x256/0x380 [ 1209.131869] sysfs_slab_add+0x188/0x200 [ 1209.132252] __kmem_cache_create+0x3db/0x520 [ 1209.132670] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1209.133146] p9_client_create+0xc2b/0x11c0 [ 1209.133547] ? p9_client_flush+0x430/0x430 [ 1209.133948] ? trace_hardirqs_on+0x5b/0x180 [ 1209.134348] ? lockdep_init_map_type+0x2c7/0x780 [ 1209.134800] ? __raw_spin_lock_init+0x36/0x110 [ 1209.135235] v9fs_session_init+0x1dd/0x1680 [ 1209.135630] ? lock_release+0x680/0x680 [ 1209.136009] ? kmem_cache_alloc_trace+0x151/0x320 [ 1209.136464] ? v9fs_show_options+0x690/0x690 [ 1209.136885] ? trace_hardirqs_on+0x5b/0x180 [ 1209.137289] ? kasan_unpoison_shadow+0x33/0x50 [ 1209.137717] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1209.138198] v9fs_mount+0x79/0x8f0 [ 1209.138535] ? v9fs_write_inode+0x60/0x60 [ 1209.138924] legacy_get_tree+0x105/0x220 [ 1209.139309] vfs_get_tree+0x8e/0x300 [ 1209.139658] path_mount+0x1429/0x2120 [ 1209.140021] ? strncpy_from_user+0x9e/0x470 [ 1209.140433] ? finish_automount+0xa90/0xa90 [ 1209.140835] ? getname_flags.part.0+0x1dd/0x4f0 [ 1209.141272] ? _copy_from_user+0xfb/0x1b0 [ 1209.141665] __x64_sys_mount+0x282/0x300 [ 1209.142044] ? copy_mnt_ns+0xa00/0xa00 [ 1209.142414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1209.142901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1209.143383] do_syscall_64+0x33/0x40 [ 1209.143717] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1209.144201] RIP: 0033:0x7f0377362b19 [ 1209.144550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1209.146166] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1209.146872] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1209.147511] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1209.148161] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1209.148804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1209.149457] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:02:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:02:45 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:02:45 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) [ 1209.211304] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1209.212153] CPU: 1 PID: 23350 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1209.212785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1209.213499] Call Trace: [ 1209.213742] dump_stack+0x107/0x167 [ 1209.214077] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1209.214558] p9_client_create+0xc2b/0x11c0 [ 1209.214947] ? p9_client_flush+0x430/0x430 [ 1209.215330] ? trace_hardirqs_on+0x5b/0x180 [ 1209.215725] ? lockdep_init_map_type+0x2c7/0x780 [ 1209.216153] ? __raw_spin_lock_init+0x36/0x110 [ 1209.216585] v9fs_session_init+0x1dd/0x1680 [ 1209.216970] ? lock_release+0x680/0x680 [ 1209.217333] ? kmem_cache_alloc_trace+0x151/0x320 [ 1209.217767] ? v9fs_show_options+0x690/0x690 [ 1209.218168] ? trace_hardirqs_on+0x5b/0x180 [ 1209.218547] ? kasan_unpoison_shadow+0x33/0x50 [ 1209.218953] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1209.219403] v9fs_mount+0x79/0x8f0 [ 1209.219729] ? v9fs_write_inode+0x60/0x60 [ 1209.220105] legacy_get_tree+0x105/0x220 [ 1209.220478] vfs_get_tree+0x8e/0x300 [ 1209.220816] path_mount+0x1429/0x2120 [ 1209.221156] ? strncpy_from_user+0x9e/0x470 [ 1209.221537] ? finish_automount+0xa90/0xa90 [ 1209.221915] ? getname_flags.part.0+0x1dd/0x4f0 [ 1209.222328] ? _copy_from_user+0xfb/0x1b0 [ 1209.222705] __x64_sys_mount+0x282/0x300 [ 1209.223065] ? copy_mnt_ns+0xa00/0xa00 [ 1209.223412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1209.223878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1209.224345] do_syscall_64+0x33/0x40 [ 1209.224676] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1209.225120] RIP: 0033:0x7f0377362b19 [ 1209.225451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1209.227032] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1209.227701] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1209.228323] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1209.228950] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1209.229563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1209.230200] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:02:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x7, 0x14, 0x4a, 0x5, 0x0, 0x3, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xe6f, 0x1, @perf_config_ext={0xfffffffffffffd68, 0x5}, 0x41000, 0x7fffffff, 0x6, 0x8, 0x9f, 0xa7c, 0x1ae, 0x0, 0x43, 0x0, 0x1}, 0x0, 0xf, r1, 0x0) 11:02:45 executing program 6: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 1209.317193] 9pnet: Insufficient options for proto=fd 11:02:45 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:02:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r2, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) write$bt_hci(r2, &(0x7f0000000100)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc9, 0x200, 0x7f, "2da4f401d75eca54dfe245bc06fc4b1a"}}}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:02:45 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x0, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:02:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 74) 11:02:45 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) [ 1209.450251] FAULT_INJECTION: forcing a failure. [ 1209.450251] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.451211] CPU: 1 PID: 23485 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1209.451774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1209.452431] Call Trace: [ 1209.452655] dump_stack+0x107/0x167 [ 1209.452958] should_fail.cold+0x5/0xa [ 1209.453274] ? create_object.isra.0+0x3a/0xa20 [ 1209.453648] should_failslab+0x5/0x20 [ 1209.453955] kmem_cache_alloc+0x5b/0x310 [ 1209.454287] ? __lockdep_reset_lock+0x180/0x180 [ 1209.454668] create_object.isra.0+0x3a/0xa20 [ 1209.455025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1209.455432] kmem_cache_alloc+0x159/0x310 [ 1209.455780] __kernfs_new_node+0xd4/0x860 [ 1209.456123] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1209.456524] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1209.456929] ? wait_for_completion_io+0x270/0x270 [ 1209.457317] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1209.457744] kernfs_new_node+0x18d/0x250 [ 1209.458074] __kernfs_create_file+0x51/0x350 [ 1209.458430] sysfs_add_file_mode_ns+0x221/0x560 [ 1209.458814] internal_create_group+0x324/0xb30 [ 1209.459186] ? sysfs_remove_group+0x170/0x170 [ 1209.459542] ? kernfs_name_hash+0xe7/0x110 [ 1209.459889] ? kernfs_find_ns+0x256/0x380 [ 1209.460238] sysfs_slab_add+0x188/0x200 [ 1209.460563] __kmem_cache_create+0x3db/0x520 [ 1209.460920] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1209.461336] p9_client_create+0xc2b/0x11c0 [ 1209.461680] ? p9_client_flush+0x430/0x430 [ 1209.462030] ? trace_hardirqs_on+0x5b/0x180 [ 1209.462380] ? lockdep_init_map_type+0x2c7/0x780 [ 1209.462763] ? __raw_spin_lock_init+0x36/0x110 [ 1209.463146] v9fs_session_init+0x1dd/0x1680 [ 1209.463491] ? lock_release+0x680/0x680 [ 1209.463816] ? kmem_cache_alloc_trace+0x151/0x320 [ 1209.464222] ? v9fs_show_options+0x690/0x690 [ 1209.464586] ? trace_hardirqs_on+0x5b/0x180 [ 1209.464944] ? kasan_unpoison_shadow+0x33/0x50 [ 1209.465308] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1209.465725] v9fs_mount+0x79/0x8f0 [ 1209.466018] ? v9fs_write_inode+0x60/0x60 [ 1209.466353] legacy_get_tree+0x105/0x220 [ 1209.466682] vfs_get_tree+0x8e/0x300 [ 1209.466981] path_mount+0x1429/0x2120 [ 1209.467297] ? strncpy_from_user+0x9e/0x470 [ 1209.467643] ? finish_automount+0xa90/0xa90 [ 1209.467990] ? getname_flags.part.0+0x1dd/0x4f0 [ 1209.468369] ? _copy_from_user+0xfb/0x1b0 [ 1209.468716] __x64_sys_mount+0x282/0x300 [ 1209.469046] ? copy_mnt_ns+0xa00/0xa00 [ 1209.469357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1209.469774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1209.470183] do_syscall_64+0x33/0x40 [ 1209.470483] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1209.470892] RIP: 0033:0x7f0377362b19 [ 1209.471199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1209.472669] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1209.473275] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1209.473841] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1209.474422] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1209.475000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1209.475572] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:03:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000002c6ec9b6", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$bt_hci(r3, &(0x7f0000000000)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:03:01 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:03:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 75) 11:03:01 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:03:01 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x0, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:03:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1225.367032] FAULT_INJECTION: forcing a failure. [ 1225.367032] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.368892] CPU: 0 PID: 23599 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1225.370011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.371336] Call Trace: [ 1225.371770] dump_stack+0x107/0x167 [ 1225.372391] should_fail.cold+0x5/0xa [ 1225.373012] ? __kernfs_new_node+0xd4/0x860 [ 1225.373733] should_failslab+0x5/0x20 [ 1225.374362] kmem_cache_alloc+0x5b/0x310 [ 1225.375031] __kernfs_new_node+0xd4/0x860 [ 1225.375724] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1225.376509] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1225.377329] ? wait_for_completion_io+0x270/0x270 [ 1225.378114] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1225.378986] kernfs_new_node+0x18d/0x250 [ 1225.379668] __kernfs_create_file+0x51/0x350 [ 1225.380418] sysfs_add_file_mode_ns+0x221/0x560 [ 1225.381181] internal_create_group+0x324/0xb30 [ 1225.381959] ? sysfs_remove_group+0x170/0x170 [ 1225.382690] ? kernfs_name_hash+0xe7/0x110 [ 1225.383418] sysfs_slab_add+0x188/0x200 [ 1225.384052] __kmem_cache_create+0x3db/0x520 [ 1225.384797] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1225.385644] p9_client_create+0xc2b/0x11c0 [ 1225.386368] ? p9_client_flush+0x430/0x430 [ 1225.387051] ? trace_hardirqs_on+0x5b/0x180 [ 1225.387761] ? lockdep_init_map_type+0x2c7/0x780 [ 1225.388557] ? __raw_spin_lock_init+0x36/0x110 [ 1225.389332] v9fs_session_init+0x1dd/0x1680 [ 1225.390030] ? lock_release+0x680/0x680 [ 1225.390713] ? kmem_cache_alloc_trace+0x151/0x320 [ 1225.391490] ? v9fs_show_options+0x690/0x690 [ 1225.392203] ? trace_hardirqs_on+0x5b/0x180 [ 1225.392929] ? kasan_unpoison_shadow+0x33/0x50 [ 1225.393688] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1225.394529] v9fs_mount+0x79/0x8f0 [ 1225.395109] ? v9fs_write_inode+0x60/0x60 [ 1225.395791] legacy_get_tree+0x105/0x220 [ 1225.396518] vfs_get_tree+0x8e/0x300 [ 1225.397118] path_mount+0x1429/0x2120 [ 1225.397769] ? strncpy_from_user+0x9e/0x470 [ 1225.398482] ? finish_automount+0xa90/0xa90 [ 1225.399181] ? getname_flags.part.0+0x1dd/0x4f0 [ 1225.399937] ? _copy_from_user+0xfb/0x1b0 [ 1225.400652] __x64_sys_mount+0x282/0x300 [ 1225.401333] ? copy_mnt_ns+0xa00/0xa00 [ 1225.401974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.402821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.403662] do_syscall_64+0x33/0x40 [ 1225.404271] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.405087] RIP: 0033:0x7f0377362b19 [ 1225.405714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.408902] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1225.410490] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1225.411882] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1225.413057] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1225.414202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1225.415357] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:03:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1225.431055] 9pnet: Insufficient options for proto=fd 11:03:01 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:01 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:03:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1225.521304] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1225.522308] CPU: 1 PID: 23599 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1225.523288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.524499] Call Trace: [ 1225.524891] dump_stack+0x107/0x167 [ 1225.525443] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1225.526207] p9_client_create+0xc2b/0x11c0 [ 1225.526841] ? p9_client_flush+0x430/0x430 [ 1225.527472] ? trace_hardirqs_on+0x5b/0x180 [ 1225.528109] ? lockdep_init_map_type+0x2c7/0x780 [ 1225.528815] ? __raw_spin_lock_init+0x36/0x110 [ 1225.529498] v9fs_session_init+0x1dd/0x1680 [ 1225.530134] ? lock_release+0x680/0x680 [ 1225.530732] ? kmem_cache_alloc_trace+0x151/0x320 [ 1225.531441] ? v9fs_show_options+0x690/0x690 [ 1225.532098] ? trace_hardirqs_on+0x5b/0x180 [ 1225.532727] ? kasan_unpoison_shadow+0x33/0x50 [ 1225.533406] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1225.534160] v9fs_mount+0x79/0x8f0 [ 1225.534692] ? v9fs_write_inode+0x60/0x60 [ 1225.535308] legacy_get_tree+0x105/0x220 [ 1225.535907] vfs_get_tree+0x8e/0x300 [ 1225.536473] path_mount+0x1429/0x2120 [ 1225.537038] ? strncpy_from_user+0x9e/0x470 [ 1225.537656] ? finish_automount+0xa90/0xa90 [ 1225.538305] ? getname_flags.part.0+0x1dd/0x4f0 [ 1225.538988] ? _copy_from_user+0xfb/0x1b0 [ 1225.539609] __x64_sys_mount+0x282/0x300 [ 1225.540220] ? copy_mnt_ns+0xa00/0xa00 [ 1225.540810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.541580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.542338] do_syscall_64+0x33/0x40 [ 1225.542879] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.543624] RIP: 0033:0x7f0377362b19 [ 1225.544159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.546827] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1225.547948] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1225.548993] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1225.550039] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1225.551079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1225.552124] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 [ 1225.577176] 9pnet: Insufficient options for proto=fd 11:03:01 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:03:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x0, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:03:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:03:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 76) 11:03:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) dup2(0xffffffffffffffff, r0) 11:03:16 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:03:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000002c6ec9b6", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$bt_hci(r3, &(0x7f0000000000)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:03:16 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:03:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x0, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1240.459412] FAULT_INJECTION: forcing a failure. [ 1240.459412] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.460348] CPU: 1 PID: 23742 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1240.460907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1240.461555] Call Trace: [ 1240.461774] dump_stack+0x107/0x167 [ 1240.462070] should_fail.cold+0x5/0xa [ 1240.462382] ? create_object.isra.0+0x3a/0xa20 [ 1240.462751] should_failslab+0x5/0x20 [ 1240.463054] kmem_cache_alloc+0x5b/0x310 [ 1240.463388] ? __lockdep_reset_lock+0x180/0x180 [ 1240.463765] create_object.isra.0+0x3a/0xa20 [ 1240.464120] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1240.464546] kmem_cache_alloc+0x159/0x310 [ 1240.464890] __kernfs_new_node+0xd4/0x860 [ 1240.465225] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1240.465608] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1240.465997] ? wait_for_completion_io+0x270/0x270 [ 1240.466392] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1240.466818] kernfs_new_node+0x18d/0x250 [ 1240.467150] __kernfs_create_file+0x51/0x350 [ 1240.467503] sysfs_add_file_mode_ns+0x221/0x560 [ 1240.467885] internal_create_group+0x324/0xb30 [ 1240.468259] ? sysfs_remove_group+0x170/0x170 [ 1240.468629] ? kernfs_name_hash+0xe7/0x110 [ 1240.468973] ? kernfs_find_ns+0x256/0x380 [ 1240.469314] sysfs_slab_add+0x188/0x200 [ 1240.469636] __kmem_cache_create+0x3db/0x520 [ 1240.469996] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1240.470407] p9_client_create+0xc2b/0x11c0 [ 1240.470755] ? p9_client_flush+0x430/0x430 [ 1240.471101] ? trace_hardirqs_on+0x5b/0x180 [ 1240.471453] ? lockdep_init_map_type+0x2c7/0x780 [ 1240.471839] ? __raw_spin_lock_init+0x36/0x110 [ 1240.472215] v9fs_session_init+0x1dd/0x1680 [ 1240.472571] ? lock_release+0x680/0x680 [ 1240.472899] ? kmem_cache_alloc_trace+0x151/0x320 [ 1240.473287] ? v9fs_show_options+0x690/0x690 [ 1240.473646] ? trace_hardirqs_on+0x5b/0x180 [ 1240.473999] ? kasan_unpoison_shadow+0x33/0x50 [ 1240.474368] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1240.474783] v9fs_mount+0x79/0x8f0 [ 1240.475079] ? v9fs_write_inode+0x60/0x60 [ 1240.475417] legacy_get_tree+0x105/0x220 [ 1240.475750] vfs_get_tree+0x8e/0x300 [ 1240.476052] path_mount+0x1429/0x2120 [ 1240.476364] ? strncpy_from_user+0x9e/0x470 [ 1240.476725] ? finish_automount+0xa90/0xa90 [ 1240.477075] ? getname_flags.part.0+0x1dd/0x4f0 [ 1240.477452] ? _copy_from_user+0xfb/0x1b0 [ 1240.477795] __x64_sys_mount+0x282/0x300 [ 1240.478123] ? copy_mnt_ns+0xa00/0xa00 [ 1240.478443] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1240.478870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1240.479284] do_syscall_64+0x33/0x40 [ 1240.479586] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1240.479997] RIP: 0033:0x7f0377362b19 [ 1240.480297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1240.481755] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1240.482361] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1240.482928] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1240.483493] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1240.484053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1240.484629] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:03:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) dup2(0xffffffffffffffff, r0) 11:03:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) dup2(0xffffffffffffffff, r0) 11:03:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:03:16 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:03:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x0, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:03:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000002c6ec9b6", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$bt_hci(r3, &(0x7f0000000000)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:03:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:03:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:03:30 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:03:30 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:03:30 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 77) 11:03:30 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:03:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:30 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:03:30 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 1254.357025] FAULT_INJECTION: forcing a failure. [ 1254.357025] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.358792] CPU: 0 PID: 23991 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1254.359806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1254.361026] Call Trace: [ 1254.361429] dump_stack+0x107/0x167 [ 1254.361980] should_fail.cold+0x5/0xa [ 1254.362556] ? __kernfs_new_node+0xd4/0x860 [ 1254.363197] should_failslab+0x5/0x20 [ 1254.363764] kmem_cache_alloc+0x5b/0x310 [ 1254.364384] __kernfs_new_node+0xd4/0x860 [ 1254.365024] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1254.365737] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1254.366460] ? wait_for_completion_io+0x270/0x270 [ 1254.367180] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1254.367972] kernfs_new_node+0x18d/0x250 [ 1254.368586] __kernfs_create_file+0x51/0x350 [ 1254.369258] sysfs_add_file_mode_ns+0x221/0x560 [ 1254.369972] internal_create_group+0x324/0xb30 [ 1254.370667] ? sysfs_remove_group+0x170/0x170 [ 1254.371328] ? kernfs_name_hash+0xe7/0x110 [ 1254.371970] ? kernfs_find_ns+0x256/0x380 [ 1254.372603] sysfs_slab_add+0x188/0x200 [ 1254.373211] __kmem_cache_create+0x3db/0x520 [ 1254.373879] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1254.374628] p9_client_create+0xc2b/0x11c0 [ 1254.375280] ? p9_client_flush+0x430/0x430 [ 1254.375917] ? trace_hardirqs_on+0x5b/0x180 [ 1254.376559] ? lockdep_init_map_type+0x2c7/0x780 [ 1254.377281] ? __raw_spin_lock_init+0x36/0x110 [ 1254.377980] v9fs_session_init+0x1dd/0x1680 [ 1254.378626] ? lock_release+0x680/0x680 [ 1254.379242] ? kmem_cache_alloc_trace+0x151/0x320 [ 1254.379958] ? v9fs_show_options+0x690/0x690 [ 1254.380635] ? trace_hardirqs_on+0x5b/0x180 [ 1254.381287] ? kasan_unpoison_shadow+0x33/0x50 11:03:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1254.381969] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1254.382870] v9fs_mount+0x79/0x8f0 [ 1254.383410] ? v9fs_write_inode+0x60/0x60 [ 1254.384032] legacy_get_tree+0x105/0x220 [ 1254.384643] vfs_get_tree+0x8e/0x300 [ 1254.385208] path_mount+0x1429/0x2120 [ 1254.385786] ? strncpy_from_user+0x9e/0x470 [ 1254.386431] ? finish_automount+0xa90/0xa90 [ 1254.387072] ? getname_flags.part.0+0x1dd/0x4f0 [ 1254.387756] ? _copy_from_user+0xfb/0x1b0 [ 1254.388391] __x64_sys_mount+0x282/0x300 [ 1254.389005] ? copy_mnt_ns+0xa00/0xa00 [ 1254.389594] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1254.390356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1254.391129] do_syscall_64+0x33/0x40 [ 1254.391690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1254.392445] RIP: 0033:0x7f0377362b19 [ 1254.393006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1254.395656] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1254.396770] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1254.397806] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1254.398850] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1254.399877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1254.400916] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:03:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:30 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 1254.579381] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1254.580449] CPU: 0 PID: 23991 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1254.581469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1254.582673] Call Trace: [ 1254.583078] dump_stack+0x107/0x167 [ 1254.583635] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1254.584428] p9_client_create+0xc2b/0x11c0 [ 1254.585087] ? p9_client_flush+0x430/0x430 [ 1254.585725] ? trace_hardirqs_on+0x5b/0x180 [ 1254.586373] ? lockdep_init_map_type+0x2c7/0x780 [ 1254.587090] ? __raw_spin_lock_init+0x36/0x110 [ 1254.587784] v9fs_session_init+0x1dd/0x1680 [ 1254.588430] ? lock_release+0x680/0x680 [ 1254.589053] ? kmem_cache_alloc_trace+0x151/0x320 [ 1254.589773] ? v9fs_show_options+0x690/0x690 [ 1254.590446] ? trace_hardirqs_on+0x5b/0x180 [ 1254.591097] ? kasan_unpoison_shadow+0x33/0x50 [ 1254.591781] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1254.592544] v9fs_mount+0x79/0x8f0 [ 1254.593091] ? v9fs_write_inode+0x60/0x60 [ 1254.593709] legacy_get_tree+0x105/0x220 [ 1254.594317] vfs_get_tree+0x8e/0x300 [ 1254.594870] path_mount+0x1429/0x2120 [ 1254.595445] ? strncpy_from_user+0x9e/0x470 [ 1254.596087] ? finish_automount+0xa90/0xa90 [ 1254.596732] ? getname_flags.part.0+0x1dd/0x4f0 [ 1254.597420] ? _copy_from_user+0xfb/0x1b0 [ 1254.598058] __x64_sys_mount+0x282/0x300 [ 1254.598661] ? copy_mnt_ns+0xa00/0xa00 [ 1254.599245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1254.600021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1254.600796] do_syscall_64+0x33/0x40 [ 1254.601355] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1254.602106] RIP: 0033:0x7f0377362b19 [ 1254.602656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1254.605327] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1254.606437] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1254.607473] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1254.608517] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1254.609559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1254.610592] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:03:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 78) 11:03:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:03:43 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:03:43 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:03:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:43 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:03:43 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:43 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) [ 1267.819930] FAULT_INJECTION: forcing a failure. [ 1267.819930] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1267.821938] CPU: 1 PID: 24133 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1267.822960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1267.824191] Call Trace: [ 1267.824591] dump_stack+0x107/0x167 [ 1267.825143] should_fail.cold+0x5/0xa [ 1267.825722] __alloc_pages_nodemask+0x182/0x600 [ 1267.826417] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1267.827325] alloc_pages_current+0x187/0x280 [ 1267.827980] allocate_slab+0x26f/0x380 [ 1267.828562] ___slab_alloc+0x470/0x700 [ 1267.829151] ? create_object.isra.0+0x3a/0xa20 [ 1267.829828] ? lock_acquire+0x197/0x470 [ 1267.830420] ? fs_reclaim_acquire+0xa5/0x100 [ 1267.831084] ? create_object.isra.0+0x3a/0xa20 [ 1267.831774] ? kmem_cache_alloc+0x301/0x310 [ 1267.832410] ? create_object.isra.0+0x3a/0xa20 [ 1267.833092] kmem_cache_alloc+0x301/0x310 [ 1267.833716] create_object.isra.0+0x3a/0xa20 [ 1267.834366] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1267.835122] kmem_cache_alloc+0x159/0x310 [ 1267.835743] __kernfs_new_node+0xd4/0x860 [ 1267.836361] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1267.837077] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1267.837791] ? wait_for_completion_io+0x270/0x270 [ 1267.838506] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1267.839287] kernfs_new_node+0x18d/0x250 [ 1267.839897] __kernfs_create_file+0x51/0x350 [ 1267.840553] sysfs_add_file_mode_ns+0x221/0x560 [ 1267.841259] internal_create_group+0x324/0xb30 [ 1267.841947] ? sysfs_remove_group+0x170/0x170 [ 1267.842605] ? kernfs_name_hash+0xe7/0x110 [ 1267.843239] ? kernfs_find_ns+0x256/0x380 [ 1267.843864] sysfs_slab_add+0x188/0x200 [ 1267.844457] __kmem_cache_create+0x3db/0x520 [ 1267.845121] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1267.845866] p9_client_create+0xc2b/0x11c0 [ 1267.846509] ? p9_client_flush+0x430/0x430 [ 1267.847148] ? trace_hardirqs_on+0x5b/0x180 [ 1267.847788] ? lockdep_init_map_type+0x2c7/0x780 [ 1267.848490] ? __raw_spin_lock_init+0x36/0x110 [ 1267.849178] v9fs_session_init+0x1dd/0x1680 [ 1267.849818] ? lock_release+0x680/0x680 [ 1267.850419] ? kmem_cache_alloc_trace+0x151/0x320 [ 1267.851129] ? v9fs_show_options+0x690/0x690 [ 1267.851787] ? trace_hardirqs_on+0x5b/0x180 [ 1267.852427] ? kasan_unpoison_shadow+0x33/0x50 [ 1267.853112] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1267.853871] v9fs_mount+0x79/0x8f0 [ 1267.854404] ? v9fs_write_inode+0x60/0x60 [ 1267.855020] legacy_get_tree+0x105/0x220 [ 1267.855622] vfs_get_tree+0x8e/0x300 [ 1267.856168] path_mount+0x1429/0x2120 [ 1267.856736] ? strncpy_from_user+0x9e/0x470 [ 1267.857377] ? finish_automount+0xa90/0xa90 [ 1267.858013] ? getname_flags.part.0+0x1dd/0x4f0 [ 1267.858696] ? _copy_from_user+0xfb/0x1b0 [ 1267.859314] __x64_sys_mount+0x282/0x300 [ 1267.859912] ? copy_mnt_ns+0xa00/0xa00 [ 1267.860492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1267.861271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1267.862030] do_syscall_64+0x33/0x40 [ 1267.862576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1267.863324] RIP: 0033:0x7f0377362b19 [ 1267.863873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1267.866559] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1267.867671] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1267.868733] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1267.869799] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1267.870859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1267.871913] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:03:43 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:43 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 11:03:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 11:03:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:43 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:43 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 11:03:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:03:43 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:04:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:00 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:04:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 11:04:00 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:04:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) 11:04:00 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 11:04:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 79) [ 1284.214238] FAULT_INJECTION: forcing a failure. [ 1284.214238] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.215666] CPU: 0 PID: 24375 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1284.216529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1284.217566] Call Trace: [ 1284.217909] dump_stack+0x107/0x167 [ 1284.218378] should_fail.cold+0x5/0xa [ 1284.218876] ? __kernfs_new_node+0xd4/0x860 [ 1284.219424] should_failslab+0x5/0x20 [ 1284.219909] kmem_cache_alloc+0x5b/0x310 [ 1284.220444] __kernfs_new_node+0xd4/0x860 [ 1284.220984] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1284.221605] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1284.222230] ? wait_for_completion_io+0x270/0x270 [ 1284.222846] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1284.223528] kernfs_new_node+0x18d/0x250 [ 1284.224054] __kernfs_create_file+0x51/0x350 [ 1284.224617] sysfs_add_file_mode_ns+0x221/0x560 [ 1284.225233] internal_create_group+0x324/0xb30 [ 1284.225827] ? sysfs_remove_group+0x170/0x170 [ 1284.226390] ? kernfs_name_hash+0xe7/0x110 [ 1284.226938] ? kernfs_find_ns+0x256/0x380 [ 1284.227476] sysfs_slab_add+0x188/0x200 [ 1284.227987] __kmem_cache_create+0x3db/0x520 [ 1284.228553] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1284.229214] p9_client_create+0xc2b/0x11c0 [ 1284.229779] ? p9_client_flush+0x430/0x430 [ 1284.230322] ? trace_hardirqs_on+0x5b/0x180 [ 1284.230871] ? lockdep_init_map_type+0x2c7/0x780 [ 1284.231474] ? __raw_spin_lock_init+0x36/0x110 [ 1284.232062] v9fs_session_init+0x1dd/0x1680 [ 1284.232609] ? lock_release+0x680/0x680 [ 1284.233136] ? kmem_cache_alloc_trace+0x151/0x320 [ 1284.233772] ? v9fs_show_options+0x690/0x690 [ 1284.234382] ? trace_hardirqs_on+0x5b/0x180 [ 1284.234949] ? kasan_unpoison_shadow+0x33/0x50 [ 1284.235523] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1284.236172] v9fs_mount+0x79/0x8f0 [ 1284.236628] ? v9fs_write_inode+0x60/0x60 [ 1284.237163] legacy_get_tree+0x105/0x220 [ 1284.237682] vfs_get_tree+0x8e/0x300 [ 1284.238154] path_mount+0x1429/0x2120 [ 1284.238643] ? strncpy_from_user+0x9e/0x470 [ 1284.239195] ? finish_automount+0xa90/0xa90 [ 1284.239739] ? getname_flags.part.0+0x1dd/0x4f0 [ 1284.240323] ? _copy_from_user+0xfb/0x1b0 [ 1284.240862] __x64_sys_mount+0x282/0x300 [ 1284.241380] ? copy_mnt_ns+0xa00/0xa00 [ 1284.241883] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1284.242535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1284.243189] do_syscall_64+0x33/0x40 [ 1284.243656] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1284.244291] RIP: 0033:0x7f0377362b19 [ 1284.244760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1284.246962] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1284.247909] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1284.248799] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1284.249700] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1284.250574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1284.251452] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:04:00 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 11:04:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 11:04:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) 11:04:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1284.386368] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1284.387236] CPU: 0 PID: 24375 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1284.388004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1284.388921] Call Trace: [ 1284.389237] dump_stack+0x107/0x167 [ 1284.389662] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1284.390259] p9_client_create+0xc2b/0x11c0 [ 1284.390752] ? p9_client_flush+0x430/0x430 [ 1284.391232] ? trace_hardirqs_on+0x5b/0x180 [ 1284.391716] ? lockdep_init_map_type+0x2c7/0x780 [ 1284.392253] ? __raw_spin_lock_init+0x36/0x110 [ 1284.392778] v9fs_session_init+0x1dd/0x1680 [ 1284.393268] ? lock_release+0x680/0x680 [ 1284.393733] ? kmem_cache_alloc_trace+0x151/0x320 [ 1284.394276] ? v9fs_show_options+0x690/0x690 [ 1284.394787] ? trace_hardirqs_on+0x5b/0x180 [ 1284.395277] ? kasan_unpoison_shadow+0x33/0x50 [ 1284.395790] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1284.396366] v9fs_mount+0x79/0x8f0 [ 1284.396778] ? v9fs_write_inode+0x60/0x60 [ 1284.397257] legacy_get_tree+0x105/0x220 [ 1284.397722] vfs_get_tree+0x8e/0x300 [ 1284.398138] path_mount+0x1429/0x2120 [ 1284.398578] ? strncpy_from_user+0x9e/0x470 [ 1284.399059] ? finish_automount+0xa90/0xa90 [ 1284.399550] ? getname_flags.part.0+0x1dd/0x4f0 [ 1284.400070] ? _copy_from_user+0xfb/0x1b0 [ 1284.400550] __x64_sys_mount+0x282/0x300 [ 1284.401003] ? copy_mnt_ns+0xa00/0xa00 [ 1284.401455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1284.402042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1284.402619] do_syscall_64+0x33/0x40 [ 1284.403031] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1284.403592] RIP: 0033:0x7f0377362b19 [ 1284.404003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1284.405989] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1284.406839] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1284.407618] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1284.408396] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1284.409215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1284.409994] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:04:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:04:00 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1284.444493] 9pnet: Insufficient options for proto=fd 11:04:00 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 11:04:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:04:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) [ 1284.504577] 9pnet: Insufficient options for proto=fd 11:04:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:04:16 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:04:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:04:16 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:16 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 11:04:16 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:04:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 80) [ 1300.841500] FAULT_INJECTION: forcing a failure. [ 1300.841500] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.843214] CPU: 0 PID: 24622 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1300.844232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1300.845440] Call Trace: [ 1300.845843] dump_stack+0x107/0x167 [ 1300.846391] should_fail.cold+0x5/0xa [ 1300.846956] ? create_object.isra.0+0x3a/0xa20 [ 1300.847632] should_failslab+0x5/0x20 [ 1300.848189] kmem_cache_alloc+0x5b/0x310 [ 1300.848782] ? __lockdep_reset_lock+0x180/0x180 [ 1300.849501] create_object.isra.0+0x3a/0xa20 [ 1300.850146] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1300.850900] kmem_cache_alloc+0x159/0x310 [ 1300.851530] __kernfs_new_node+0xd4/0x860 [ 1300.852152] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1300.852864] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1300.853584] ? wait_for_completion_io+0x270/0x270 [ 1300.854300] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1300.855090] kernfs_new_node+0x18d/0x250 [ 1300.855703] __kernfs_create_file+0x51/0x350 [ 1300.856369] sysfs_add_file_mode_ns+0x221/0x560 [ 1300.857075] internal_create_group+0x324/0xb30 [ 1300.857770] ? sysfs_remove_group+0x170/0x170 [ 1300.858432] ? kernfs_name_hash+0xe7/0x110 [ 1300.859070] ? kernfs_find_ns+0x256/0x380 [ 1300.859702] sysfs_slab_add+0x188/0x200 [ 1300.860299] __kmem_cache_create+0x3db/0x520 [ 1300.860967] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1300.861718] p9_client_create+0xc2b/0x11c0 [ 1300.862374] ? p9_client_flush+0x430/0x430 [ 1300.863004] ? trace_hardirqs_on+0x5b/0x180 [ 1300.863657] ? lockdep_init_map_type+0x2c7/0x780 [ 1300.864375] ? __raw_spin_lock_init+0x36/0x110 [ 1300.865069] v9fs_session_init+0x1dd/0x1680 [ 1300.865720] ? lock_release+0x680/0x680 [ 1300.866323] ? kmem_cache_alloc_trace+0x151/0x320 [ 1300.867053] ? v9fs_show_options+0x690/0x690 [ 1300.867731] ? trace_hardirqs_on+0x5b/0x180 [ 1300.868379] ? kasan_unpoison_shadow+0x33/0x50 [ 1300.869058] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1300.869826] v9fs_mount+0x79/0x8f0 [ 1300.870367] ? v9fs_write_inode+0x60/0x60 [ 1300.870982] legacy_get_tree+0x105/0x220 [ 1300.871595] vfs_get_tree+0x8e/0x300 [ 1300.872156] path_mount+0x1429/0x2120 [ 1300.872747] ? strncpy_from_user+0x9e/0x470 [ 1300.873391] ? finish_automount+0xa90/0xa90 [ 1300.874037] ? getname_flags.part.0+0x1dd/0x4f0 [ 1300.874723] ? _copy_from_user+0xfb/0x1b0 [ 1300.875358] __x64_sys_mount+0x282/0x300 [ 1300.875961] ? copy_mnt_ns+0xa00/0xa00 [ 1300.876555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1300.877333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1300.878090] do_syscall_64+0x33/0x40 [ 1300.878638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1300.879386] RIP: 0033:0x7f0377362b19 [ 1300.879936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1300.882576] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1300.883688] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1300.884712] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1300.885750] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1300.886785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1300.887820] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:04:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) [ 1300.920053] 9pnet: Insufficient options for proto=fd 11:04:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 11:04:16 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}}) 11:04:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:04:16 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) [ 1301.046010] 9pnet: Insufficient options for proto=fd 11:04:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 81) 11:04:30 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 11:04:30 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:04:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}}) 11:04:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:30 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:30 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:04:30 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1314.597533] 9pnet: Insufficient options for proto=fd [ 1314.623575] FAULT_INJECTION: forcing a failure. [ 1314.623575] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.625241] CPU: 1 PID: 24963 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1314.626284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1314.627529] Call Trace: [ 1314.627930] dump_stack+0x107/0x167 [ 1314.628480] should_fail.cold+0x5/0xa [ 1314.629055] ? __kernfs_new_node+0xd4/0x860 [ 1314.629710] should_failslab+0x5/0x20 [ 1314.630277] kmem_cache_alloc+0x5b/0x310 [ 1314.630887] __kernfs_new_node+0xd4/0x860 [ 1314.631497] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1314.632224] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1314.632935] ? wait_for_completion_io+0x270/0x270 [ 1314.633653] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1314.634439] kernfs_new_node+0x18d/0x250 [ 1314.635034] __kernfs_create_file+0x51/0x350 [ 1314.635708] sysfs_add_file_mode_ns+0x221/0x560 [ 1314.636395] internal_create_group+0x324/0xb30 [ 1314.637077] ? sysfs_remove_group+0x170/0x170 [ 1314.637743] ? kernfs_name_hash+0xe7/0x110 [ 1314.638367] ? kernfs_find_ns+0x256/0x380 [ 1314.639019] sysfs_slab_add+0x188/0x200 [ 1314.639633] __kmem_cache_create+0x3db/0x520 [ 1314.640288] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1314.641031] p9_client_create+0xc2b/0x11c0 [ 1314.641693] ? p9_client_flush+0x430/0x430 [ 1314.642318] ? trace_hardirqs_on+0x5b/0x180 [ 1314.642957] ? lockdep_init_map_type+0x2c7/0x780 [ 1314.643652] ? __raw_spin_lock_init+0x36/0x110 [ 1314.644330] v9fs_session_init+0x1dd/0x1680 [ 1314.644997] ? lock_release+0x680/0x680 [ 1314.645627] ? kmem_cache_alloc_trace+0x151/0x320 [ 1314.646333] ? v9fs_show_options+0x690/0x690 [ 1314.647012] ? trace_hardirqs_on+0x5b/0x180 [ 1314.647650] ? kasan_unpoison_shadow+0x33/0x50 [ 1314.648326] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1314.649093] v9fs_mount+0x79/0x8f0 [ 1314.649628] ? v9fs_write_inode+0x60/0x60 [ 1314.650255] legacy_get_tree+0x105/0x220 [ 1314.650856] vfs_get_tree+0x8e/0x300 [ 1314.651425] path_mount+0x1429/0x2120 [ 1314.651994] ? strncpy_from_user+0x9e/0x470 [ 1314.652656] ? finish_automount+0xa90/0xa90 [ 1314.653288] ? getname_flags.part.0+0x1dd/0x4f0 [ 1314.653979] ? _copy_from_user+0xfb/0x1b0 [ 1314.654601] __x64_sys_mount+0x282/0x300 [ 1314.655222] ? copy_mnt_ns+0xa00/0xa00 [ 1314.655794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1314.656588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1314.657339] do_syscall_64+0x33/0x40 [ 1314.657896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1314.658666] RIP: 0033:0x7f0377362b19 [ 1314.659212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1314.661861] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1314.662963] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1314.663995] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1314.665036] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1314.666075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1314.667112] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:04:30 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:30 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:04:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}}) 11:04:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:30 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) [ 1314.757052] 9pnet: Insufficient options for proto=fd 11:04:30 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1314.872186] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1314.873272] CPU: 1 PID: 24963 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1314.874332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1314.875592] Call Trace: [ 1314.876001] dump_stack+0x107/0x167 [ 1314.876568] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1314.877385] p9_client_create+0xc2b/0x11c0 [ 1314.878052] ? p9_client_flush+0x430/0x430 [ 1314.878702] ? trace_hardirqs_on+0x5b/0x180 [ 1314.879362] ? lockdep_init_map_type+0x2c7/0x780 [ 1314.880090] ? __raw_spin_lock_init+0x36/0x110 11:04:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 1314.880799] v9fs_session_init+0x1dd/0x1680 [ 1314.881609] ? lock_release+0x680/0x680 [ 1314.882194] ? kmem_cache_alloc_trace+0x151/0x320 [ 1314.882881] ? v9fs_show_options+0x690/0x690 [ 1314.883521] ? trace_hardirqs_on+0x5b/0x180 [ 1314.884145] ? kasan_unpoison_shadow+0x33/0x50 [ 1314.884804] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1314.885547] v9fs_mount+0x79/0x8f0 [ 1314.886165] ? v9fs_write_inode+0x60/0x60 [ 1314.886764] legacy_get_tree+0x105/0x220 [ 1314.887352] vfs_get_tree+0x8e/0x300 [ 1314.887886] path_mount+0x1429/0x2120 [ 1314.888436] ? strncpy_from_user+0x9e/0x470 [ 1314.889059] ? finish_automount+0xa90/0xa90 [ 1314.889687] ? getname_flags.part.0+0x1dd/0x4f0 [ 1314.890350] ? _copy_from_user+0xfb/0x1b0 [ 1314.890953] __x64_sys_mount+0x282/0x300 [ 1314.891541] ? copy_mnt_ns+0xa00/0xa00 [ 1314.892110] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1314.892856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1314.893599] do_syscall_64+0x33/0x40 [ 1314.894134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1314.894858] RIP: 0033:0x7f0377362b19 [ 1314.895391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1314.898000] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1314.899077] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1314.900089] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1314.901107] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1314.902216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1314.903237] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:04:30 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:04:47 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 82) 11:04:47 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:04:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:04:47 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:47 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f00000000c0)="52349277dbb4dae6886df6ff7d38226d9946b6251b635f1a590309dec21cb1d35c76fef2a170e1047eb2124778321d0d57add13bbbaf64e4cc08b643fe229cef574093cd04843e768c941751ad32d478fa8ae1072924bd6d2247e1ddcf79ff6f1e2c4bc978310e3b86d58d7c1113b0fe88216d8b6c25bf51c49e8b1851671a6bc7fff0d04d") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:04:47 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:04:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r2, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 1332.026665] FAULT_INJECTION: forcing a failure. [ 1332.026665] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.027966] CPU: 0 PID: 25208 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1332.028742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1332.029669] Call Trace: [ 1332.029973] dump_stack+0x107/0x167 [ 1332.030385] should_fail.cold+0x5/0xa [ 1332.030821] ? create_object.isra.0+0x3a/0xa20 [ 1332.031332] should_failslab+0x5/0x20 [ 1332.031765] kmem_cache_alloc+0x5b/0x310 [ 1332.032224] ? __lockdep_reset_lock+0x180/0x180 [ 1332.032759] create_object.isra.0+0x3a/0xa20 [ 1332.033261] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1332.033847] kmem_cache_alloc+0x159/0x310 [ 1332.034330] __kernfs_new_node+0xd4/0x860 [ 1332.034808] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1332.035256] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1332.035810] ? wait_for_completion_io+0x270/0x270 [ 1332.036351] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1332.036963] kernfs_new_node+0x18d/0x250 [ 1332.037438] __kernfs_create_file+0x51/0x350 [ 1332.037962] sysfs_add_file_mode_ns+0x221/0x560 [ 1332.038493] internal_create_group+0x324/0xb30 [ 1332.039028] ? sysfs_remove_group+0x170/0x170 [ 1332.039532] ? kernfs_name_hash+0xe7/0x110 [ 1332.040022] ? kernfs_find_ns+0x256/0x380 [ 1332.040504] sysfs_slab_add+0x188/0x200 [ 1332.040898] __kmem_cache_create+0x3db/0x520 [ 1332.041389] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1332.041970] p9_client_create+0xc2b/0x11c0 [ 1332.042465] ? p9_client_flush+0x430/0x430 [ 1332.042953] ? trace_hardirqs_on+0x5b/0x180 [ 1332.043447] ? lockdep_init_map_type+0x2c7/0x780 [ 1332.043984] ? __raw_spin_lock_init+0x36/0x110 [ 1332.044502] v9fs_session_init+0x1dd/0x1680 [ 1332.044991] ? lock_release+0x680/0x680 [ 1332.045457] ? kmem_cache_alloc_trace+0x151/0x320 [ 1332.046000] ? v9fs_show_options+0x690/0x690 [ 1332.046446] ? trace_hardirqs_on+0x5b/0x180 [ 1332.046939] ? kasan_unpoison_shadow+0x33/0x50 [ 1332.047453] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1332.048027] v9fs_mount+0x79/0x8f0 [ 1332.048431] ? v9fs_write_inode+0x60/0x60 [ 1332.048899] legacy_get_tree+0x105/0x220 [ 1332.049355] vfs_get_tree+0x8e/0x300 [ 1332.049806] path_mount+0x1429/0x2120 [ 1332.050249] ? strncpy_from_user+0x9e/0x470 [ 1332.050728] ? finish_automount+0xa90/0xa90 [ 1332.051214] ? getname_flags.part.0+0x1dd/0x4f0 [ 1332.051727] ? _copy_from_user+0xfb/0x1b0 [ 1332.052204] __x64_sys_mount+0x282/0x300 [ 1332.052659] ? copy_mnt_ns+0xa00/0xa00 [ 1332.053097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1332.053701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.054277] do_syscall_64+0x33/0x40 [ 1332.054691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1332.055252] RIP: 0033:0x7f0377362b19 [ 1332.055659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.057659] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1332.058497] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1332.059286] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1332.060061] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1332.060848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.061631] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:04:47 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:04:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r2, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:04:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:04:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:04:48 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:04:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r2, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 1344.756387] FAULT_INJECTION: forcing a failure. [ 1344.756387] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.757483] CPU: 1 PID: 25536 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1344.758123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.758889] Call Trace: [ 1344.759141] dump_stack+0x107/0x167 [ 1344.759485] should_fail.cold+0x5/0xa [ 1344.759850] ? __kernfs_new_node+0xd4/0x860 [ 1344.760256] should_failslab+0x5/0x20 [ 1344.760613] kmem_cache_alloc+0x5b/0x310 [ 1344.761010] __kernfs_new_node+0xd4/0x860 [ 1344.761407] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1344.761866] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1344.762328] ? wait_for_completion_io+0x270/0x270 [ 1344.762784] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1344.763285] kernfs_new_node+0x18d/0x250 [ 1344.763669] __kernfs_create_file+0x51/0x350 [ 1344.764091] sysfs_add_file_mode_ns+0x221/0x560 [ 1344.764536] internal_create_group+0x324/0xb30 [ 1344.764977] ? sysfs_remove_group+0x170/0x170 [ 1344.765397] ? kernfs_name_hash+0xe7/0x110 [ 1344.765810] ? kernfs_find_ns+0x256/0x380 [ 1344.766209] sysfs_slab_add+0x188/0x200 [ 1344.766588] __kmem_cache_create+0x3db/0x520 [ 1344.767013] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1344.767487] p9_client_create+0xc2b/0x11c0 [ 1344.767890] ? p9_client_flush+0x430/0x430 [ 1344.768286] ? trace_hardirqs_on+0x5b/0x180 [ 1344.768691] ? lockdep_init_map_type+0x2c7/0x780 [ 1344.769145] ? __raw_spin_lock_init+0x36/0x110 [ 1344.769580] v9fs_session_init+0x1dd/0x1680 [ 1344.769988] ? lock_release+0x680/0x680 [ 1344.770369] ? kmem_cache_alloc_trace+0x151/0x320 [ 1344.770823] ? v9fs_show_options+0x690/0x690 [ 1344.771237] ? trace_hardirqs_on+0x5b/0x180 [ 1344.771648] ? kasan_unpoison_shadow+0x33/0x50 [ 1344.772075] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1344.772558] v9fs_mount+0x79/0x8f0 [ 1344.772898] ? v9fs_write_inode+0x60/0x60 [ 1344.773284] legacy_get_tree+0x105/0x220 [ 1344.773671] vfs_get_tree+0x8e/0x300 [ 1344.774019] path_mount+0x1429/0x2120 [ 1344.774389] ? strncpy_from_user+0x9e/0x470 [ 1344.774795] ? finish_automount+0xa90/0xa90 [ 1344.775202] ? getname_flags.part.0+0x1dd/0x4f0 [ 1344.775634] ? _copy_from_user+0xfb/0x1b0 [ 1344.776029] __x64_sys_mount+0x282/0x300 [ 1344.776410] ? copy_mnt_ns+0xa00/0xa00 [ 1344.776781] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1344.777269] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1344.777750] do_syscall_64+0x33/0x40 [ 1344.778112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1344.778589] RIP: 0033:0x7f0377362b19 11:05:00 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:05:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11:05:00 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:05:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:00 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:05:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 83) 11:05:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1344.778935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.781225] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1344.781940] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1344.782601] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1344.783265] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1344.783931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.784582] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:05:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 11:05:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 1344.899476] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1344.900510] CPU: 0 PID: 25536 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1344.901520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.902732] Call Trace: [ 1344.903134] dump_stack+0x107/0x167 [ 1344.903687] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1344.904475] p9_client_create+0xc2b/0x11c0 [ 1344.905124] ? p9_client_flush+0x430/0x430 [ 1344.905766] ? trace_hardirqs_on+0x5b/0x180 [ 1344.906410] ? lockdep_init_map_type+0x2c7/0x780 [ 1344.907124] ? __raw_spin_lock_init+0x36/0x110 [ 1344.907810] v9fs_session_init+0x1dd/0x1680 [ 1344.908456] ? lock_release+0x680/0x680 [ 1344.909066] ? kmem_cache_alloc_trace+0x151/0x320 [ 1344.909769] ? v9fs_show_options+0x690/0x690 [ 1344.910447] ? trace_hardirqs_on+0x5b/0x180 [ 1344.911092] ? kasan_unpoison_shadow+0x33/0x50 [ 1344.911771] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1344.912529] v9fs_mount+0x79/0x8f0 [ 1344.913066] ? v9fs_write_inode+0x60/0x60 [ 1344.913678] legacy_get_tree+0x105/0x220 [ 1344.914289] vfs_get_tree+0x8e/0x300 [ 1344.914842] path_mount+0x1429/0x2120 [ 1344.915419] ? strncpy_from_user+0x9e/0x470 [ 1344.916061] ? finish_automount+0xa90/0xa90 [ 1344.916682] ? getname_flags.part.0+0x1dd/0x4f0 [ 1344.917375] ? _copy_from_user+0xfb/0x1b0 [ 1344.917995] __x64_sys_mount+0x282/0x300 [ 1344.918602] ? copy_mnt_ns+0xa00/0xa00 [ 1344.919177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1344.919948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1344.920692] do_syscall_64+0x33/0x40 [ 1344.921245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1344.921971] RIP: 0033:0x7f0377362b19 [ 1344.922521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.925068] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1344.926208] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1344.927242] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1344.928269] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1344.929300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.930345] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:05:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:00 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:05:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 11:05:00 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r2, r1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r3, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:05:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:00 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:05:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 84) 11:05:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 1345.158254] FAULT_INJECTION: forcing a failure. [ 1345.158254] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.159970] CPU: 0 PID: 25770 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1345.160987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.162191] Call Trace: [ 1345.162593] dump_stack+0x107/0x167 [ 1345.163139] should_fail.cold+0x5/0xa [ 1345.163715] ? create_object.isra.0+0x3a/0xa20 [ 1345.164397] should_failslab+0x5/0x20 [ 1345.164960] kmem_cache_alloc+0x5b/0x310 [ 1345.165556] ? __lockdep_reset_lock+0x180/0x180 [ 1345.166270] create_object.isra.0+0x3a/0xa20 [ 1345.166929] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1345.167690] kmem_cache_alloc+0x159/0x310 [ 1345.168322] __kernfs_new_node+0xd4/0x860 [ 1345.168932] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1345.169648] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1345.170388] ? wait_for_completion_io+0x270/0x270 [ 1345.171108] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1345.171901] kernfs_new_node+0x18d/0x250 [ 1345.172518] __kernfs_create_file+0x51/0x350 [ 1345.173188] sysfs_add_file_mode_ns+0x221/0x560 [ 1345.173910] internal_create_group+0x324/0xb30 [ 1345.174606] ? sysfs_remove_group+0x170/0x170 [ 1345.175251] ? kernfs_name_hash+0xe7/0x110 [ 1345.175885] ? kernfs_find_ns+0x256/0x380 [ 1345.176517] sysfs_slab_add+0x188/0x200 [ 1345.177123] __kmem_cache_create+0x3db/0x520 [ 1345.177793] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1345.178517] p9_client_create+0xc2b/0x11c0 [ 1345.179172] ? p9_client_flush+0x430/0x430 [ 1345.179788] ? trace_hardirqs_on+0x5b/0x180 [ 1345.180432] ? lockdep_init_map_type+0x2c7/0x780 [ 1345.181146] ? __raw_spin_lock_init+0x36/0x110 [ 1345.181843] v9fs_session_init+0x1dd/0x1680 [ 1345.182481] ? lock_release+0x680/0x680 [ 1345.183092] ? kmem_cache_alloc_trace+0x151/0x320 [ 1345.183805] ? v9fs_show_options+0x690/0x690 [ 1345.184479] ? trace_hardirqs_on+0x5b/0x180 [ 1345.185131] ? kasan_unpoison_shadow+0x33/0x50 [ 1345.185794] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1345.186559] v9fs_mount+0x79/0x8f0 [ 1345.187100] ? v9fs_write_inode+0x60/0x60 [ 1345.187714] legacy_get_tree+0x105/0x220 [ 1345.188319] vfs_get_tree+0x8e/0x300 [ 1345.188876] path_mount+0x1429/0x2120 [ 1345.189452] ? strncpy_from_user+0x9e/0x470 [ 1345.190102] ? finish_automount+0xa90/0xa90 [ 1345.190740] ? getname_flags.part.0+0x1dd/0x4f0 [ 1345.191425] ? _copy_from_user+0xfb/0x1b0 [ 1345.192061] __x64_sys_mount+0x282/0x300 [ 1345.192665] ? copy_mnt_ns+0xa00/0xa00 [ 1345.193251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1345.194029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1345.194803] do_syscall_64+0x33/0x40 [ 1345.195360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1345.196113] RIP: 0033:0x7f0377362b19 [ 1345.196662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.199319] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1345.200436] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1345.201477] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1345.202525] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1345.203566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1345.204605] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:05:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) 11:05:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 11:05:01 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:05:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:05:01 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r2, r1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r3, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:05:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:15 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:05:15 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:05:15 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:05:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 85) 11:05:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:15 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r2, r1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r3, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) [ 1360.169336] FAULT_INJECTION: forcing a failure. [ 1360.169336] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.171333] CPU: 0 PID: 25917 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1360.172548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1360.174022] Call Trace: [ 1360.174504] dump_stack+0x107/0x167 [ 1360.175105] should_fail.cold+0x5/0xa [ 1360.175677] ? __kernfs_new_node+0xd4/0x860 [ 1360.176321] should_failslab+0x5/0x20 [ 1360.176894] kmem_cache_alloc+0x5b/0x310 [ 1360.177519] __kernfs_new_node+0xd4/0x860 [ 1360.178165] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1360.178886] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1360.179593] ? kernfs_next_descendant_post+0x1fd/0x2a0 [ 1360.180375] ? wait_for_completion_io+0x270/0x270 [ 1360.181093] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1360.181883] kernfs_new_node+0x18d/0x250 11:05:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) [ 1360.182545] __kernfs_create_file+0x51/0x350 [ 1360.183335] sysfs_add_file_mode_ns+0x221/0x560 [ 1360.184043] internal_create_group+0x324/0xb30 [ 1360.184734] ? sysfs_remove_group+0x170/0x170 [ 1360.185398] ? kernfs_name_hash+0xe7/0x110 [ 1360.186050] ? kernfs_find_ns+0x256/0x380 [ 1360.186688] sysfs_slab_add+0x188/0x200 [ 1360.187289] __kmem_cache_create+0x3db/0x520 [ 1360.187951] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1360.188711] p9_client_create+0xc2b/0x11c0 [ 1360.189370] ? p9_client_flush+0x430/0x430 [ 1360.190012] ? trace_hardirqs_on+0x5b/0x180 [ 1360.190659] ? lockdep_init_map_type+0x2c7/0x780 [ 1360.191372] ? __raw_spin_lock_init+0x36/0x110 [ 1360.192065] v9fs_session_init+0x1dd/0x1680 [ 1360.192707] ? lock_release+0x680/0x680 [ 1360.193317] ? kmem_cache_alloc_trace+0x151/0x320 [ 1360.194036] ? v9fs_show_options+0x690/0x690 [ 1360.194710] ? trace_hardirqs_on+0x5b/0x180 [ 1360.195365] ? kasan_unpoison_shadow+0x33/0x50 [ 1360.196047] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1360.196814] v9fs_mount+0x79/0x8f0 [ 1360.197362] ? v9fs_write_inode+0x60/0x60 [ 1360.197988] legacy_get_tree+0x105/0x220 [ 1360.198602] vfs_get_tree+0x8e/0x300 [ 1360.199159] path_mount+0x1429/0x2120 [ 1360.199739] ? strncpy_from_user+0x9e/0x470 [ 1360.200389] ? finish_automount+0xa90/0xa90 [ 1360.201033] ? getname_flags.part.0+0x1dd/0x4f0 [ 1360.201725] ? _copy_from_user+0xfb/0x1b0 [ 1360.202381] __x64_sys_mount+0x282/0x300 [ 1360.202987] ? copy_mnt_ns+0xa00/0xa00 [ 1360.203572] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1360.204345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1360.205119] do_syscall_64+0x33/0x40 [ 1360.205670] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1360.206432] RIP: 0033:0x7f0377362b19 [ 1360.206985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1360.209663] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1360.210786] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1360.211819] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1360.212862] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1360.213895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1360.214945] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:05:16 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1360.330629] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1360.331857] CPU: 0 PID: 25917 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1360.332852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1360.334041] Call Trace: [ 1360.334436] dump_stack+0x107/0x167 [ 1360.334974] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1360.335747] p9_client_create+0xc2b/0x11c0 [ 1360.336394] ? p9_client_flush+0x430/0x430 [ 1360.337018] ? trace_hardirqs_on+0x5b/0x180 [ 1360.337645] ? lockdep_init_map_type+0x2c7/0x780 [ 1360.338354] ? __raw_spin_lock_init+0x36/0x110 [ 1360.339037] v9fs_session_init+0x1dd/0x1680 [ 1360.339668] ? lock_release+0x680/0x680 [ 1360.340285] ? kmem_cache_alloc_trace+0x151/0x320 [ 1360.340991] ? v9fs_show_options+0x690/0x690 [ 1360.341658] ? trace_hardirqs_on+0x5b/0x180 [ 1360.342305] ? kasan_unpoison_shadow+0x33/0x50 [ 1360.342980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1360.343728] v9fs_mount+0x79/0x8f0 [ 1360.344258] ? v9fs_write_inode+0x60/0x60 [ 1360.344864] legacy_get_tree+0x105/0x220 [ 1360.345466] vfs_get_tree+0x8e/0x300 [ 1360.346019] path_mount+0x1429/0x2120 [ 1360.346591] ? strncpy_from_user+0x9e/0x470 [ 1360.347227] ? finish_automount+0xa90/0xa90 [ 1360.347869] ? getname_flags.part.0+0x1dd/0x4f0 [ 1360.348551] ? _copy_from_user+0xfb/0x1b0 [ 1360.349176] __x64_sys_mount+0x282/0x300 [ 1360.349774] ? copy_mnt_ns+0xa00/0xa00 [ 1360.350372] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1360.351138] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1360.351895] do_syscall_64+0x33/0x40 [ 1360.352440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1360.353174] RIP: 0033:0x7f0377362b19 [ 1360.353717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1360.356368] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1360.357466] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1360.358498] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1360.359534] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1360.360568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1360.361601] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:05:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 86) 11:05:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:29 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:29 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x0, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:05:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:05:29 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:05:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="08ba000000000f2d67fc02727b7fcb8b9b6dbf10834bbf80796557255c865d2527d9aae2db47b47661ee5da49fbd972fadddb9320c86209e62f0b203c705ebb03effd5233713f686ca5cdf427594fd2115cbd0de37dc6b835ad73d"], 0x6) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1ff, 0x80000000, 0x2, 0x10e800, 0x3ff}) [ 1373.748614] FAULT_INJECTION: forcing a failure. [ 1373.748614] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.750688] CPU: 0 PID: 26038 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1373.751908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1373.753360] Call Trace: [ 1373.753842] dump_stack+0x107/0x167 [ 1373.754517] should_fail.cold+0x5/0xa [ 1373.755210] ? create_object.isra.0+0x3a/0xa20 [ 1373.756034] should_failslab+0x5/0x20 [ 1373.756724] kmem_cache_alloc+0x5b/0x310 [ 1373.757466] create_object.isra.0+0x3a/0xa20 [ 1373.758256] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1373.759171] kmem_cache_alloc+0x159/0x310 [ 1373.759933] __kernfs_new_node+0xd4/0x860 [ 1373.760690] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1373.761551] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1373.762434] ? wait_for_completion_io+0x270/0x270 [ 1373.763159] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1373.763951] kernfs_new_node+0x18d/0x250 [ 1373.764574] __kernfs_create_file+0x51/0x350 [ 1373.765240] sysfs_add_file_mode_ns+0x221/0x560 [ 1373.765957] internal_create_group+0x324/0xb30 [ 1373.766659] ? sysfs_remove_group+0x170/0x170 [ 1373.767319] ? kernfs_name_hash+0xe7/0x110 [ 1373.767959] ? kernfs_find_ns+0x256/0x380 [ 1373.768598] sysfs_slab_add+0x188/0x200 [ 1373.769189] __kmem_cache_create+0x3db/0x520 [ 1373.769855] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1373.770613] p9_client_create+0xc2b/0x11c0 [ 1373.771267] ? p9_client_flush+0x430/0x430 [ 1373.771902] ? trace_hardirqs_on+0x5b/0x180 [ 1373.772546] ? lockdep_init_map_type+0x2c7/0x780 [ 1373.773262] ? __raw_spin_lock_init+0x36/0x110 [ 1373.773959] v9fs_session_init+0x1dd/0x1680 [ 1373.774612] ? lock_release+0x680/0x680 [ 1373.775223] ? kmem_cache_alloc_trace+0x151/0x320 [ 1373.775929] ? v9fs_show_options+0x690/0x690 [ 1373.776608] ? trace_hardirqs_on+0x5b/0x180 [ 1373.777255] ? kasan_unpoison_shadow+0x33/0x50 [ 1373.777937] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1373.778704] v9fs_mount+0x79/0x8f0 [ 1373.779245] ? v9fs_write_inode+0x60/0x60 [ 1373.779865] legacy_get_tree+0x105/0x220 [ 1373.780472] vfs_get_tree+0x8e/0x300 [ 1373.781031] path_mount+0x1429/0x2120 [ 1373.781605] ? strncpy_from_user+0x9e/0x470 [ 1373.782243] ? finish_automount+0xa90/0xa90 [ 1373.782885] ? getname_flags.part.0+0x1dd/0x4f0 [ 1373.783571] ? _copy_from_user+0xfb/0x1b0 [ 1373.784208] __x64_sys_mount+0x282/0x300 [ 1373.784812] ? copy_mnt_ns+0xa00/0xa00 [ 1373.785400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1373.786178] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1373.786943] do_syscall_64+0x33/0x40 [ 1373.787497] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1373.788250] RIP: 0033:0x7f0377362b19 [ 1373.788792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1373.791460] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1373.792573] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1373.793620] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1373.794668] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1373.795710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1373.796754] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:05:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 87) 11:05:45 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:05:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:05:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:45 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:45 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r2, r1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r3, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:05:45 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x0, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1389.993844] FAULT_INJECTION: forcing a failure. [ 1389.993844] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.995606] CPU: 0 PID: 26175 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1389.996626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.997833] Call Trace: [ 1389.998237] dump_stack+0x107/0x167 [ 1389.998801] should_fail.cold+0x5/0xa [ 1389.999384] ? __kernfs_new_node+0xd4/0x860 [ 1390.000032] should_failslab+0x5/0x20 [ 1390.000602] kmem_cache_alloc+0x5b/0x310 [ 1390.001228] __kernfs_new_node+0xd4/0x860 [ 1390.001863] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1390.002590] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1390.003323] ? wait_for_completion_io+0x270/0x270 [ 1390.004052] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1390.004856] kernfs_new_node+0x18d/0x250 [ 1390.005479] __kernfs_create_file+0x51/0x350 [ 1390.006150] sysfs_add_file_mode_ns+0x221/0x560 [ 1390.006877] internal_create_group+0x324/0xb30 [ 1390.007582] ? sysfs_remove_group+0x170/0x170 [ 1390.008249] ? kernfs_name_hash+0xe7/0x110 [ 1390.008894] ? kernfs_find_ns+0x256/0x380 [ 1390.009537] sysfs_slab_add+0x188/0x200 [ 1390.010139] __kmem_cache_create+0x3db/0x520 [ 1390.010820] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1390.011583] p9_client_create+0xc2b/0x11c0 [ 1390.012241] ? p9_client_flush+0x430/0x430 [ 1390.012885] ? trace_hardirqs_on+0x5b/0x180 [ 1390.013530] ? lockdep_init_map_type+0x2c7/0x780 [ 1390.014249] ? __raw_spin_lock_init+0x36/0x110 [ 1390.014957] v9fs_session_init+0x1dd/0x1680 [ 1390.015607] ? lock_release+0x680/0x680 [ 1390.016225] ? kmem_cache_alloc_trace+0x151/0x320 [ 1390.016944] ? v9fs_show_options+0x690/0x690 [ 1390.017627] ? trace_hardirqs_on+0x5b/0x180 [ 1390.018289] ? kasan_unpoison_shadow+0x33/0x50 [ 1390.018974] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1390.019742] v9fs_mount+0x79/0x8f0 [ 1390.020288] ? v9fs_write_inode+0x60/0x60 [ 1390.020912] legacy_get_tree+0x105/0x220 [ 1390.021524] vfs_get_tree+0x8e/0x300 [ 1390.022087] path_mount+0x1429/0x2120 [ 1390.022691] ? strncpy_from_user+0x9e/0x470 [ 1390.023344] ? finish_automount+0xa90/0xa90 [ 1390.023995] ? getname_flags.part.0+0x1dd/0x4f0 [ 1390.024693] ? _copy_from_user+0xfb/0x1b0 [ 1390.025338] __x64_sys_mount+0x282/0x300 [ 1390.025949] ? copy_mnt_ns+0xa00/0xa00 [ 1390.026556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1390.027339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1390.028119] do_syscall_64+0x33/0x40 [ 1390.028678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1390.029438] RIP: 0033:0x7f0377362b19 [ 1390.030000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1390.032691] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1390.033822] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1390.034878] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1390.035924] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1390.036968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1390.038024] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:05:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:45 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:05:46 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x0, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:05:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) [ 1390.313449] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1390.314608] CPU: 0 PID: 26175 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1390.315636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1390.316855] Call Trace: [ 1390.317260] dump_stack+0x107/0x167 [ 1390.317819] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1390.318622] p9_client_create+0xc2b/0x11c0 [ 1390.319278] ? p9_client_flush+0x430/0x430 [ 1390.319919] ? trace_hardirqs_on+0x5b/0x180 [ 1390.320571] ? lockdep_init_map_type+0x2c7/0x780 [ 1390.321293] ? __raw_spin_lock_init+0x36/0x110 [ 1390.321994] v9fs_session_init+0x1dd/0x1680 [ 1390.322645] ? lock_release+0x680/0x680 [ 1390.323260] ? kmem_cache_alloc_trace+0x151/0x320 [ 1390.323984] ? v9fs_show_options+0x690/0x690 [ 1390.324661] ? trace_hardirqs_on+0x5b/0x180 [ 1390.325316] ? kasan_unpoison_shadow+0x33/0x50 [ 1390.325998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1390.326770] v9fs_mount+0x79/0x8f0 [ 1390.327316] ? v9fs_write_inode+0x60/0x60 [ 1390.327938] legacy_get_tree+0x105/0x220 [ 1390.328557] vfs_get_tree+0x8e/0x300 [ 1390.329113] path_mount+0x1429/0x2120 [ 1390.329692] ? strncpy_from_user+0x9e/0x470 [ 1390.330342] ? finish_automount+0xa90/0xa90 [ 1390.330986] ? getname_flags.part.0+0x1dd/0x4f0 [ 1390.331676] ? _copy_from_user+0xfb/0x1b0 [ 1390.332321] __x64_sys_mount+0x282/0x300 [ 1390.332928] ? copy_mnt_ns+0xa00/0xa00 [ 1390.333516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1390.334299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1390.335078] do_syscall_64+0x33/0x40 [ 1390.335642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1390.336398] RIP: 0033:0x7f0377362b19 [ 1390.336953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1390.339635] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1390.340754] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1390.341803] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1390.342858] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1390.343904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1390.344949] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:05:59 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r2, r1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r3, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:05:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 88) 11:05:59 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:59 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:05:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:59 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x114, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xf6, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1403.876498] FAULT_INJECTION: forcing a failure. [ 1403.876498] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.878265] CPU: 1 PID: 26411 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1403.879295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1403.880484] Call Trace: [ 1403.880879] dump_stack+0x107/0x167 [ 1403.881410] should_fail.cold+0x5/0xa [ 1403.881969] ? create_object.isra.0+0x3a/0xa20 [ 1403.882644] should_failslab+0x5/0x20 [ 1403.883204] kmem_cache_alloc+0x5b/0x310 [ 1403.883792] ? __lockdep_reset_lock+0x180/0x180 [ 1403.884475] create_object.isra.0+0x3a/0xa20 [ 1403.885115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1403.885854] kmem_cache_alloc+0x159/0x310 [ 1403.886480] __kernfs_new_node+0xd4/0x860 [ 1403.887096] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1403.887798] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1403.888505] ? wait_for_completion_io+0x270/0x270 [ 1403.889212] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1403.889984] kernfs_new_node+0x18d/0x250 [ 1403.890601] __kernfs_create_file+0x51/0x350 [ 1403.891246] sysfs_add_file_mode_ns+0x221/0x560 [ 1403.891935] internal_create_group+0x324/0xb30 [ 1403.892608] ? sysfs_remove_group+0x170/0x170 [ 1403.893257] ? kernfs_name_hash+0xe7/0x110 [ 1403.893879] ? kernfs_find_ns+0x256/0x380 [ 1403.894503] sysfs_slab_add+0x188/0x200 [ 1403.895090] __kmem_cache_create+0x3db/0x520 [ 1403.895738] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1403.896472] p9_client_create+0xc2b/0x11c0 [ 1403.897100] ? p9_client_flush+0x430/0x430 [ 1403.897716] ? trace_hardirqs_on+0x5b/0x180 [ 1403.898344] ? lockdep_init_map_type+0x2c7/0x780 [ 1403.899049] ? __raw_spin_lock_init+0x36/0x110 [ 1403.899722] v9fs_session_init+0x1dd/0x1680 [ 1403.900352] ? lock_release+0x680/0x680 [ 1403.900952] ? kmem_cache_alloc_trace+0x151/0x320 [ 1403.901659] ? v9fs_show_options+0x690/0x690 [ 1403.902318] ? trace_hardirqs_on+0x5b/0x180 [ 1403.902965] ? kasan_unpoison_shadow+0x33/0x50 [ 1403.903648] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1403.904395] v9fs_mount+0x79/0x8f0 [ 1403.904918] ? v9fs_write_inode+0x60/0x60 [ 1403.905526] legacy_get_tree+0x105/0x220 [ 1403.906120] vfs_get_tree+0x8e/0x300 [ 1403.906675] path_mount+0x1429/0x2120 [ 1403.907234] ? strncpy_from_user+0x9e/0x470 [ 1403.907867] ? finish_automount+0xa90/0xa90 [ 1403.908496] ? getname_flags.part.0+0x1dd/0x4f0 [ 1403.909170] ? _copy_from_user+0xfb/0x1b0 [ 1403.909788] __x64_sys_mount+0x282/0x300 [ 1403.910378] ? copy_mnt_ns+0xa00/0xa00 [ 1403.910959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1403.911713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1403.912472] do_syscall_64+0x33/0x40 [ 1403.913013] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1403.913764] RIP: 0033:0x7f0377362b19 [ 1403.914312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1403.916966] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1403.918074] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1403.919113] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1403.920151] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1403.921175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1403.922214] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:05:59 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:05:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:59 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:05:59 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x114, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xf6, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:05:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:59 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:05:59 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:06:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 89) 11:06:13 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x114, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xf6, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:06:13 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:06:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:13 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:13 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:06:13 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) [ 1418.063903] FAULT_INJECTION: forcing a failure. [ 1418.063903] name failslab, interval 1, probability 0, space 0, times 0 [ 1418.065086] CPU: 0 PID: 26557 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1418.065722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1418.066477] Call Trace: [ 1418.066743] dump_stack+0x107/0x167 [ 1418.067092] should_fail.cold+0x5/0xa [ 1418.067454] ? create_object.isra.0+0x3a/0xa20 [ 1418.067881] should_failslab+0x5/0x20 [ 1418.068234] kmem_cache_alloc+0x5b/0x310 [ 1418.068608] ? __lockdep_reset_lock+0x180/0x180 [ 1418.069044] create_object.isra.0+0x3a/0xa20 [ 1418.069451] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1418.069927] kmem_cache_alloc+0x159/0x310 [ 1418.070322] __kernfs_new_node+0xd4/0x860 [ 1418.070723] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1418.071172] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1418.071622] ? wait_for_completion_io+0x270/0x270 [ 1418.072071] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1418.072563] kernfs_new_node+0x18d/0x250 [ 1418.072947] __kernfs_create_file+0x51/0x350 [ 1418.073356] sysfs_add_file_mode_ns+0x221/0x560 [ 1418.073800] internal_create_group+0x324/0xb30 [ 1418.074232] ? sysfs_remove_group+0x170/0x170 [ 1418.074652] ? kernfs_name_hash+0xe7/0x110 [ 1418.075049] ? kernfs_find_ns+0x256/0x380 [ 1418.075442] sysfs_slab_add+0x188/0x200 [ 1418.075816] __kmem_cache_create+0x3db/0x520 [ 1418.076229] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1418.076694] p9_client_create+0xc2b/0x11c0 [ 1418.077101] ? p9_client_flush+0x430/0x430 [ 1418.077493] ? trace_hardirqs_on+0x5b/0x180 [ 1418.077892] ? lockdep_init_map_type+0x2c7/0x780 [ 1418.078337] ? __raw_spin_lock_init+0x36/0x110 [ 1418.078777] v9fs_session_init+0x1dd/0x1680 [ 1418.079176] ? lock_release+0x680/0x680 [ 1418.079558] ? kmem_cache_alloc_trace+0x151/0x320 [ 1418.080012] ? v9fs_show_options+0x690/0x690 [ 1418.080433] ? trace_hardirqs_on+0x5b/0x180 [ 1418.080842] ? kasan_unpoison_shadow+0x33/0x50 [ 1418.081268] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1418.081743] v9fs_mount+0x79/0x8f0 [ 1418.082081] ? v9fs_write_inode+0x60/0x60 [ 1418.082466] legacy_get_tree+0x105/0x220 [ 1418.082855] vfs_get_tree+0x8e/0x300 [ 1418.083206] path_mount+0x1429/0x2120 [ 1418.083563] ? strncpy_from_user+0x9e/0x470 [ 1418.083965] ? finish_automount+0xa90/0xa90 [ 1418.084362] ? getname_flags.part.0+0x1dd/0x4f0 [ 1418.084786] ? _copy_from_user+0xfb/0x1b0 [ 1418.085182] __x64_sys_mount+0x282/0x300 [ 1418.085553] ? copy_mnt_ns+0xa00/0xa00 [ 1418.085919] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1418.086395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1418.086879] do_syscall_64+0x33/0x40 [ 1418.087222] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1418.087690] RIP: 0033:0x7f0377362b19 [ 1418.088035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1418.089677] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1418.090372] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1418.091026] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1418.091672] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1418.092316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1418.092963] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:06:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:06:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) 11:06:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:06:14 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x0, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:06:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 90) 11:06:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:06:14 executing program 6: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4082, 0xff2}], 0x6) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80000) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0xa) 11:06:14 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:06:14 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x0, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:06:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) [ 1418.459963] FAULT_INJECTION: forcing a failure. [ 1418.459963] name failslab, interval 1, probability 0, space 0, times 0 [ 1418.461722] CPU: 1 PID: 26694 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1418.462764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1418.463963] Call Trace: [ 1418.464362] dump_stack+0x107/0x167 [ 1418.464899] should_fail.cold+0x5/0xa [ 1418.465467] ? create_object.isra.0+0x3a/0xa20 [ 1418.466143] should_failslab+0x5/0x20 [ 1418.466710] kmem_cache_alloc+0x5b/0x310 [ 1418.467305] ? __lockdep_reset_lock+0x180/0x180 [ 1418.467993] create_object.isra.0+0x3a/0xa20 [ 1418.468633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1418.469385] kmem_cache_alloc+0x159/0x310 [ 1418.470015] __kernfs_new_node+0xd4/0x860 [ 1418.470642] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1418.471349] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1418.472065] ? wait_for_completion_io+0x270/0x270 [ 1418.472779] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1418.473555] kernfs_new_node+0x18d/0x250 [ 1418.474167] __kernfs_create_file+0x51/0x350 [ 1418.474831] sysfs_add_file_mode_ns+0x221/0x560 [ 1418.475525] internal_create_group+0x324/0xb30 [ 1418.476203] ? sysfs_remove_group+0x170/0x170 [ 1418.476857] ? kernfs_name_hash+0xe7/0x110 [ 1418.477488] ? kernfs_find_ns+0x256/0x380 [ 1418.478108] sysfs_slab_add+0x188/0x200 [ 1418.478706] __kmem_cache_create+0x3db/0x520 [ 1418.479352] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1418.480095] p9_client_create+0xc2b/0x11c0 [ 1418.480729] ? p9_client_flush+0x430/0x430 [ 1418.481352] ? trace_hardirqs_on+0x5b/0x180 [ 1418.481984] ? lockdep_init_map_type+0x2c7/0x780 [ 1418.482693] ? __raw_spin_lock_init+0x36/0x110 [ 1418.483371] v9fs_session_init+0x1dd/0x1680 [ 1418.484006] ? lock_release+0x680/0x680 [ 1418.484597] ? kmem_cache_alloc_trace+0x151/0x320 [ 1418.485303] ? v9fs_show_options+0x690/0x690 [ 1418.485960] ? trace_hardirqs_on+0x5b/0x180 [ 1418.486601] ? kasan_unpoison_shadow+0x33/0x50 [ 1418.487285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1418.488033] v9fs_mount+0x79/0x8f0 [ 1418.488560] ? v9fs_write_inode+0x60/0x60 [ 1418.489172] legacy_get_tree+0x105/0x220 [ 1418.489769] vfs_get_tree+0x8e/0x300 [ 1418.490316] path_mount+0x1429/0x2120 [ 1418.490890] ? strncpy_from_user+0x9e/0x470 [ 1418.491522] ? finish_automount+0xa90/0xa90 [ 1418.492152] ? getname_flags.part.0+0x1dd/0x4f0 [ 1418.492832] ? _copy_from_user+0xfb/0x1b0 [ 1418.493449] __x64_sys_mount+0x282/0x300 [ 1418.494042] ? copy_mnt_ns+0xa00/0xa00 [ 1418.494625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1418.495395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1418.496149] do_syscall_64+0x33/0x40 [ 1418.496695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1418.497442] RIP: 0033:0x7f0377362b19 [ 1418.497986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1418.500636] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1418.501741] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1418.502777] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1418.503805] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1418.504829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1418.505863] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:06:26 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 91) 11:06:26 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x0, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:06:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) 11:06:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:06:26 executing program 6: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4082, 0xff2}], 0x6) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80000) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0xa) 11:06:26 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:06:26 executing program 6: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4082, 0xff2}], 0x6) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80000) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0xa) [ 1431.030704] FAULT_INJECTION: forcing a failure. [ 1431.030704] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.032635] CPU: 0 PID: 26704 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1431.033630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1431.034836] Call Trace: [ 1431.035235] dump_stack+0x107/0x167 [ 1431.035781] should_fail.cold+0x5/0xa [ 1431.036350] ? __kernfs_new_node+0xd4/0x860 [ 1431.036985] should_failslab+0x5/0x20 [ 1431.037554] kmem_cache_alloc+0x5b/0x310 [ 1431.038169] __kernfs_new_node+0xd4/0x860 [ 1431.038804] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1431.039519] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1431.040240] ? wait_for_completion_io+0x270/0x270 [ 1431.040958] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1431.041749] kernfs_new_node+0x18d/0x250 [ 1431.042366] __kernfs_create_file+0x51/0x350 [ 1431.043039] sysfs_add_file_mode_ns+0x221/0x560 [ 1431.043750] internal_create_group+0x324/0xb30 [ 1431.044446] ? sysfs_remove_group+0x170/0x170 [ 1431.045099] ? kernfs_name_hash+0xe7/0x110 [ 1431.045738] ? kernfs_find_ns+0x256/0x380 [ 1431.046380] sysfs_slab_add+0x188/0x200 [ 1431.046984] __kmem_cache_create+0x3db/0x520 [ 1431.047646] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1431.048398] p9_client_create+0xc2b/0x11c0 [ 1431.049045] ? p9_client_flush+0x430/0x430 [ 1431.049679] ? trace_hardirqs_on+0x5b/0x180 [ 1431.050318] ? lockdep_init_map_type+0x2c7/0x780 [ 1431.051041] ? __raw_spin_lock_init+0x36/0x110 [ 1431.051728] v9fs_session_init+0x1dd/0x1680 [ 1431.052367] ? lock_release+0x680/0x680 [ 1431.052976] ? kmem_cache_alloc_trace+0x151/0x320 [ 1431.053687] ? v9fs_show_options+0x690/0x690 [ 1431.054363] ? trace_hardirqs_on+0x5b/0x180 [ 1431.055015] ? kasan_unpoison_shadow+0x33/0x50 [ 1431.055692] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1431.056455] v9fs_mount+0x79/0x8f0 [ 1431.056995] ? v9fs_write_inode+0x60/0x60 [ 1431.057607] legacy_get_tree+0x105/0x220 [ 1431.058217] vfs_get_tree+0x8e/0x300 [ 1431.058779] path_mount+0x1429/0x2120 [ 1431.059366] ? strncpy_from_user+0x9e/0x470 [ 1431.060008] ? finish_automount+0xa90/0xa90 [ 1431.060646] ? getname_flags.part.0+0x1dd/0x4f0 [ 1431.061331] ? _copy_from_user+0xfb/0x1b0 [ 1431.061966] __x64_sys_mount+0x282/0x300 [ 1431.062568] ? copy_mnt_ns+0xa00/0xa00 [ 1431.063166] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1431.063936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1431.064699] do_syscall_64+0x33/0x40 [ 1431.065251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1431.066000] RIP: 0033:0x7f0377362b19 [ 1431.066549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1431.069197] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1431.070310] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1431.071358] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1431.072388] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1431.073421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1431.074454] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:06:26 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:26 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) ioctl$HIDIOCINITREPORT(r2, 0x550c, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$bt_hci(r2, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc9, 0x9}}}, 0x8) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r4, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0xd6, 0xbc, 0x8, 0x3f, 0x9, 0x2, 0x1ff}, 0xc) [ 1431.092070] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1431.092636] CPU: 1 PID: 26704 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1431.093204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1431.093885] Call Trace: [ 1431.094112] dump_stack+0x107/0x167 [ 1431.094420] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1431.094865] p9_client_create+0xc2b/0x11c0 [ 1431.095237] ? p9_client_flush+0x430/0x430 [ 1431.095589] ? trace_hardirqs_on+0x5b/0x180 [ 1431.095949] ? lockdep_init_map_type+0x2c7/0x780 [ 1431.096340] ? __raw_spin_lock_init+0x36/0x110 [ 1431.096721] v9fs_session_init+0x1dd/0x1680 [ 1431.097074] ? lock_release+0x680/0x680 [ 1431.097406] ? kmem_cache_alloc_trace+0x151/0x320 [ 1431.097797] ? v9fs_show_options+0x690/0x690 [ 1431.098163] ? trace_hardirqs_on+0x5b/0x180 [ 1431.098519] ? kasan_unpoison_shadow+0x33/0x50 [ 1431.098905] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1431.099326] v9fs_mount+0x79/0x8f0 [ 1431.099620] ? v9fs_write_inode+0x60/0x60 [ 1431.099960] legacy_get_tree+0x105/0x220 [ 1431.100294] vfs_get_tree+0x8e/0x300 [ 1431.100601] path_mount+0x1429/0x2120 [ 1431.100918] ? strncpy_from_user+0x9e/0x470 [ 1431.101269] ? finish_automount+0xa90/0xa90 [ 1431.101620] ? getname_flags.part.0+0x1dd/0x4f0 [ 1431.101999] ? _copy_from_user+0xfb/0x1b0 [ 1431.102345] __x64_sys_mount+0x282/0x300 [ 1431.102676] ? copy_mnt_ns+0xa00/0xa00 [ 1431.103005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1431.103434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1431.103855] do_syscall_64+0x33/0x40 [ 1431.104161] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1431.104578] RIP: 0033:0x7f0377362b19 [ 1431.104886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1431.106353] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1431.106978] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1431.107551] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1431.108130] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1431.108702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1431.109276] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:06:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:41 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x118, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xfa, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0x35, 0x0, 0x0, @binary}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:06:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 92) 11:06:41 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:06:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:06:41 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:41 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:06:41 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:06:41 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1445.946173] FAULT_INJECTION: forcing a failure. [ 1445.946173] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.948074] CPU: 1 PID: 26839 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1445.949122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.950370] Call Trace: [ 1445.950773] dump_stack+0x107/0x167 [ 1445.951330] should_fail.cold+0x5/0xa [ 1445.951905] ? create_object.isra.0+0x3a/0xa20 [ 1445.952592] should_failslab+0x5/0x20 [ 1445.953162] kmem_cache_alloc+0x5b/0x310 [ 1445.953783] ? __lockdep_reset_lock+0x180/0x180 [ 1445.954498] create_object.isra.0+0x3a/0xa20 [ 1445.955170] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1445.955945] kmem_cache_alloc+0x159/0x310 [ 1445.956591] __kernfs_new_node+0xd4/0x860 [ 1445.957230] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1445.957952] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.958650] ? wait_for_completion_io+0x270/0x270 [ 1445.959398] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1445.960147] kernfs_new_node+0x18d/0x250 [ 1445.960766] __kernfs_create_file+0x51/0x350 [ 1445.961405] sysfs_add_file_mode_ns+0x221/0x560 [ 1445.962120] internal_create_group+0x324/0xb30 [ 1445.962774] ? sysfs_remove_group+0x170/0x170 [ 1445.963460] ? kernfs_name_hash+0xe7/0x110 [ 1445.964085] ? kernfs_find_ns+0x256/0x380 [ 1445.964738] sysfs_slab_add+0x188/0x200 [ 1445.965320] __kmem_cache_create+0x3db/0x520 [ 1445.965992] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1445.966705] p9_client_create+0xc2b/0x11c0 [ 1445.967367] ? p9_client_flush+0x430/0x430 [ 1445.967978] ? trace_hardirqs_on+0x5b/0x180 [ 1445.968637] ? lockdep_init_map_type+0x2c7/0x780 [ 1445.969317] ? __raw_spin_lock_init+0x36/0x110 [ 1445.970024] v9fs_session_init+0x1dd/0x1680 [ 1445.970649] ? lock_release+0x680/0x680 [ 1445.971267] ? kmem_cache_alloc_trace+0x151/0x320 [ 1445.971999] ? v9fs_show_options+0x690/0x690 [ 1445.972762] ? trace_hardirqs_on+0x5b/0x180 [ 1445.973451] ? kasan_unpoison_shadow+0x33/0x50 [ 1445.974230] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1445.975052] v9fs_mount+0x79/0x8f0 [ 1445.975623] ? v9fs_write_inode+0x60/0x60 11:06:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1445.976280] legacy_get_tree+0x105/0x220 [ 1445.977135] vfs_get_tree+0x8e/0x300 [ 1445.977779] path_mount+0x1429/0x2120 [ 1445.978444] ? strncpy_from_user+0x9e/0x470 [ 1445.979197] ? finish_automount+0xa90/0xa90 [ 1445.980078] ? getname_flags.part.0+0x1dd/0x4f0 [ 1445.981047] ? _copy_from_user+0xfb/0x1b0 [ 1445.981921] __x64_sys_mount+0x282/0x300 11:06:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) [ 1445.982753] ? copy_mnt_ns+0xa00/0xa00 [ 1445.983661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.984493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.985318] do_syscall_64+0x33/0x40 [ 1445.985915] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1445.986725] RIP: 0033:0x7f0377362b19 [ 1445.987343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.990202] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1445.991410] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1445.992530] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1445.993647] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1445.994764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.995892] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:06:41 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:41 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:06:41 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x118, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xfa, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0x35, 0x0, 0x0, @binary}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:06:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:41 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 93) 11:06:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:06:54 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:06:54 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:54 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:54 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:06:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:54 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x118, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xfa, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0x35, 0x0, 0x0, @binary}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1459.137150] FAULT_INJECTION: forcing a failure. [ 1459.137150] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.138293] CPU: 0 PID: 26992 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1459.138910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.139653] Call Trace: [ 1459.139897] dump_stack+0x107/0x167 [ 1459.140226] should_fail.cold+0x5/0xa [ 1459.140568] ? __kernfs_new_node+0xd4/0x860 [ 1459.140952] should_failslab+0x5/0x20 [ 1459.141294] kmem_cache_alloc+0x5b/0x310 [ 1459.141664] __kernfs_new_node+0xd4/0x860 [ 1459.142036] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1459.142466] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1459.142904] ? wait_for_completion_io+0x270/0x270 [ 1459.143348] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1459.143823] kernfs_new_node+0x18d/0x250 [ 1459.144186] __kernfs_create_file+0x51/0x350 [ 1459.144584] sysfs_add_file_mode_ns+0x221/0x560 [ 1459.145004] internal_create_group+0x324/0xb30 [ 1459.145414] ? sysfs_remove_group+0x170/0x170 [ 1459.145802] ? kernfs_name_hash+0xe7/0x110 [ 1459.146178] ? kernfs_find_ns+0x256/0x380 [ 1459.146557] sysfs_slab_add+0x188/0x200 [ 1459.146912] __kmem_cache_create+0x3db/0x520 [ 1459.147313] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1459.147756] p9_client_create+0xc2b/0x11c0 [ 1459.148144] ? p9_client_flush+0x430/0x430 [ 1459.148516] ? trace_hardirqs_on+0x5b/0x180 [ 1459.148898] ? lockdep_init_map_type+0x2c7/0x780 [ 1459.149320] ? __raw_spin_lock_init+0x36/0x110 [ 1459.149732] v9fs_session_init+0x1dd/0x1680 [ 1459.150117] ? lock_release+0x680/0x680 [ 1459.150479] ? kmem_cache_alloc_trace+0x151/0x320 [ 1459.150901] ? v9fs_show_options+0x690/0x690 [ 1459.151306] ? trace_hardirqs_on+0x5b/0x180 [ 1459.151692] ? kasan_unpoison_shadow+0x33/0x50 [ 1459.152098] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1459.152554] v9fs_mount+0x79/0x8f0 [ 1459.152873] ? v9fs_write_inode+0x60/0x60 [ 1459.153240] legacy_get_tree+0x105/0x220 [ 1459.153602] vfs_get_tree+0x8e/0x300 [ 1459.153935] path_mount+0x1429/0x2120 [ 1459.154278] ? strncpy_from_user+0x9e/0x470 [ 1459.154656] ? finish_automount+0xa90/0xa90 [ 1459.155035] ? getname_flags.part.0+0x1dd/0x4f0 [ 1459.155451] ? _copy_from_user+0xfb/0x1b0 [ 1459.155840] __x64_sys_mount+0x282/0x300 [ 1459.156198] ? copy_mnt_ns+0xa00/0xa00 [ 1459.156548] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1459.157002] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.157455] do_syscall_64+0x33/0x40 [ 1459.157783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1459.158236] RIP: 0033:0x7f0377362b19 [ 1459.158565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.160146] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1459.160815] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1459.161435] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1459.162060] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1459.162678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.163309] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:06:55 executing program 6: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4082, 0xff2}], 0x6) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80000) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0xa) 11:06:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:06:55 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:06:55 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1459.262376] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1459.263555] CPU: 1 PID: 26992 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1459.264573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.265794] Call Trace: [ 1459.266204] dump_stack+0x107/0x167 [ 1459.266758] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1459.267561] p9_client_create+0xc2b/0x11c0 [ 1459.268214] ? p9_client_flush+0x430/0x430 [ 1459.268852] ? trace_hardirqs_on+0x5b/0x180 [ 1459.269501] ? lockdep_init_map_type+0x2c7/0x780 [ 1459.270217] ? __raw_spin_lock_init+0x36/0x110 [ 1459.270909] v9fs_session_init+0x1dd/0x1680 [ 1459.271567] ? lock_release+0x680/0x680 [ 1459.272178] ? kmem_cache_alloc_trace+0x151/0x320 [ 1459.272898] ? v9fs_show_options+0x690/0x690 [ 1459.273567] ? trace_hardirqs_on+0x5b/0x180 [ 1459.274217] ? kasan_unpoison_shadow+0x33/0x50 [ 1459.274901] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1459.275672] v9fs_mount+0x79/0x8f0 [ 1459.276210] ? v9fs_write_inode+0x60/0x60 [ 1459.276834] legacy_get_tree+0x105/0x220 [ 1459.277446] vfs_get_tree+0x8e/0x300 [ 1459.278010] path_mount+0x1429/0x2120 [ 1459.278587] ? strncpy_from_user+0x9e/0x470 [ 1459.279256] ? finish_automount+0xa90/0xa90 [ 1459.279902] ? getname_flags.part.0+0x1dd/0x4f0 [ 1459.280601] ? _copy_from_user+0xfb/0x1b0 [ 1459.281240] __x64_sys_mount+0x282/0x300 [ 1459.281849] ? copy_mnt_ns+0xa00/0xa00 [ 1459.282436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1459.283223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.283997] do_syscall_64+0x33/0x40 [ 1459.284554] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1459.285318] RIP: 0033:0x7f0377362b19 [ 1459.285879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.288566] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1459.289686] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1459.290737] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1459.291794] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1459.292843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.293899] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:07:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 94) 11:07:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:08 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:07:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:07:08 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:07:08 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:08 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:08 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x184, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x166, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0x6d, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1472.500653] FAULT_INJECTION: forcing a failure. [ 1472.500653] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.501965] CPU: 0 PID: 27118 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1472.502617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1472.503420] Call Trace: [ 1472.503693] dump_stack+0x107/0x167 [ 1472.504047] should_fail.cold+0x5/0xa [ 1472.504420] ? create_object.isra.0+0x3a/0xa20 [ 1472.504863] should_failslab+0x5/0x20 [ 1472.505229] kmem_cache_alloc+0x5b/0x310 [ 1472.505617] ? __lockdep_reset_lock+0x180/0x180 [ 1472.506074] create_object.isra.0+0x3a/0xa20 [ 1472.506499] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1472.506992] kmem_cache_alloc+0x159/0x310 [ 1472.507411] __kernfs_new_node+0xd4/0x860 [ 1472.507827] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1472.508296] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1472.508772] ? wait_for_completion_io+0x270/0x270 [ 1472.509243] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1472.509758] kernfs_new_node+0x18d/0x250 [ 1472.510160] __kernfs_create_file+0x51/0x350 [ 1472.510586] sysfs_add_file_mode_ns+0x221/0x560 [ 1472.511058] internal_create_group+0x324/0xb30 [ 1472.511521] ? sysfs_remove_group+0x170/0x170 [ 1472.511955] ? kernfs_name_hash+0xe7/0x110 [ 1472.512368] ? kernfs_find_ns+0x256/0x380 [ 1472.512779] sysfs_slab_add+0x188/0x200 [ 1472.513166] __kmem_cache_create+0x3db/0x520 [ 1472.513599] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1472.514091] p9_client_create+0xc2b/0x11c0 [ 1472.514514] ? p9_client_flush+0x430/0x430 [ 1472.514922] ? trace_hardirqs_on+0x5b/0x180 [ 1472.515345] ? lockdep_init_map_type+0x2c7/0x780 [ 1472.515808] ? __raw_spin_lock_init+0x36/0x110 [ 1472.516257] v9fs_session_init+0x1dd/0x1680 [ 1472.516670] ? lock_release+0x680/0x680 [ 1472.517067] ? kmem_cache_alloc_trace+0x151/0x320 [ 1472.517528] ? v9fs_show_options+0x690/0x690 [ 1472.517965] ? trace_hardirqs_on+0x5b/0x180 [ 1472.518387] ? kasan_unpoison_shadow+0x33/0x50 [ 1472.518826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1472.519326] v9fs_mount+0x79/0x8f0 [ 1472.519675] ? v9fs_write_inode+0x60/0x60 [ 1472.520075] legacy_get_tree+0x105/0x220 [ 1472.520467] vfs_get_tree+0x8e/0x300 [ 1472.520827] path_mount+0x1429/0x2120 [ 1472.521201] ? strncpy_from_user+0x9e/0x470 [ 1472.521614] ? finish_automount+0xa90/0xa90 [ 1472.522031] ? getname_flags.part.0+0x1dd/0x4f0 [ 1472.522472] ? _copy_from_user+0xfb/0x1b0 [ 1472.522888] __x64_sys_mount+0x282/0x300 [ 1472.523286] ? copy_mnt_ns+0xa00/0xa00 [ 1472.523665] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1472.524162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1472.524654] do_syscall_64+0x33/0x40 [ 1472.525011] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1472.525495] RIP: 0033:0x7f0377362b19 [ 1472.525849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.527565] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1472.528284] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1472.528954] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1472.529624] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1472.530290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1472.530959] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:07:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:08 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:07:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:08 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x184, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x166, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0x6d, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:07:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:08 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:07:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 95) 11:07:08 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:08 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) close(r3) fdatasync(r3) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) 11:07:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) [ 1472.908891] FAULT_INJECTION: forcing a failure. [ 1472.908891] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.911716] CPU: 1 PID: 27283 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1472.913368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1472.915288] Call Trace: [ 1472.915896] dump_stack+0x107/0x167 [ 1472.916766] should_fail.cold+0x5/0xa [ 1472.917600] ? __kernfs_new_node+0xd4/0x860 [ 1472.918481] should_failslab+0x5/0x20 [ 1472.919277] kmem_cache_alloc+0x5b/0x310 [ 1472.920091] __kernfs_new_node+0xd4/0x860 [ 1472.920857] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1472.921549] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1472.922430] ? wait_for_completion_io+0x270/0x270 [ 1472.923131] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1472.923938] kernfs_new_node+0x18d/0x250 [ 1472.924547] __kernfs_create_file+0x51/0x350 [ 1472.925196] sysfs_add_file_mode_ns+0x221/0x560 [ 1472.925892] internal_create_group+0x324/0xb30 [ 1472.926569] ? sysfs_remove_group+0x170/0x170 [ 1472.927217] ? kernfs_name_hash+0xe7/0x110 [ 1472.927915] sysfs_slab_add+0x188/0x200 [ 1472.928559] __kmem_cache_create+0x3db/0x520 [ 1472.929269] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1472.930073] p9_client_create+0xc2b/0x11c0 [ 1472.930765] ? p9_client_flush+0x430/0x430 [ 1472.931459] ? trace_hardirqs_on+0x5b/0x180 [ 1472.932154] ? lockdep_init_map_type+0x2c7/0x780 [ 1472.932918] ? __raw_spin_lock_init+0x36/0x110 [ 1472.933659] v9fs_session_init+0x1dd/0x1680 [ 1472.934350] ? lock_release+0x680/0x680 [ 1472.934999] ? kmem_cache_alloc_trace+0x151/0x320 [ 1472.935782] ? v9fs_show_options+0x690/0x690 [ 1472.936501] ? trace_hardirqs_on+0x5b/0x180 [ 1472.937196] ? kasan_unpoison_shadow+0x33/0x50 [ 1472.937929] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1472.938746] v9fs_mount+0x79/0x8f0 [ 1472.939334] ? v9fs_write_inode+0x60/0x60 [ 1472.940001] legacy_get_tree+0x105/0x220 [ 1472.940657] vfs_get_tree+0x8e/0x300 [ 1472.941257] path_mount+0x1429/0x2120 [ 1472.941875] ? strncpy_from_user+0x9e/0x470 [ 1472.942565] ? finish_automount+0xa90/0xa90 [ 1472.943269] ? getname_flags.part.0+0x1dd/0x4f0 [ 1472.944013] ? _copy_from_user+0xfb/0x1b0 [ 1472.944688] __x64_sys_mount+0x282/0x300 [ 1472.945338] ? copy_mnt_ns+0xa00/0xa00 [ 1472.945972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1472.946805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1472.947639] do_syscall_64+0x33/0x40 [ 1472.948238] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1472.949051] RIP: 0033:0x7f0377362b19 [ 1472.949651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.952516] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1472.953721] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1472.954839] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1472.955975] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1472.957098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1472.958214] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 [ 1472.989044] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1472.989636] CPU: 0 PID: 27283 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1472.990193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1472.990858] Call Trace: [ 1472.991083] dump_stack+0x107/0x167 [ 1472.991396] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1472.991830] p9_client_create+0xc2b/0x11c0 [ 1472.992185] ? p9_client_flush+0x430/0x430 [ 1472.992533] ? trace_hardirqs_on+0x5b/0x180 [ 1472.992888] ? lockdep_init_map_type+0x2c7/0x780 [ 1472.993280] ? __raw_spin_lock_init+0x36/0x110 [ 1472.993659] v9fs_session_init+0x1dd/0x1680 [ 1472.994009] ? lock_release+0x680/0x680 [ 1472.994345] ? kmem_cache_alloc_trace+0x151/0x320 [ 1472.994740] ? v9fs_show_options+0x690/0x690 [ 1472.995108] ? trace_hardirqs_on+0x5b/0x180 [ 1472.995471] ? kasan_unpoison_shadow+0x33/0x50 [ 1472.995849] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1472.996267] v9fs_mount+0x79/0x8f0 [ 1472.996562] ? v9fs_write_inode+0x60/0x60 [ 1472.996907] legacy_get_tree+0x105/0x220 [ 1472.997242] vfs_get_tree+0x8e/0x300 [ 1472.997555] path_mount+0x1429/0x2120 [ 1472.997873] ? strncpy_from_user+0x9e/0x470 [ 1472.998226] ? finish_automount+0xa90/0xa90 [ 1472.998575] ? getname_flags.part.0+0x1dd/0x4f0 [ 1472.998954] ? _copy_from_user+0xfb/0x1b0 [ 1472.999308] __x64_sys_mount+0x282/0x300 [ 1472.999638] ? copy_mnt_ns+0xa00/0xa00 [ 1472.999961] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1473.000387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.000811] do_syscall_64+0x33/0x40 [ 1473.001115] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1473.001530] RIP: 0033:0x7f0377362b19 [ 1473.001841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.003302] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1473.003916] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1473.004483] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1473.005056] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1473.005628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.006198] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:07:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:07:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:22 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x184, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x166, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0x6d, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:07:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 96) 11:07:22 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:07:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:22 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:22 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) [ 1486.810776] FAULT_INJECTION: forcing a failure. [ 1486.810776] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.812408] CPU: 1 PID: 27385 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1486.813368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.814521] Call Trace: [ 1486.814900] dump_stack+0x107/0x167 [ 1486.815421] should_fail.cold+0x5/0xa [ 1486.815975] should_failslab+0x5/0x20 [ 1486.816508] __kmalloc_track_caller+0x79/0x370 [ 1486.817148] ? strndup_user+0x74/0xe0 [ 1486.817693] memdup_user+0x22/0xd0 [ 1486.818203] strndup_user+0x74/0xe0 [ 1486.818721] __x64_sys_mount+0x133/0x300 [ 1486.819291] ? copy_mnt_ns+0xa00/0xa00 [ 1486.819861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.820598] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.821325] do_syscall_64+0x33/0x40 [ 1486.821848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.822556] RIP: 0033:0x7f93ecc32b19 [ 1486.823082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.825624] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1486.826683] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1486.827686] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1486.828676] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1486.829664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1486.830653] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:07:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:22 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1486.845792] FAULT_INJECTION: forcing a failure. [ 1486.845792] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.847406] CPU: 1 PID: 27382 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1486.848378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.849525] Call Trace: [ 1486.849898] dump_stack+0x107/0x167 [ 1486.850411] should_fail.cold+0x5/0xa [ 1486.850954] ? create_object.isra.0+0x3a/0xa20 [ 1486.851612] should_failslab+0x5/0x20 [ 1486.852144] kmem_cache_alloc+0x5b/0x310 [ 1486.852713] ? __lockdep_reset_lock+0x180/0x180 [ 1486.853371] create_object.isra.0+0x3a/0xa20 [ 1486.853990] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1486.854707] kmem_cache_alloc+0x159/0x310 [ 1486.855304] __kernfs_new_node+0xd4/0x860 [ 1486.855903] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1486.856582] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1486.857263] ? wait_for_completion_io+0x270/0x270 [ 1486.857947] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1486.858695] kernfs_new_node+0x18d/0x250 [ 1486.859270] __kernfs_create_file+0x51/0x350 [ 1486.859909] sysfs_add_file_mode_ns+0x221/0x560 [ 1486.860569] internal_create_group+0x324/0xb30 [ 1486.861226] ? sysfs_remove_group+0x170/0x170 [ 1486.861852] ? kernfs_name_hash+0xe7/0x110 [ 1486.862456] ? kernfs_find_ns+0x256/0x380 [ 1486.863056] sysfs_slab_add+0x188/0x200 [ 1486.863634] __kmem_cache_create+0x3db/0x520 [ 1486.864278] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1486.864989] p9_client_create+0xc2b/0x11c0 [ 1486.865590] ? p9_client_flush+0x430/0x430 [ 1486.866187] ? trace_hardirqs_on+0x5b/0x180 [ 1486.866802] ? lockdep_init_map_type+0x2c7/0x780 [ 1486.867477] ? __raw_spin_lock_init+0x36/0x110 [ 1486.868133] v9fs_session_init+0x1dd/0x1680 [ 1486.868732] ? lock_release+0x680/0x680 [ 1486.869307] ? kmem_cache_alloc_trace+0x151/0x320 [ 1486.869981] ? v9fs_show_options+0x690/0x690 [ 1486.870609] ? trace_hardirqs_on+0x5b/0x180 [ 1486.871222] ? kasan_unpoison_shadow+0x33/0x50 [ 1486.871868] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1486.872591] v9fs_mount+0x79/0x8f0 [ 1486.873106] ? v9fs_write_inode+0x60/0x60 [ 1486.873693] legacy_get_tree+0x105/0x220 [ 1486.874268] vfs_get_tree+0x8e/0x300 [ 1486.874793] path_mount+0x1429/0x2120 [ 1486.875340] ? strncpy_from_user+0x9e/0x470 [ 1486.875951] ? finish_automount+0xa90/0xa90 [ 1486.876564] ? getname_flags.part.0+0x1dd/0x4f0 [ 1486.877222] ? _copy_from_user+0xfb/0x1b0 [ 1486.877818] __x64_sys_mount+0x282/0x300 [ 1486.878391] ? copy_mnt_ns+0xa00/0xa00 [ 1486.878947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.879694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.880427] do_syscall_64+0x33/0x40 [ 1486.880958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.881674] RIP: 0033:0x7f0377362b19 [ 1486.882195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.884747] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1486.885810] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1486.886851] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1486.887858] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1486.888849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.889838] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:07:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:07:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1500.547906] FAULT_INJECTION: forcing a failure. [ 1500.547906] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.551739] CPU: 0 PID: 27509 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1500.552754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1500.553956] Call Trace: [ 1500.554358] dump_stack+0x107/0x167 [ 1500.554904] should_fail.cold+0x5/0xa [ 1500.555477] ? __kernfs_new_node+0xd4/0x860 [ 1500.556128] should_failslab+0x5/0x20 [ 1500.556692] kmem_cache_alloc+0x5b/0x310 [ 1500.557310] __kernfs_new_node+0xd4/0x860 [ 1500.557938] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1500.558651] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1500.559372] ? wait_for_completion_io+0x270/0x270 [ 1500.560094] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1500.560885] kernfs_new_node+0x18d/0x250 [ 1500.561502] __kernfs_create_file+0x51/0x350 [ 1500.562161] sysfs_add_file_mode_ns+0x221/0x560 [ 1500.562876] internal_create_group+0x324/0xb30 [ 1500.563567] ? sysfs_remove_group+0x170/0x170 [ 1500.564237] ? kernfs_name_hash+0xe7/0x110 [ 1500.564879] ? kernfs_find_ns+0x256/0x380 [ 1500.565522] sysfs_slab_add+0x188/0x200 [ 1500.566124] __kmem_cache_create+0x3db/0x520 [ 1500.566782] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1500.567528] p9_client_create+0xc2b/0x11c0 [ 1500.568192] ? p9_client_flush+0x430/0x430 [ 1500.568821] ? trace_hardirqs_on+0x5b/0x180 [ 1500.569461] ? lockdep_init_map_type+0x2c7/0x780 [ 1500.570353] ? __raw_spin_lock_init+0x36/0x110 [ 1500.571042] v9fs_session_init+0x1dd/0x1680 [ 1500.571688] ? lock_release+0x680/0x680 [ 1500.572291] ? kmem_cache_alloc_trace+0x151/0x320 [ 1500.573003] ? v9fs_show_options+0x690/0x690 [ 1500.573681] ? trace_hardirqs_on+0x5b/0x180 [ 1500.574330] ? kasan_unpoison_shadow+0x33/0x50 [ 1500.575007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1500.575780] v9fs_mount+0x79/0x8f0 [ 1500.576315] ? v9fs_write_inode+0x60/0x60 [ 1500.576922] legacy_get_tree+0x105/0x220 [ 1500.577524] vfs_get_tree+0x8e/0x300 [ 1500.578080] path_mount+0x1429/0x2120 [ 1500.578649] ? strncpy_from_user+0x9e/0x470 [ 1500.579286] ? finish_automount+0xa90/0xa90 [ 1500.579927] ? getname_flags.part.0+0x1dd/0x4f0 [ 1500.580606] ? _copy_from_user+0xfb/0x1b0 [ 1500.581245] __x64_sys_mount+0x282/0x300 [ 1500.581846] ? copy_mnt_ns+0xa00/0xa00 [ 1500.582427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1500.583188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1500.583953] do_syscall_64+0x33/0x40 [ 1500.584502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1500.585249] RIP: 0033:0x7f0377362b19 [ 1500.585787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.588420] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1500.589526] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1500.590561] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1500.591595] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1500.592626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1500.593653] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:07:36 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 97) 11:07:36 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:36 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:07:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:07:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) 11:07:36 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1b8, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x19a, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xa2, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:07:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(0xffffffffffffffff, r0) 11:07:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(0xffffffffffffffff, r0) [ 1500.627455] FAULT_INJECTION: forcing a failure. [ 1500.627455] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.629134] CPU: 0 PID: 27523 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1500.630133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1500.631326] Call Trace: [ 1500.631721] dump_stack+0x107/0x167 [ 1500.632256] should_fail.cold+0x5/0xa [ 1500.632813] ? create_object.isra.0+0x3a/0xa20 [ 1500.633477] should_failslab+0x5/0x20 [ 1500.634034] kmem_cache_alloc+0x5b/0x310 [ 1500.634630] create_object.isra.0+0x3a/0xa20 [ 1500.635277] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1500.636032] __kmalloc_track_caller+0x177/0x370 [ 1500.636706] ? strndup_user+0x74/0xe0 [ 1500.637266] memdup_user+0x22/0xd0 [ 1500.637786] strndup_user+0x74/0xe0 [ 1500.638315] __x64_sys_mount+0x133/0x300 [ 1500.638905] ? copy_mnt_ns+0xa00/0xa00 [ 1500.639474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1500.640244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1500.640991] do_syscall_64+0x33/0x40 [ 1500.641530] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1500.642273] RIP: 0033:0x7f93ecc32b19 [ 1500.642813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.645442] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1500.646538] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1500.647564] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1500.648605] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 11:07:36 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1b8, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x19a, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xa2, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1500.649634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.650779] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 [ 1500.689159] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1500.689964] CPU: 1 PID: 27509 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1500.690727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1500.691645] Call Trace: [ 1500.691950] dump_stack+0x107/0x167 [ 1500.692363] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1500.692956] p9_client_create+0xc2b/0x11c0 [ 1500.693441] ? p9_client_flush+0x430/0x430 [ 1500.693914] ? trace_hardirqs_on+0x5b/0x180 [ 1500.694400] ? lockdep_init_map_type+0x2c7/0x780 [ 1500.694835] ? __raw_spin_lock_init+0x36/0x110 [ 1500.695350] v9fs_session_init+0x1dd/0x1680 [ 1500.695747] ? lock_release+0x680/0x680 [ 1500.696202] ? kmem_cache_alloc_trace+0x151/0x320 [ 1500.696603] ? v9fs_show_options+0x690/0x690 [ 1500.697107] ? trace_hardirqs_on+0x5b/0x180 [ 1500.697465] ? kasan_unpoison_shadow+0x33/0x50 [ 1500.697974] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1500.698428] v9fs_mount+0x79/0x8f0 [ 1500.698828] ? v9fs_write_inode+0x60/0x60 [ 1500.699173] legacy_get_tree+0x105/0x220 [ 1500.699644] vfs_get_tree+0x8e/0x300 [ 1500.700055] path_mount+0x1429/0x2120 [ 1500.700485] ? strncpy_from_user+0x9e/0x470 [ 1500.700965] ? finish_automount+0xa90/0xa90 [ 1500.701440] ? getname_flags.part.0+0x1dd/0x4f0 [ 1500.701824] ? _copy_from_user+0xfb/0x1b0 [ 1500.702287] __x64_sys_mount+0x282/0x300 [ 1500.702620] ? copy_mnt_ns+0xa00/0xa00 [ 1500.703059] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1500.703637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1500.704197] do_syscall_64+0x33/0x40 [ 1500.704606] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1500.705025] RIP: 0033:0x7f0377362b19 [ 1500.705430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.707404] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1500.708238] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1500.709020] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1500.709799] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1500.710570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1500.711354] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:07:36 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:07:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(0xffffffffffffffff, r0) 11:07:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) 11:07:36 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) [ 1500.852495] FAULT_INJECTION: forcing a failure. [ 1500.852495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.854500] CPU: 0 PID: 27561 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1500.855556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1500.856829] Call Trace: [ 1500.857245] dump_stack+0x107/0x167 [ 1500.857811] should_fail.cold+0x5/0xa [ 1500.858414] _copy_from_user+0x2e/0x1b0 [ 1500.859038] memdup_user+0x65/0xd0 [ 1500.859605] strndup_user+0x74/0xe0 [ 1500.860168] __x64_sys_mount+0x133/0x300 [ 1500.860790] ? copy_mnt_ns+0xa00/0xa00 [ 1500.861396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1500.862195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1500.862987] do_syscall_64+0x33/0x40 [ 1500.863558] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1500.864352] RIP: 0033:0x7f93ecc32b19 [ 1500.864924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.867731] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1500.868899] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1500.869985] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1500.871079] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1500.872179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.873269] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:07:49 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1b8, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x19a, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xa2, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:07:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, 0xffffffffffffffff) 11:07:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) [ 1513.998188] FAULT_INJECTION: forcing a failure. [ 1513.998188] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.999966] CPU: 0 PID: 27655 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1514.000993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1514.002197] Call Trace: [ 1514.002594] dump_stack+0x107/0x167 [ 1514.003143] should_fail.cold+0x5/0xa [ 1514.003709] ? copy_mount_options+0x55/0x180 [ 1514.004378] should_failslab+0x5/0x20 [ 1514.004944] kmem_cache_alloc_trace+0x55/0x320 [ 1514.005620] ? _copy_from_user+0xfb/0x1b0 [ 1514.006239] copy_mount_options+0x55/0x180 [ 1514.006860] __x64_sys_mount+0x1a8/0x300 [ 1514.007458] ? copy_mnt_ns+0xa00/0xa00 [ 1514.008049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1514.008801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1514.009567] do_syscall_64+0x33/0x40 [ 1514.010116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1514.010876] RIP: 0033:0x7f93ecc32b19 [ 1514.011431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1514.014230] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1514.015340] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1514.016395] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1514.017445] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1514.018482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.019520] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:07:49 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 98) 11:07:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:07:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:49 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) [ 1514.038570] FAULT_INJECTION: forcing a failure. [ 1514.038570] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.039635] CPU: 1 PID: 27660 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1514.040266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1514.040994] Call Trace: [ 1514.041240] dump_stack+0x107/0x167 [ 1514.041575] should_fail.cold+0x5/0xa [ 1514.041921] ? create_object.isra.0+0x3a/0xa20 [ 1514.042332] should_failslab+0x5/0x20 [ 1514.042677] kmem_cache_alloc+0x5b/0x310 [ 1514.043048] ? __lockdep_reset_lock+0x180/0x180 [ 1514.043466] create_object.isra.0+0x3a/0xa20 [ 1514.043868] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1514.044323] kmem_cache_alloc+0x159/0x310 [ 1514.044702] __kernfs_new_node+0xd4/0x860 [ 1514.045078] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1514.045506] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1514.045947] ? wait_for_completion_io+0x270/0x270 [ 1514.046379] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1514.046852] kernfs_new_node+0x18d/0x250 [ 1514.047221] __kernfs_create_file+0x51/0x350 [ 1514.047619] sysfs_add_file_mode_ns+0x221/0x560 [ 1514.048053] internal_create_group+0x324/0xb30 [ 1514.048469] ? sysfs_remove_group+0x170/0x170 [ 1514.048871] ? kernfs_name_hash+0xe7/0x110 [ 1514.049254] ? kernfs_find_ns+0x256/0x380 [ 1514.049637] sysfs_slab_add+0x188/0x200 [ 1514.049997] __kmem_cache_create+0x3db/0x520 [ 1514.050397] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1514.050850] p9_client_create+0xc2b/0x11c0 [ 1514.051234] ? p9_client_flush+0x430/0x430 [ 1514.051611] ? trace_hardirqs_on+0x5b/0x180 [ 1514.052009] ? lockdep_init_map_type+0x2c7/0x780 [ 1514.052434] ? __raw_spin_lock_init+0x36/0x110 [ 1514.052853] v9fs_session_init+0x1dd/0x1680 [ 1514.053241] ? lock_release+0x680/0x680 [ 1514.053607] ? kmem_cache_alloc_trace+0x151/0x320 [ 1514.054034] ? v9fs_show_options+0x690/0x690 [ 1514.054441] ? trace_hardirqs_on+0x5b/0x180 [ 1514.054835] ? kasan_unpoison_shadow+0x33/0x50 [ 1514.055242] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1514.055704] v9fs_mount+0x79/0x8f0 [ 1514.056037] ? v9fs_write_inode+0x60/0x60 [ 1514.056406] legacy_get_tree+0x105/0x220 [ 1514.056772] vfs_get_tree+0x8e/0x300 [ 1514.057112] path_mount+0x1429/0x2120 [ 1514.057458] ? strncpy_from_user+0x9e/0x470 [ 1514.057844] ? finish_automount+0xa90/0xa90 [ 1514.058229] ? getname_flags.part.0+0x1dd/0x4f0 [ 1514.058647] ? _copy_from_user+0xfb/0x1b0 [ 1514.059022] __x64_sys_mount+0x282/0x300 [ 1514.059387] ? copy_mnt_ns+0xa00/0xa00 [ 1514.059746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1514.060213] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1514.060669] do_syscall_64+0x33/0x40 [ 1514.061000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1514.061451] RIP: 0033:0x7f0377362b19 [ 1514.061788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1514.063383] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1514.064066] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1514.064696] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1514.065326] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1514.065956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1514.066587] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:07:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, 0xffffffffffffffff) 11:07:50 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:07:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, 0xffffffffffffffff) 11:07:50 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) 11:07:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1514.232829] FAULT_INJECTION: forcing a failure. [ 1514.232829] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.234492] CPU: 0 PID: 27780 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1514.235489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1514.236674] Call Trace: [ 1514.237066] dump_stack+0x107/0x167 [ 1514.237596] should_fail.cold+0x5/0xa [ 1514.238141] ? create_object.isra.0+0x3a/0xa20 [ 1514.238799] should_failslab+0x5/0x20 [ 1514.239346] kmem_cache_alloc+0x5b/0x310 [ 1514.239954] create_object.isra.0+0x3a/0xa20 [ 1514.240590] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1514.241320] kmem_cache_alloc_trace+0x151/0x320 [ 1514.242005] copy_mount_options+0x55/0x180 [ 1514.242613] __x64_sys_mount+0x1a8/0x300 [ 1514.243195] ? copy_mnt_ns+0xa00/0xa00 [ 1514.243775] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1514.244540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1514.245288] do_syscall_64+0x33/0x40 [ 1514.245829] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1514.246556] RIP: 0033:0x7f93ecc32b19 [ 1514.247094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1514.249696] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1514.250787] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1514.251927] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1514.252949] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1514.253952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.254955] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:07:50 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d0, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1b2, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xbc, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:07:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:07:50 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:07:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:07:50 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(0xffffffffffffffff, r0) 11:07:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 99) 11:07:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:07:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) [ 1514.506987] FAULT_INJECTION: forcing a failure. [ 1514.506987] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.508728] CPU: 0 PID: 27891 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1514.509717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1514.510899] Call Trace: [ 1514.511296] dump_stack+0x107/0x167 [ 1514.511854] should_fail.cold+0x5/0xa [ 1514.512418] ? __kernfs_new_node+0xd4/0x860 [ 1514.513054] should_failslab+0x5/0x20 [ 1514.513611] kmem_cache_alloc+0x5b/0x310 [ 1514.514217] __kernfs_new_node+0xd4/0x860 [ 1514.514837] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1514.515646] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1514.516368] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1514.517087] ? wait_for_completion_io+0x270/0x270 [ 1514.517789] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1514.518569] kernfs_new_node+0x18d/0x250 [ 1514.519177] __kernfs_create_file+0x51/0x350 [ 1514.519836] sysfs_add_file_mode_ns+0x221/0x560 [ 1514.520538] internal_create_group+0x324/0xb30 [ 1514.521226] ? sysfs_remove_group+0x170/0x170 [ 1514.521871] ? kernfs_name_hash+0xe7/0x110 [ 1514.522520] ? kernfs_find_ns+0x256/0x380 [ 1514.523146] sysfs_slab_add+0x188/0x200 [ 1514.523748] __kmem_cache_create+0x3db/0x520 [ 1514.524403] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1514.525143] p9_client_create+0xc2b/0x11c0 [ 1514.525787] ? p9_client_flush+0x430/0x430 [ 1514.526414] ? trace_hardirqs_on+0x5b/0x180 [ 1514.527046] ? lockdep_init_map_type+0x2c7/0x780 [ 1514.527763] ? __raw_spin_lock_init+0x36/0x110 [ 1514.528466] v9fs_session_init+0x1dd/0x1680 [ 1514.529098] ? lock_release+0x680/0x680 [ 1514.529702] ? kmem_cache_alloc_trace+0x151/0x320 [ 1514.530402] ? v9fs_show_options+0x690/0x690 [ 1514.531075] ? trace_hardirqs_on+0x5b/0x180 [ 1514.531722] ? kasan_unpoison_shadow+0x33/0x50 [ 1514.532421] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1514.533172] v9fs_mount+0x79/0x8f0 [ 1514.533713] ? v9fs_write_inode+0x60/0x60 [ 1514.534332] legacy_get_tree+0x105/0x220 [ 1514.534939] vfs_get_tree+0x8e/0x300 [ 1514.535492] path_mount+0x1429/0x2120 [ 1514.536085] ? strncpy_from_user+0x9e/0x470 [ 1514.536718] ? finish_automount+0xa90/0xa90 [ 1514.537362] ? getname_flags.part.0+0x1dd/0x4f0 [ 1514.538040] ? _copy_from_user+0xfb/0x1b0 [ 1514.538669] __x64_sys_mount+0x282/0x300 [ 1514.539270] ? copy_mnt_ns+0xa00/0xa00 [ 1514.539867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1514.540653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1514.541410] do_syscall_64+0x33/0x40 [ 1514.541968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1514.542710] RIP: 0033:0x7f0377362b19 [ 1514.543271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1514.545893] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1514.547038] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1514.548103] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1514.549166] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1514.550225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1514.551283] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 [ 1514.601477] kmem_cache_create(9p-fcall-cache) failed with error -12 [ 1514.602502] CPU: 0 PID: 27891 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1514.603524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1514.604749] Call Trace: [ 1514.605153] dump_stack+0x107/0x167 [ 1514.605706] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1514.606503] p9_client_create+0xc2b/0x11c0 [ 1514.607160] ? p9_client_flush+0x430/0x430 [ 1514.607807] ? trace_hardirqs_on+0x5b/0x180 [ 1514.608458] ? lockdep_init_map_type+0x2c7/0x780 [ 1514.609182] ? __raw_spin_lock_init+0x36/0x110 [ 1514.609879] v9fs_session_init+0x1dd/0x1680 [ 1514.610518] ? lock_release+0x680/0x680 [ 1514.611133] ? kmem_cache_alloc_trace+0x151/0x320 [ 1514.611850] ? v9fs_show_options+0x690/0x690 [ 1514.612533] ? trace_hardirqs_on+0x5b/0x180 [ 1514.613170] ? kasan_unpoison_shadow+0x33/0x50 [ 1514.613859] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1514.614604] v9fs_mount+0x79/0x8f0 [ 1514.615150] ? v9fs_write_inode+0x60/0x60 [ 1514.615773] legacy_get_tree+0x105/0x220 [ 1514.616385] vfs_get_tree+0x8e/0x300 [ 1514.616937] path_mount+0x1429/0x2120 [ 1514.617526] ? strncpy_from_user+0x9e/0x470 [ 1514.618166] ? finish_automount+0xa90/0xa90 [ 1514.618814] ? getname_flags.part.0+0x1dd/0x4f0 [ 1514.619496] ? _copy_from_user+0xfb/0x1b0 [ 1514.620161] __x64_sys_mount+0x282/0x300 [ 1514.620754] ? copy_mnt_ns+0xa00/0xa00 [ 1514.621350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1514.622110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1514.622884] do_syscall_64+0x33/0x40 [ 1514.623448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1514.624224] RIP: 0033:0x7f0377362b19 [ 1514.624778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1514.627449] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1514.628578] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1514.629622] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1514.630669] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1514.631715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1514.632781] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:08:04 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) 11:08:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 100) 11:08:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:08:04 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d0, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1b2, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xbc, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:08:04 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(0xffffffffffffffff, r0) 11:08:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:08:04 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:08:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1528.170005] FAULT_INJECTION: forcing a failure. [ 1528.170005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1528.171829] CPU: 0 PID: 27922 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1528.172841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1528.174043] Call Trace: [ 1528.174439] dump_stack+0x107/0x167 [ 1528.174980] should_fail.cold+0x5/0xa [ 1528.175553] _copy_from_user+0x2e/0x1b0 [ 1528.176156] copy_mount_options+0x76/0x180 [ 1528.176786] __x64_sys_mount+0x1a8/0x300 [ 1528.177382] ? copy_mnt_ns+0xa00/0xa00 [ 1528.177960] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1528.178727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1528.179489] do_syscall_64+0x33/0x40 [ 1528.180044] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1528.180790] RIP: 0033:0x7f93ecc32b19 [ 1528.181331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1528.183982] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1528.185085] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1528.186113] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1528.187142] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1528.188177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.189210] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:08:04 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(0xffffffffffffffff, r0) [ 1528.250028] FAULT_INJECTION: forcing a failure. [ 1528.250028] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.251881] CPU: 0 PID: 27929 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1528.252915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1528.254124] Call Trace: [ 1528.254526] dump_stack+0x107/0x167 [ 1528.255080] should_fail.cold+0x5/0xa [ 1528.255654] ? create_object.isra.0+0x3a/0xa20 [ 1528.256342] should_failslab+0x5/0x20 [ 1528.256911] kmem_cache_alloc+0x5b/0x310 [ 1528.257514] ? __lockdep_reset_lock+0x180/0x180 [ 1528.258223] create_object.isra.0+0x3a/0xa20 [ 1528.258877] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1528.259643] kmem_cache_alloc+0x159/0x310 [ 1528.260289] __kernfs_new_node+0xd4/0x860 [ 1528.260925] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1528.261644] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1528.262359] ? rb_insert_color+0x72/0x7b0 [ 1528.262986] ? wait_for_completion_io+0x270/0x270 [ 1528.263709] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1528.264509] kernfs_new_node+0x18d/0x250 [ 1528.265132] __kernfs_create_file+0x51/0x350 [ 1528.265800] sysfs_add_file_mode_ns+0x221/0x560 [ 1528.266517] internal_create_group+0x324/0xb30 [ 1528.267219] ? sysfs_remove_group+0x170/0x170 [ 1528.267888] ? kernfs_name_hash+0xe7/0x110 [ 1528.268539] ? kernfs_find_ns+0x256/0x380 [ 1528.269179] sysfs_slab_add+0x188/0x200 [ 1528.269782] __kmem_cache_create+0x3db/0x520 [ 1528.270449] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1528.271213] p9_client_create+0xc2b/0x11c0 [ 1528.271874] ? p9_client_flush+0x430/0x430 [ 1528.272524] ? trace_hardirqs_on+0x5b/0x180 [ 1528.273170] ? lockdep_init_map_type+0x2c7/0x780 [ 1528.273886] ? __raw_spin_lock_init+0x36/0x110 [ 1528.274582] v9fs_session_init+0x1dd/0x1680 [ 1528.275235] ? lock_release+0x680/0x680 [ 1528.275842] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1528.276642] ? trace_hardirqs_on+0x5b/0x180 [ 1528.277296] ? v9fs_show_options+0x690/0x690 [ 1528.277980] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1528.278737] ? kasan_unpoison_shadow+0x33/0x50 [ 1528.279416] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1528.280191] v9fs_mount+0x79/0x8f0 [ 1528.280732] ? v9fs_write_inode+0x60/0x60 [ 1528.281352] legacy_get_tree+0x105/0x220 [ 1528.281963] vfs_get_tree+0x8e/0x300 [ 1528.282525] path_mount+0x1429/0x2120 [ 1528.283107] ? strncpy_from_user+0x9e/0x470 [ 1528.283758] ? finish_automount+0xa90/0xa90 [ 1528.284406] ? getname_flags.part.0+0x1dd/0x4f0 [ 1528.285095] ? _copy_from_user+0xfb/0x1b0 [ 1528.285736] __x64_sys_mount+0x282/0x300 [ 1528.286339] ? copy_mnt_ns+0xa00/0xa00 [ 1528.286931] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1528.287706] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1528.288490] do_syscall_64+0x33/0x40 [ 1528.289048] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1528.289804] RIP: 0033:0x7f0377362b19 [ 1528.290363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1528.293027] RSP: 002b:00007f03748d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1528.294152] RAX: ffffffffffffffda RBX: 00007f0377475f60 RCX: 00007f0377362b19 [ 1528.295191] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1528.296244] RBP: 00007f03748d81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1528.297286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1528.298328] R13: 00007ffce596735f R14: 00007f03748d8300 R15: 0000000000022000 11:08:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:08:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:08:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:08:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) 11:08:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, 0xffffffffffffffff) 11:08:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:08:17 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:08:17 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d0, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1b2, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xbc, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1541.873839] FAULT_INJECTION: forcing a failure. [ 1541.873839] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.874942] CPU: 1 PID: 28053 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1541.875575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1541.876339] Call Trace: [ 1541.876597] dump_stack+0x107/0x167 [ 1541.876940] should_fail.cold+0x5/0xa [ 1541.877299] ? getname_flags.part.0+0x50/0x4f0 [ 1541.877733] should_failslab+0x5/0x20 [ 1541.878094] kmem_cache_alloc+0x5b/0x310 [ 1541.878479] getname_flags.part.0+0x50/0x4f0 [ 1541.878896] ? _copy_from_user+0xfb/0x1b0 [ 1541.879283] user_path_at_empty+0xa1/0x100 [ 1541.879683] __x64_sys_mount+0x1e9/0x300 [ 1541.880073] ? copy_mnt_ns+0xa00/0xa00 [ 1541.880445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1541.880933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1541.881416] do_syscall_64+0x33/0x40 [ 1541.881763] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1541.882236] RIP: 0033:0x7f93ecc32b19 [ 1541.882586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1541.884297] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1541.885010] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1541.885680] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1541.886336] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1541.886999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.887662] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:08:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, 0xffffffffffffffff) 11:08:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) 11:08:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) [ 1542.006094] FAULT_INJECTION: forcing a failure. [ 1542.006094] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.007151] CPU: 1 PID: 28094 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1542.007750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1542.008482] Call Trace: [ 1542.008726] dump_stack+0x107/0x167 [ 1542.009045] should_fail.cold+0x5/0xa [ 1542.009388] ? create_object.isra.0+0x3a/0xa20 [ 1542.009796] should_failslab+0x5/0x20 [ 1542.010136] kmem_cache_alloc+0x5b/0x310 [ 1542.010497] create_object.isra.0+0x3a/0xa20 [ 1542.010889] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1542.011340] kmem_cache_alloc+0x159/0x310 [ 1542.011712] getname_flags.part.0+0x50/0x4f0 [ 1542.012107] ? _copy_from_user+0xfb/0x1b0 [ 1542.012478] user_path_at_empty+0xa1/0x100 [ 1542.012856] __x64_sys_mount+0x1e9/0x300 [ 1542.013220] ? copy_mnt_ns+0xa00/0xa00 [ 1542.013577] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1542.014043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1542.014507] do_syscall_64+0x33/0x40 [ 1542.014839] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1542.015292] RIP: 0033:0x7f93ecc32b19 [ 1542.015625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1542.017254] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1542.017932] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1542.018585] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1542.019235] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1542.019862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.020509] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 [ 1542.062729] FAULT_INJECTION: forcing a failure. [ 1542.062729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1542.063802] CPU: 1 PID: 28128 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1542.064422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1542.065133] Call Trace: [ 1542.065370] dump_stack+0x107/0x167 [ 1542.065689] should_fail.cold+0x5/0xa [ 1542.066027] strncpy_from_user+0x34/0x470 [ 1542.066389] getname_flags.part.0+0x95/0x4f0 [ 1542.066771] ? _copy_from_user+0xfb/0x1b0 [ 1542.067132] user_path_at_empty+0xa1/0x100 [ 1542.067504] __x64_sys_mount+0x1e9/0x300 [ 1542.067856] ? copy_mnt_ns+0xa00/0xa00 [ 1542.068208] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1542.068663] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1542.069109] do_syscall_64+0x33/0x40 [ 1542.069436] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1542.069877] RIP: 0033:0x7f93ecc32b19 [ 1542.070200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1542.071792] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1542.072476] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1542.073103] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1542.073728] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1542.074339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.074948] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:08:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, 0xffffffffffffffff) 11:08:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) 11:08:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 11:08:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:08:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:08:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:08:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:08:18 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e0, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1c2, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xc9, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:08:32 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) 11:08:32 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e0, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1c2, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xc9, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:08:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:08:32 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:08:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:08:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:08:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) 11:08:32 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) [ 1556.615007] FAULT_INJECTION: forcing a failure. [ 1556.615007] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.616742] CPU: 0 PID: 28204 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1556.617756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1556.618966] Call Trace: [ 1556.619364] dump_stack+0x107/0x167 [ 1556.619904] should_fail.cold+0x5/0xa [ 1556.620474] ? alloc_fs_context+0x57/0x840 [ 1556.621098] should_failslab+0x5/0x20 [ 1556.621660] kmem_cache_alloc_trace+0x55/0x320 [ 1556.622337] alloc_fs_context+0x57/0x840 [ 1556.622944] path_mount+0xaa3/0x2120 [ 1556.623506] ? strncpy_from_user+0x9e/0x470 [ 1556.624144] ? finish_automount+0xa90/0xa90 [ 1556.624787] ? getname_flags.part.0+0x1dd/0x4f0 [ 1556.625475] ? _copy_from_user+0xfb/0x1b0 [ 1556.626104] __x64_sys_mount+0x282/0x300 [ 1556.626699] ? copy_mnt_ns+0xa00/0xa00 [ 1556.627277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1556.628048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1556.628816] do_syscall_64+0x33/0x40 [ 1556.629365] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1556.630111] RIP: 0033:0x7f93ecc32b19 [ 1556.630656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1556.633313] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1556.634431] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1556.635478] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1556.636521] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1556.637562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1556.638606] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:08:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) 11:08:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:08:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:08:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:08:32 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) 11:08:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) 11:08:32 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e0, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1c2, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xc9, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:08:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1556.922934] FAULT_INJECTION: forcing a failure. [ 1556.922934] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.924754] CPU: 0 PID: 28384 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1556.925783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1556.926997] Call Trace: [ 1556.927400] dump_stack+0x107/0x167 [ 1556.927947] should_fail.cold+0x5/0xa [ 1556.928524] ? create_object.isra.0+0x3a/0xa20 [ 1556.929207] should_failslab+0x5/0x20 [ 1556.929777] kmem_cache_alloc+0x5b/0x310 [ 1556.930387] create_object.isra.0+0x3a/0xa20 [ 1556.931038] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1556.931796] kmem_cache_alloc_trace+0x151/0x320 [ 1556.932521] alloc_fs_context+0x57/0x840 [ 1556.933155] path_mount+0xaa3/0x2120 [ 1556.933731] ? strncpy_from_user+0x9e/0x470 [ 1556.934396] ? finish_automount+0xa90/0xa90 [ 1556.935057] ? getname_flags.part.0+0x1dd/0x4f0 [ 1556.935765] ? _copy_from_user+0xfb/0x1b0 [ 1556.936421] __x64_sys_mount+0x282/0x300 [ 1556.937044] ? copy_mnt_ns+0xa00/0xa00 [ 1556.937652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1556.938460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1556.939247] do_syscall_64+0x33/0x40 [ 1556.939817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1556.940607] RIP: 0033:0x7f93ecc32b19 [ 1556.941182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1556.943959] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1556.945126] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1556.946215] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1556.947301] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1556.948398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1556.949489] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:08:47 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:08:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:08:47 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1c6, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd0, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:08:47 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:08:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:08:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 11:08:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:08:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) [ 1571.267582] FAULT_INJECTION: forcing a failure. [ 1571.267582] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.269085] CPU: 1 PID: 28547 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1571.269930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.270954] Call Trace: [ 1571.271288] dump_stack+0x107/0x167 [ 1571.271738] should_fail.cold+0x5/0xa [ 1571.272218] ? legacy_init_fs_context+0x44/0xe0 [ 1571.272796] should_failslab+0x5/0x20 [ 1571.273266] kmem_cache_alloc_trace+0x55/0x320 [ 1571.273830] ? lockdep_init_map_type+0x2c7/0x780 [ 1571.274418] legacy_init_fs_context+0x44/0xe0 [ 1571.274973] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1571.275581] alloc_fs_context+0x4fd/0x840 [ 1571.276093] path_mount+0xaa3/0x2120 [ 1571.276576] ? strncpy_from_user+0x9e/0x470 [ 1571.277102] ? finish_automount+0xa90/0xa90 [ 1571.277630] ? getname_flags.part.0+0x1dd/0x4f0 [ 1571.278195] ? _copy_from_user+0xfb/0x1b0 [ 1571.278709] __x64_sys_mount+0x282/0x300 [ 1571.279210] ? copy_mnt_ns+0xa00/0xa00 [ 1571.279692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1571.280329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1571.280974] do_syscall_64+0x33/0x40 [ 1571.281431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.282054] RIP: 0033:0x7f93ecc32b19 [ 1571.282510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1571.284724] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1571.285662] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1571.286525] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1571.287384] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1571.288258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1571.289139] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:08:47 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:08:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:08:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 11:08:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:08:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:08:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) 11:08:47 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) (fail_nth: 1) 11:08:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) [ 1571.512833] FAULT_INJECTION: forcing a failure. [ 1571.512833] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.514132] CPU: 1 PID: 28664 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1571.514878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.515763] Call Trace: [ 1571.516059] dump_stack+0x107/0x167 [ 1571.516469] should_fail.cold+0x5/0xa [ 1571.516882] ? create_object.isra.0+0x3a/0xa20 [ 1571.517374] should_failslab+0x5/0x20 [ 1571.517780] kmem_cache_alloc+0x5b/0x310 [ 1571.518211] ? create_object.isra.0+0x3ad/0xa20 [ 1571.518714] create_object.isra.0+0x3a/0xa20 [ 1571.519184] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1571.519736] __kmalloc_node+0x1ae/0x420 [ 1571.520172] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1571.520731] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1571.521301] ? trace_hardirqs_on+0x5b/0x180 [ 1571.521785] kmem_cache_alloc_trace+0x169/0x320 [ 1571.522310] alloc_fs_context+0x57/0x840 [ 1571.522758] path_mount+0xaa3/0x2120 [ 1571.523167] ? strncpy_from_user+0x9e/0x470 [ 1571.523626] ? finish_automount+0xa90/0xa90 [ 1571.524095] ? getname_flags.part.0+0x1dd/0x4f0 [ 1571.524603] ? _copy_from_user+0xfb/0x1b0 [ 1571.525057] __x64_sys_mount+0x282/0x300 [ 1571.525490] ? copy_mnt_ns+0xa00/0xa00 [ 1571.525921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1571.526478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1571.527026] do_syscall_64+0x33/0x40 [ 1571.527423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.527961] RIP: 0033:0x7f93ecc32b19 [ 1571.528356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1571.530277] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1571.531093] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1571.531863] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1571.532616] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1571.533364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1571.534110] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:08:47 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1c6, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd0, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:08:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) [ 1571.581906] FAULT_INJECTION: forcing a failure. [ 1571.581906] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.583377] CPU: 1 PID: 28666 Comm: syz-executor.7 Not tainted 5.10.222 #1 [ 1571.584104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.584977] Call Trace: [ 1571.585263] dump_stack+0x107/0x167 [ 1571.585655] should_fail.cold+0x5/0xa [ 1571.586056] ? dst_alloc+0x9e/0x5d0 [ 1571.586440] should_failslab+0x5/0x20 [ 1571.586836] kmem_cache_alloc+0x5b/0x310 [ 1571.587275] dst_alloc+0x9e/0x5d0 [ 1571.587654] rt_dst_alloc+0x73/0x440 [ 1571.588054] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 1571.588627] ip_route_output_key_hash+0x18d/0x340 [ 1571.589130] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 1571.589716] ? lock_chain_count+0x20/0x20 [ 1571.590157] ? ip_options_build+0x780/0x780 [ 1571.590619] ip_route_output_flow+0x23/0x150 [ 1571.591086] ip_send_unicast_reply+0x560/0xe10 [ 1571.591576] ? ip_make_skb+0x2a0/0x2a0 [ 1571.591991] ? mark_held_locks+0x9e/0xe0 [ 1571.592438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1571.593017] ? lock_release+0x680/0x680 [ 1571.593459] ? inet_csk_destroy_sock+0x2b8/0x450 [ 1571.593971] tcp_v4_send_reset+0xf04/0x1ff0 [ 1571.594432] ? tcp_add_backlog+0x1a00/0x1a00 [ 1571.594902] ? find_held_lock+0x2c/0x110 [ 1571.595337] ? __release_sock+0xd0/0x3b0 [ 1571.595771] ? mark_held_locks+0x9e/0xe0 [ 1571.596206] tcp_v4_do_rcv+0x758/0x940 [ 1571.596632] __release_sock+0x139/0x3b0 [ 1571.597065] __tcp_close+0x6dc/0x10c0 [ 1571.597467] ? trace_hardirqs_on+0x5b/0x180 [ 1571.597926] tcp_close+0x24/0x120 [ 1571.598295] inet_release+0xe9/0x1f0 [ 1571.598694] __sock_release+0xd2/0x290 [ 1571.599109] sock_close+0x18/0x20 [ 1571.599479] __fput+0x285/0x9f0 [ 1571.599825] ? __sock_release+0x290/0x290 [ 1571.600268] task_work_run+0xe2/0x1a0 [ 1571.600688] exit_to_user_mode_prepare+0x186/0x190 [ 1571.601199] syscall_exit_to_user_mode+0x38/0x1d0 [ 1571.601692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.602222] RIP: 0033:0x7efc28c67b19 [ 1571.602609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1571.604466] RSP: 002b:00007efc261dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 1571.605245] RAX: 0000000000000004 RBX: 00007efc28d7af60 RCX: 00007efc28c67b19 [ 1571.605967] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1571.606696] RBP: 00007efc261dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1571.607423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1571.608147] R13: 00007fffc2b6367f R14: 00007efc261dd300 R15: 0000000000022000 11:09:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) (fail_nth: 2) 11:09:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) (fail_nth: 1) 11:09:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:09:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) 11:09:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:09:00 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:09:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:09:00 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1c6, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd0, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1585.140739] FAULT_INJECTION: forcing a failure. [ 1585.140739] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.141809] CPU: 0 PID: 28789 Comm: syz-executor.7 Not tainted 5.10.222 #1 [ 1585.142435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1585.143182] Call Trace: [ 1585.143434] dump_stack+0x107/0x167 [ 1585.143688] FAULT_INJECTION: forcing a failure. [ 1585.143688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1585.143775] should_fail.cold+0x5/0xa [ 1585.145858] ? create_object.isra.0+0x3a/0xa20 [ 1585.146282] should_failslab+0x5/0x20 [ 1585.146632] kmem_cache_alloc+0x5b/0x310 [ 1585.147018] create_object.isra.0+0x3a/0xa20 [ 1585.147427] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1585.147899] kmem_cache_alloc+0x159/0x310 [ 1585.148297] dst_alloc+0x9e/0x5d0 [ 1585.148635] rt_dst_alloc+0x73/0x440 [ 1585.148979] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 1585.149471] ip_route_output_key_hash+0x18d/0x340 [ 1585.149917] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 1585.150431] ? lock_chain_count+0x20/0x20 [ 1585.150812] ? ip_options_build+0x780/0x780 [ 1585.151221] ip_route_output_flow+0x23/0x150 [ 1585.151630] ip_send_unicast_reply+0x560/0xe10 [ 1585.152059] ? ip_make_skb+0x2a0/0x2a0 [ 1585.152420] ? mark_held_locks+0x9e/0xe0 [ 1585.152806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1585.153303] ? lock_release+0x680/0x680 [ 1585.153683] ? inet_csk_destroy_sock+0x2b8/0x450 [ 1585.154125] tcp_v4_send_reset+0xf04/0x1ff0 [ 1585.154527] ? tcp_add_backlog+0x1a00/0x1a00 [ 1585.154935] ? find_held_lock+0x2c/0x110 [ 1585.155314] ? __release_sock+0xd0/0x3b0 [ 1585.155692] ? mark_held_locks+0x9e/0xe0 [ 1585.156077] tcp_v4_do_rcv+0x758/0x940 [ 1585.156436] __release_sock+0x139/0x3b0 [ 1585.156825] __tcp_close+0x6dc/0x10c0 [ 1585.157176] ? trace_hardirqs_on+0x5b/0x180 [ 1585.157572] tcp_close+0x24/0x120 [ 1585.157896] inet_release+0xe9/0x1f0 [ 1585.158242] __sock_release+0xd2/0x290 [ 1585.158599] sock_close+0x18/0x20 [ 1585.158917] __fput+0x285/0x9f0 [ 1585.159221] ? __sock_release+0x290/0x290 [ 1585.159612] task_work_run+0xe2/0x1a0 [ 1585.159974] exit_to_user_mode_prepare+0x186/0x190 [ 1585.160432] syscall_exit_to_user_mode+0x38/0x1d0 [ 1585.160888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1585.161349] RIP: 0033:0x7efc28c67b19 [ 1585.161688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.163327] RSP: 002b:00007efc261dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 1585.164013] RAX: 0000000000000004 RBX: 00007efc28d7af60 RCX: 00007efc28c67b19 [ 1585.164662] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1585.165301] RBP: 00007efc261dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1585.165933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.166567] R13: 00007fffc2b6367f R14: 00007efc261dd300 R15: 0000000000022000 [ 1585.167256] CPU: 1 PID: 28780 Comm: syz-executor.1 Not tainted 5.10.222 #1 [ 1585.168299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1585.169525] Call Trace: [ 1585.169936] dump_stack+0x107/0x167 [ 1585.170487] should_fail.cold+0x5/0xa [ 1585.171074] _copy_from_user+0x2e/0x1b0 [ 1585.171684] move_addr_to_kernel.part.0+0x31/0x110 [ 1585.172449] __sys_connect+0xda/0x1a0 [ 1585.173056] ? __sys_connect_file+0x1a0/0x1a0 [ 1585.173770] ? rcu_read_lock_any_held+0x75/0xa0 [ 1585.174472] ? vfs_write+0x354/0xb10 [ 1585.175040] ? fput_many+0x2f/0x1a0 [ 1585.175590] ? ksys_write+0x1a9/0x260 [ 1585.176163] ? __ia32_sys_read+0xb0/0xb0 [ 1585.176799] __x64_sys_connect+0x6f/0xb0 [ 1585.177403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1585.178170] do_syscall_64+0x33/0x40 [ 1585.178715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1585.179473] RIP: 0033:0x7f03ebbdcb19 [ 1585.180032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:09:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1585.182755] RSP: 002b:00007f03e9152188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 11:09:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) [ 1585.184012] RAX: ffffffffffffffda RBX: 00007f03ebceff60 RCX: 00007f03ebbdcb19 [ 1585.185101] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004 [ 1585.186147] RBP: 00007f03e91521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1585.187160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.188176] R13: 00007ffda480e96f R14: 00007f03e9152300 R15: 0000000000022000 [ 1585.208850] FAULT_INJECTION: forcing a failure. [ 1585.208850] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.209971] CPU: 0 PID: 28796 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1585.210576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1585.211304] Call Trace: [ 1585.211545] dump_stack+0x107/0x167 [ 1585.211870] should_fail.cold+0x5/0xa [ 1585.212214] ? v9fs_mount+0x5a/0x8f0 [ 1585.212545] should_failslab+0x5/0x20 [ 1585.212895] kmem_cache_alloc_trace+0x55/0x320 [ 1585.213307] ? v9fs_write_inode+0x60/0x60 [ 1585.213679] v9fs_mount+0x5a/0x8f0 [ 1585.214004] ? v9fs_write_inode+0x60/0x60 [ 1585.214372] legacy_get_tree+0x105/0x220 [ 1585.214732] vfs_get_tree+0x8e/0x300 [ 1585.215066] path_mount+0x1429/0x2120 [ 1585.215412] ? strncpy_from_user+0x9e/0x470 [ 1585.215801] ? finish_automount+0xa90/0xa90 [ 1585.216190] ? getname_flags.part.0+0x1dd/0x4f0 [ 1585.216609] ? _copy_from_user+0xfb/0x1b0 [ 1585.216983] __x64_sys_mount+0x282/0x300 [ 1585.217339] ? copy_mnt_ns+0xa00/0xa00 [ 1585.217691] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1585.218164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1585.218630] do_syscall_64+0x33/0x40 [ 1585.218964] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1585.219421] RIP: 0033:0x7f93ecc32b19 [ 1585.219751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.221349] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1585.222025] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1585.222650] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1585.223267] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1585.223886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1585.224503] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:09:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:09:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:09:17 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:09:17 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e8, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ca, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd3, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742b"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:09:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) (fail_nth: 2) 11:09:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:09:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) (fail_nth: 3) 11:09:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) 11:09:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:09:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1601.511298] FAULT_INJECTION: forcing a failure. [ 1601.511298] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.513037] CPU: 1 PID: 28819 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1601.514008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.515159] Call Trace: [ 1601.515541] dump_stack+0x107/0x167 [ 1601.516058] should_fail.cold+0x5/0xa [ 1601.516595] ? create_object.isra.0+0x3a/0xa20 [ 1601.516831] FAULT_INJECTION: forcing a failure. [ 1601.516831] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.517261] should_failslab+0x5/0x20 [ 1601.517281] kmem_cache_alloc+0x5b/0x310 [ 1601.517303] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1601.517328] create_object.isra.0+0x3a/0xa20 [ 1601.521528] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1601.522260] kmem_cache_alloc_trace+0x151/0x320 [ 1601.522926] ? v9fs_write_inode+0x60/0x60 [ 1601.523510] v9fs_mount+0x5a/0x8f0 [ 1601.524023] ? v9fs_write_inode+0x60/0x60 [ 1601.524605] legacy_get_tree+0x105/0x220 [ 1601.525211] vfs_get_tree+0x8e/0x300 [ 1601.525741] path_mount+0x1429/0x2120 [ 1601.526302] ? strncpy_from_user+0x9e/0x470 [ 1601.526910] ? finish_automount+0xa90/0xa90 [ 1601.527542] ? getname_flags.part.0+0x1dd/0x4f0 [ 1601.528198] ? _copy_from_user+0xfb/0x1b0 [ 1601.528818] __x64_sys_mount+0x282/0x300 [ 1601.529391] ? copy_mnt_ns+0xa00/0xa00 [ 1601.529964] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.530704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1601.531461] do_syscall_64+0x33/0x40 [ 1601.531995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.532736] RIP: 0033:0x7f93ecc32b19 [ 1601.533285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.535905] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1601.536974] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1601.537969] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1601.538966] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1601.539956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1601.540958] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 [ 1601.541988] CPU: 0 PID: 28817 Comm: syz-executor.7 Not tainted 5.10.222 #1 [ 1601.543017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.544223] Call Trace: [ 1601.544631] dump_stack+0x107/0x167 [ 1601.545196] should_fail.cold+0x5/0xa [ 1601.545775] ? __alloc_skb+0x6d/0x5b0 [ 1601.546351] should_failslab+0x5/0x20 [ 1601.546918] kmem_cache_alloc_node+0x55/0x330 [ 1601.547583] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1601.548371] __alloc_skb+0x6d/0x5b0 [ 1601.548940] __ip_append_data+0x2930/0x3310 [ 1601.549618] ? ip_generic_getfrag+0x230/0x230 [ 1601.550309] ? ip_finish_output+0x330/0x330 [ 1601.550957] ? ipv4_mtu+0x1ed/0x2c0 [ 1601.551520] ip_send_unicast_reply+0x86f/0xe10 [ 1601.552228] ? ip_make_skb+0x2a0/0x2a0 [ 1601.552829] ? mark_held_locks+0x9e/0xe0 [ 1601.553448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.554256] ? lock_release+0x680/0x680 [ 1601.554871] ? inet_csk_destroy_sock+0x2b8/0x450 [ 1601.555603] tcp_v4_send_reset+0xf04/0x1ff0 [ 1601.556269] ? tcp_add_backlog+0x1a00/0x1a00 [ 1601.556944] ? find_held_lock+0x2c/0x110 [ 1601.557566] ? __release_sock+0xd0/0x3b0 [ 1601.558186] ? mark_held_locks+0x9e/0xe0 [ 1601.558812] tcp_v4_do_rcv+0x758/0x940 [ 1601.559403] __release_sock+0x139/0x3b0 [ 1601.560020] __tcp_close+0x6dc/0x10c0 [ 1601.560600] ? trace_hardirqs_on+0x5b/0x180 [ 1601.561252] tcp_close+0x24/0x120 [ 1601.561777] inet_release+0xe9/0x1f0 [ 1601.562362] __sock_release+0xd2/0x290 [ 1601.562958] sock_close+0x18/0x20 [ 1601.563483] __fput+0x285/0x9f0 [ 1601.563996] ? __sock_release+0x290/0x290 [ 1601.564633] task_work_run+0xe2/0x1a0 [ 1601.565227] exit_to_user_mode_prepare+0x186/0x190 [ 1601.565959] syscall_exit_to_user_mode+0x38/0x1d0 [ 1601.566680] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.567432] RIP: 0033:0x7efc28c67b19 [ 1601.567992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.570640] RSP: 002b:00007efc261dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 1601.571768] RAX: 0000000000000004 RBX: 00007efc28d7af60 RCX: 00007efc28c67b19 [ 1601.572813] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1601.573849] RBP: 00007efc261dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1601.574889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1601.575931] R13: 00007fffc2b6367f R14: 00007efc261dd300 R15: 0000000000022000 [ 1601.592798] FAULT_INJECTION: forcing a failure. [ 1601.592798] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.594622] CPU: 0 PID: 28860 Comm: syz-executor.1 Not tainted 5.10.222 #1 [ 1601.595640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.596869] Call Trace: [ 1601.597272] dump_stack+0x107/0x167 [ 1601.597829] should_fail.cold+0x5/0xa [ 1601.598408] ? dst_alloc+0x9e/0x5d0 [ 1601.598965] should_failslab+0x5/0x20 [ 1601.599536] kmem_cache_alloc+0x5b/0x310 [ 1601.600167] dst_alloc+0x9e/0x5d0 [ 1601.600711] rt_dst_alloc+0x73/0x440 [ 1601.601292] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 1601.602112] ip_route_output_key_hash+0x18d/0x340 [ 1601.602838] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 1601.603662] ? __lock_acquire+0x1657/0x5b00 [ 1601.604356] tcp_v4_connect+0x7ef/0x1eb0 [ 1601.605022] ? tcp_v4_destroy_sock+0x6a0/0x6a0 [ 1601.605741] __inet_stream_connect+0x8d8/0xe70 [ 1601.606441] ? lock_release+0x680/0x680 [ 1601.607043] ? lock_downgrade+0x6d0/0x6d0 [ 1601.607671] ? inet_init_net+0x590/0x590 [ 1601.608294] ? mark_held_locks+0x9e/0xe0 [ 1601.608930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.609715] ? __local_bh_enable_ip+0x9d/0x100 [ 1601.610416] inet_stream_connect+0x53/0xa0 [ 1601.611054] ? __inet_stream_connect+0xe70/0xe70 [ 1601.611769] __sys_connect_file+0x15b/0x1a0 [ 1601.612430] __sys_connect+0x165/0x1a0 [ 1601.613029] ? __sys_connect_file+0x1a0/0x1a0 [ 1601.613715] ? rcu_read_lock_any_held+0x75/0xa0 [ 1601.614410] ? vfs_write+0x354/0xb10 [ 1601.614979] ? fput_many+0x2f/0x1a0 [ 1601.615537] ? ksys_write+0x1a9/0x260 [ 1601.616117] ? __ia32_sys_read+0xb0/0xb0 [ 1601.616760] __x64_sys_connect+0x6f/0xb0 [ 1601.617376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1601.618149] do_syscall_64+0x33/0x40 [ 1601.618709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.619472] RIP: 0033:0x7f03ebbdcb19 [ 1601.620030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.622728] RSP: 002b:00007f03e9152188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1601.623853] RAX: ffffffffffffffda RBX: 00007f03ebceff60 RCX: 00007f03ebbdcb19 [ 1601.624911] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004 [ 1601.625962] RBP: 00007f03e91521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1601.627013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1601.628065] R13: 00007ffda480e96f R14: 00007f03e9152300 R15: 0000000000022000 11:09:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:09:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:09:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:09:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16) 11:09:17 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:09:17 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e8, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ca, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd3, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742b"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:09:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) (fail_nth: 3) 11:09:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1601.812450] FAULT_INJECTION: forcing a failure. [ 1601.812450] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.814221] CPU: 0 PID: 28938 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1601.815227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.816438] Call Trace: [ 1601.816847] dump_stack+0x107/0x167 [ 1601.817386] should_fail.cold+0x5/0xa [ 1601.817966] should_failslab+0x5/0x20 [ 1601.818536] __kmalloc_track_caller+0x79/0x370 11:09:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) (fail_nth: 4) [ 1601.819205] ? v9fs_session_init+0xa7/0x1680 [ 1601.819938] ? kernel_text_address+0xf2/0x120 [ 1601.820600] kstrdup+0x36/0x70 [ 1601.821080] v9fs_session_init+0xa7/0x1680 [ 1601.821704] ? lock_release+0x680/0x680 [ 1601.822281] ? find_held_lock+0x2c/0x110 [ 1601.822886] ? kmem_cache_alloc_trace+0x151/0x320 [ 1601.823580] ? v9fs_show_options+0x690/0x690 [ 1601.824239] ? trace_hardirqs_on+0x5b/0x180 [ 1601.824875] ? kasan_unpoison_shadow+0x33/0x50 [ 1601.825543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1601.826277] v9fs_mount+0x79/0x8f0 [ 1601.826803] ? v9fs_write_inode+0x60/0x60 [ 1601.827402] legacy_get_tree+0x105/0x220 [ 1601.827999] vfs_get_tree+0x8e/0x300 [ 1601.828533] path_mount+0x1429/0x2120 [ 1601.829101] ? strncpy_from_user+0x9e/0x470 [ 1601.829722] ? finish_automount+0xa90/0xa90 [ 1601.830347] ? getname_flags.part.0+0x1dd/0x4f0 [ 1601.831016] ? _copy_from_user+0xfb/0x1b0 [ 1601.831630] __x64_sys_mount+0x282/0x300 [ 1601.832224] ? copy_mnt_ns+0xa00/0xa00 [ 1601.832797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.833552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1601.834298] do_syscall_64+0x33/0x40 [ 1601.834844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.835583] RIP: 0033:0x7f93ecc32b19 [ 1601.836126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.838770] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1601.839872] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1601.840909] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1601.841933] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1601.842968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1601.844000] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:09:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xe, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1601.879521] FAULT_INJECTION: forcing a failure. [ 1601.879521] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.881201] CPU: 1 PID: 28945 Comm: syz-executor.1 Not tainted 5.10.222 #1 [ 1601.882194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.883430] Call Trace: [ 1601.883816] dump_stack+0x107/0x167 [ 1601.884369] should_fail.cold+0x5/0xa [ 1601.884926] ? create_object.isra.0+0x3a/0xa20 [ 1601.885613] should_failslab+0x5/0x20 [ 1601.886165] kmem_cache_alloc+0x5b/0x310 [ 1601.886761] create_object.isra.0+0x3a/0xa20 [ 1601.887390] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1601.888126] kmem_cache_alloc+0x159/0x310 [ 1601.888742] dst_alloc+0x9e/0x5d0 [ 1601.889268] rt_dst_alloc+0x73/0x440 [ 1601.889812] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 1601.890584] ip_route_output_key_hash+0x18d/0x340 [ 1601.891305] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 1601.892086] ? __lock_acquire+0x1657/0x5b00 [ 1601.892763] tcp_v4_connect+0x7ef/0x1eb0 [ 1601.893413] ? tcp_v4_destroy_sock+0x6a0/0x6a0 [ 1601.894097] __inet_stream_connect+0x8d8/0xe70 [ 1601.894749] ? lock_release+0x680/0x680 [ 1601.895324] ? lock_downgrade+0x6d0/0x6d0 [ 1601.895919] ? inet_init_net+0x590/0x590 [ 1601.896509] ? mark_held_locks+0x9e/0xe0 [ 1601.897111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.897859] ? __local_bh_enable_ip+0x9d/0x100 [ 1601.898527] inet_stream_connect+0x53/0xa0 [ 1601.899131] ? __inet_stream_connect+0xe70/0xe70 [ 1601.899811] __sys_connect_file+0x15b/0x1a0 [ 1601.900466] __sys_connect+0x165/0x1a0 [ 1601.901044] ? __sys_connect_file+0x1a0/0x1a0 [ 1601.901697] ? rcu_read_lock_any_held+0x75/0xa0 [ 1601.902357] ? vfs_write+0x354/0xb10 [ 1601.902894] ? fput_many+0x2f/0x1a0 [ 1601.903419] ? ksys_write+0x1a9/0x260 [ 1601.903970] ? __ia32_sys_read+0xb0/0xb0 [ 1601.904571] __x64_sys_connect+0x6f/0xb0 [ 1601.905187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1601.905921] do_syscall_64+0x33/0x40 [ 1601.906452] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.907171] RIP: 0033:0x7f03ebbdcb19 [ 1601.907702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.910282] RSP: 002b:00007f03e9152188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1601.911362] RAX: ffffffffffffffda RBX: 00007f03ebceff60 RCX: 00007f03ebbdcb19 [ 1601.911485] FAULT_INJECTION: forcing a failure. [ 1601.911485] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.912381] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004 [ 1601.912426] RBP: 00007f03e91521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1601.912449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1601.917135] R13: 00007ffda480e96f R14: 00007f03e9152300 R15: 0000000000022000 [ 1601.918199] CPU: 0 PID: 28950 Comm: syz-executor.7 Not tainted 5.10.222 #1 [ 1601.919253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.920910] Call Trace: [ 1601.921361] dump_stack+0x107/0x167 [ 1601.921916] should_fail.cold+0x5/0xa [ 1601.922494] ? create_object.isra.0+0x3a/0xa20 [ 1601.923179] should_failslab+0x5/0x20 [ 1601.923745] kmem_cache_alloc+0x5b/0x310 [ 1601.924348] ? perf_trace_lock+0x2bd/0x490 [ 1601.925004] create_object.isra.0+0x3a/0xa20 [ 1601.925657] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1601.926420] kmem_cache_alloc_node+0x169/0x330 [ 1601.927098] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1601.927894] __alloc_skb+0x6d/0x5b0 [ 1601.928461] __ip_append_data+0x2930/0x3310 [ 1601.929154] ? ip_generic_getfrag+0x230/0x230 [ 1601.929847] ? ip_finish_output+0x330/0x330 [ 1601.930487] ? ipv4_mtu+0x1ed/0x2c0 [ 1601.931058] ip_send_unicast_reply+0x86f/0xe10 [ 1601.931762] ? ip_make_skb+0x2a0/0x2a0 [ 1601.932353] ? mark_held_locks+0x9e/0xe0 [ 1601.932976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.933786] ? lock_release+0x680/0x680 [ 1601.934396] ? inet_csk_destroy_sock+0x2b8/0x450 [ 1601.935117] tcp_v4_send_reset+0xf04/0x1ff0 [ 1601.935768] ? tcp_add_backlog+0x1a00/0x1a00 [ 1601.936426] ? find_held_lock+0x2c/0x110 [ 1601.937051] ? __release_sock+0xd0/0x3b0 [ 1601.937666] ? mark_held_locks+0x9e/0xe0 [ 1601.938291] tcp_v4_do_rcv+0x758/0x940 [ 1601.938876] __release_sock+0x139/0x3b0 [ 1601.939494] __tcp_close+0x6dc/0x10c0 [ 1601.940073] ? trace_hardirqs_on+0x5b/0x180 [ 1601.940728] tcp_close+0x24/0x120 [ 1601.941266] inet_release+0xe9/0x1f0 [ 1601.941833] __sock_release+0xd2/0x290 [ 1601.942415] sock_close+0x18/0x20 [ 1601.942934] __fput+0x285/0x9f0 [ 1601.943422] ? __sock_release+0x290/0x290 [ 1601.944060] task_work_run+0xe2/0x1a0 [ 1601.944643] exit_to_user_mode_prepare+0x186/0x190 [ 1601.945374] syscall_exit_to_user_mode+0x38/0x1d0 [ 1601.946094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.946843] RIP: 0033:0x7efc28c67b19 [ 1601.947399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.950070] RSP: 002b:00007efc261dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 1601.951187] RAX: 0000000000000004 RBX: 00007efc28d7af60 RCX: 00007efc28c67b19 [ 1601.952234] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1601.953281] RBP: 00007efc261dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1601.954324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1601.955363] R13: 00007fffc2b6367f R14: 00007efc261dd300 R15: 0000000000022000 11:09:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:09:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:09:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1614.971500] FAULT_INJECTION: forcing a failure. [ 1614.971500] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.973279] CPU: 0 PID: 29072 Comm: syz-executor.7 Not tainted 5.10.222 #1 [ 1614.974295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1614.975493] Call Trace: [ 1614.975892] dump_stack+0x107/0x167 [ 1614.976443] should_fail.cold+0x5/0xa [ 1614.977034] should_failslab+0x5/0x20 [ 1614.977598] __kmalloc_node_track_caller+0x74/0x3b0 [ 1614.978335] ? __ip_append_data+0x2930/0x3310 [ 1614.978999] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1614.979792] __alloc_skb+0xb1/0x5b0 [ 1614.980349] __ip_append_data+0x2930/0x3310 [ 1614.981032] ? ip_generic_getfrag+0x230/0x230 [ 1614.981724] ? ip_finish_output+0x330/0x330 [ 1614.982372] ? ipv4_mtu+0x1ed/0x2c0 [ 1614.982933] ip_send_unicast_reply+0x86f/0xe10 [ 1614.983640] ? ip_make_skb+0x2a0/0x2a0 [ 1614.984222] ? mark_held_locks+0x9e/0xe0 [ 1614.984841] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1614.985657] ? lock_release+0x680/0x680 [ 1614.986472] ? inet_csk_destroy_sock+0x2b8/0x450 [ 1614.987190] tcp_v4_send_reset+0xf04/0x1ff0 [ 1614.987849] ? tcp_add_backlog+0x1a00/0x1a00 [ 1614.988506] ? find_held_lock+0x2c/0x110 [ 1614.989131] ? __release_sock+0xd0/0x3b0 [ 1614.989747] ? mark_held_locks+0x9e/0xe0 [ 1614.990363] tcp_v4_do_rcv+0x758/0x940 [ 1614.990945] __release_sock+0x139/0x3b0 [ 1614.991559] __tcp_close+0x6dc/0x10c0 [ 1614.992127] ? trace_hardirqs_on+0x5b/0x180 [ 1614.992769] tcp_close+0x24/0x120 [ 1614.993295] inet_release+0xe9/0x1f0 [ 1614.993857] __sock_release+0xd2/0x290 [ 1614.994437] sock_close+0x18/0x20 [ 1614.994956] __fput+0x285/0x9f0 [ 1614.995443] ? __sock_release+0x290/0x290 [ 1614.996075] task_work_run+0xe2/0x1a0 [ 1614.996658] exit_to_user_mode_prepare+0x186/0x190 [ 1614.997386] syscall_exit_to_user_mode+0x38/0x1d0 [ 1614.998095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1614.998848] RIP: 0033:0x7efc28c67b19 [ 1614.999397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.002053] RSP: 002b:00007efc261dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 1615.003157] RAX: 0000000000000004 RBX: 00007efc28d7af60 RCX: 00007efc28c67b19 [ 1615.004196] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1615.005237] RBP: 00007efc261dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1615.006270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1615.007308] R13: 00007fffc2b6367f R14: 00007efc261dd300 R15: 0000000000022000 11:09:30 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17) 11:09:30 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:09:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:09:30 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:09:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) (fail_nth: 4) 11:09:30 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e8, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ca, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd3, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742b"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:09:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:09:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) (fail_nth: 5) [ 1615.012851] FAULT_INJECTION: forcing a failure. [ 1615.012851] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.014566] CPU: 1 PID: 29081 Comm: syz-executor.1 Not tainted 5.10.222 #1 [ 1615.015563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1615.016759] Call Trace: [ 1615.017168] dump_stack+0x107/0x167 [ 1615.017713] should_fail.cold+0x5/0xa [ 1615.018282] ? dst_alloc+0x9e/0x5d0 [ 1615.018826] should_failslab+0x5/0x20 [ 1615.019391] kmem_cache_alloc+0x5b/0x310 [ 1615.020011] dst_alloc+0x9e/0x5d0 [ 1615.020538] rt_dst_alloc+0x73/0x440 [ 1615.021106] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 1615.021890] ip_route_output_key_hash+0x18d/0x340 [ 1615.022600] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 1615.023414] ? trace_hardirqs_on+0x5b/0x180 [ 1615.024070] ip_route_output_flow+0x23/0x150 [ 1615.024731] tcp_v4_connect+0x8a3/0x1eb0 [ 1615.025380] ? tcp_v4_destroy_sock+0x6a0/0x6a0 [ 1615.026093] __inet_stream_connect+0x8d8/0xe70 [ 1615.026775] ? lock_release+0x680/0x680 [ 1615.027360] ? lock_downgrade+0x6d0/0x6d0 [ 1615.027971] ? inet_init_net+0x590/0x590 [ 1615.028561] ? mark_held_locks+0x9e/0xe0 [ 1615.029188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1615.029956] ? __local_bh_enable_ip+0x9d/0x100 [ 1615.030635] inet_stream_connect+0x53/0xa0 [ 1615.031255] ? __inet_stream_connect+0xe70/0xe70 [ 1615.031953] __sys_connect_file+0x15b/0x1a0 [ 1615.032597] __sys_connect+0x165/0x1a0 [ 1615.033181] ? __sys_connect_file+0x1a0/0x1a0 [ 1615.033854] ? rcu_read_lock_any_held+0x75/0xa0 [ 1615.034542] ? vfs_write+0x354/0xb10 [ 1615.035083] ? fput_many+0x2f/0x1a0 [ 1615.035626] ? ksys_write+0x1a9/0x260 [ 1615.035790] FAULT_INJECTION: forcing a failure. [ 1615.035790] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.036188] ? __ia32_sys_read+0xb0/0xb0 [ 1615.038393] __x64_sys_connect+0x6f/0xb0 [ 1615.038993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1615.039745] do_syscall_64+0x33/0x40 [ 1615.040298] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1615.041057] RIP: 0033:0x7f03ebbdcb19 [ 1615.041611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.044252] RSP: 002b:00007f03e9152188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1615.045376] RAX: ffffffffffffffda RBX: 00007f03ebceff60 RCX: 00007f03ebbdcb19 [ 1615.046418] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004 [ 1615.047453] RBP: 00007f03e91521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1615.048483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1615.049519] R13: 00007ffda480e96f R14: 00007f03e9152300 R15: 0000000000022000 [ 1615.050616] CPU: 0 PID: 29084 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1615.051633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1615.052846] Call Trace: [ 1615.053241] dump_stack+0x107/0x167 [ 1615.053782] should_fail.cold+0x5/0xa [ 1615.054343] ? create_object.isra.0+0x3a/0xa20 [ 1615.055015] should_failslab+0x5/0x20 [ 1615.055574] kmem_cache_alloc+0x5b/0x310 [ 1615.056179] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1615.056946] create_object.isra.0+0x3a/0xa20 [ 1615.057605] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1615.058357] kmem_cache_alloc_trace+0x151/0x320 [ 1615.059048] ? v9fs_write_inode+0x60/0x60 [ 1615.059659] v9fs_mount+0x5a/0x8f0 [ 1615.060186] ? v9fs_write_inode+0x60/0x60 [ 1615.060804] legacy_get_tree+0x105/0x220 [ 1615.061412] vfs_get_tree+0x8e/0x300 [ 1615.061960] path_mount+0x1429/0x2120 [ 1615.062530] ? strncpy_from_user+0x9e/0x470 [ 1615.063165] ? finish_automount+0xa90/0xa90 [ 1615.063801] ? getname_flags.part.0+0x1dd/0x4f0 [ 1615.064483] ? _copy_from_user+0xfb/0x1b0 [ 1615.065116] __x64_sys_mount+0x282/0x300 [ 1615.065710] ? copy_mnt_ns+0xa00/0xa00 [ 1615.066289] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1615.067052] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1615.067811] do_syscall_64+0x33/0x40 [ 1615.068359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1615.069122] RIP: 0033:0x7f93ecc32b19 [ 1615.069671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.072324] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1615.073427] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1615.074455] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1615.075487] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1615.076520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1615.077560] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:09:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:09:30 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:09:46 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:09:46 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd5, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:09:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1f1, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:09:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) (fail_nth: 6) 11:09:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:09:46 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:09:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) (fail_nth: 5) 11:09:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18) [ 1630.876782] FAULT_INJECTION: forcing a failure. [ 1630.876782] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.878736] CPU: 0 PID: 29208 Comm: syz-executor.1 Not tainted 5.10.222 #1 [ 1630.879907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1630.881315] Call Trace: [ 1630.881778] dump_stack+0x107/0x167 [ 1630.882418] should_fail.cold+0x5/0xa [ 1630.883084] ? create_object.isra.0+0x3a/0xa20 [ 1630.883868] should_failslab+0x5/0x20 [ 1630.884523] kmem_cache_alloc+0x5b/0x310 [ 1630.885254] create_object.isra.0+0x3a/0xa20 [ 1630.886004] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1630.886888] kmem_cache_alloc+0x159/0x310 [ 1630.887619] dst_alloc+0x9e/0x5d0 [ 1630.888236] rt_dst_alloc+0x73/0x440 [ 1630.888891] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 1630.889838] ip_route_output_key_hash+0x18d/0x340 [ 1630.890664] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 1630.891615] ? trace_hardirqs_on+0x5b/0x180 [ 1630.892377] ip_route_output_flow+0x23/0x150 [ 1630.893149] tcp_v4_connect+0x8a3/0x1eb0 [ 1630.893892] ? tcp_v4_destroy_sock+0x6a0/0x6a0 [ 1630.894699] __inet_stream_connect+0x8d8/0xe70 [ 1630.895476] ? lock_release+0x680/0x680 [ 1630.896150] ? lock_downgrade+0x6d0/0x6d0 [ 1630.896861] ? inet_init_net+0x590/0x590 [ 1630.897578] ? mark_held_locks+0x9e/0xe0 [ 1630.898290] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1630.899170] ? __local_bh_enable_ip+0x9d/0x100 [ 1630.899957] inet_stream_connect+0x53/0xa0 [ 1630.900673] ? __inet_stream_connect+0xe70/0xe70 [ 1630.901489] __sys_connect_file+0x15b/0x1a0 [ 1630.902228] __sys_connect+0x165/0x1a0 [ 1630.902887] ? __sys_connect_file+0x1a0/0x1a0 [ 1630.903660] ? rcu_read_lock_any_held+0x75/0xa0 [ 1630.904446] ? vfs_write+0x354/0xb10 [ 1630.905099] ? fput_many+0x2f/0x1a0 [ 1630.905730] ? ksys_write+0x1a9/0x260 [ 1630.906380] ? __ia32_sys_read+0xb0/0xb0 [ 1630.907091] __x64_sys_connect+0x6f/0xb0 [ 1630.907780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1630.908648] do_syscall_64+0x33/0x40 [ 1630.909291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1630.910154] RIP: 0033:0x7f03ebbdcb19 [ 1630.910787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1630.913840] RSP: 002b:00007f03e9152188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1630.915114] RAX: ffffffffffffffda RBX: 00007f03ebceff60 RCX: 00007f03ebbdcb19 [ 1630.916297] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004 [ 1630.917495] RBP: 00007f03e91521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1630.918672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1630.919848] R13: 00007ffda480e96f R14: 00007f03e9152300 R15: 0000000000022000 [ 1630.930478] FAULT_INJECTION: forcing a failure. [ 1630.930478] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.932452] CPU: 0 PID: 29211 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1630.933604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1630.934960] Call Trace: [ 1630.935403] dump_stack+0x107/0x167 [ 1630.936004] should_fail.cold+0x5/0xa 11:09:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1630.936647] should_failslab+0x5/0x20 [ 1630.937413] __kmalloc_track_caller+0x79/0x370 [ 1630.938162] ? v9fs_session_init+0xa7/0x1680 [ 1630.938884] ? kernel_text_address+0xf2/0x120 [ 1630.939631] kstrdup+0x36/0x70 [ 1630.940165] v9fs_session_init+0xa7/0x1680 [ 1630.940864] ? lock_release+0x680/0x680 [ 1630.941537] ? find_held_lock+0x2c/0x110 [ 1630.942210] ? kmem_cache_alloc_trace+0x151/0x320 [ 1630.942997] ? v9fs_show_options+0x690/0x690 [ 1630.943731] ? trace_hardirqs_on+0x5b/0x180 [ 1630.944444] ? kasan_unpoison_shadow+0x33/0x50 [ 1630.945214] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1630.946060] v9fs_mount+0x79/0x8f0 [ 1630.946657] ? v9fs_write_inode+0x60/0x60 [ 1630.947346] legacy_get_tree+0x105/0x220 [ 1630.948021] vfs_get_tree+0x8e/0x300 [ 1630.948628] path_mount+0x1429/0x2120 [ 1630.949281] ? strncpy_from_user+0x9e/0x470 [ 1630.950002] ? finish_automount+0xa90/0xa90 [ 1630.950711] ? getname_flags.part.0+0x1dd/0x4f0 [ 1630.951474] ? _copy_from_user+0xfb/0x1b0 [ 1630.952170] __x64_sys_mount+0x282/0x300 [ 1630.952834] ? copy_mnt_ns+0xa00/0xa00 [ 1630.953496] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1630.954359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1630.955205] do_syscall_64+0x33/0x40 [ 1630.955817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1630.956658] RIP: 0033:0x7f93ecc32b19 [ 1630.957286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1630.960231] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1630.961485] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1630.962645] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1630.963800] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1630.964952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1630.966121] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 [ 1630.978554] FAULT_INJECTION: forcing a failure. [ 1630.978554] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.979661] CPU: 1 PID: 29213 Comm: syz-executor.7 Not tainted 5.10.222 #1 [ 1630.980301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1630.981072] Call Trace: [ 1630.981362] dump_stack+0x107/0x167 [ 1630.981708] should_fail.cold+0x5/0xa [ 1630.982074] ? create_object.isra.0+0x3a/0xa20 [ 1630.982509] should_failslab+0x5/0x20 [ 1630.982871] kmem_cache_alloc+0x5b/0x310 [ 1630.983268] create_object.isra.0+0x3a/0xa20 [ 1630.983689] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1630.984182] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1630.984673] ? __ip_append_data+0x2930/0x3310 [ 1630.985102] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1630.985612] __alloc_skb+0xb1/0x5b0 [ 1630.985974] __ip_append_data+0x2930/0x3310 [ 1630.986406] ? ip_generic_getfrag+0x230/0x230 [ 1630.986855] ? ip_finish_output+0x330/0x330 [ 1630.987268] ? ipv4_mtu+0x1ed/0x2c0 [ 1630.987632] ip_send_unicast_reply+0x86f/0xe10 [ 1630.988086] ? ip_make_skb+0x2a0/0x2a0 [ 1630.988461] ? mark_held_locks+0x9e/0xe0 [ 1630.988853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1630.989382] ? lock_release+0x680/0x680 [ 1630.989772] ? inet_csk_destroy_sock+0x2b8/0x450 [ 1630.990233] tcp_v4_send_reset+0xf04/0x1ff0 [ 1630.990658] ? tcp_add_backlog+0x1a00/0x1a00 [ 1630.991088] ? find_held_lock+0x2c/0x110 [ 1630.991481] ? __release_sock+0xd0/0x3b0 [ 1630.991876] ? mark_held_locks+0x9e/0xe0 [ 1630.992271] tcp_v4_do_rcv+0x758/0x940 [ 1630.992647] __release_sock+0x139/0x3b0 [ 1630.993041] __tcp_close+0x6dc/0x10c0 [ 1630.993418] ? trace_hardirqs_on+0x5b/0x180 [ 1630.993831] tcp_close+0x24/0x120 [ 1630.994162] inet_release+0xe9/0x1f0 [ 1630.994523] __sock_release+0xd2/0x290 [ 1630.994900] sock_close+0x18/0x20 [ 1630.995234] __fput+0x285/0x9f0 [ 1630.995549] ? __sock_release+0x290/0x290 [ 1630.995952] task_work_run+0xe2/0x1a0 [ 1630.996324] exit_to_user_mode_prepare+0x186/0x190 [ 1630.996792] syscall_exit_to_user_mode+0x38/0x1d0 [ 1630.997249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1630.997727] RIP: 0033:0x7efc28c67b19 [ 1630.998078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1630.999776] RSP: 002b:00007efc261dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 1631.000487] RAX: 0000000000000004 RBX: 00007efc28d7af60 RCX: 00007efc28c67b19 [ 1631.001152] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1631.001813] RBP: 00007efc261dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1631.002472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.003133] R13: 00007fffc2b6367f R14: 00007efc261dd300 R15: 0000000000022000 11:09:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:09:46 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:09:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:09:46 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:09:46 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd5, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:09:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 19) 11:09:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1631.148583] FAULT_INJECTION: forcing a failure. [ 1631.148583] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.149868] CPU: 0 PID: 29328 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1631.150615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.151505] Call Trace: [ 1631.151803] dump_stack+0x107/0x167 [ 1631.152203] should_fail.cold+0x5/0xa [ 1631.152624] ? create_object.isra.0+0x3a/0xa20 [ 1631.153151] should_failslab+0x5/0x20 [ 1631.153584] kmem_cache_alloc+0x5b/0x310 [ 1631.154061] create_object.isra.0+0x3a/0xa20 [ 1631.154567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1631.155155] __kmalloc_track_caller+0x177/0x370 [ 1631.155679] ? v9fs_session_init+0xe9/0x1680 [ 1631.156179] ? kernel_text_address+0xf2/0x120 [ 1631.156693] kstrdup+0x36/0x70 [ 1631.157068] v9fs_session_init+0xe9/0x1680 [ 1631.157560] ? lock_release+0x680/0x680 [ 1631.158018] ? find_held_lock+0x2c/0x110 [ 1631.158488] ? kmem_cache_alloc_trace+0x151/0x320 [ 1631.159034] ? v9fs_show_options+0x690/0x690 [ 1631.159545] ? trace_hardirqs_on+0x5b/0x180 [ 1631.160061] ? kasan_unpoison_shadow+0x33/0x50 [ 1631.160589] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1631.161180] v9fs_mount+0x79/0x8f0 [ 1631.161593] ? v9fs_write_inode+0x60/0x60 [ 1631.162085] legacy_get_tree+0x105/0x220 [ 1631.162552] vfs_get_tree+0x8e/0x300 [ 1631.162986] path_mount+0x1429/0x2120 [ 1631.163428] ? strncpy_from_user+0x9e/0x470 [ 1631.163938] ? finish_automount+0xa90/0xa90 [ 1631.164428] ? getname_flags.part.0+0x1dd/0x4f0 [ 1631.164964] ? _copy_from_user+0xfb/0x1b0 [ 1631.165467] __x64_sys_mount+0x282/0x300 [ 1631.165934] ? copy_mnt_ns+0xa00/0xa00 [ 1631.166395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.167001] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1631.167593] do_syscall_64+0x33/0x40 [ 1631.168024] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1631.168603] RIP: 0033:0x7f93ecc32b19 [ 1631.169041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1631.171045] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1631.171910] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1631.172731] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1631.173511] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1631.174278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1631.175059] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:09:47 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) (fail_nth: 7) 11:09:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1631.222777] FAULT_INJECTION: forcing a failure. [ 1631.222777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1631.224125] CPU: 0 PID: 29336 Comm: syz-executor.7 Not tainted 5.10.222 #1 [ 1631.224881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.225799] Call Trace: [ 1631.226107] dump_stack+0x107/0x167 [ 1631.226522] should_fail.cold+0x5/0xa [ 1631.226968] _copy_to_user+0x2e/0x180 [ 1631.227404] simple_read_from_buffer+0xcc/0x160 [ 1631.227943] proc_fail_nth_read+0x198/0x230 [ 1631.228429] ? proc_sessionid_read+0x230/0x230 [ 1631.228943] ? security_file_permission+0xb1/0xe0 [ 1631.229504] ? proc_sessionid_read+0x230/0x230 [ 1631.230016] vfs_read+0x228/0x620 [ 1631.230421] ksys_read+0x12d/0x260 [ 1631.230823] ? vfs_write+0xb10/0xb10 [ 1631.231226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.231811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1631.232394] do_syscall_64+0x33/0x40 [ 1631.232820] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1631.233398] RIP: 0033:0x7efc28c1a69c [ 1631.233824] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1631.235843] RSP: 002b:00007efc261dd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1631.236695] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007efc28c1a69c [ 1631.237486] RDX: 000000000000000f RSI: 00007efc261dd1e0 RDI: 0000000000000006 [ 1631.238277] RBP: 00007efc261dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1631.239066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.239852] R13: 00007fffc2b6367f R14: 00007efc261dd300 R15: 0000000000022000 11:10:01 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:10:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd5, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:10:01 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x0, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:10:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) 11:10:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:10:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) (fail_nth: 6) 11:10:01 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:10:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1645.444108] FAULT_INJECTION: forcing a failure. [ 1645.444108] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.445766] CPU: 1 PID: 29457 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1645.446396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1645.447146] Call Trace: [ 1645.447395] dump_stack+0x107/0x167 [ 1645.447730] should_fail.cold+0x5/0xa [ 1645.448083] ? p9_client_create+0xaf/0x11c0 [ 1645.448480] should_failslab+0x5/0x20 [ 1645.448831] kmem_cache_alloc_trace+0x55/0x320 [ 1645.449245] ? find_held_lock+0x2c/0x110 [ 1645.449630] p9_client_create+0xaf/0x11c0 [ 1645.450008] ? lock_downgrade+0x6d0/0x6d0 [ 1645.450390] ? p9_client_flush+0x430/0x430 [ 1645.450782] ? trace_hardirqs_on+0x5b/0x180 [ 1645.451175] ? lockdep_init_map_type+0x2c7/0x780 [ 1645.451608] ? __raw_spin_lock_init+0x36/0x110 [ 1645.452030] v9fs_session_init+0x1dd/0x1680 [ 1645.452425] ? lock_release+0x680/0x680 [ 1645.452795] ? kmem_cache_alloc_trace+0x151/0x320 [ 1645.453232] ? v9fs_show_options+0x690/0x690 [ 1645.453687] ? trace_hardirqs_on+0x5b/0x180 [ 1645.454083] ? kasan_unpoison_shadow+0x33/0x50 [ 1645.454519] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1645.454988] v9fs_mount+0x79/0x8f0 [ 1645.455317] ? v9fs_write_inode+0x60/0x60 [ 1645.455698] legacy_get_tree+0x105/0x220 [ 1645.456071] vfs_get_tree+0x8e/0x300 [ 1645.456411] path_mount+0x1429/0x2120 [ 1645.456765] ? strncpy_from_user+0x9e/0x470 [ 1645.457155] ? finish_automount+0xa90/0xa90 [ 1645.457553] ? getname_flags.part.0+0x1dd/0x4f0 [ 1645.457978] ? _copy_from_user+0xfb/0x1b0 [ 1645.458362] __x64_sys_mount+0x282/0x300 [ 1645.458736] ? copy_mnt_ns+0xa00/0xa00 [ 1645.459095] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1645.459571] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1645.460040] do_syscall_64+0x33/0x40 [ 1645.460380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1645.460865] RIP: 0033:0x7f93ecc32b19 [ 1645.461205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1645.462877] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1645.463566] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1645.464225] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1645.464867] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1645.465520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1645.466162] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:10:01 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) [ 1645.481370] FAULT_INJECTION: forcing a failure. [ 1645.481370] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.482548] CPU: 1 PID: 29461 Comm: syz-executor.1 Not tainted 5.10.222 #1 [ 1645.483178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1645.483925] Call Trace: [ 1645.484174] dump_stack+0x107/0x167 [ 1645.484516] should_fail.cold+0x5/0xa [ 1645.484875] ? __alloc_skb+0x6d/0x5b0 [ 1645.485235] should_failslab+0x5/0x20 [ 1645.485595] kmem_cache_alloc_node+0x55/0x330 [ 1645.486003] ? tcp_sync_mss+0x3a2/0xc20 [ 1645.486374] __alloc_skb+0x6d/0x5b0 [ 1645.486709] ? tcp_write_queue_purge+0x5a8/0x14b0 [ 1645.487155] sk_stream_alloc_skb+0x109/0xc30 [ 1645.487567] tcp_connect+0xef2/0x4550 [ 1645.487931] ? __inet_hash_connect+0xa22/0xd50 [ 1645.488355] ? __tcp_transmit_skb+0x35d0/0x35d0 [ 1645.488795] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 1645.489240] ? siphash_1u64+0x13/0x270 [ 1645.489616] ? secure_ipv4_port_ephemeral+0x190/0x190 [ 1645.490090] ? xfrm_lookup_route+0x65/0x210 [ 1645.490497] tcp_v4_connect+0x171b/0x1eb0 [ 1645.490900] ? tcp_v4_destroy_sock+0x6a0/0x6a0 [ 1645.491332] __inet_stream_connect+0x8d8/0xe70 [ 1645.491753] ? lock_release+0x680/0x680 [ 1645.492122] ? lock_downgrade+0x6d0/0x6d0 [ 1645.492501] ? inet_init_net+0x590/0x590 [ 1645.492882] ? mark_held_locks+0x9e/0xe0 [ 1645.493267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1645.493747] ? __local_bh_enable_ip+0x9d/0x100 [ 1645.494169] inet_stream_connect+0x53/0xa0 [ 1645.494555] ? __inet_stream_connect+0xe70/0xe70 [ 1645.494988] __sys_connect_file+0x15b/0x1a0 [ 1645.495390] __sys_connect+0x165/0x1a0 [ 1645.495748] ? __sys_connect_file+0x1a0/0x1a0 [ 1645.496165] ? rcu_read_lock_any_held+0x75/0xa0 [ 1645.496589] ? vfs_write+0x354/0xb10 [ 1645.496938] ? fput_many+0x2f/0x1a0 [ 1645.497284] ? ksys_write+0x1a9/0x260 [ 1645.497638] ? __ia32_sys_read+0xb0/0xb0 [ 1645.498023] __x64_sys_connect+0x6f/0xb0 [ 1645.498394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1645.498861] do_syscall_64+0x33/0x40 [ 1645.499206] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1645.499668] RIP: 0033:0x7f03ebbdcb19 [ 1645.500014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1645.501655] RSP: 002b:00007f03e9152188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1645.502345] RAX: ffffffffffffffda RBX: 00007f03ebceff60 RCX: 00007f03ebbdcb19 [ 1645.502989] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004 [ 1645.503631] RBP: 00007f03e91521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.504272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.504912] R13: 00007ffda480e96f R14: 00007f03e9152300 R15: 0000000000022000 11:10:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) 11:10:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:10:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:10:01 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:10:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1645.612754] FAULT_INJECTION: forcing a failure. [ 1645.612754] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.614579] CPU: 0 PID: 29545 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1645.615591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1645.616791] Call Trace: [ 1645.617188] dump_stack+0x107/0x167 [ 1645.617735] should_fail.cold+0x5/0xa [ 1645.618297] ? create_object.isra.0+0x3a/0xa20 [ 1645.618968] should_failslab+0x5/0x20 [ 1645.619530] kmem_cache_alloc+0x5b/0x310 [ 1645.620127] ? kernel_text_address+0xf2/0x120 [ 1645.620791] create_object.isra.0+0x3a/0xa20 [ 1645.621444] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1645.622198] kmem_cache_alloc_trace+0x151/0x320 [ 1645.622871] ? find_held_lock+0x2c/0x110 [ 1645.623476] p9_client_create+0xaf/0x11c0 [ 1645.624081] ? lock_downgrade+0x6d0/0x6d0 [ 1645.624695] ? p9_client_flush+0x430/0x430 [ 1645.625324] ? trace_hardirqs_on+0x5b/0x180 [ 1645.625960] ? lockdep_init_map_type+0x2c7/0x780 [ 1645.626659] ? __raw_spin_lock_init+0x36/0x110 [ 1645.627334] v9fs_session_init+0x1dd/0x1680 [ 1645.627967] ? lock_release+0x680/0x680 [ 1645.628556] ? kmem_cache_alloc_trace+0x151/0x320 [ 1645.629267] ? v9fs_show_options+0x690/0x690 [ 1645.629929] ? trace_hardirqs_on+0x5b/0x180 [ 1645.630565] ? kasan_unpoison_shadow+0x33/0x50 [ 1645.631239] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1645.631992] v9fs_mount+0x79/0x8f0 [ 1645.632527] ? v9fs_write_inode+0x60/0x60 [ 1645.633141] legacy_get_tree+0x105/0x220 [ 1645.633752] vfs_get_tree+0x8e/0x300 [ 1645.634301] path_mount+0x1429/0x2120 [ 1645.634874] ? strncpy_from_user+0x9e/0x470 [ 1645.635513] ? finish_automount+0xa90/0xa90 [ 1645.636148] ? getname_flags.part.0+0x1dd/0x4f0 [ 1645.636827] ? _copy_from_user+0xfb/0x1b0 [ 1645.637454] __x64_sys_mount+0x282/0x300 [ 1645.638046] ? copy_mnt_ns+0xa00/0xa00 [ 1645.638624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1645.639386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1645.640143] do_syscall_64+0x33/0x40 [ 1645.640691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1645.641448] RIP: 0033:0x7f93ecc32b19 [ 1645.641994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1645.644609] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1645.645729] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1645.646767] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1645.647801] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1645.648840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1645.649883] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:10:01 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x0, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:10:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1c6, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:10:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) (fail_nth: 7) [ 1645.711998] FAULT_INJECTION: forcing a failure. [ 1645.711998] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.712996] CPU: 1 PID: 29583 Comm: syz-executor.1 Not tainted 5.10.222 #1 [ 1645.713569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1645.714247] Call Trace: [ 1645.714477] dump_stack+0x107/0x167 [ 1645.714780] should_fail.cold+0x5/0xa [ 1645.715102] ? __alloc_skb+0x6d/0x5b0 [ 1645.715435] should_failslab+0x5/0x20 [ 1645.715761] kmem_cache_alloc_node+0x55/0x330 [ 1645.716136] ? tcp_sync_mss+0x3a2/0xc20 [ 1645.716483] __alloc_skb+0x6d/0x5b0 [ 1645.716793] ? tcp_write_queue_purge+0x5a8/0x14b0 [ 1645.717203] sk_stream_alloc_skb+0x109/0xc30 [ 1645.717592] tcp_connect+0xef2/0x4550 [ 1645.717931] ? ktime_get_with_offset+0x221/0x260 [ 1645.718332] ? recalibrate_cpu_khz+0x10/0x10 [ 1645.718705] ? ktime_get_with_offset+0x1a8/0x260 [ 1645.719107] ? __tcp_transmit_skb+0x35d0/0x35d0 [ 1645.719511] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 1645.719923] ? siphash_1u64+0x13/0x270 [ 1645.720255] ? secure_ipv4_port_ephemeral+0x190/0x190 [ 1645.720684] ? xfrm_lookup_route+0x65/0x210 [ 1645.721059] tcp_v4_connect+0x171b/0x1eb0 [ 1645.721462] ? tcp_v4_destroy_sock+0x6a0/0x6a0 [ 1645.721872] __inet_stream_connect+0x8d8/0xe70 [ 1645.722267] ? lock_release+0x680/0x680 [ 1645.722600] ? lock_downgrade+0x6d0/0x6d0 [ 1645.722949] ? inet_init_net+0x590/0x590 [ 1645.723300] ? mark_held_locks+0x9e/0xe0 [ 1645.723650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1645.724090] ? __local_bh_enable_ip+0x9d/0x100 [ 1645.724483] inet_stream_connect+0x53/0xa0 [ 1645.724849] ? __inet_stream_connect+0xe70/0xe70 [ 1645.725242] __sys_connect_file+0x15b/0x1a0 [ 1645.725621] __sys_connect+0x165/0x1a0 [ 1645.725947] ? __sys_connect_file+0x1a0/0x1a0 [ 1645.726318] ? rcu_read_lock_any_held+0x75/0xa0 [ 1645.726710] ? vfs_write+0x354/0xb10 [ 1645.727027] ? fput_many+0x2f/0x1a0 [ 1645.727335] ? ksys_write+0x1a9/0x260 [ 1645.727661] ? __ia32_sys_read+0xb0/0xb0 [ 1645.728017] __x64_sys_connect+0x6f/0xb0 [ 1645.728354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1645.728773] do_syscall_64+0x33/0x40 [ 1645.729083] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1645.729510] RIP: 0033:0x7f03ebbdcb19 [ 1645.729820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1645.731313] RSP: 002b:00007f03e9152188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1645.731944] RAX: ffffffffffffffda RBX: 00007f03ebceff60 RCX: 00007f03ebbdcb19 [ 1645.732534] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004 [ 1645.733117] RBP: 00007f03e91521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.733707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.734279] R13: 00007ffda480e96f R14: 00007f03e9152300 R15: 0000000000022000 11:10:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:10:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:10:16 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'ip6erspan0\x00', 0x3}, 0x18) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0xa004, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r2, r0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @loopback}, {0x1, @remote}, 0x8, {0x2, 0x4e22, @loopback}, 'ip6gre0\x00'}) 11:10:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1c6, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:10:16 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) 11:10:16 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x0, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:10:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) (fail_nth: 8) 11:10:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1660.297547] FAULT_INJECTION: forcing a failure. [ 1660.297547] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.299390] CPU: 0 PID: 29804 Comm: syz-executor.1 Not tainted 5.10.222 #1 [ 1660.300415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1660.301638] Call Trace: [ 1660.302044] dump_stack+0x107/0x167 [ 1660.302596] should_fail.cold+0x5/0xa [ 1660.303184] should_failslab+0x5/0x20 [ 1660.303757] __kmalloc_node_track_caller+0x74/0x3b0 [ 1660.304497] ? sk_stream_alloc_skb+0x109/0xc30 [ 1660.305179] ? tcp_sync_mss+0x3a2/0xc20 [ 1660.305802] __alloc_skb+0xb1/0x5b0 [ 1660.306360] sk_stream_alloc_skb+0x109/0xc30 [ 1660.307034] tcp_connect+0xef2/0x4550 [ 1660.307625] ? ktime_get_with_offset+0x221/0x260 [ 1660.308337] ? recalibrate_cpu_khz+0x10/0x10 [ 1660.308994] ? ktime_get_with_offset+0x1a8/0x260 [ 1660.309710] ? __tcp_transmit_skb+0x35d0/0x35d0 [ 1660.310405] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 1660.311127] ? siphash_1u64+0x13/0x270 [ 1660.311723] ? secure_ipv4_port_ephemeral+0x190/0x190 [ 1660.312491] ? xfrm_lookup_route+0x65/0x210 [ 1660.313153] tcp_v4_connect+0x171b/0x1eb0 [ 1660.313819] ? tcp_v4_destroy_sock+0x6a0/0x6a0 [ 1660.314527] __inet_stream_connect+0x8d8/0xe70 [ 1660.315211] ? lock_release+0x680/0x680 [ 1660.315806] ? lock_downgrade+0x6d0/0x6d0 [ 1660.316426] ? inet_init_net+0x590/0x590 [ 1660.317039] ? mark_held_locks+0x9e/0xe0 [ 1660.317662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1660.318438] ? __local_bh_enable_ip+0x9d/0x100 [ 1660.319123] inet_stream_connect+0x53/0xa0 [ 1660.319753] ? __inet_stream_connect+0xe70/0xe70 [ 1660.320455] __sys_connect_file+0x15b/0x1a0 [ 1660.321107] __sys_connect+0x165/0x1a0 [ 1660.321695] ? __sys_connect_file+0x1a0/0x1a0 [ 1660.322367] ? rcu_read_lock_any_held+0x75/0xa0 [ 1660.323056] ? vfs_write+0x354/0xb10 [ 1660.323615] ? fput_many+0x2f/0x1a0 [ 1660.324166] ? ksys_write+0x1a9/0x260 [ 1660.324738] ? __ia32_sys_read+0xb0/0xb0 [ 1660.325364] __x64_sys_connect+0x6f/0xb0 [ 1660.325975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1660.326742] do_syscall_64+0x33/0x40 [ 1660.327304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1660.328055] RIP: 0033:0x7f03ebbdcb19 [ 1660.328611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1660.331293] RSP: 002b:00007f03e9152188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1660.332416] RAX: ffffffffffffffda RBX: 00007f03ebceff60 RCX: 00007f03ebbdcb19 [ 1660.333464] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004 [ 1660.334506] RBP: 00007f03e91521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1660.335552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1660.336595] R13: 00007ffda480e96f R14: 00007f03e9152300 R15: 0000000000022000 11:10:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) [ 1660.352821] FAULT_INJECTION: forcing a failure. [ 1660.352821] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.354770] CPU: 0 PID: 29802 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1660.355898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1660.357233] Call Trace: [ 1660.357693] dump_stack+0x107/0x167 [ 1660.358203] should_fail.cold+0x5/0xa [ 1660.358735] should_failslab+0x5/0x20 [ 1660.359256] __kmalloc_track_caller+0x79/0x370 [ 1660.359867] ? p9_client_create+0x41d/0x11c0 [ 1660.360467] kstrdup+0x36/0x70 [ 1660.360906] p9_client_create+0x41d/0x11c0 [ 1660.361491] ? lock_downgrade+0x6d0/0x6d0 [ 1660.362062] ? p9_client_flush+0x430/0x430 [ 1660.362640] ? trace_hardirqs_on+0x5b/0x180 [ 1660.363221] ? lockdep_init_map_type+0x2c7/0x780 [ 1660.363864] ? __raw_spin_lock_init+0x36/0x110 [ 1660.364484] v9fs_session_init+0x1dd/0x1680 [ 1660.365075] ? lock_release+0x680/0x680 [ 1660.365625] ? kmem_cache_alloc_trace+0x151/0x320 [ 1660.366272] ? v9fs_show_options+0x690/0x690 [ 1660.366876] ? trace_hardirqs_on+0x5b/0x180 [ 1660.367467] ? kasan_unpoison_shadow+0x33/0x50 [ 1660.368095] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1660.368780] v9fs_mount+0x79/0x8f0 [ 1660.369263] ? v9fs_write_inode+0x60/0x60 [ 1660.369842] legacy_get_tree+0x105/0x220 [ 1660.370391] vfs_get_tree+0x8e/0x300 [ 1660.370898] path_mount+0x1429/0x2120 [ 1660.371416] ? strncpy_from_user+0x9e/0x470 [ 1660.371996] ? finish_automount+0xa90/0xa90 [ 1660.372573] ? getname_flags.part.0+0x1dd/0x4f0 [ 1660.373199] ? _copy_from_user+0xfb/0x1b0 [ 1660.373778] __x64_sys_mount+0x282/0x300 [ 1660.374335] ? copy_mnt_ns+0xa00/0xa00 [ 1660.374869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1660.375570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1660.376274] do_syscall_64+0x33/0x40 [ 1660.376784] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1660.377518] RIP: 0033:0x7f93ecc32b19 [ 1660.378025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1660.380479] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1660.381505] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1660.382468] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1660.383427] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1660.384384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1660.385338] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:10:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:10:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:10:16 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r2, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4(r3, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80, 0x800) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3f, 0x7f, 0x80, 0x1f, 0x0, 0x7f36, 0x208, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x820, 0x580, 0x1, 0x8, 0xd4, 0xfffffff8, 0x8, 0x0, 0x80000000, 0x0, 0x69e99357}, r4, 0xf, r0, 0x2) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = fsopen(&(0x7f0000000200)='efivarfs\x00', 0x1) fsync(r6) dup2(r5, r1) 11:10:30 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r2, r1) ioctl$FITHAW(r0, 0xc0045878) 11:10:30 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0x0, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:10:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:10:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:10:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) (fail_nth: 9) 11:10:30 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1c6, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:10:30 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) 11:10:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1674.531405] FAULT_INJECTION: forcing a failure. [ 1674.531405] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.533207] CPU: 1 PID: 30135 Comm: syz-executor.1 Not tainted 5.10.222 #1 [ 1674.533465] FAULT_INJECTION: forcing a failure. [ 1674.533465] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.534283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.536635] Call Trace: [ 1674.537067] dump_stack+0x107/0x167 [ 1674.537665] should_fail.cold+0x5/0xa [ 1674.538276] ? create_object.isra.0+0x3a/0xa20 [ 1674.539003] should_failslab+0x5/0x20 [ 1674.539607] kmem_cache_alloc+0x5b/0x310 [ 1674.540269] create_object.isra.0+0x3a/0xa20 [ 1674.540956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1674.541778] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1674.542572] ? sk_stream_alloc_skb+0x109/0xc30 [ 1674.543311] __alloc_skb+0xb1/0x5b0 [ 1674.543907] sk_stream_alloc_skb+0x109/0xc30 [ 1674.544619] tcp_connect+0xef2/0x4550 [ 1674.545250] ? ktime_get_with_offset+0x221/0x260 [ 1674.546010] ? recalibrate_cpu_khz+0x10/0x10 [ 1674.546697] ? ktime_get_with_offset+0x1a8/0x260 [ 1674.547452] ? __tcp_transmit_skb+0x35d0/0x35d0 [ 1674.548181] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 1674.548938] ? siphash_1u64+0x13/0x270 [ 1674.549565] ? secure_ipv4_port_ephemeral+0x190/0x190 [ 1674.550384] ? xfrm_lookup_route+0x65/0x210 [ 1674.551080] tcp_v4_connect+0x171b/0x1eb0 [ 1674.551772] ? tcp_v4_destroy_sock+0x6a0/0x6a0 [ 1674.552508] __inet_stream_connect+0x8d8/0xe70 [ 1674.553231] ? lock_release+0x680/0x680 [ 1674.553875] ? lock_downgrade+0x6d0/0x6d0 [ 1674.554525] ? inet_init_net+0x590/0x590 [ 1674.555173] ? mark_held_locks+0x9e/0xe0 [ 1674.555825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.556641] ? __local_bh_enable_ip+0x9d/0x100 [ 1674.557365] inet_stream_connect+0x53/0xa0 [ 1674.558044] ? __inet_stream_connect+0xe70/0xe70 [ 1674.558787] __sys_connect_file+0x15b/0x1a0 [ 1674.559472] __sys_connect+0x165/0x1a0 [ 1674.560085] ? __sys_connect_file+0x1a0/0x1a0 [ 1674.560805] ? rcu_read_lock_any_held+0x75/0xa0 [ 1674.561525] ? vfs_write+0x354/0xb10 [ 1674.562134] ? fput_many+0x2f/0x1a0 [ 1674.562718] ? ksys_write+0x1a9/0x260 [ 1674.563316] ? __ia32_sys_read+0xb0/0xb0 [ 1674.563969] __x64_sys_connect+0x6f/0xb0 [ 1674.564612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1674.565416] do_syscall_64+0x33/0x40 [ 1674.566021] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.566812] RIP: 0033:0x7f03ebbdcb19 [ 1674.567398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.570228] RSP: 002b:00007f03e9152188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1674.571403] RAX: ffffffffffffffda RBX: 00007f03ebceff60 RCX: 00007f03ebbdcb19 [ 1674.572500] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004 [ 1674.573615] RBP: 00007f03e91521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.574721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1674.575822] R13: 00007ffda480e96f R14: 00007f03e9152300 R15: 0000000000022000 [ 1674.576982] CPU: 0 PID: 30138 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1674.577642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.578395] Call Trace: [ 1674.578650] dump_stack+0x107/0x167 [ 1674.578983] should_fail.cold+0x5/0xa [ 1674.579338] should_failslab+0x5/0x20 [ 1674.579694] __kmalloc_track_caller+0x79/0x370 [ 1674.580111] ? p9_client_create+0x41d/0x11c0 [ 1674.580522] kstrdup+0x36/0x70 [ 1674.580818] p9_client_create+0x41d/0x11c0 [ 1674.581208] ? lock_downgrade+0x6d0/0x6d0 [ 1674.581588] ? p9_client_flush+0x430/0x430 [ 1674.581993] ? trace_hardirqs_on+0x5b/0x180 [ 1674.582390] ? lockdep_init_map_type+0x2c7/0x780 [ 1674.582823] ? __raw_spin_lock_init+0x36/0x110 [ 1674.583241] v9fs_session_init+0x1dd/0x1680 [ 1674.583638] ? lock_release+0x680/0x680 [ 1674.584004] ? kmem_cache_alloc_trace+0x151/0x320 [ 1674.584437] ? v9fs_show_options+0x690/0x690 [ 1674.584842] ? trace_hardirqs_on+0x5b/0x180 [ 1674.585232] ? kasan_unpoison_shadow+0x33/0x50 [ 1674.585661] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1674.586120] v9fs_mount+0x79/0x8f0 [ 1674.586446] ? v9fs_write_inode+0x60/0x60 [ 1674.586825] legacy_get_tree+0x105/0x220 [ 1674.587194] vfs_get_tree+0x8e/0x300 [ 1674.587532] path_mount+0x1429/0x2120 [ 1674.587883] ? strncpy_from_user+0x9e/0x470 [ 1674.588271] ? finish_automount+0xa90/0xa90 [ 1674.588658] ? getname_flags.part.0+0x1dd/0x4f0 [ 1674.589079] ? _copy_from_user+0xfb/0x1b0 [ 1674.589458] __x64_sys_mount+0x282/0x300 [ 1674.589846] ? copy_mnt_ns+0xa00/0xa00 [ 1674.590211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.590698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1674.591164] do_syscall_64+0x33/0x40 [ 1674.591500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.591959] RIP: 0033:0x7f93ecc32b19 [ 1674.592295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.593961] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1674.594648] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1674.595288] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1674.595925] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1674.596562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.597206] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:10:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xe00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:10:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:10:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:10:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) (fail_nth: 10) 11:10:30 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) [ 1674.741712] FAULT_INJECTION: forcing a failure. [ 1674.741712] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.742735] CPU: 0 PID: 30348 Comm: syz-executor.1 Not tainted 5.10.222 #1 [ 1674.743318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.744027] Call Trace: [ 1674.744262] dump_stack+0x107/0x167 [ 1674.744581] should_fail.cold+0x5/0xa [ 1674.744913] ? __alloc_skb+0x6d/0x5b0 [ 1674.745244] should_failslab+0x5/0x20 [ 1674.745571] kmem_cache_alloc_node+0x55/0x330 [ 1674.745969] ? __lockdep_reset_lock+0x180/0x180 [ 1674.746374] __alloc_skb+0x6d/0x5b0 [ 1674.746697] skb_copy+0x183/0x350 [ 1674.747014] tcp_send_synack+0x5b4/0x1450 [ 1674.747380] ? tcp_send_active_reset+0x7b0/0x7b0 [ 1674.747792] ? tcp_mtup_init+0x690/0x690 [ 1674.748150] ? tcp_mtup_init+0x2e1/0x690 [ 1674.748508] tcp_rcv_state_process+0x2403/0x4b90 [ 1674.748928] ? tcp_finish_connect+0x510/0x510 [ 1674.749312] ? find_held_lock+0x2c/0x110 [ 1674.749683] ? __release_sock+0xd0/0x3b0 [ 1674.750037] ? mark_held_locks+0x9e/0xe0 [ 1674.750398] tcp_v4_do_rcv+0x32c/0x940 [ 1674.750740] __release_sock+0x139/0x3b0 [ 1674.751098] release_sock+0x54/0x1b0 [ 1674.751419] __inet_stream_connect+0x5d0/0xe70 [ 1674.751824] ? inet_init_net+0x590/0x590 [ 1674.752182] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 1674.752625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.753076] ? __local_bh_enable_ip+0x9d/0x100 [ 1674.753470] inet_stream_connect+0x53/0xa0 [ 1674.753847] ? __inet_stream_connect+0xe70/0xe70 [ 1674.754246] __sys_connect_file+0x15b/0x1a0 [ 1674.754618] __sys_connect+0x165/0x1a0 [ 1674.754951] ? __sys_connect_file+0x1a0/0x1a0 [ 1674.755343] ? rcu_read_lock_any_held+0x75/0xa0 [ 1674.755742] ? vfs_write+0x354/0xb10 [ 1674.756067] ? fput_many+0x2f/0x1a0 [ 1674.756381] ? ksys_write+0x1a9/0x260 [ 1674.756706] ? __ia32_sys_read+0xb0/0xb0 [ 1674.757065] __x64_sys_connect+0x6f/0xb0 [ 1674.757408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1674.757854] do_syscall_64+0x33/0x40 [ 1674.758171] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.758604] RIP: 0033:0x7f03ebbdcb19 [ 1674.758924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.760443] RSP: 002b:00007f03e9152188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1674.761086] RAX: ffffffffffffffda RBX: 00007f03ebceff60 RCX: 00007f03ebbdcb19 [ 1674.761735] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004 [ 1674.762333] RBP: 00007f03e91521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.762931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.763531] R13: 00007ffda480e96f R14: 00007f03e9152300 R15: 0000000000022000 [ 1674.766971] FAULT_INJECTION: forcing a failure. [ 1674.766971] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.767938] CPU: 0 PID: 30346 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1674.768512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.769193] Call Trace: [ 1674.769413] dump_stack+0x107/0x167 [ 1674.769734] should_fail.cold+0x5/0xa [ 1674.770055] should_failslab+0x5/0x20 [ 1674.770371] __kmalloc_track_caller+0x79/0x370 [ 1674.770755] ? p9_client_create+0x41d/0x11c0 [ 1674.771124] kstrdup+0x36/0x70 [ 1674.771398] p9_client_create+0x41d/0x11c0 [ 1674.771747] ? lock_downgrade+0x6d0/0x6d0 [ 1674.772096] ? p9_client_flush+0x430/0x430 [ 1674.772449] ? trace_hardirqs_on+0x5b/0x180 [ 1674.772809] ? lockdep_init_map_type+0x2c7/0x780 [ 1674.773202] ? __raw_spin_lock_init+0x36/0x110 [ 1674.773590] v9fs_session_init+0x1dd/0x1680 [ 1674.773971] ? lock_release+0x680/0x680 [ 1674.774312] ? kmem_cache_alloc_trace+0x151/0x320 [ 1674.774710] ? v9fs_show_options+0x690/0x690 [ 1674.775086] ? trace_hardirqs_on+0x5b/0x180 [ 1674.775462] ? kasan_unpoison_shadow+0x33/0x50 [ 1674.775866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1674.776307] v9fs_mount+0x79/0x8f0 [ 1674.776612] ? v9fs_write_inode+0x60/0x60 [ 1674.776961] legacy_get_tree+0x105/0x220 [ 1674.777299] vfs_get_tree+0x8e/0x300 [ 1674.777622] path_mount+0x1429/0x2120 [ 1674.777953] ? strncpy_from_user+0x9e/0x470 [ 1674.778310] ? finish_automount+0xa90/0xa90 [ 1674.778677] ? getname_flags.part.0+0x1dd/0x4f0 [ 1674.779063] ? _copy_from_user+0xfb/0x1b0 [ 1674.779418] __x64_sys_mount+0x282/0x300 [ 1674.779754] ? copy_mnt_ns+0xa00/0xa00 [ 1674.780082] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.780509] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1674.780941] do_syscall_64+0x33/0x40 [ 1674.781249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.781690] RIP: 0033:0x7f93ecc32b19 [ 1674.781998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.783500] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1674.784124] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1674.784707] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1674.785290] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1674.785888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.786464] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:10:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:10:30 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:10:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x69, 0x0, 0x0, 0x3, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd78}, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x600, 0x1c0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) dup2(r1, r0) 11:10:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:10:45 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:10:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:10:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:10:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:10:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) 11:10:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:10:45 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0x0, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:10:45 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x9, 0x61, 0xf, 0x3, 0x0, 0x4, 0x40d40, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x8}, 0x2041, 0xffffffff, 0x7, 0x0, 0x200, 0x1, 0x37be, 0x0, 0x3, 0x0, 0x6}, r2, 0xd, r0, 0x2) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r3, r1) [ 1689.759772] FAULT_INJECTION: forcing a failure. [ 1689.759772] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.761603] CPU: 1 PID: 30576 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1689.762634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.763828] Call Trace: [ 1689.764224] dump_stack+0x107/0x167 [ 1689.764766] should_fail.cold+0x5/0xa [ 1689.765343] ? create_object.isra.0+0x3a/0xa20 [ 1689.766032] should_failslab+0x5/0x20 [ 1689.766598] kmem_cache_alloc+0x5b/0x310 [ 1689.767200] create_object.isra.0+0x3a/0xa20 [ 1689.767859] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1689.768619] __kmalloc_track_caller+0x177/0x370 [ 1689.769307] ? p9_client_create+0x51e/0x11c0 [ 1689.769982] kmemdup_nul+0x2d/0xa0 [ 1689.770497] p9_client_create+0x51e/0x11c0 [ 1689.771140] ? p9_client_flush+0x430/0x430 [ 1689.771769] ? trace_hardirqs_on+0x5b/0x180 [ 1689.772413] ? lockdep_init_map_type+0x2c7/0x780 [ 1689.773117] ? __raw_spin_lock_init+0x36/0x110 [ 1689.773810] v9fs_session_init+0x1dd/0x1680 [ 1689.774445] ? lock_release+0x680/0x680 [ 1689.775038] ? kmem_cache_alloc_trace+0x151/0x320 [ 1689.775743] ? v9fs_show_options+0x690/0x690 [ 1689.776400] ? trace_hardirqs_on+0x5b/0x180 [ 1689.777026] ? kasan_unpoison_shadow+0x33/0x50 [ 1689.777696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1689.778458] v9fs_mount+0x79/0x8f0 [ 1689.778983] ? v9fs_write_inode+0x60/0x60 [ 1689.779595] legacy_get_tree+0x105/0x220 [ 1689.780197] vfs_get_tree+0x8e/0x300 [ 1689.780746] path_mount+0x1429/0x2120 [ 1689.781309] ? strncpy_from_user+0x9e/0x470 [ 1689.781956] ? finish_automount+0xa90/0xa90 [ 1689.782572] ? getname_flags.part.0+0x1dd/0x4f0 [ 1689.783261] ? _copy_from_user+0xfb/0x1b0 [ 1689.783882] __x64_sys_mount+0x282/0x300 [ 1689.784476] ? copy_mnt_ns+0xa00/0xa00 [ 1689.785049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1689.785817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1689.786549] do_syscall_64+0x33/0x40 [ 1689.787098] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1689.787836] RIP: 0033:0x7f93ecc32b19 [ 1689.788368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.791008] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1689.792109] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1689.793133] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1689.794169] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1689.795198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1689.796225] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:10:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:10:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:10:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x3, 0x4e21, @local}, 0x10) 11:10:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:10:45 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0x0, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:10:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 26) 11:10:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:10:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1690.002167] FAULT_INJECTION: forcing a failure. [ 1690.002167] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.003167] CPU: 0 PID: 30750 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1690.003724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1690.004388] Call Trace: [ 1690.004611] dump_stack+0x107/0x167 [ 1690.004919] should_fail.cold+0x5/0xa [ 1690.005235] should_failslab+0x5/0x20 [ 1690.005550] __kmalloc_track_caller+0x79/0x370 [ 1690.005943] ? parse_opts.part.0+0x8e/0x340 [ 1690.006300] kstrdup+0x36/0x70 [ 1690.006570] parse_opts.part.0+0x8e/0x340 [ 1690.006917] ? p9_fd_show_options+0x1c0/0x1c0 [ 1690.007288] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1690.007713] ? quarantine_put+0x8b/0x1a0 [ 1690.008043] ? trace_hardirqs_on+0x5b/0x180 [ 1690.008393] ? kfree+0xd7/0x340 [ 1690.008671] p9_fd_create+0x98/0x4a0 [ 1690.008978] ? p9_conn_create+0x510/0x510 [ 1690.009314] ? p9_client_create+0x798/0x11c0 [ 1690.009672] ? kfree+0xd7/0x340 [ 1690.009957] ? do_raw_spin_unlock+0x4f/0x220 [ 1690.010327] p9_client_create+0x7ff/0x11c0 [ 1690.010680] ? p9_client_flush+0x430/0x430 [ 1690.011028] ? trace_hardirqs_on+0x5b/0x180 [ 1690.011381] ? lockdep_init_map_type+0x2c7/0x780 [ 1690.011772] ? __raw_spin_lock_init+0x36/0x110 [ 1690.012151] v9fs_session_init+0x1dd/0x1680 [ 1690.012503] ? lock_release+0x680/0x680 [ 1690.012833] ? kmem_cache_alloc_trace+0x151/0x320 [ 1690.013227] ? v9fs_show_options+0x690/0x690 [ 1690.013586] ? trace_hardirqs_on+0x5b/0x180 [ 1690.013952] ? kasan_unpoison_shadow+0x33/0x50 [ 1690.014329] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1690.014750] v9fs_mount+0x79/0x8f0 [ 1690.015041] ? v9fs_write_inode+0x60/0x60 [ 1690.015382] legacy_get_tree+0x105/0x220 [ 1690.015714] vfs_get_tree+0x8e/0x300 [ 1690.016022] path_mount+0x1429/0x2120 [ 1690.016332] ? strncpy_from_user+0x9e/0x470 [ 1690.016686] ? finish_automount+0xa90/0xa90 [ 1690.017040] ? getname_flags.part.0+0x1dd/0x4f0 [ 1690.017415] ? _copy_from_user+0xfb/0x1b0 [ 1690.017757] __x64_sys_mount+0x282/0x300 [ 1690.018087] ? copy_mnt_ns+0xa00/0xa00 [ 1690.018408] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1690.018835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1690.019254] do_syscall_64+0x33/0x40 [ 1690.019555] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1690.019972] RIP: 0033:0x7f93ecc32b19 [ 1690.020274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.021752] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1690.022366] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1690.022932] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1690.023502] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1690.024075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1690.024648] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 [ 1690.025272] 9pnet: Insufficient options for proto=fd 11:10:45 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:10:45 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)="94f70e46ac294d9158746ebf3900ae145344e62ca9417ea05d6f700bc5bdbc1d9dae233c82ad403e911136f810f53aa87a739384b41e5fdc88184950966dfaac0cdbe37dfdeaa9ca7c038528138bd216b53845754797b770404689ed1d481352af5efbc37c05dc2d176bf63f44010053d6c72a5f676dc4700dcf10badc0675bf2a380a5ee391b0fe615f8d3ff958c1340ea4eec733010edcaa19db9fed481c8aba7032fb8a7b72980900bacd53e93efa5d238b87c874de5e8400853ce02e00"/204, 0xcc, 0x4000000, 0x0, 0xfffffd24) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:10:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x4, 0x4e21, @local}, 0x10) 11:10:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:10:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(0xffffffffffffffff, r0) 11:11:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:11:01 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:11:01 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0xffffffae, 0x6f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1c, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ff2000/0xc000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2162}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r8}}, 0x401) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) 11:11:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(0xffffffffffffffff, r0) 11:11:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 27) 11:11:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:11:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:11:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x5, 0x4e21, @local}, 0x10) [ 1705.778380] FAULT_INJECTION: forcing a failure. [ 1705.778380] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.779474] CPU: 1 PID: 30930 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1705.780055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.780746] Call Trace: [ 1705.780980] dump_stack+0x107/0x167 [ 1705.781289] should_fail.cold+0x5/0xa [ 1705.781615] ? create_object.isra.0+0x3a/0xa20 [ 1705.782013] should_failslab+0x5/0x20 [ 1705.782338] kmem_cache_alloc+0x5b/0x310 [ 1705.782684] ? legacy_get_tree+0x105/0x220 [ 1705.783039] ? vfs_get_tree+0x8e/0x300 [ 1705.783376] create_object.isra.0+0x3a/0xa20 [ 1705.783755] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1705.784191] __kmalloc_track_caller+0x177/0x370 [ 1705.784593] ? parse_opts.part.0+0x8e/0x340 [ 1705.784976] kstrdup+0x36/0x70 [ 1705.785255] parse_opts.part.0+0x8e/0x340 [ 1705.785619] ? p9_fd_show_options+0x1c0/0x1c0 [ 1705.786019] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1705.786468] ? quarantine_put+0x8b/0x1a0 [ 1705.786812] ? trace_hardirqs_on+0x5b/0x180 [ 1705.787179] ? kfree+0xd7/0x340 [ 1705.787466] p9_fd_create+0x98/0x4a0 [ 1705.787780] ? p9_conn_create+0x510/0x510 [ 1705.788136] ? p9_client_create+0x798/0x11c0 [ 1705.788509] ? kfree+0xd7/0x340 [ 1705.788793] ? do_raw_spin_unlock+0x4f/0x220 [ 1705.789170] p9_client_create+0x7ff/0x11c0 [ 1705.789536] ? p9_client_flush+0x430/0x430 [ 1705.789897] ? trace_hardirqs_on+0x5b/0x180 [ 1705.790278] ? lockdep_init_map_type+0x2c7/0x780 [ 1705.790688] ? __raw_spin_lock_init+0x36/0x110 [ 1705.791081] v9fs_session_init+0x1dd/0x1680 [ 1705.791456] ? lock_release+0x680/0x680 [ 1705.791799] ? kmem_cache_alloc_trace+0x151/0x320 [ 1705.792201] ? v9fs_show_options+0x690/0x690 [ 1705.792580] ? trace_hardirqs_on+0x5b/0x180 [ 1705.792948] ? kasan_unpoison_shadow+0x33/0x50 [ 1705.793334] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1705.793760] v9fs_mount+0x79/0x8f0 [ 1705.794073] ? v9fs_write_inode+0x60/0x60 [ 1705.794398] legacy_get_tree+0x105/0x220 [ 1705.794724] vfs_get_tree+0x8e/0x300 [ 1705.795050] path_mount+0x1429/0x2120 [ 1705.795365] ? strncpy_from_user+0x9e/0x470 [ 1705.795738] ? finish_automount+0xa90/0xa90 [ 1705.796080] ? getname_flags.part.0+0x1dd/0x4f0 [ 1705.796452] ? _copy_from_user+0xfb/0x1b0 [ 1705.796814] __x64_sys_mount+0x282/0x300 [ 1705.797134] ? copy_mnt_ns+0xa00/0xa00 [ 1705.797468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1705.797879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1705.798321] do_syscall_64+0x33/0x40 [ 1705.798617] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1705.799052] RIP: 0033:0x7f93ecc32b19 [ 1705.799347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.800899] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1705.801492] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1705.802097] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1705.802702] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1705.803305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1705.803909] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:11:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 28) [ 1705.896369] FAULT_INJECTION: forcing a failure. [ 1705.896369] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.897324] CPU: 1 PID: 30964 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1705.897827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.898484] Call Trace: [ 1705.898692] dump_stack+0x107/0x167 [ 1705.898961] should_fail.cold+0x5/0xa [ 1705.899277] should_failslab+0x5/0x20 [ 1705.899566] __kmalloc_track_caller+0x79/0x370 [ 1705.899939] ? match_number+0xaf/0x1d0 [ 1705.900237] kmemdup_nul+0x2d/0xa0 [ 1705.900502] match_number+0xaf/0x1d0 [ 1705.900810] ? match_u64+0x190/0x190 [ 1705.901089] ? __kmalloc_track_caller+0x2c6/0x370 [ 1705.901481] ? memcpy+0x39/0x60 [ 1705.901739] parse_opts.part.0+0x1f3/0x340 [ 1705.902064] ? p9_fd_show_options+0x1c0/0x1c0 [ 1705.902436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1705.902825] ? trace_hardirqs_on+0x5b/0x180 [ 1705.903144] ? kfree+0xd7/0x340 [ 1705.903394] p9_fd_create+0x98/0x4a0 [ 1705.903700] ? p9_conn_create+0x510/0x510 [ 1705.904010] ? p9_client_create+0x798/0x11c0 [ 1705.904368] ? kfree+0xd7/0x340 [ 1705.904619] ? do_raw_spin_unlock+0x4f/0x220 [ 1705.904978] p9_client_create+0x7ff/0x11c0 [ 1705.905301] ? p9_client_flush+0x430/0x430 [ 1705.905613] ? trace_hardirqs_on+0x5b/0x180 [ 1705.905972] ? lockdep_init_map_type+0x2c7/0x780 [ 1705.906326] ? __raw_spin_lock_init+0x36/0x110 [ 1705.906700] v9fs_session_init+0x1dd/0x1680 [ 1705.907023] ? lock_release+0x680/0x680 [ 1705.907348] ? kmem_cache_alloc_trace+0x151/0x320 [ 1705.907706] ? v9fs_show_options+0x690/0x690 [ 1705.908075] ? trace_hardirqs_on+0x5b/0x180 [ 1705.908397] ? kasan_unpoison_shadow+0x33/0x50 [ 1705.908763] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1705.909139] v9fs_mount+0x79/0x8f0 [ 1705.909402] ? v9fs_write_inode+0x60/0x60 [ 1705.909742] legacy_get_tree+0x105/0x220 [ 1705.910052] vfs_get_tree+0x8e/0x300 [ 1705.910354] path_mount+0x1429/0x2120 [ 1705.910645] ? strncpy_from_user+0x9e/0x470 [ 1705.910994] ? finish_automount+0xa90/0xa90 [ 1705.911317] ? getname_flags.part.0+0x1dd/0x4f0 [ 1705.911691] ? _copy_from_user+0xfb/0x1b0 [ 1705.912003] __x64_sys_mount+0x282/0x300 [ 1705.912335] ? copy_mnt_ns+0xa00/0xa00 [ 1705.912626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1705.913052] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1705.913438] do_syscall_64+0x33/0x40 [ 1705.913738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1705.914122] RIP: 0033:0x7f93ecc32b19 [ 1705.914424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.915749] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1705.916354] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1705.916920] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1705.917485] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1705.918058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1705.918630] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 [ 1705.965892] 9pnet: Insufficient options for proto=fd 11:11:17 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:11:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x7, 0x4e21, @local}, 0x10) 11:11:17 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:11:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:11:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(0xffffffffffffffff, r0) 11:11:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:11:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) ioctl$HIDIOCINITREPORT(r2, 0x550c, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000100ab6d2a5e14724de76b47a2ff096ccab320259e9d0400513f57000000cee500e06e000200", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r6, r0) 11:11:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 29) [ 1721.415138] FAULT_INJECTION: forcing a failure. [ 1721.415138] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.416824] CPU: 1 PID: 31169 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1721.417827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1721.418999] Call Trace: [ 1721.419383] dump_stack+0x107/0x167 [ 1721.419913] should_fail.cold+0x5/0xa [ 1721.420458] ? create_object.isra.0+0x3a/0xa20 [ 1721.421113] should_failslab+0x5/0x20 [ 1721.421658] kmem_cache_alloc+0x5b/0x310 [ 1721.422254] create_object.isra.0+0x3a/0xa20 [ 1721.422884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1721.423611] __kmalloc_track_caller+0x177/0x370 [ 1721.424263] ? match_number+0xaf/0x1d0 [ 1721.424828] kmemdup_nul+0x2d/0xa0 [ 1721.425339] match_number+0xaf/0x1d0 [ 1721.425879] ? match_u64+0x190/0x190 [ 1721.426424] ? __kmalloc_track_caller+0x2c6/0x370 [ 1721.427111] ? memcpy+0x39/0x60 [ 1721.427592] parse_opts.part.0+0x1f3/0x340 [ 1721.428200] ? p9_fd_show_options+0x1c0/0x1c0 [ 1721.428850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1721.429588] ? trace_hardirqs_on+0x5b/0x180 [ 1721.430209] ? kfree+0xd7/0x340 [ 1721.430697] p9_fd_create+0x98/0x4a0 [ 1721.431228] ? p9_conn_create+0x510/0x510 [ 1721.431819] ? p9_client_create+0x798/0x11c0 [ 1721.432446] ? kfree+0xd7/0x340 [ 1721.432923] ? do_raw_spin_unlock+0x4f/0x220 [ 1721.433567] p9_client_create+0x7ff/0x11c0 [ 1721.434193] ? p9_client_flush+0x430/0x430 [ 1721.434799] ? trace_hardirqs_on+0x5b/0x180 [ 1721.435419] ? lockdep_init_map_type+0x2c7/0x780 [ 1721.436103] ? __raw_spin_lock_init+0x36/0x110 [ 1721.436761] v9fs_session_init+0x1dd/0x1680 [ 1721.437387] ? lock_release+0x680/0x680 [ 1721.437965] ? kmem_cache_alloc_trace+0x151/0x320 [ 1721.438661] ? v9fs_show_options+0x690/0x690 [ 1721.439295] ? trace_hardirqs_on+0x5b/0x180 [ 1721.439922] ? kasan_unpoison_shadow+0x33/0x50 [ 1721.440578] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1721.441310] v9fs_mount+0x79/0x8f0 [ 1721.441823] ? v9fs_write_inode+0x60/0x60 [ 1721.442428] legacy_get_tree+0x105/0x220 [ 1721.443008] vfs_get_tree+0x8e/0x300 [ 1721.443544] path_mount+0x1429/0x2120 [ 1721.444097] ? strncpy_from_user+0x9e/0x470 [ 1721.444716] ? finish_automount+0xa90/0xa90 [ 1721.445338] ? getname_flags.part.0+0x1dd/0x4f0 [ 1721.446007] ? _copy_from_user+0xfb/0x1b0 [ 1721.446617] __x64_sys_mount+0x282/0x300 [ 1721.447202] ? copy_mnt_ns+0xa00/0xa00 [ 1721.447767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1721.448514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1721.449245] do_syscall_64+0x33/0x40 [ 1721.449782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1721.450518] RIP: 0033:0x7f93ecc32b19 [ 1721.451053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.453628] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1721.454719] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1721.455723] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1721.456720] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1721.457720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1721.458718] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:11:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x8, 0x4e21, @local}, 0x10) 11:11:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, 0xffffffffffffffff) 11:11:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4084, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:11:17 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1ce, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cff772e7c396574eadcfc115ec5c1bff3bcbcde4c7aacef182a56b08", @typed={0x8, 0x15, 0x0, 0x0, @u32}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:11:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:11:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0xa, 0x4e21, @local}, 0x10) 11:11:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x848b, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:11:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, 0xffffffffffffffff) 11:11:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 30) 11:11:17 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:11:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x10, 0x4e21, @local}, 0x10) [ 1721.882208] FAULT_INJECTION: forcing a failure. [ 1721.882208] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.884235] CPU: 0 PID: 31491 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1721.885385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1721.886803] Call Trace: [ 1721.887261] dump_stack+0x107/0x167 [ 1721.887883] should_fail.cold+0x5/0xa [ 1721.888544] should_failslab+0x5/0x20 [ 1721.889193] __kmalloc_track_caller+0x79/0x370 [ 1721.889973] ? match_number+0xaf/0x1d0 [ 1721.890622] ? kfree+0xd7/0x340 [ 1721.891194] kmemdup_nul+0x2d/0xa0 [ 1721.891790] match_number+0xaf/0x1d0 [ 1721.892429] ? match_u64+0x190/0x190 [ 1721.893062] ? __kmalloc_track_caller+0x2c6/0x370 [ 1721.893884] ? memcpy+0x39/0x60 [ 1721.894456] parse_opts.part.0+0x1f3/0x340 [ 1721.895178] ? p9_fd_show_options+0x1c0/0x1c0 [ 1721.895933] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1721.896822] ? trace_hardirqs_on+0x5b/0x180 [ 1721.897560] ? kfree+0xd7/0x340 [ 1721.898139] p9_fd_create+0x98/0x4a0 [ 1721.898788] ? p9_conn_create+0x510/0x510 [ 1721.899484] ? p9_client_create+0x798/0x11c0 [ 1721.900232] ? kfree+0xd7/0x340 [ 1721.900798] ? do_raw_spin_unlock+0x4f/0x220 [ 1721.901556] p9_client_create+0x7ff/0x11c0 [ 1721.902278] ? p9_client_flush+0x430/0x430 [ 1721.902991] ? trace_hardirqs_on+0x5b/0x180 [ 1721.903702] ? lockdep_init_map_type+0x2c7/0x780 [ 1721.904513] ? __raw_spin_lock_init+0x36/0x110 [ 1721.905292] v9fs_session_init+0x1dd/0x1680 [ 1721.906021] ? lock_release+0x680/0x680 [ 1721.906712] ? kmem_cache_alloc_trace+0x151/0x320 [ 1721.907511] ? v9fs_show_options+0x690/0x690 [ 1721.908268] ? trace_hardirqs_on+0x5b/0x180 [ 1721.909003] ? kasan_unpoison_shadow+0x33/0x50 [ 1721.909776] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1721.910639] v9fs_mount+0x79/0x8f0 [ 1721.911237] ? v9fs_write_inode+0x60/0x60 [ 1721.911919] legacy_get_tree+0x105/0x220 [ 1721.912608] vfs_get_tree+0x8e/0x300 [ 1721.913233] path_mount+0x1429/0x2120 [ 1721.913883] ? strncpy_from_user+0x9e/0x470 [ 1721.914612] ? finish_automount+0xa90/0xa90 [ 1721.915330] ? getname_flags.part.0+0x1dd/0x4f0 [ 1721.916089] ? _copy_from_user+0xfb/0x1b0 [ 1721.916798] __x64_sys_mount+0x282/0x300 [ 1721.917468] ? copy_mnt_ns+0xa00/0xa00 [ 1721.918128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1721.919011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1721.919871] do_syscall_64+0x33/0x40 [ 1721.920492] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1721.921340] RIP: 0033:0x7f93ecc32b19 [ 1721.921964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.925003] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1721.926250] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1721.927413] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1721.928573] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1721.929731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1721.930902] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 [ 1721.932165] 9pnet: Insufficient options for proto=fd 11:11:17 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x110, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xf4, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:11:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x13, 0x4e21, @local}, 0x10) 11:11:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, 0xffffffffffffffff) 11:11:17 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0xfff, 0x8140) sendfile(r2, r0, &(0x7f0000000100)=0x7f, 0x100) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r3, r1) 11:11:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x22, 0x4e21, @local}, 0x10) 11:11:33 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:11:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x858b, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:11:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) socket$inet(0x2, 0xa, 0x2) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = gettid() ptrace(0x8, r1) process_vm_readv(r1, &(0x7f0000000700)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f00000008c0)=""/109, 0x6d}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f0000000480)=""/202, 0xca}, {&(0x7f00000003c0)=""/32, 0x20}], 0x7, &(0x7f0000000880)=[{&(0x7f0000000780)=""/224, 0xe0}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x40, 0x7e, 0x1, 0x80, 0x0, 0x0, 0x100, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0xf, @perf_config_ext={0xfffffffffffff24c, 0x3}, 0x8201, 0x8, 0x1, 0x0, 0x9, 0x9, 0x6, 0x0, 0x9, 0x0, 0xc2}, r1, 0xa, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r2, r0) 11:11:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:11:33 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 31) 11:11:33 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x110, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xf4, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:11:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) [ 1737.255162] FAULT_INJECTION: forcing a failure. [ 1737.255162] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.257612] CPU: 1 PID: 31737 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1737.259044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1737.260741] Call Trace: [ 1737.261313] dump_stack+0x107/0x167 [ 1737.262073] should_fail.cold+0x5/0xa [ 1737.262869] ? create_object.isra.0+0x3a/0xa20 [ 1737.263820] should_failslab+0x5/0x20 [ 1737.264608] kmem_cache_alloc+0x5b/0x310 [ 1737.265454] create_object.isra.0+0x3a/0xa20 [ 1737.266367] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1737.267427] __kmalloc_track_caller+0x177/0x370 [ 1737.268387] ? match_number+0xaf/0x1d0 [ 1737.269201] kmemdup_nul+0x2d/0xa0 [ 1737.269770] match_number+0xaf/0x1d0 [ 1737.270543] ? match_u64+0x190/0x190 [ 1737.271306] ? __kmalloc_track_caller+0x2c6/0x370 [ 1737.272292] ? memcpy+0x39/0x60 11:11:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x240, 0x4e21, @local}, 0x10) [ 1737.272976] parse_opts.part.0+0x1f3/0x340 [ 1737.274027] ? p9_fd_show_options+0x1c0/0x1c0 [ 1737.274971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1737.276043] ? trace_hardirqs_on+0x5b/0x180 [ 1737.276924] ? kfree+0xd7/0x340 [ 1737.277617] p9_fd_create+0x98/0x4a0 [ 1737.278397] ? p9_conn_create+0x510/0x510 [ 1737.279052] ? p9_client_create+0x798/0x11c0 [ 1737.279949] ? kfree+0xd7/0x340 [ 1737.280626] ? do_raw_spin_unlock+0x4f/0x220 [ 1737.281547] p9_client_create+0x7ff/0x11c0 [ 1737.282429] ? p9_client_flush+0x430/0x430 [ 1737.283173] ? trace_hardirqs_on+0x5b/0x180 [ 1737.284045] ? lockdep_init_map_type+0x2c7/0x780 [ 1737.284889] ? __raw_spin_lock_init+0x36/0x110 [ 1737.285808] v9fs_session_init+0x1dd/0x1680 [ 1737.286504] ? lock_release+0x680/0x680 [ 1737.287314] ? kmem_cache_alloc_trace+0x151/0x320 [ 1737.288313] ? v9fs_show_options+0x690/0x690 [ 1737.289229] ? trace_hardirqs_on+0x5b/0x180 [ 1737.290107] ? kasan_unpoison_shadow+0x33/0x50 [ 1737.291057] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1737.292104] v9fs_mount+0x79/0x8f0 [ 1737.292847] ? v9fs_write_inode+0x60/0x60 [ 1737.293700] legacy_get_tree+0x105/0x220 [ 1737.294551] vfs_get_tree+0x8e/0x300 [ 1737.295144] path_mount+0x1429/0x2120 [ 1737.295931] ? strncpy_from_user+0x9e/0x470 [ 1737.296818] ? finish_automount+0xa90/0xa90 [ 1737.297715] ? getname_flags.part.0+0x1dd/0x4f0 [ 1737.298686] ? _copy_from_user+0xfb/0x1b0 [ 1737.299543] __x64_sys_mount+0x282/0x300 [ 1737.300376] ? copy_mnt_ns+0xa00/0xa00 [ 1737.301178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1737.302252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1737.303324] do_syscall_64+0x33/0x40 [ 1737.303914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1737.304959] RIP: 0033:0x7f93ecc32b19 [ 1737.305730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.309471] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1737.311039] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1737.312486] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1737.313929] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1737.315347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1737.316785] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:11:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x868b, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:11:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local={0xac, 0x4}}, 0x10) 11:11:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:11:33 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:11:33 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x110, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xf4, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:11:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:11:49 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x110, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xf4, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:11:49 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:11:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 32) 11:11:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x878b, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:11:49 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@mcast2}, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) lseek(r2, 0x1, 0x1) sendto$inet(r3, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r4, r3) 11:11:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local={0xac, 0x14, 0x4}}, 0x10) 11:11:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1753.871456] FAULT_INJECTION: forcing a failure. [ 1753.871456] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1753.873112] CPU: 0 PID: 31978 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1753.874062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.875219] Call Trace: [ 1753.875585] dump_stack+0x107/0x167 [ 1753.876082] should_fail.cold+0x5/0xa [ 1753.876608] __alloc_pages_nodemask+0x182/0x600 [ 1753.877250] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1753.878075] ? kmem_cache_alloc+0x301/0x310 [ 1753.878685] alloc_pages_current+0x187/0x280 [ 1753.879283] allocate_slab+0x26f/0x380 [ 1753.879822] ___slab_alloc+0x470/0x700 [ 1753.880355] ? create_object.isra.0+0x3a/0xa20 [ 1753.880986] ? lock_acquire+0x197/0x470 [ 1753.881521] ? fs_reclaim_acquire+0xa5/0x100 [ 1753.882121] ? find_held_lock+0x2c/0x110 [ 1753.882706] ? create_object.isra.0+0x3a/0xa20 [ 1753.883334] ? kmem_cache_alloc+0x301/0x310 [ 1753.883925] ? create_object.isra.0+0x3a/0xa20 [ 1753.884543] kmem_cache_alloc+0x301/0x310 [ 1753.885113] create_object.isra.0+0x3a/0xa20 [ 1753.885717] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.886420] __kmalloc_track_caller+0x177/0x370 [ 1753.887065] ? match_number+0xaf/0x1d0 [ 1753.887607] kmemdup_nul+0x2d/0xa0 [ 1753.888096] match_number+0xaf/0x1d0 [ 1753.888606] ? match_u64+0x190/0x190 [ 1753.889111] ? __kmalloc_track_caller+0x2c6/0x370 [ 1753.889770] ? memcpy+0x39/0x60 [ 1753.890239] parse_opts.part.0+0x1f3/0x340 [ 1753.890838] ? p9_fd_show_options+0x1c0/0x1c0 [ 1753.891456] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.892163] ? trace_hardirqs_on+0x5b/0x180 [ 1753.892750] ? kfree+0xd7/0x340 [ 1753.893212] p9_fd_create+0x98/0x4a0 [ 1753.893725] ? p9_conn_create+0x510/0x510 [ 1753.894291] ? p9_client_create+0x798/0x11c0 [ 1753.894916] ? kfree+0xd7/0x340 [ 1753.895363] ? do_raw_spin_unlock+0x4f/0x220 [ 1753.895975] p9_client_create+0x7ff/0x11c0 [ 1753.896561] ? p9_client_flush+0x430/0x430 [ 1753.897139] ? trace_hardirqs_on+0x5b/0x180 [ 1753.897728] ? lockdep_init_map_type+0x2c7/0x780 [ 1753.898374] ? __raw_spin_lock_init+0x36/0x110 [ 1753.899029] v9fs_session_init+0x1dd/0x1680 [ 1753.899620] ? lock_release+0x680/0x680 [ 1753.900165] ? kmem_cache_alloc_trace+0x151/0x320 [ 1753.900811] ? v9fs_show_options+0x690/0x690 [ 1753.901416] ? trace_hardirqs_on+0x5b/0x180 [ 1753.902000] ? kasan_unpoison_shadow+0x33/0x50 [ 1753.902643] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.903336] v9fs_mount+0x79/0x8f0 [ 1753.903819] ? v9fs_write_inode+0x60/0x60 [ 1753.904378] legacy_get_tree+0x105/0x220 [ 1753.904930] vfs_get_tree+0x8e/0x300 [ 1753.905433] path_mount+0x1429/0x2120 [ 1753.905949] ? strncpy_from_user+0x9e/0x470 [ 1753.906543] ? finish_automount+0xa90/0xa90 [ 1753.907136] ? getname_flags.part.0+0x1dd/0x4f0 [ 1753.907762] ? _copy_from_user+0xfb/0x1b0 [ 1753.908329] __x64_sys_mount+0x282/0x300 [ 1753.908873] ? copy_mnt_ns+0xa00/0xa00 [ 1753.909399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.910106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.910827] do_syscall_64+0x33/0x40 [ 1753.911333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.912019] RIP: 0033:0x7f93ecc32b19 [ 1753.912521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.914993] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1753.916021] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1753.916976] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1753.917932] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1753.918914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1753.919862] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:11:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x888b, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:11:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:11:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x2) 11:11:49 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:11:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 11:12:03 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:12:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:12:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 33) 11:12:03 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x110, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xf4, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:12:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0xa) 11:12:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x898b, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:12:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 11:12:03 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e24, @private=0xa010101}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @local}, 0xc2, 0x0, 0x0, 0x0, 0x8000, &(0x7f00000000c0)='macvtap0\x00', 0x200, 0xc6c, 0x7fff}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r3, r1) [ 1767.584756] FAULT_INJECTION: forcing a failure. [ 1767.584756] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.585917] CPU: 1 PID: 32215 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1767.586560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1767.587348] Call Trace: [ 1767.587612] dump_stack+0x107/0x167 [ 1767.587958] should_fail.cold+0x5/0xa [ 1767.588322] ? p9_fd_create+0x161/0x4a0 [ 1767.588702] should_failslab+0x5/0x20 [ 1767.589066] kmem_cache_alloc_trace+0x55/0x320 [ 1767.589503] p9_fd_create+0x161/0x4a0 [ 1767.589869] ? p9_conn_create+0x510/0x510 [ 1767.590263] ? p9_client_create+0x798/0x11c0 [ 1767.590686] ? kfree+0xd7/0x340 [ 1767.591005] ? do_raw_spin_unlock+0x4f/0x220 [ 1767.591426] p9_client_create+0x7ff/0x11c0 [ 1767.591832] ? p9_client_flush+0x430/0x430 [ 1767.592240] ? trace_hardirqs_on+0x5b/0x180 [ 1767.592647] ? lockdep_init_map_type+0x2c7/0x780 [ 1767.593104] ? __raw_spin_lock_init+0x36/0x110 [ 1767.593544] v9fs_session_init+0x1dd/0x1680 [ 1767.593955] ? lock_release+0x680/0x680 [ 1767.594338] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1767.594865] ? trace_hardirqs_on+0x5b/0x180 [ 1767.595278] ? v9fs_show_options+0x690/0x690 [ 1767.595703] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1767.596189] ? kasan_unpoison_shadow+0x33/0x50 [ 1767.596628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1767.597109] v9fs_mount+0x79/0x8f0 [ 1767.597451] ? v9fs_write_inode+0x60/0x60 [ 1767.597842] legacy_get_tree+0x105/0x220 [ 1767.598230] vfs_get_tree+0x8e/0x300 [ 1767.598584] path_mount+0x1429/0x2120 [ 1767.598960] ? strncpy_from_user+0x9e/0x470 [ 1767.599373] ? finish_automount+0xa90/0xa90 [ 1767.599782] ? getname_flags.part.0+0x1dd/0x4f0 [ 1767.600222] ? _copy_from_user+0xfb/0x1b0 [ 1767.600617] __x64_sys_mount+0x282/0x300 [ 1767.600995] ? copy_mnt_ns+0xa00/0xa00 [ 1767.601364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1767.601853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1767.602336] do_syscall_64+0x33/0x40 [ 1767.602720] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1767.603214] RIP: 0033:0x7f93ecc32b19 [ 1767.603563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1767.605281] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1767.605991] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1767.606659] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1767.607330] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1767.607990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1767.608650] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:12:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8a8b, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:12:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 11:12:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0xf) 11:12:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 34) 11:12:03 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000060b40)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x7f, "411ab0b7f6aaeb"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000001c0)={0x0, 0x0, "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", "ed323e7a986f06e1ac8b729af2f909aa56b880bcd776d75fe18196fe8e48983de18eacc3e5dd130251e63739466661e02172670052dc6bbf791fffd3ca613beee3ef7ed2de47e6c62fac9bc657cf10cc1373826e52b3694d6e8ea40ec2275f89a912f3db31b5228db101200abfb132ec997ca480bce26eda5219d611b9982316366df71f31454c747c4d70b43bc042f19a866e72d1adba686756788e765effc26343923a55d3b240c38b7c1c96ee3a6a8f38009a80ccd3361e45069e8269b50f1f699ccd86069fc80156a32c2fc9e0be31ce4b8002c958ba40a42ecd87293a04726995c40728f6ad77e57266f4ce742e2931c8ea916fd9e43658eebd6bdaa1edf26a9d5801443c58d510ca58f620486fbb2933f6cedf23f49bff0b14d2319c5c8ec729a60266a394758807bc0c4a525a09043bf618164d17d999378fa73e411cb077568d122123eb7308d256ed69875a826b4f53d7a041ea106f5fd2fdcd4d23904294295132fd867618234441dd91237c3eb694824748063902e9714e409af1013cf1bd385631ceaa71e6b0888f09d52bd208e50212d1af405b51d9567a2651f483fe88bbae9346a8a184e7070209f302830668e10b7db4693fb87f64fedd3198c128870d17efe30f4b6976f56ec4f912a308b2fda759ccd74ade395a5d0ccd727609434533c2ea78423b71e7d26f41ae7c10100512cca8af12c24da41f9661b736d003b28e728341fae3291edf6ad70d9bee3b69b010f9cd10c092ef5808a86da5e765c5706b9ab29d8249297811a8f87684b5f3eb7b1cbfcaec82b1a20c2e512cb838da1d8743a4a380f78ceb24fa32f5ffaef68bdd94ca627914ffaedd758cc1e6e7c3de82ee76830a51cb0778a4db10fe6ba02992de070d17b18dda1b73b229029b72954a9aec713b30d7b021bb64693c4399a416aaedaa44b012c37eecc4aaa4e72de9d9005cdb21a9a8674639c477f2503b24fc01d54cb0470f668bb205f55f371e04992eb68949783097eb77ae3c41e4697bf242fde65c230f1884fb6609c33af8491bd61a47fe1afa9d4ea653e1e9dbf1ff9b2a41f1d0b2cfe695d28540b765e4b85290332b2e593cde89259ab8d050cf86c590c848996692d4ee8a41a96975420878114f703df05bcf163977b825e92f1d2aab3ee06a0973637d83128e3a8cdee998f3023130e15126d1365f191649a7b302bd9b9260ecd22dd91765cf4e01f232e3b2a495ba6f35471d989ec0b8b5c7e6d21ded8297dc826764066b04b700d244bd08670fc924fcdf352477ee1f1bb2bfad23332300e36f18ccd133bbf74e65bd8f89b3c001321a9a1e015813fd7b886fd3ea70bbae1e76f68ad77c58a0448339aa731af891f225a08908f1bc8ae17f670ad231a0fa97b9cb89edb3a0fa793b9b499cb3e397e4b218edb0ce6fefc54dc9f85c316b21559520ee432a516aa489844644cbc5d8d7b4d8d997568ba99871616dbbcfecab93581a1021e7c23fdd68bf69d4db32be8ed457ce002d4a5c661c9bd54f5b2ea9974d679c89b080fc6b1df208a3ed795251dbe2a52b00229e409eaa924706c47fd500e787896c2f1cc8d71a3643b87fbc7fcc3c05e6b2540bb8b1022cb1c26527a9c73df08b3e86267d25338084ba6fcbc05594105c7cf0baaaec4d617dd354917ac7080d86512f26fa39390351c7b41b8dce9413fec73269eed942515aeb2dd500e0f70fabc23ffbc15a0a5d4a6d7b0d7a26ef9a66e87ac4416d1618b28031aa1ecd40133c32f458fc77c901f6446dd0d147da86ee56efe4941d51453747f894a9a83105b25a73561daf26ca54385214c9bcdc5ab3ba1ca1a6c886861b917c0de73e408bdf8db5c3c89c0a9023441865dc2a4391bf5e28a7a9595a0167bb3855cda75953340af18455af3871ef975a48a3359c0eef6b995bee6ab91c4994be2b213770b52b6cb78883f9f03ac673351dbbb3890d21413d80ec4e9daaff8b51e54f53bac746901cc94dc029147b21ff568379de776744646f569b50debe6525783f24d21822eab77c9894844163af0435e3a0983f6d9f6779cead3bf79ee427a1edbba7ab79ce16345c20bdf5f6efa69c0b48fe90ad6c7af5c2a82c284bcc045890e18af5066b9f7b97852b1f80c14a56a6fe02658b2a520f0abc24ed351a455040e914acbaa94e3e4951acdaf9f8482aae43c6325ec558efde8c83103b10e6718bbf47b3d60c5b6025df73f9a013226f3287c8497d9b1796422fa6ddc1c33eb01ea7b330445f58a1e244a2f7b54a521d08e6950922a4fab6d11ea894a35bb8afdec424e03840d53de572b0fde80f6c95e0fa11080bb7154ffae566ac09b31ec875d6c4abf4e4811ae9abb87286314ae0b9a721bbf590ec83e6e996796faaca97a4eb156827e841cf8d48a3f3cc38b7775421cafe184589f71a4226cc47282ed935ca2822ab9dbb3051e8e47faf1da0a66d2ac08e5ecdd9cee55f4d6eb85b17506448388ace3392f81af528b0e3ba98c5ad25f2e772f6264a67e5e7a9f2d453c41daf0b88b6ba514c4844bf75b4e935d21fd4fd1373ed133c178ca306c626cd480ba65272f49ec01949e9eacd7db71e60977a59ad9c50d19dce3cf82579d2be413c729b047b71f3130d0b309d212e9410f8f82ea1873444ecbf348ada3eaddffbc539eb476395fa1765f8e9fdccf570816bba1ed79b55e27b066cf8cb8e651c53d42086f095c17addec05758af02218fbf3b96783091c8b2b7443ac1f2dbe87188812fb56c5e61541331e5b8510c9f36ecd40f905d3c1442f3a4665ed878a64d9afc4d6f56ad0cd0cf00a7ded407c45ea8dbfd74a63e81da77fee93e40a0102eff927f1071e7a97278f0f73c88fb8b29ac943c0a0ce33a3e8936bd4e7160833d7e9803d15d12a72bedfec264a58f7093665b6ee79281e341ffa843b5d59db8a228dc77f76e28a21705cd58299f66cc3d8910a3600de6f9383c175113599820fae4222705f193bcc6823f95b78e7c328643f3ed8262ece81fed031f965b7667fd5fa0da5e94bd5728e3e6b0f84d286d88d3f8c6b4a0dbc84d9a4e809250eb267fc41b26ef5e4f6b6085a796599dfb1d44edb9c6a048cac57bd0d93e2374e2fd336a2a6eaace362be6d6f163b616a7fdb8ffe1e1b1dfac09de660dbb3fee1c878d133f1203246a8fe2aa1ea444efcf42044d4c0cde2ac8020c7f157b687a05f45bbc0516acc2ee50307533760191555e2bc971be3e7970afe7e102588e3735a505685dfabe7890f023031365fa020cd7f87f8b47e565b5b218d0105b96e7287d03f018ed89a16e34e8508de03eb7bf982f84c4e55de44bc5807cfa9443bf50ebc2821c99405347067ae78ea26f4f03148bcd33509e3563f86344d0aa34e4c3b8845144bc78fe1801aca428fa7ad4fec399ea9f72118d65e118a1be172d5aba0cfe33492fe60e8ced6cdc38eb686dc2c13fe769b600a46b5948444539fdf6c9ef310c176a0e5767fc065c93e300466e33fcb2fd14871e0284e7da2faf1790f497ba1c8ea657fb2f5d703de49d97ff3524ae48b52c9bb87292305969ab6d3b31848f4655bb162a3275e0ccc67e2a7a9b85a387528d574e8b910774b00578dd89c6d6bce9271a9cdad4c319c6bab99ac66c91e967fe57ea8cd3e3d779723e72b84a72e4ccfa9e827296812987ef2faeab8725dfed9d93b83348bcd739cc20eed7ee97c1f3e557359dbe3e7174372d4f4a7a8866be26a6238d759fb194dd23cfd2408323d114adb0dc9fe65217455fb455671eefc02c4efad159f144f7eed0089da0fc665296e03a3f8ce6e609e7a69426f7960ee6a92dcd07c519743d4c44f09ebda5521e7fa7a46121db77ea0cb87a39403324f9a9dcfb4f87d9097c2a3e86be5b83ad9d4ba934753b68ce9b17fc400e7d7bb2d3434733b37ce7cece76fe7325b4e8b97f947adb23e327e7ffb33968588672390d05f3d0ffbe46b9faf9e31d77ceffdde5fd4b8d6a727808e8661c20db42c6c89eaaf6c696a93ac0d50698d622537fd0fb7b12b26a7f8e027bce51fdb4cc97bef1ab1566947f15a6a4f0593592f7433af69a50820863bdf05d4b6d863cf3a81970325ed7e5759f40da026e62e45fd2e6516c9f4723b088b3179eef20a7cac01e6bb68a5372f56ff6bdbe2c7831595737dd49cdad3fc9ba8f3526968fa0bd25c14ba08b2bffbff9e18a4da7077ff979b2a8270c64d382aca8269c9b58151a8ae8a2bca51bacc476bc221ee18c22cda177e16297f4fcec2c01f3e6ff3d5a4836231faed91f259ded26e5c872a64cfcb0c4d2c941d421104920aa26e4b13455ac526f7038d6246c277d11fdb9f347898289a31b6d5bdcf60ada9d0b4041417481ecf27d1b4e12524ca7a8000710c8955f456ef696261416e72f6e6cf5ddfac0ac34fd973395549ad8e7ade8f993823402fd6a07c547ec754bec14cf6af4bb467e95b84de8ec231fe86df5d628e75d13b081309acf39aca88f660b839d24cf86394ad4a9572c1b178802255601977b1abf9d090a38fce9f42ee7d5ed5cd80f573944c560f1f0f5fca0f44b56057e6e487f29a6a2e618ea3e317e18b78ce182085027d95e5a89ea733441854a6c6d98a83e5c0d506d71ab83268df171d336e341bd6194205d695efe3113e0d3ff8cde46be88ca0fd9089c1c83e70e9c5c999de30b976e009659993a94867cff27837ee9b7bac217249a080fe41179da67e3437abe8c338016acd3a60f86f4db81feacd5121f389bb180897b20e7bf9440058e44483288b62a59930bd5a5a65cd02b92d38a1bc9786267787c82c8aae751421a047d1ff35de8c4f6233f36d607ece2c3ab146492f3db435eab18d0c411f6f42a13dc4f3c375165e2d779646ca459bf884f5734c5e76bb1aba91a03c08753c66402c9a1381e60dd7bff9ac3d82f12ffcf42922fdf15f30a64a3ecfe3fa8ec42720651ff5c057acb8e897f0b70771a713164eeb19478957e4a63265bd0646b143868b69a0287b3d0670b79d43c2dea04904a798aab61dd8d33098d664a8753a04a04080a39453bd8c895fe0e24a593dc930795b3be7a6569dc45e2bb2308473cadf9d26a676722c16e7ebc06305b668aa0f4e29feecb7513890fa8037df418dc46d2f831ce01aad72e669206a0324a8d023f091afbda9a4b79ec2c8fcc9b1e04813f25e98c024e96d39fe994b654ea98dbac9e202b50b9b5cb010ddc4226592e57459816e1ae41eda59b42c0d0db22cf9989694b35d25d657cca06e7c162724480247454cbf97cb05c7480c7fcba1ae5fa670033b90d665d42b7dbaf934313de364de84a6db7f2162a5d11d2d4589039562297828a2b4f17741dff7a9f0dabd9f77aafc35aeb94b095d2655ba1d20be62ee7f5bf944b84add485f35fb198f5f96bc98f3efbad52c38"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000011c0)={r6, r7, "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", "53bfde95e54eeb7c77766d22d71a89267d84ab879c427eadcaf8605747dd022c88ac3a4c3e797874eb3136c67dc7093ae489b7668677ea54fd9ce6938db6218129445e901e8add967cd8f206e102b1dcaeb2b0f94f76d7fd2dce1b0724636d96ee005c184e180fc007978c985a1c620bc86c0a3515f33720ac562cde1bed5a8e923062a178d1555869d03ddf5f6b0a06bd8fbab32d25d7a5d31fadd2334afade2e00cfca7dc9bbb95dc9dc23c3852a61f444df3cc401bd534852673f380a9e6e7c17897a2544b478d6d8e5e20d800ae8d2d116194199026a0ebf3f40eb1179ae653b68da7a61740fdfc05c533ce914d4d589da37b6f3786f9c4ea87d2effdeb92d6f92c423b44526ba8891eed1ea2a2cf03244857164704d2148939a67611e1e88a7fdd42a5033f5efa9ef0a48219ba1a332a870fbf7c481d21286f1e49e856c2964e5b1aa3ec2c79d5dd1e1ad1c16b83ec1384d4bf4b71533bbb57ecbe05fcf68418e9bcb4458386dcd0e87623dd6cbe522f74c39de5e0d92100e0df1517b60598dc906e263801c69fb21045f5412f7537799cfa63b1e96730b0aca56377a7c36134addcd9ec946dff8fab702000881df0b674183a00df41a43f27411056efa4482e35f47cec627bec4689f311c8d7fa61fa3a37f451d8a357e59105f4fd06a1f691e21437486b7f676ef6592f91c89eb80fb88f17d207b2406ba309d55ca6655798db70a9c02cc3d902163710fc22c61a5dfcbde3fda0d2ed874ac66d348a2c29b59f86902197b615426f2e71d2ec4f2afc43972e26353e4c7cfb1f9d5f4dd378e29031c65ccc91dd075e4213e2484fbb2f7c392fccdcc9e92f98acff6a869781d571d9c37702f8ca0de8d995406dc5414c82add4af22230cd245665646a5e781f6e35c5b1534a3ec8d78cd4fb8c60e910f3507dcdb87eb84f8fafba81d63b3cb108b75984d29b6e6612ebcd0714292fe70d9a54a59cf614fbff1f1b7097f7823b23b5599261158ca7dc4c91741036664eb8f9527fef727deaa3848c8caa1fb009c11c75d49d865a725eb87b6a568df9d91c4b471a1a5ad7a44923af8dd74b8abb4b7852ad367e4401297eb6c8b6beab34b651b8c8ef4b1ea5d0596d0f7d3f44ea1f040f92b8b0e614bb812d70bb1a74d9b59b926b6c273ba094120461cb93ff5a8a3e9ae6f14313411a0b9b0ea9ca6711c5e0f695d46818c54da4e400f752f48e771a77d82387552f81cb74f922999cbca2c9810c8491771f3b46efb8738f8351e8f37b1140e2cc20d86c7801060e90208f6a2d8a33255cc5babb2a5a67b5c4cfc29e8e3f9555db8a313cccd03a14fd74ff53ab109a055624e4ddcc2cd77d6abe82d9dfaddd09c32382615df13c7c1979885c94b79ff3269bb4ce9e0cd46ac430549a5cd29b586e9fee03d89f84fe9749d86757946a1192653db5f0f6e68ca043b7e9ea1060fa52d25b4b24b80fb756f1fcce185fa251c237753b8324c3fb418e93fe207fefae0f87440176fb8f245ee88e9f492c1ced2f3f241bd1fddadb8492fbf8101923639e2b05270b20eab713fbe37cbbbb621549ce71b8606575ff43f4c9d07df96112f83928bfb4a62d59f7d359555951e55260c9dce89ebc9ce534f5b50bcb9a88e5e59e1223631d7c653e478a5bd5df6424a99bd2d2416ddf3d9dba24abcff95450f5d2aadcf94fdf6368bb92549b5c0c33e8d5140032753ab23154919c8a1b3f26a635b27e32d3082b9133e86023d2d00ed7e87ae8c6c74fb49c88af4e0ee701debbfd2889c92a6dbe7bb780d267155053a8fd4fa984afdbc0b09f0031ec2a2fd977a4500abc051f1674aede0c8f870775f551f176bcbbaf92f37aa7566179752ef89e8307af945a2949fa88e57d0ff16d99b20bd18e201a3f2d20040473e7b377608ef8a085278ad4b4a0de42122a73fb07e74eb5b5e36c75725f733629f239a617734c288117242033fa4682986d4480b7c89396ce32e5714317d869e81102cc661c4b09595ad710beea91477737c2c3867ab016842fb07cc0c9862442c7237865c4a66de0eb37464f629b1b41a4626c1543778edcf1a1d3f2e0d50a2cbee462636aa089fa550ed66ed41d13a90fadb746e27ba136a5628c7c7a26647163b49c2faf55f2eaccd6e0d52bf2dcd8410c5ea376b952e331e0318e3d560f12fc6a2bded93a1b7abfc3d835aff3ac42863086fe5c811c3794828ad4f787bdb96c90cb9878b34e68f938c80b7bd73b0e016c9bcaac6c211484fe1e5a9e94e4b818685f0d88b5e370131eb18905875c98def845dc9d43e9966cb42b186c8ac9537324c5cd6333726dc59ac2666e2e8b96cc43fbdd8caed04c441266afc6f86601881c5307fbca09915e564459d2b6229604ff310b8b381d0734355ba3b9e2a1609a9b60ee8ca2bc376fe6c377a44541e0a4dd6d46d77d07d356ea7a3b18331814a2b65aa53e022b34094a98a74b362f5b1211452b3f533e46963b43cc23e0e8ae31f592565805dfbeb30ba1d306d5fb44d6885e370182975fc909739bfad7c1d62c9202314d52b3a2c39549ec2092f16b1f305300f3da6d90b571f52dc74c7ec882acd7bbb0dab4ef3fbf13bdbd57ab8f8a7b68b312607916b7add450bac9e52310df2898f235364c814379d6db71fcf9096c105d5c323a924cd4ce518a377386c7b76fe92da8ffeeb68228d9f67819505ae91917bed9ef2e1c578e3d0ec58f050bfa3c9a61945e64a76e5c6037ac7676f2f6b50612cd5929ac9d83645ed729094a7c60bf032bbd449208eafc81fcf5ccd396a2483d42579fa4e45823eadb6f34194af4e093fffe1ef7761e74819bcc8558226e2338d5d15d1a7a8eaf7fb51e415dde77617749ac991da6f92d5d6b572070f57b0d076f8a0e6e2fcc6a592b17c2674eee22de6f6283961058d6361518663899a745a8dc2ea444968729c12abfb04f8193bea07cd4c39f8ce0ca4bdaf58d753af2b93751105952cb3c8ee322c80f4426aa1709054a45ec9883ff4297a227306e829f524519672db2d1b72cea83f964344bea9778adf95624097e443679f9b64db5cb6b49df947040561f61b33286e1268191ca0c41e966e46209144ad39071a6c5e80783a8e363c5c8faf41c658ede52033ebcf63d6c485d2789ecba6f07018f59fe02edc129f9bd2057874b4f68f09963057bafaf1c39664bc75176713b781528808f634c43305e26e46de79c54a1ac296aee42672fb45fd46166a14c23408fea02999450e0cf794ab310fecbf2bbd1e308afc3a7f9f532a771b09b0bbb9fd595c59fe542b96e114b71094e2aba1d933ee648d41137efdc3dd360f186d2c194acd211dfc36afee25803aa3488278308904bbf1710c364f39f4364df669f97a25eac9aa065144f60337dd7046dcfb932a0d0f105e7dcfd769ff1491e56a329b8353ec40508626b4c52d0cac2fffca68d0966a51f391f5484fd13770c43bc0249da94f24423f9963b351dd3fa6de36f9a3fb71e3ecf2926dc9ca46cf1166efbefaf6070f6898a4017aeb1c0604137bf707986a602db78ab229717cfa19ba9510ab021df6bdecc73c8a45a8de07b7c36b4af8915eec8f3b28cbe5e91e35d8f4b57b23c37476c13cd38c332388faa969fa14eee2e57d8e2e9ba76ccaf05cb9f885e1a204a07624bde4d55914c20d0250693b528c59e03392f8c86cc0cd5d482dd8bb677bb19312bb27e8cbd887e32e4b139f6231cbd79e011f810b66f0254f91cff1597ba49257ff3305ef96f7ca1ceee85c43c1bfd24fc25a8366992ef6aa668617848ac1faa2b7384a0611c09cea624bd76d6bb99c8a7ee4b169dabc0507436984740b7b6798beb9113e1353f1b87e3ad60e39a3d8a1091193a77b575229d52f23991fc38a5fcdcf793c88eefea7aa347da47d81ef0e0ae4a95f3e83a5af785743ce5d086964bb80242f9cb02287ccfd39c7b2e215445b1d6d1b8a46070ed23fb9cb70cbdd12bb97a87b37af7723ce14f956e3275b4b471f4c1b0eca897ac25f89f51dbf080d2a00a11fe17fe6ebb38ec6495d0fa239cb22a15a607bd5b483a2e14458c12e234975671f3b4a92a762f06f6a5ba2248e58b86e0f35ed4a273739b3c90b86c9e485a5cab20b53bf410cbff07c45a62431ab19aa10e947b3841a3834b64225eb6920d711a40b8bcaa8739a748c01cbd579a08b0570052a3db903bd19088b67e03c68a464fc1d133e7d47cc6e30657c87add7f8ad477c09cdfb32a415afb84ff52da70c596127b2244dbd0f2c32a97e414a3737be9dde6e5921433d9859e4ce1805b2c011b60b6e73700858edae20509a5ead0b615b9060ebe2ac5a9688fc0521beb80e6f4a5b31243e08763b3bbf5dce7f707551ff3a490656d2c91af0665bbfff5cc20a582102ee0561c9f7f4553b6682cf43821e09fb3a8bfc6e90d4301afc697645684a287833a92fceab82933540594c056b402d6123875cde2422ded2636151d4eb91883096b4114c2896ae7904e8803d1285b2580da7d6ee52052ccbdae2268072cee2e65a03ed559ac11032597e51e943e26158c3f8713f01f03d94ee90a18956ee07f84878cca32f5ac462f5f15be9afdbec3262d03d3925e9e507d476e0edd8444f3626acd38ee7d75f8a8fb7882a72e2901e5c8ad3d483a6f4a4110882713dc06e6b58cb7d1aaaf413715896ea7439ec620065b6d99cdce92997e95907be3974bf92196a1d8268d02cc4a62ad05bb5da91ad5b096d3c1f4b0f39bd9c4ee9b1daee38f0b09b506d98824569bae4062138dbd6a2665cb59844fcbea02212e3631ece2c82f789363653c6555f4786e360f2803f7705e8e99a2c5e7047fbe0f48092ffa484e19c4635075a3a2dba709dfffa6c11ab5903ab313645a6763ef9214cf3f5a933b1369d37bf14cef59604c7eae34ab8aaddb6dea9e3823e55a2f3c8f87f2cf40026f8e0995d92622347491f989ccb421f7fb2706c2ad18e478ba716abbb2f9b836f803db57b8019498f908b0ec19bf2ba40e5084539fd3ae3a08e99ce7e7e6ac6d02548509572da2db19397e142fa9c146c788613265c03bdb14b5f60470f908dad8347cd4265b135c151b505a58e8d8d5c0e3322111011f24d3729ccdd9cb5fb1808896ec8c95083e4d40d878049376a33ee23aa52569a5b2c8af5bc2c974f46bacf3a63b895971d5d2d844f037fba1f3f521fbf2258e8040745e62dbc33b47d8f8c1425497a1cffc87132e3baec05fb67bab746ab630a397a7c8af610fd4a171d230b9f9671bc3945727b3f56ff2025302fd77177ca01387beb7d02135b7e61da9c62514d28c29791b86f1925e0508b5d051d13683ff5d3751c34a120cd51f630bbdb171aa3e676d7b8b99c6e032d435a5dd232d2375afb60101359f1b7e606a7968fc9556c56b94589c27c3"}) dup2(r2, r1) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000000c0)=0xfffffffffffffd25) 11:12:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) [ 1767.786909] FAULT_INJECTION: forcing a failure. [ 1767.786909] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.788107] CPU: 1 PID: 32402 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1767.788706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1767.789416] Call Trace: [ 1767.789654] dump_stack+0x107/0x167 [ 1767.789985] should_fail.cold+0x5/0xa [ 1767.790335] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 1767.790797] should_failslab+0x5/0x20 [ 1767.791135] kmem_cache_alloc+0x5b/0x310 [ 1767.791494] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1767.791938] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1767.792387] p9_client_rpc+0x220/0x1370 [ 1767.792731] ? p9_pollwait+0x1a7/0x210 [ 1767.793072] ? bt_sock_poll+0x3ef/0x730 [ 1767.793426] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1767.793883] ? bt_sock_unlink+0x1c0/0x1c0 [ 1767.794253] ? sock_poll+0x165/0x510 [ 1767.794576] ? kernel_sendpage+0xd0/0xd0 [ 1767.794948] ? p9_fd_poll+0x1e0/0x2c0 [ 1767.795293] ? p9_fd_create+0x357/0x4a0 [ 1767.795637] ? p9_conn_create+0x510/0x510 [ 1767.796000] ? p9_client_create+0x798/0x11c0 [ 1767.796380] ? kfree+0xd7/0x340 [ 1767.796675] ? do_raw_spin_unlock+0x4f/0x220 [ 1767.797058] p9_client_create+0xa76/0x11c0 [ 1767.797434] ? p9_client_flush+0x430/0x430 [ 1767.797808] ? trace_hardirqs_on+0x5b/0x180 [ 1767.798182] ? lockdep_init_map_type+0x2c7/0x780 [ 1767.798595] ? __raw_spin_lock_init+0x36/0x110 [ 1767.799003] v9fs_session_init+0x1dd/0x1680 [ 1767.799372] ? lock_release+0x680/0x680 [ 1767.799731] ? kmem_cache_alloc_trace+0x151/0x320 [ 1767.800143] ? v9fs_show_options+0x690/0x690 [ 1767.800537] ? trace_hardirqs_on+0x5b/0x180 [ 1767.800914] ? kasan_unpoison_shadow+0x33/0x50 [ 1767.801318] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1767.801759] v9fs_mount+0x79/0x8f0 [ 1767.802069] ? v9fs_write_inode+0x60/0x60 [ 1767.802429] legacy_get_tree+0x105/0x220 [ 1767.802798] vfs_get_tree+0x8e/0x300 [ 1767.803118] path_mount+0x1429/0x2120 [ 1767.803452] ? strncpy_from_user+0x9e/0x470 [ 1767.803825] ? finish_automount+0xa90/0xa90 [ 1767.804195] ? getname_flags.part.0+0x1dd/0x4f0 [ 1767.804603] ? _copy_from_user+0xfb/0x1b0 [ 1767.804967] __x64_sys_mount+0x282/0x300 [ 1767.805324] ? copy_mnt_ns+0xa00/0xa00 [ 1767.805665] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1767.806130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1767.806576] do_syscall_64+0x33/0x40 [ 1767.806913] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1767.807350] RIP: 0033:0x7f93ecc32b19 [ 1767.807681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1767.809233] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1767.809896] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1767.810579] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1767.811203] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1767.811812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1767.812428] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:12:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:12:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x3c) 11:12:03 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:12:03 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x110, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0xf4, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:12:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:12:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x104) 11:12:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 35) 11:12:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b84, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:12:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:12:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10c) 11:12:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) [ 1768.034443] FAULT_INJECTION: forcing a failure. [ 1768.034443] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.035408] CPU: 1 PID: 32593 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1768.035962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1768.036622] Call Trace: [ 1768.036849] dump_stack+0x107/0x167 [ 1768.037147] should_fail.cold+0x5/0xa [ 1768.037457] ? create_object.isra.0+0x3a/0xa20 [ 1768.037830] should_failslab+0x5/0x20 [ 1768.038154] kmem_cache_alloc+0x5b/0x310 [ 1768.038510] create_object.isra.0+0x3a/0xa20 [ 1768.038878] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1768.039296] kmem_cache_alloc+0x159/0x310 [ 1768.039638] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1768.040054] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1768.040460] p9_client_rpc+0x220/0x1370 [ 1768.040782] ? p9_pollwait+0x1a7/0x210 [ 1768.041098] ? bt_sock_poll+0x3ef/0x730 [ 1768.041416] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1768.041840] ? bt_sock_unlink+0x1c0/0x1c0 [ 1768.042175] ? sock_poll+0x165/0x510 [ 1768.042472] ? kernel_sendpage+0xd0/0xd0 [ 1768.042810] ? p9_fd_poll+0x1e0/0x2c0 [ 1768.043123] ? p9_fd_create+0x357/0x4a0 [ 1768.043439] ? p9_conn_create+0x510/0x510 [ 1768.043771] ? p9_client_create+0x798/0x11c0 [ 1768.044125] ? kfree+0xd7/0x340 [ 1768.044392] ? do_raw_spin_unlock+0x4f/0x220 [ 1768.044751] p9_client_create+0xa76/0x11c0 [ 1768.045095] ? p9_client_flush+0x430/0x430 [ 1768.045434] ? trace_hardirqs_on+0x5b/0x180 [ 1768.045784] ? lockdep_init_map_type+0x2c7/0x780 [ 1768.046176] ? __raw_spin_lock_init+0x36/0x110 [ 1768.046545] v9fs_session_init+0x1dd/0x1680 [ 1768.046905] ? lock_release+0x680/0x680 [ 1768.047228] ? kmem_cache_alloc_trace+0x151/0x320 [ 1768.047614] ? v9fs_show_options+0x690/0x690 [ 1768.047971] ? trace_hardirqs_on+0x5b/0x180 [ 1768.048322] ? kasan_unpoison_shadow+0x33/0x50 [ 1768.048705] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1768.049120] v9fs_mount+0x79/0x8f0 [ 1768.049409] ? v9fs_write_inode+0x60/0x60 [ 1768.049746] legacy_get_tree+0x105/0x220 [ 1768.050077] vfs_get_tree+0x8e/0x300 [ 1768.050378] path_mount+0x1429/0x2120 [ 1768.050696] ? strncpy_from_user+0x9e/0x470 [ 1768.051048] ? finish_automount+0xa90/0xa90 [ 1768.051392] ? getname_flags.part.0+0x1dd/0x4f0 [ 1768.051770] ? _copy_from_user+0xfb/0x1b0 [ 1768.052114] __x64_sys_mount+0x282/0x300 [ 1768.052439] ? copy_mnt_ns+0xa00/0xa00 [ 1768.052753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1768.053174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1768.053588] do_syscall_64+0x33/0x40 [ 1768.053896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1768.054308] RIP: 0033:0x7f93ecc32b19 [ 1768.054609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1768.056070] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1768.056680] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1768.057243] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1768.057814] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1768.058381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1768.058963] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:12:18 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x180, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x161, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aea", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:12:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'veth1_to_hsr\x00', {0x2, 0x0, @initdev}}) 11:12:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:12:18 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:12:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:12:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x20000150) 11:12:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b85, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:12:18 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 36) [ 1782.297981] FAULT_INJECTION: forcing a failure. [ 1782.297981] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.299958] CPU: 1 PID: 32723 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1782.301034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.302317] Call Trace: [ 1782.302735] dump_stack+0x107/0x167 [ 1782.303316] should_fail.cold+0x5/0xa [ 1782.303917] ? p9_fcall_init+0x97/0x290 [ 1782.304546] should_failslab+0x5/0x20 [ 1782.305141] __kmalloc+0x72/0x390 [ 1782.305694] p9_fcall_init+0x97/0x290 [ 1782.306297] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1782.307096] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1782.307892] p9_client_rpc+0x220/0x1370 [ 1782.308504] ? p9_pollwait+0x1a7/0x210 [ 1782.309119] ? bt_sock_poll+0x3ef/0x730 [ 1782.309740] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1782.310559] ? bt_sock_unlink+0x1c0/0x1c0 [ 1782.311214] ? sock_poll+0x165/0x510 [ 1782.311790] ? kernel_sendpage+0xd0/0xd0 [ 1782.312427] ? p9_fd_poll+0x1e0/0x2c0 [ 1782.313035] ? p9_fd_create+0x357/0x4a0 [ 1782.313659] ? p9_conn_create+0x510/0x510 [ 1782.314303] ? p9_client_create+0x798/0x11c0 [ 1782.314993] ? kfree+0xd7/0x340 [ 1782.315501] ? do_raw_spin_unlock+0x4f/0x220 [ 1782.316183] p9_client_create+0xa76/0x11c0 [ 1782.316849] ? p9_client_flush+0x430/0x430 [ 1782.317496] ? trace_hardirqs_on+0x5b/0x180 [ 1782.318163] ? lockdep_init_map_type+0x2c7/0x780 [ 1782.318908] ? __raw_spin_lock_init+0x36/0x110 [ 1782.319608] v9fs_session_init+0x1dd/0x1680 [ 1782.320274] ? lock_release+0x680/0x680 [ 1782.320900] ? kmem_cache_alloc_trace+0x151/0x320 [ 1782.321653] ? v9fs_show_options+0x690/0x690 [ 1782.322347] ? trace_hardirqs_on+0x5b/0x180 [ 1782.323029] ? kasan_unpoison_shadow+0x33/0x50 [ 1782.323734] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1782.324541] v9fs_mount+0x79/0x8f0 [ 1782.325094] ? v9fs_write_inode+0x60/0x60 [ 1782.325727] legacy_get_tree+0x105/0x220 [ 1782.326347] vfs_get_tree+0x8e/0x300 [ 1782.326929] path_mount+0x1429/0x2120 [ 1782.327517] ? strncpy_from_user+0x9e/0x470 [ 1782.328176] ? finish_automount+0xa90/0xa90 [ 1782.328834] ? getname_flags.part.0+0x1dd/0x4f0 [ 1782.329533] ? _copy_from_user+0xfb/0x1b0 [ 1782.330175] __x64_sys_mount+0x282/0x300 [ 1782.330796] ? copy_mnt_ns+0xa00/0xa00 [ 1782.331395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.332193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.332963] do_syscall_64+0x33/0x40 [ 1782.333534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.334304] RIP: 0033:0x7f93ecc32b19 [ 1782.334875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.337593] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1782.338726] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1782.339784] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1782.340853] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1782.341903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1782.342966] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:12:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b86, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:12:18 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000100)={@loopback, @broadcast, @multicast1}, 0xc) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:12:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x0, 0x40, 0x7]}, &(0x7f0000000100)=0x44) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r2, r0) 11:12:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:12:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:12:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b87, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:12:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:12:18 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x180, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x161, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aea", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:12:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:12:18 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 37) 11:12:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) [ 1782.695345] FAULT_INJECTION: forcing a failure. [ 1782.695345] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.696682] CPU: 0 PID: 33020 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1782.697425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.698297] Call Trace: [ 1782.698583] dump_stack+0x107/0x167 [ 1782.698987] should_fail.cold+0x5/0xa [ 1782.699395] ? create_object.isra.0+0x3a/0xa20 [ 1782.699895] should_failslab+0x5/0x20 [ 1782.700303] kmem_cache_alloc+0x5b/0x310 [ 1782.700743] create_object.isra.0+0x3a/0xa20 [ 1782.701213] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1782.701749] __kmalloc+0x16e/0x390 [ 1782.702140] p9_fcall_init+0x97/0x290 [ 1782.702540] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1782.703085] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1782.703614] p9_client_rpc+0x220/0x1370 [ 1782.704034] ? p9_pollwait+0x1a7/0x210 [ 1782.704447] ? bt_sock_poll+0x3ef/0x730 [ 1782.704866] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1782.705431] ? bt_sock_unlink+0x1c0/0x1c0 [ 1782.705872] ? sock_poll+0x165/0x510 [ 1782.706269] ? kernel_sendpage+0xd0/0xd0 [ 1782.706700] ? p9_fd_poll+0x1e0/0x2c0 [ 1782.707125] ? p9_fd_create+0x357/0x4a0 [ 1782.707545] ? p9_conn_create+0x510/0x510 [ 1782.707980] ? p9_client_create+0x798/0x11c0 [ 1782.708442] ? kfree+0xd7/0x340 [ 1782.708791] ? do_raw_spin_unlock+0x4f/0x220 [ 1782.709264] p9_client_create+0xa76/0x11c0 [ 1782.709719] ? p9_client_flush+0x430/0x430 [ 1782.710161] ? trace_hardirqs_on+0x5b/0x180 [ 1782.710621] ? lockdep_init_map_type+0x2c7/0x780 [ 1782.711138] ? __raw_spin_lock_init+0x36/0x110 [ 1782.711625] v9fs_session_init+0x1dd/0x1680 [ 1782.712064] ? lock_release+0x680/0x680 [ 1782.712481] ? kmem_cache_alloc_trace+0x151/0x320 [ 1782.712979] ? v9fs_show_options+0x690/0x690 [ 1782.713435] ? trace_hardirqs_on+0x5b/0x180 [ 1782.713892] ? kasan_unpoison_shadow+0x33/0x50 [ 1782.714369] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1782.714910] v9fs_mount+0x79/0x8f0 [ 1782.715285] ? v9fs_write_inode+0x60/0x60 [ 1782.715721] legacy_get_tree+0x105/0x220 [ 1782.716141] vfs_get_tree+0x8e/0x300 [ 1782.716528] path_mount+0x1429/0x2120 [ 1782.716934] ? strncpy_from_user+0x9e/0x470 [ 1782.717376] ? finish_automount+0xa90/0xa90 [ 1782.717837] ? getname_flags.part.0+0x1dd/0x4f0 [ 1782.718324] ? _copy_from_user+0xfb/0x1b0 [ 1782.718772] __x64_sys_mount+0x282/0x300 [ 1782.719204] ? copy_mnt_ns+0xa00/0xa00 [ 1782.719611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.720155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.720693] do_syscall_64+0x33/0x40 [ 1782.721084] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.721615] RIP: 0033:0x7f93ecc32b19 [ 1782.721999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.723860] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1782.724645] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1782.725388] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1782.726117] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1782.726842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1782.727580] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:12:31 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @private=0xa010102}, 0x10) 11:12:31 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x180, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x161, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aea", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:12:31 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:12:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b88, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:12:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:12:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:12:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 38) 11:12:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) fallocate(r1, 0xc, 0x39, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r7, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) dup3(r6, r7, 0x80000) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xe4, 0x0, 0x1, 0x7, 0x0, 0x9, 0x40000, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x3b4, 0x7}, 0x0, 0xfff, 0x101, 0x4, 0x34, 0x5, 0x1ff, 0x0, 0x3, 0x0, 0xffffffff00000001}, 0xffffffffffffffff, 0xd, r5, 0x0) 11:12:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b89, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1795.772341] FAULT_INJECTION: forcing a failure. [ 1795.772341] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.774344] CPU: 1 PID: 33146 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1795.775456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1795.776727] Call Trace: [ 1795.777163] dump_stack+0x107/0x167 [ 1795.777757] should_fail.cold+0x5/0xa [ 1795.778358] ? p9_fcall_init+0x97/0x290 [ 1795.778996] should_failslab+0x5/0x20 [ 1795.779622] __kmalloc+0x72/0x390 [ 1795.780193] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1795.781019] p9_fcall_init+0x97/0x290 [ 1795.781645] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1795.782465] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1795.783328] p9_client_rpc+0x220/0x1370 [ 1795.783972] ? p9_pollwait+0x1a7/0x210 [ 1795.784610] ? bt_sock_poll+0x3ef/0x730 [ 1795.785255] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1795.786109] ? bt_sock_unlink+0x1c0/0x1c0 [ 1795.786784] ? sock_poll+0x165/0x510 [ 1795.787418] ? kernel_sendpage+0xd0/0xd0 [ 1795.788079] ? p9_fd_poll+0x1e0/0x2c0 [ 1795.788709] ? p9_fd_create+0x357/0x4a0 [ 1795.789353] ? p9_conn_create+0x510/0x510 [ 1795.790023] ? p9_client_create+0x798/0x11c0 [ 1795.790735] ? kfree+0xd7/0x340 [ 1795.791280] ? do_raw_spin_unlock+0x4f/0x220 [ 1795.792000] p9_client_create+0xa76/0x11c0 [ 1795.792698] ? p9_client_flush+0x430/0x430 [ 1795.793386] ? trace_hardirqs_on+0x5b/0x180 [ 1795.794087] ? lockdep_init_map_type+0x2c7/0x780 [ 1795.794859] ? __raw_spin_lock_init+0x36/0x110 [ 1795.795616] v9fs_session_init+0x1dd/0x1680 [ 1795.796316] ? lock_release+0x680/0x680 [ 1795.796971] ? kmem_cache_alloc_trace+0x151/0x320 [ 1795.797749] ? v9fs_show_options+0x690/0x690 [ 1795.798472] ? trace_hardirqs_on+0x5b/0x180 [ 1795.799184] ? kasan_unpoison_shadow+0x33/0x50 [ 1795.799924] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1795.800748] v9fs_mount+0x79/0x8f0 [ 1795.801331] ? v9fs_write_inode+0x60/0x60 [ 1795.802004] legacy_get_tree+0x105/0x220 [ 1795.802665] vfs_get_tree+0x8e/0x300 [ 1795.803284] path_mount+0x1429/0x2120 [ 1795.803909] ? strncpy_from_user+0x9e/0x470 [ 1795.804603] ? finish_automount+0xa90/0xa90 [ 1795.805302] ? getname_flags.part.0+0x1dd/0x4f0 [ 1795.806052] ? _copy_from_user+0xfb/0x1b0 [ 1795.806734] __x64_sys_mount+0x282/0x300 [ 1795.807396] ? copy_mnt_ns+0xa00/0xa00 [ 1795.808031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1795.808879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1795.809716] do_syscall_64+0x33/0x40 [ 1795.810320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1795.811150] RIP: 0033:0x7f93ecc32b19 [ 1795.811739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1795.814658] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1795.815897] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1795.817039] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1795.818186] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1795.819336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1795.820480] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:12:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:12:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b8a, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:12:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = clone3(&(0x7f0000000480)={0x100040000, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000340), {0x32}, &(0x7f0000000380)=""/16, 0x10, &(0x7f00000003c0)=""/114, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='freezer.self_freezing\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0xfc, 0x81, 0x9, 0xff, 0x0, 0xbc61, 0x8108, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xff, 0x4e3b491052b6ee96, @perf_config_ext={0xd290, 0x7fff}, 0x9002, 0x2, 0x10000, 0x8, 0x20, 0x4, 0x1, 0x0, 0x8, 0x0, 0x9}, r1, 0xffffffffffffffff, r2, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r4, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000180)=""/216, &(0x7f00000000c0)=0xd8) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000540)="2039f8e9d3fa901f592044ad700006ccd28c4d1014105af2bdfa66976935d8ebec479842dda0e87cff1a272e6a39f4e60c8584a89f43ed", 0x37) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000000011002e2f66de3780c4d3d3696c023000"]) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:12:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:12:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b8b, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:12:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:12:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:12:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 11:12:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b8c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:12:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:12:46 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:12:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 39) 11:12:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:12:46 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1b4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x198, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) [ 1810.843301] FAULT_INJECTION: forcing a failure. [ 1810.843301] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.845143] CPU: 1 PID: 33387 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1810.846219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.847509] Call Trace: [ 1810.847928] dump_stack+0x107/0x167 [ 1810.848506] should_fail.cold+0x5/0xa [ 1810.849109] ? create_object.isra.0+0x3a/0xa20 [ 1810.849829] should_failslab+0x5/0x20 [ 1810.850429] kmem_cache_alloc+0x5b/0x310 [ 1810.851076] create_object.isra.0+0x3a/0xa20 [ 1810.851772] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1810.852577] __kmalloc+0x16e/0x390 [ 1810.853149] p9_fcall_init+0x97/0x290 [ 1810.853749] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1810.854547] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1810.855352] p9_client_rpc+0x220/0x1370 [ 1810.855975] ? p9_pollwait+0x1a7/0x210 [ 1810.856595] ? bt_sock_poll+0x3ef/0x730 [ 1810.857214] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1810.858034] ? bt_sock_unlink+0x1c0/0x1c0 [ 1810.858687] ? sock_poll+0x165/0x510 [ 1810.859282] ? kernel_sendpage+0xd0/0xd0 [ 1810.859930] ? p9_fd_poll+0x1e0/0x2c0 [ 1810.860537] ? p9_fd_create+0x357/0x4a0 [ 1810.861159] ? p9_conn_create+0x510/0x510 [ 1810.861804] ? p9_client_create+0x798/0x11c0 [ 1810.862496] ? kfree+0xd7/0x340 [ 1810.863022] ? do_raw_spin_unlock+0x4f/0x220 [ 1810.863735] p9_client_create+0xa76/0x11c0 [ 1810.864411] ? p9_client_flush+0x430/0x430 [ 1810.865074] ? trace_hardirqs_on+0x5b/0x180 [ 1810.865757] ? lockdep_init_map_type+0x2c7/0x780 [ 1810.866506] ? __raw_spin_lock_init+0x36/0x110 [ 1810.867241] v9fs_session_init+0x1dd/0x1680 [ 1810.867923] ? lock_release+0x680/0x680 [ 1810.868563] ? kmem_cache_alloc_trace+0x151/0x320 [ 1810.869315] ? v9fs_show_options+0x690/0x690 [ 1810.870014] ? trace_hardirqs_on+0x5b/0x180 [ 1810.870697] ? kasan_unpoison_shadow+0x33/0x50 [ 1810.871425] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1810.872226] v9fs_mount+0x79/0x8f0 [ 1810.872790] ? v9fs_write_inode+0x60/0x60 [ 1810.873443] legacy_get_tree+0x105/0x220 [ 1810.874083] vfs_get_tree+0x8e/0x300 [ 1810.874672] path_mount+0x1429/0x2120 [ 1810.875281] ? strncpy_from_user+0x9e/0x470 [ 1810.875955] ? finish_automount+0xa90/0xa90 [ 1810.876632] ? getname_flags.part.0+0x1dd/0x4f0 [ 1810.877363] ? _copy_from_user+0xfb/0x1b0 [ 1810.878028] __x64_sys_mount+0x282/0x300 [ 1810.878666] ? copy_mnt_ns+0xa00/0xa00 [ 1810.879289] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.880104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.880924] do_syscall_64+0x33/0x40 [ 1810.881513] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.882311] RIP: 0033:0x7f93ecc32b19 [ 1810.882895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.885732] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1810.886910] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1810.888025] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1810.889109] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1810.890196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1810.891286] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:12:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) 11:12:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b8d, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:13:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1b4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x198, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:13:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/usblp', 0x4e0982, 0x100) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x0) 11:13:01 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:13:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) 11:13:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:13:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 40) 11:13:01 executing program 7: r0 = gettid() ptrace(0x8, r0) process_vm_readv(r0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f00000008c0)=""/109, 0x6d}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f0000000480)=""/202, 0xca}, {&(0x7f00000003c0)=""/32, 0x20}], 0x7, &(0x7f0000000880)=[{&(0x7f0000000780)=""/224, 0xe0}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x84, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x200}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r2, r1) 11:13:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b8e, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1825.336294] FAULT_INJECTION: forcing a failure. [ 1825.336294] name failslab, interval 1, probability 0, space 0, times 0 [ 1825.338105] CPU: 1 PID: 33614 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1825.339174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1825.340468] Call Trace: [ 1825.340888] dump_stack+0x107/0x167 [ 1825.341463] should_fail.cold+0x5/0xa [ 1825.342065] ? p9_fcall_init+0x97/0x290 [ 1825.342696] should_failslab+0x5/0x20 [ 1825.343294] __kmalloc+0x72/0x390 [ 1825.343848] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1825.344641] p9_fcall_init+0x97/0x290 [ 1825.345248] p9_client_prepare_req.part.0+0xf4/0xac0 11:13:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) [ 1825.346056] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1825.347726] p9_client_rpc+0x220/0x1370 [ 1825.348414] ? p9_pollwait+0x1a7/0x210 [ 1825.349111] ? bt_sock_poll+0x3ef/0x730 [ 1825.349801] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1825.350718] ? bt_sock_unlink+0x1c0/0x1c0 [ 1825.351466] ? sock_poll+0x165/0x510 [ 1825.352106] ? kernel_sendpage+0xd0/0xd0 [ 1825.352834] ? p9_fd_poll+0x1e0/0x2c0 [ 1825.353537] ? p9_fd_create+0x357/0x4a0 [ 1825.354260] ? p9_conn_create+0x510/0x510 [ 1825.355015] ? p9_client_create+0x798/0x11c0 [ 1825.355827] ? kfree+0xd7/0x340 [ 1825.356436] ? do_raw_spin_unlock+0x4f/0x220 [ 1825.357235] p9_client_create+0xa76/0x11c0 [ 1825.357998] ? p9_client_flush+0x430/0x430 [ 1825.358767] ? trace_hardirqs_on+0x5b/0x180 [ 1825.359557] ? lockdep_init_map_type+0x2c7/0x780 [ 1825.360420] ? __raw_spin_lock_init+0x36/0x110 [ 1825.361258] v9fs_session_init+0x1dd/0x1680 [ 1825.362036] ? lock_release+0x680/0x680 [ 1825.362770] ? kmem_cache_alloc_trace+0x151/0x320 [ 1825.363653] ? v9fs_show_options+0x690/0x690 [ 1825.364210] ? trace_hardirqs_on+0x5b/0x180 [ 1825.364682] ? kasan_unpoison_shadow+0x33/0x50 [ 1825.365175] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1825.365734] v9fs_mount+0x79/0x8f0 [ 1825.366125] ? v9fs_write_inode+0x60/0x60 [ 1825.366602] legacy_get_tree+0x105/0x220 [ 1825.367062] vfs_get_tree+0x8e/0x300 [ 1825.367478] path_mount+0x1429/0x2120 [ 1825.367900] ? strncpy_from_user+0x9e/0x470 [ 1825.368373] ? finish_automount+0xa90/0xa90 [ 1825.368847] ? getname_flags.part.0+0x1dd/0x4f0 [ 1825.369351] ? _copy_from_user+0xfb/0x1b0 [ 1825.369811] __x64_sys_mount+0x282/0x300 [ 1825.370256] ? copy_mnt_ns+0xa00/0xa00 [ 1825.370688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1825.371264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1825.371835] do_syscall_64+0x33/0x40 [ 1825.372256] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1825.372814] RIP: 0033:0x7f93ecc32b19 [ 1825.373223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1825.375209] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1825.376046] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1825.376822] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1825.377593] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1825.378362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1825.379135] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:13:01 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x1, 0x3f4, 0x407}) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r2, r1) 11:13:14 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:13:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b8f, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:13:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) ioctl$HIDIOCINITREPORT(r3, 0x550c, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x5, 0x1, 0x8, 0x0, 0x7fff, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x1000, 0xa913, 0x7f, 0x2, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x7, 0x0, 0x5}, r1, 0xf, r3, 0xb) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r4, r0) 11:13:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:13:14 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1b4, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x198, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:13:14 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:13:14 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 41) 11:13:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendto$inet(r2, &(0x7f0000000180)="8ce0d7c0d245f3c420974b5e7bbfe04725617156242b592da5c53ce1eb14f39103ddf792a37b262ec534590532a4d3fbe8c8d08e200efc7e18d9d195810692dc23688b62d9f417967a204af2dd3b0585c526423c99668ee0bdf58dd2afe6599aa0b06e0dd09fbde0fe4f66b6721f60ba75805560a9c9daf1c6ec5fb77b5710de6419fe2fb4256e41bbba9ba3", 0x8c, 0x40001, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) [ 1838.869594] FAULT_INJECTION: forcing a failure. [ 1838.869594] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.871242] CPU: 0 PID: 33851 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1838.872242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.873434] Call Trace: [ 1838.873826] dump_stack+0x107/0x167 [ 1838.874364] should_fail.cold+0x5/0xa [ 1838.874919] ? ___slab_alloc+0x155/0x700 [ 1838.875525] ? create_object.isra.0+0x3a/0xa20 [ 1838.876196] should_failslab+0x5/0x20 [ 1838.876752] kmem_cache_alloc+0x5b/0x310 [ 1838.877355] create_object.isra.0+0x3a/0xa20 [ 1838.877993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1838.878740] kmem_cache_alloc+0x159/0x310 [ 1838.879358] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1838.880188] idr_get_free+0x4b5/0x8f0 [ 1838.880760] idr_alloc_u32+0x170/0x2d0 [ 1838.881335] ? __fprop_inc_percpu_max+0x130/0x130 [ 1838.882047] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1838.882830] ? lock_release+0x680/0x680 [ 1838.883414] idr_alloc+0xc2/0x130 [ 1838.883928] ? idr_alloc_u32+0x2d0/0x2d0 [ 1838.884523] ? rwlock_bug.part.0+0x90/0x90 [ 1838.885158] p9_client_prepare_req.part.0+0x612/0xac0 [ 1838.885918] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1838.886665] p9_client_rpc+0x220/0x1370 [ 1838.887247] ? p9_pollwait+0x1a7/0x210 [ 1838.887827] ? bt_sock_poll+0x3ef/0x730 [ 1838.888412] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1838.889177] ? bt_sock_unlink+0x1c0/0x1c0 [ 1838.889791] ? sock_poll+0x165/0x510 [ 1838.890337] ? kernel_sendpage+0xd0/0xd0 [ 1838.890934] ? p9_fd_poll+0x1e0/0x2c0 [ 1838.891499] ? p9_fd_create+0x357/0x4a0 [ 1838.892088] ? p9_conn_create+0x510/0x510 [ 1838.892688] ? p9_client_create+0x798/0x11c0 [ 1838.893331] ? kfree+0xd7/0x340 [ 1838.893814] ? do_raw_spin_unlock+0x4f/0x220 [ 1838.894467] p9_client_create+0xa76/0x11c0 [ 1838.895102] ? p9_client_flush+0x430/0x430 [ 1838.895730] ? trace_hardirqs_on+0x5b/0x180 [ 1838.896362] ? lockdep_init_map_type+0x2c7/0x780 [ 1838.897063] ? __raw_spin_lock_init+0x36/0x110 [ 1838.897741] v9fs_session_init+0x1dd/0x1680 [ 1838.898375] ? lock_release+0x680/0x680 [ 1838.898972] ? kmem_cache_alloc_trace+0x151/0x320 [ 1838.899687] ? v9fs_show_options+0x690/0x690 [ 1838.900342] ? trace_hardirqs_on+0x5b/0x180 [ 1838.900979] ? kasan_unpoison_shadow+0x33/0x50 [ 1838.901655] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1838.902403] v9fs_mount+0x79/0x8f0 [ 1838.902927] ? v9fs_write_inode+0x60/0x60 [ 1838.903540] legacy_get_tree+0x105/0x220 [ 1838.904137] vfs_get_tree+0x8e/0x300 [ 1838.904683] path_mount+0x1429/0x2120 [ 1838.905248] ? strncpy_from_user+0x9e/0x470 [ 1838.905876] ? finish_automount+0xa90/0xa90 [ 1838.906510] ? getname_flags.part.0+0x1dd/0x4f0 [ 1838.907187] ? _copy_from_user+0xfb/0x1b0 [ 1838.907808] __x64_sys_mount+0x282/0x300 [ 1838.908399] ? copy_mnt_ns+0xa00/0xa00 [ 1838.908970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1838.909732] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.910493] do_syscall_64+0x33/0x40 [ 1838.911035] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.911780] RIP: 0033:0x7f93ecc32b19 [ 1838.912320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.914971] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1838.916087] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1838.917117] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1838.918146] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1838.919179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1838.920222] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:13:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:13:14 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:13:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b90, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:13:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8001, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2787, &(0x7f00000000c0)={0x0, 0x79b0, 0x0, 0x0, 0x18e}, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r0 = socket$inet(0x2, 0x6, 0x7) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:13:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:13:15 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d0, 0x37, 0x300, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1b3, 0x59, 0x0, 0x1, [@typed={0x5, 0x4f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}, @generic="9a712bfc04132a3a1fddd767b836ddfa69611427d34a1c6eb207162bbceb309ef750f01ed66e95bac239e50ddfd6a339f7f32c5d91a3ceaebc3d42262b75abba2bca98b34bb25e13b4f7071480ed18dc3e71a2d13b7afbeaf61c5db4e99896e312828cc4ac7b4a995b25411aeaa9acfa5eb08b44f11babe060fa62ca43b5db75d321389eae1c2a0167134d107928e7581d82ef0999cbd5b04af3d817953c8ff3f382983d4400e55416ac6e0436bafe7da7ac063a25ec421a0e81bc104e25cf", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}, @typed={0xd6, 0x35, 0x0, 0x0, @binary="978a4d3cf2ec2a7bf379b86836085656040622b11fb7979e848589850df8e88b81f9f008808ef2ebb031d9d5e1488ca1613d8b2492af5de0f9ae621e69fd698f68e8f0ab097dc9dc3e740f073cc2281cd1b570f00a66b22a7528fdf730001db47a7de64ace5236d69e747031ea46402102348cfaa8afb4b4ca1484b29d932ed0304e2b1a80e90345d8ba4e1188f49c67ceabd9e48f2bdcb3dff9e07a59c4213f2bf9ad62c55eb9681aa0bf55b4f8ca9c96e3fc222bc7db5b4aef6c590c61414082e8f3b5b5b351fa65cdb0d1cf742bb776db"}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r2}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x800}, 0x800) ptrace(0x10, 0x0) 11:13:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 42) 11:13:15 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 11:13:15 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40}, r1, 0x8, 0xffffffffffffffff, 0xb) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) dup2(r3, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x214a, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) fsmount(0xffffffffffffffff, 0x0, 0x8b) 11:13:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b91, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:13:15 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x7, @remote, 0x6}, 0x1c) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) [ 1839.331098] FAULT_INJECTION: forcing a failure. [ 1839.331098] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.332776] CPU: 0 PID: 34108 Comm: syz-executor.6 Not tainted 5.10.222 #1 [ 1839.333775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.334966] Call Trace: [ 1839.335361] dump_stack+0x107/0x167 [ 1839.335911] should_fail.cold+0x5/0xa [ 1839.336466] ? ___slab_alloc+0x155/0x700 [ 1839.337064] ? create_object.isra.0+0x3a/0xa20 [ 1839.337736] should_failslab+0x5/0x20 [ 1839.338288] kmem_cache_alloc+0x5b/0x310 [ 1839.338890] create_object.isra.0+0x3a/0xa20 [ 1839.339543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1839.340290] kmem_cache_alloc+0x159/0x310 [ 1839.340906] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1839.341723] idr_get_free+0x4b5/0x8f0 [ 1839.342304] idr_alloc_u32+0x170/0x2d0 [ 1839.342878] ? __fprop_inc_percpu_max+0x130/0x130 [ 1839.343593] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1839.344370] ? lock_release+0x680/0x680 [ 1839.344959] idr_alloc+0xc2/0x130 [ 1839.345465] ? idr_alloc_u32+0x2d0/0x2d0 [ 1839.346061] ? rwlock_bug.part.0+0x90/0x90 [ 1839.346697] p9_client_prepare_req.part.0+0x612/0xac0 [ 1839.347446] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1839.348194] p9_client_rpc+0x220/0x1370 [ 1839.348774] ? p9_pollwait+0x1a7/0x210 [ 1839.349347] ? bt_sock_poll+0x3ef/0x730 [ 1839.349932] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1839.350694] ? bt_sock_unlink+0x1c0/0x1c0 [ 1839.351302] ? sock_poll+0x165/0x510 [ 1839.351856] ? kernel_sendpage+0xd0/0xd0 [ 1839.352453] ? p9_fd_poll+0x1e0/0x2c0 [ 1839.353016] ? p9_fd_create+0x357/0x4a0 [ 1839.353600] ? p9_conn_create+0x510/0x510 [ 1839.354202] ? p9_client_create+0x798/0x11c0 [ 1839.354841] ? kfree+0xd7/0x340 [ 1839.355330] ? do_raw_spin_unlock+0x4f/0x220 [ 1839.355992] p9_client_create+0xa76/0x11c0 [ 1839.356627] ? p9_client_flush+0x430/0x430 [ 1839.357253] ? trace_hardirqs_on+0x5b/0x180 [ 1839.357883] ? lockdep_init_map_type+0x2c7/0x780 [ 1839.358586] ? __raw_spin_lock_init+0x36/0x110 [ 1839.359265] v9fs_session_init+0x1dd/0x1680 [ 1839.359906] ? lock_release+0x680/0x680 [ 1839.360494] ? kmem_cache_alloc_trace+0x151/0x320 [ 1839.361193] ? v9fs_show_options+0x690/0x690 [ 1839.361848] ? trace_hardirqs_on+0x5b/0x180 [ 1839.362484] ? kasan_unpoison_shadow+0x33/0x50 [ 1839.363151] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1839.363906] v9fs_mount+0x79/0x8f0 [ 1839.364430] ? v9fs_write_inode+0x60/0x60 [ 1839.365044] legacy_get_tree+0x105/0x220 [ 1839.365646] vfs_get_tree+0x8e/0x300 [ 1839.366190] path_mount+0x1429/0x2120 [ 1839.366753] ? strncpy_from_user+0x9e/0x470 [ 1839.367380] ? finish_automount+0xa90/0xa90 [ 1839.368017] ? getname_flags.part.0+0x1dd/0x4f0 [ 1839.368693] ? _copy_from_user+0xfb/0x1b0 [ 1839.369310] __x64_sys_mount+0x282/0x300 [ 1839.369899] ? copy_mnt_ns+0xa00/0xa00 [ 1839.370474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.371233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.371994] do_syscall_64+0x33/0x40 [ 1839.372532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1839.373275] RIP: 0033:0x7f93ecc32b19 [ 1839.373817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.376479] RSP: 002b:00007f93ea1a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1839.377579] RAX: ffffffffffffffda RBX: 00007f93ecd45f60 RCX: 00007f93ecc32b19 [ 1839.378624] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1839.379659] RBP: 00007f93ea1a81d0 R08: 0000000020000280 R09: 0000000000000000 [ 1839.380690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1839.381722] R13: 00007fff0ce058ff R14: 00007f93ea1a8300 R15: 0000000000022000 11:13:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x0, 0x0, 0x0) 11:13:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8b92, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:13:15 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="90", 0x1, 0x8004, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1c, &(0x7f0000000640)={0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2162}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x6, 0x1}, 0x6) perf_event_open(&(0x7f00000001c0)={0x30e454acf9f52423, 0x80, 0x7, 0x39, 0x7, 0x3, 0x0, 0x5, 0xa360e59603ead7c4, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc08c, 0x9, 0x2, 0x2, 0x7f, 0x7, 0x8d2, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x9) dup2(r1, r0) r6 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300030ccab33c49e3f8b282cac8e765e965c0b5166cc2607a986f04c33bb05a1fb5ee7143b3a747ec28a052c1322bd88568ce23f7dd2b73461f4667b12f1a433a86fe44c53a5f9d0d7a40016db7d9a512b5f95081f86cfcad51ad4f283c223ca107e9a8ace2b1661016b0c051e0f80f009960489ffd633cea85a135ef32ed3a690fea7db4fa1471dd86f84a5a4a27b05d9b7ec01ff184b8962120fec234eeb5c1af02e1d25c1161843a412c4979a3faf673d30d59dfeda43340ffa0d63267c01dedd23a45eed76d55da9fa4dc2ead272afe1f6273eef91c151c972bce501ac7b3df3546fbbad"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) sendfile(r8, r2, 0x0, 0x8) recvmmsg(r0, &(0x7f00000017c0)=[{{&(0x7f0000000240)=@phonet, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/82, 0x52}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x3, &(0x7f0000000440)=""/79, 0x4f}, 0x78d}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f00000016c0)=""/83, 0x53}], 0x2, &(0x7f0000001740)=""/126, 0x7e}, 0xcb}], 0x2, 0x40000010, &(0x7f0000001840)) VM DIAGNOSIS: 11:18:18 Registers: info registers vcpu 0 RAX=ffffffff83e74f90 RBX=0000000000000000 RCX=ffffffff83e5cd8c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e75598 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85675788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e74f9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdf36bf898 CR3=000000001b01c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041461ad000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e74f90 RBX=0000000000000001 RCX=ffffffff83e5cd8c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e75598 RBP=ffffed1001130000 RSP=ffff88800898fe70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85675788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e74f9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d5b413c68 CR3=000000001b01c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000006000000040000000000000000 XMM02=696e696d20636578650d0a0100010101 XMM03=736465657320636578650a00657a696d XMM04=786508006c61746f7420636578650a00 XMM05=6e616320636578650e006e6567206365 XMM06=616d7320636578650a00657461646964 XMM07=110073746e696820636578650a006873 XMM08=20636578650a00657a696d696e696d20 XMM09=61746f7420636578650a007364656573 XMM10=6578650e006e6567206365786508006c XMM11=6578650a006574616469646e61632063 XMM12=696820636578650a006873616d732063 XMM13=657220726f747563657865110073746e XMM14=7a756620636578650900737472617473 XMM15=000065676169727420636578650b007a