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"}) syz_io_uring_setup(0x1001, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) socket$inet(0x2, 0x2, 0x0) [ 1526.232843] perf_trace_event_init+0x554/0x9c0 [ 1526.234224] perf_uprobe_init+0x173/0x210 [ 1526.235134] perf_uprobe_event_init+0xff/0x190 [ 1526.236102] perf_try_init_event+0x130/0x570 [ 1526.237034] perf_event_alloc.part.0+0xd96/0x2b70 [ 1526.238085] __do_sys_perf_event_open+0x579/0x2e60 [ 1526.239133] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1526.240164] ? perf_event_set_output+0x5b0/0x5b0 [ 1526.241168] ? wait_for_completion_io+0x270/0x270 [ 1526.242228] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1526.243340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1526.244439] do_syscall_64+0x33/0x40 [ 1526.245239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.246325] RIP: 0033:0x7fcf367ecb19 [ 1526.247111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.251006] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1526.252613] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1526.254128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1526.255646] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1526.255658] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1526.255670] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:27:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,appraise_type=imasig,fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c00b92cb3ec624715f7a194a2024c3838069ccbbe6e3bd1159dc000413f510c9bcad1c6372c99ca5d34cfd7184519b02a81cbc63d850d7bcabd774488aa6f9aeea7158e5be5fef21641a6c0b34b89ae77e1dfa55d04b65145c69636c53a8bd58d833dd2"]) 18:27:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1526.327328] 9pnet: Insufficient options for proto=fd [ 1526.337416] FAULT_INJECTION: forcing a failure. [ 1526.337416] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.339792] CPU: 1 PID: 10370 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1526.341266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1526.343029] Call Trace: [ 1526.343596] dump_stack+0x107/0x167 [ 1526.344380] should_fail.cold+0x5/0xa [ 1526.345205] ? register_for_each_vma+0x476/0xc00 [ 1526.346226] should_failslab+0x5/0x20 [ 1526.347035] kmem_cache_alloc_trace+0x55/0x320 [ 1526.348015] register_for_each_vma+0x476/0xc00 [ 1526.349031] __uprobe_register+0x4df/0x880 [ 1526.349956] probe_event_enable+0x3c4/0xba0 [ 1526.350867] ? uprobe_perf_close+0x5f0/0x5f0 [ 1526.351807] trace_uprobe_register+0x54/0x730 [ 1526.352780] perf_trace_event_init+0x554/0x9c0 [ 1526.353779] perf_uprobe_init+0x173/0x210 [ 1526.354688] perf_uprobe_event_init+0xff/0x190 [ 1526.355659] perf_try_init_event+0x130/0x570 [ 1526.356606] perf_event_alloc.part.0+0xd96/0x2b70 [ 1526.357659] __do_sys_perf_event_open+0x579/0x2e60 [ 1526.358720] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1526.359747] ? perf_event_set_output+0x5b0/0x5b0 [ 1526.360755] ? wait_for_completion_io+0x270/0x270 [ 1526.361830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1526.362966] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1526.364076] do_syscall_64+0x33/0x40 [ 1526.364875] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.365981] RIP: 0033:0x7f27a2558b19 [ 1526.366767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.370693] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1526.372333] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1526.373863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1526.375382] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1526.376902] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1526.378427] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 18:27:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:27:04 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) flistxattr(r0, &(0x7f00000015c0)=""/238, 0xee) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x14d) fcntl$setlease(r3, 0x400, 0x1) r4 = fork() ptrace(0x10, r4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r5, 0xdac98000) fcntl$setown(r3, 0x8, r4) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x1, r4}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x20010, r1, 0x57773000) r6 = getpgrp(0x0) ptrace(0x8, r6) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x1000)=nil) [ 1526.438190] FAULT_INJECTION: forcing a failure. [ 1526.438190] name failslab, interval 1, probability 0, space 0, times 0 18:27:04 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 71) [ 1526.440610] CPU: 1 PID: 10379 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1526.442186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1526.443932] Call Trace: [ 1526.444504] dump_stack+0x107/0x167 [ 1526.445290] should_fail.cold+0x5/0xa [ 1526.446108] ? register_for_each_vma+0x476/0xc00 [ 1526.447119] should_failslab+0x5/0x20 [ 1526.447938] kmem_cache_alloc_trace+0x55/0x320 [ 1526.448919] register_for_each_vma+0x476/0xc00 [ 1526.449925] __uprobe_register+0x4df/0x880 [ 1526.450854] probe_event_enable+0x3c4/0xba0 [ 1526.451774] ? uprobe_perf_close+0x5f0/0x5f0 [ 1526.452717] trace_uprobe_register+0x54/0x730 [ 1526.453704] perf_trace_event_init+0x554/0x9c0 [ 1526.454696] perf_uprobe_init+0x173/0x210 [ 1526.455588] perf_uprobe_event_init+0xff/0x190 [ 1526.456560] perf_try_init_event+0x130/0x570 [ 1526.457501] perf_event_alloc.part.0+0xd96/0x2b70 [ 1526.458548] __do_sys_perf_event_open+0x579/0x2e60 [ 1526.459607] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1526.460640] ? perf_event_set_output+0x5b0/0x5b0 [ 1526.461641] ? wait_for_completion_io+0x270/0x270 [ 1526.462696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1526.463816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1526.464931] do_syscall_64+0x33/0x40 [ 1526.465738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.465759] RIP: 0033:0x7fc9de03eb19 [ 1526.467137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.471045] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1526.472659] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1526.474159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1526.475662] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1526.477172] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1526.478691] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:27:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,appraise_type=imasig,fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c00b92cb3ec624715f7a194a2024c3838069ccbbe6e3bd1159dc000413f510c9bcad1c6372c99ca5d34cfd7184519b02a81cbc63d850d7bcabd774488aa6f9aeea7158e5be5fef21641a6c0b34b89ae77e1dfa55d04b65145c69636c53a8bd58d833dd2"]) 18:27:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1526.540097] 9pnet: Insufficient options for proto=fd [ 1526.550435] FAULT_INJECTION: forcing a failure. [ 1526.550435] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.552812] CPU: 1 PID: 10389 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1526.554293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1526.554300] Call Trace: [ 1526.554328] dump_stack+0x107/0x167 [ 1526.554359] should_fail.cold+0x5/0xa [ 1526.557439] ? register_for_each_vma+0x476/0xc00 [ 1526.557460] should_failslab+0x5/0x20 [ 1526.558782] kmem_cache_alloc_trace+0x55/0x320 [ 1526.559756] register_for_each_vma+0x476/0xc00 [ 1526.560746] __uprobe_register+0x4df/0x880 [ 1526.561672] probe_event_enable+0x3c4/0xba0 [ 1526.562591] ? uprobe_perf_close+0x5f0/0x5f0 [ 1526.563530] trace_uprobe_register+0x54/0x730 [ 1526.564490] perf_trace_event_init+0x554/0x9c0 [ 1526.565475] perf_uprobe_init+0x173/0x210 [ 1526.566358] perf_uprobe_event_init+0xff/0x190 [ 1526.567322] perf_try_init_event+0x130/0x570 [ 1526.568249] perf_event_alloc.part.0+0xd96/0x2b70 [ 1526.569290] __do_sys_perf_event_open+0x579/0x2e60 [ 1526.570338] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1526.571360] ? perf_event_set_output+0x5b0/0x5b0 [ 1526.572358] ? wait_for_completion_io+0x270/0x270 [ 1526.573416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1526.574522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1526.575615] do_syscall_64+0x33/0x40 [ 1526.576401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.577485] RIP: 0033:0x7fcf367ecb19 [ 1526.578270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.582125] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1526.583734] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1526.585248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1526.586758] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1526.588262] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1526.589775] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:27:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:27:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 58) [ 1526.671147] FAULT_INJECTION: forcing a failure. [ 1526.671147] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.673590] CPU: 1 PID: 10398 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1526.675050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1526.676793] Call Trace: [ 1526.677361] dump_stack+0x107/0x167 [ 1526.678135] should_fail.cold+0x5/0xa [ 1526.678941] ? create_object.isra.0+0x3a/0xa30 [ 1526.679906] should_failslab+0x5/0x20 [ 1526.680712] kmem_cache_alloc+0x5b/0x310 [ 1526.681579] ? mark_held_locks+0x9e/0xe0 [ 1526.682446] create_object.isra.0+0x3a/0xa30 [ 1526.683375] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1526.684444] kmem_cache_alloc_trace+0x151/0x320 [ 1526.685485] register_for_each_vma+0x476/0xc00 [ 1526.686474] __uprobe_register+0x4df/0x880 [ 1526.687383] probe_event_enable+0x3c4/0xba0 [ 1526.688295] ? uprobe_perf_close+0x5f0/0x5f0 [ 1526.689224] trace_uprobe_register+0x54/0x730 [ 1526.690188] perf_trace_event_init+0x554/0x9c0 [ 1526.691158] perf_uprobe_init+0x173/0x210 [ 1526.692048] perf_uprobe_event_init+0xff/0x190 [ 1526.693008] perf_try_init_event+0x130/0x570 [ 1526.693952] perf_event_alloc.part.0+0xd96/0x2b70 [ 1526.694987] __do_sys_perf_event_open+0x579/0x2e60 [ 1526.696032] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1526.697055] ? perf_event_set_output+0x5b0/0x5b0 [ 1526.698061] ? wait_for_completion_io+0x270/0x270 [ 1526.699112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1526.700224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1526.701327] do_syscall_64+0x33/0x40 [ 1526.702119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.703204] RIP: 0033:0x7f27a2558b19 [ 1526.703985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.707855] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1526.709485] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1526.710989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1526.712491] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1526.713980] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1526.715475] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:27:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 58) 18:27:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 59) 18:27:18 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 72) 18:27:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:27:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,appraise_type=imasig,fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c00b92cb3ec624715f7a194a2024c3838069ccbbe6e3bd1159dc000413f510c9bcad1c6372c99ca5d34cfd7184519b02a81cbc63d850d7bcabd774488aa6f9aeea7158e5be5fef21641a6c0b34b89ae77e1dfa55d04b65145c69636c53a8bd58d833dd2"]) 18:27:18 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="190000000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:27:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:27:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1539.956376] FAULT_INJECTION: forcing a failure. [ 1539.956376] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.959383] CPU: 1 PID: 10407 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1539.961099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1539.963182] Call Trace: [ 1539.963213] dump_stack+0x107/0x167 [ 1539.963243] should_fail.cold+0x5/0xa [ 1539.963274] ? register_for_each_vma+0x476/0xc00 [ 1539.963298] should_failslab+0x5/0x20 [ 1539.963323] kmem_cache_alloc_trace+0x55/0x320 [ 1539.963361] register_for_each_vma+0x476/0xc00 [ 1539.963415] __uprobe_register+0x4df/0x880 [ 1539.963461] probe_event_enable+0x3c4/0xba0 [ 1539.963485] ? uprobe_perf_close+0x5f0/0x5f0 [ 1539.963518] trace_uprobe_register+0x54/0x730 [ 1539.963559] perf_trace_event_init+0x554/0x9c0 [ 1539.963599] perf_uprobe_init+0x173/0x210 [ 1539.963634] perf_uprobe_event_init+0xff/0x190 [ 1539.963658] perf_try_init_event+0x130/0x570 [ 1539.963688] perf_event_alloc.part.0+0xd96/0x2b70 [ 1539.963732] __do_sys_perf_event_open+0x579/0x2e60 [ 1539.963769] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1539.963799] ? perf_event_set_output+0x5b0/0x5b0 [ 1539.963819] ? wait_for_completion_io+0x270/0x270 [ 1539.963881] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1539.963908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1539.963939] do_syscall_64+0x33/0x40 [ 1539.963965] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1539.963981] RIP: 0033:0x7f27a2558b19 [ 1539.964003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1539.964016] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1539.964043] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1539.964057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1539.964070] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1539.964095] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1540.000595] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 1540.010260] 9pnet: Insufficient options for proto=fd 18:27:18 executing program 7: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000740)=ANY=[]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x46000, 0x0) mkdirat(r1, 0x0, 0x0) r2 = openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x80800, 0x4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x100}}, './file0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) 18:27:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:27:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,appraise_type=imasig,fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c00b92cb3ec624715f7a194a2024c3838069ccbbe6e3bd1159dc000413f510c9bcad1c6372c99ca5d34cfd7184519b02a81cbc63d850d7bcabd774488aa6f9aeea7158e5be5fef21641a6c0b34b89ae77e1dfa55d04b65145c69636c53a8bd58d833dd2"]) 18:27:18 executing program 5: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1) r2 = dup3(r0, r1, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 1540.113496] FAULT_INJECTION: forcing a failure. [ 1540.113496] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.113726] loop7: detected capacity change from 0 to 16776704 [ 1540.115950] CPU: 0 PID: 10405 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1540.115962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1540.115968] Call Trace: [ 1540.115996] dump_stack+0x107/0x167 [ 1540.116021] should_fail.cold+0x5/0xa [ 1540.116045] ? create_object.isra.0+0x3a/0xa30 [ 1540.116070] should_failslab+0x5/0x20 [ 1540.124367] kmem_cache_alloc+0x5b/0x310 [ 1540.125230] ? mark_held_locks+0x9e/0xe0 [ 1540.126100] create_object.isra.0+0x3a/0xa30 [ 1540.127042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1540.128120] kmem_cache_alloc_trace+0x151/0x320 [ 1540.129119] register_for_each_vma+0x476/0xc00 [ 1540.130117] __uprobe_register+0x4df/0x880 [ 1540.131023] probe_event_enable+0x3c4/0xba0 [ 1540.131934] ? uprobe_perf_close+0x5f0/0x5f0 [ 1540.132868] trace_uprobe_register+0x54/0x730 [ 1540.133841] perf_trace_event_init+0x554/0x9c0 [ 1540.134837] perf_uprobe_init+0x173/0x210 [ 1540.135731] perf_uprobe_event_init+0xff/0x190 [ 1540.136705] perf_try_init_event+0x130/0x570 [ 1540.137684] perf_event_alloc.part.0+0xd96/0x2b70 [ 1540.138714] __do_sys_perf_event_open+0x579/0x2e60 [ 1540.139791] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1540.140807] ? perf_event_set_output+0x5b0/0x5b0 [ 1540.141833] ? wait_for_completion_io+0x270/0x270 [ 1540.142886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1540.144008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1540.145108] do_syscall_64+0x33/0x40 [ 1540.145921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1540.147017] RIP: 0033:0x7fc9de03eb19 [ 1540.147805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1540.151710] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1540.153326] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1540.154846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1540.156361] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1540.157884] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1540.159392] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:27:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1540.188422] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 18:27:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,appraise_type=imasig,fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c00b92cb3ec624715f7a194a2024c3838069ccbbe6e3bd1159dc000413f510c9bcad1c6372c99ca5d34cfd7184519b02a81cbc63d850d7bcabd774488aa6f9aeea7158e5be5fef21641a6c0b34b89ae77e1dfa55d04b65145c69636c53a8bd58d833dd2"]) 18:27:18 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000002c0), 0x1}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x58, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000f49600000900050000000000000005000020e819b50032583d99a788121d2b4e5538922e9179bf94450e64795a6d5687776aff96d4e5e6b1b9a085d3d359698bcc12e818754235eb06456ff1b2cee8bbd72deeaf96350540f9f40a85f51cf7854c5499a59845019ecedd77cbf5916e756c784c39cbd7"], 0x24}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000540)={0x0, {{0x2, 0x0, @dev}}}, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xcc, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x2, 0x1, 0x0, 0x8e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000001940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010025bd710000000000030000000500050000004b98bdcd7d209bc3dc695d2aa84a4b0df39a3cb5db5c26b8f6440d0020fbb35351142c7d3355a2791220bec7465cbbd3a4c603f0e19e35a3300d3498ca3a5b520bf27ab8fd83f62ff074008501d03c58a80414819ce31b0f1efdc88c22aa0004d04bb774ce1ddefdc3c9ada512033b93f7a820811405dde737"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04007fbd7000fff71eb6ca00000008000300", @ANYRES32=0x0, @ANYBLOB="0400bf00"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80c0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000440)={0x0, @aes256, 0x0, @desc2}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x1015, 0x2) 18:27:18 executing program 7: syslog(0x0, 0x0, 0x0) syslog(0x0, 0x0, 0x0) syslog(0x9, 0x0, 0x0) syslog(0x2, &(0x7f00000001c0)=""/158, 0x9e) syslog(0x0, &(0x7f0000000380)=""/4096, 0x1000) syslog(0x2, 0x0, 0x0) [ 1540.316148] FAULT_INJECTION: forcing a failure. [ 1540.316148] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.318600] CPU: 0 PID: 10408 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1540.320081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1540.320967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1540.321860] Call Trace: [ 1540.321890] dump_stack+0x107/0x167 [ 1540.321916] should_fail.cold+0x5/0xa [ 1540.321937] ? ___slab_alloc+0x155/0x700 [ 1540.321959] ? create_object.isra.0+0x3a/0xa30 [ 1540.321979] should_failslab+0x5/0x20 [ 1540.321998] kmem_cache_alloc+0x5b/0x310 [ 1540.322028] create_object.isra.0+0x3a/0xa30 [ 1540.322045] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1540.322075] kmem_cache_alloc_trace+0x151/0x320 [ 1540.322109] register_for_each_vma+0x476/0xc00 [ 1540.322155] __uprobe_register+0x4df/0x880 [ 1540.322196] probe_event_enable+0x3c4/0xba0 [ 1540.322216] ? uprobe_perf_close+0x5f0/0x5f0 [ 1540.322244] trace_uprobe_register+0x54/0x730 [ 1540.322279] perf_trace_event_init+0x554/0x9c0 [ 1540.322313] perf_uprobe_init+0x173/0x210 [ 1540.322342] perf_uprobe_event_init+0xff/0x190 [ 1540.322363] perf_try_init_event+0x130/0x570 [ 1540.322388] perf_event_alloc.part.0+0xd96/0x2b70 [ 1540.322425] __do_sys_perf_event_open+0x579/0x2e60 [ 1540.322457] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1540.322481] ? perf_event_set_output+0x5b0/0x5b0 [ 1540.322497] ? wait_for_completion_io+0x270/0x270 [ 1540.322553] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1540.322575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1540.322601] do_syscall_64+0x33/0x40 [ 1540.322630] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1540.347077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1540.347345] RIP: 0033:0x7fcf367ecb19 [ 1540.352902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1540.352914] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1540.352936] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1540.352948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1540.352960] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1540.352972] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1540.352984] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:27:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 59) 18:27:18 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf250d000000080001000000000008000300", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000c000400000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000010000000000007f00000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c0006000300000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}, {&(0x7f0000010800)="53595a4b414c4c45522020080000e880325132510000e880325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100063e870325132510000e87032510300000000002e2e20202020202020202010", 0x2c, 0x12800}, {0x0}], 0x0, &(0x7f0000011200)) openat(r2, &(0x7f0000000040)='./file0\x00', 0x244801, 0x44) [ 1540.557317] FAULT_INJECTION: forcing a failure. [ 1540.557317] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.559817] CPU: 1 PID: 10452 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1540.561267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1540.563018] Call Trace: [ 1540.563585] dump_stack+0x107/0x167 [ 1540.564357] should_fail.cold+0x5/0xa [ 1540.565220] ? register_for_each_vma+0x476/0xc00 [ 1540.566244] should_failslab+0x5/0x20 [ 1540.567053] kmem_cache_alloc_trace+0x55/0x320 [ 1540.568049] register_for_each_vma+0x476/0xc00 [ 1540.569044] __uprobe_register+0x4df/0x880 [ 1540.569993] probe_event_enable+0x3c4/0xba0 [ 1540.570925] ? uprobe_perf_close+0x5f0/0x5f0 [ 1540.571860] trace_uprobe_register+0x54/0x730 [ 1540.572832] perf_trace_event_init+0x554/0x9c0 [ 1540.573825] perf_uprobe_init+0x173/0x210 [ 1540.574726] perf_uprobe_event_init+0xff/0x190 [ 1540.575738] perf_try_init_event+0x130/0x570 [ 1540.576676] perf_event_alloc.part.0+0xd96/0x2b70 [ 1540.577746] __do_sys_perf_event_open+0x579/0x2e60 [ 1540.578797] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1540.579838] ? perf_event_set_output+0x5b0/0x5b0 [ 1540.580861] ? wait_for_completion_io+0x270/0x270 [ 1540.581943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1540.583061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1540.584151] do_syscall_64+0x33/0x40 [ 1540.584960] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1540.586096] RIP: 0033:0x7fc9de03eb19 [ 1540.586894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1540.590825] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1540.592491] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1540.594033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1540.595553] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1540.597093] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1540.598629] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:27:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 60) 18:27:33 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="300000000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:27:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,appraise_type=imasig,fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c00b92cb3ec624715f7a194a2024c3838069ccbbe6e3bd1159dc000413f510c9bcad1c6372c99ca5d34cfd7184519b02a81cbc63d850d7bcabd774488aa6f9aeea7158e5be5fef21641a6c0b34b89ae77e1dfa55d04b65145c69636c53a8bd58d833dd2"]) 18:27:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:27:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 60) 18:27:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={0x14, 0x16, 0x69844ea0a6ddcd11, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 18:27:33 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 73) 18:27:33 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fchdir(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x105000, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r4) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000040)={0x9, 0x3ff}) sendfile(r2, r3, 0x0, 0x100000001) [ 1555.136273] FAULT_INJECTION: forcing a failure. [ 1555.136273] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.138712] CPU: 1 PID: 10461 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1555.140140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.141856] Call Trace: [ 1555.142404] dump_stack+0x107/0x167 [ 1555.143185] should_fail.cold+0x5/0xa [ 1555.143997] ? create_object.isra.0+0x3a/0xa30 [ 1555.144968] should_failslab+0x5/0x20 [ 1555.145766] kmem_cache_alloc+0x5b/0x310 [ 1555.146598] ? mark_held_locks+0x9e/0xe0 [ 1555.147434] create_object.isra.0+0x3a/0xa30 [ 1555.148372] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1555.149461] kmem_cache_alloc_trace+0x151/0x320 [ 1555.150470] register_for_each_vma+0x476/0xc00 [ 1555.151465] __uprobe_register+0x4df/0x880 [ 1555.152392] probe_event_enable+0x3c4/0xba0 [ 1555.153316] ? uprobe_perf_close+0x5f0/0x5f0 [ 1555.154266] trace_uprobe_register+0x54/0x730 [ 1555.155421] perf_trace_event_init+0x554/0x9c0 [ 1555.156405] perf_uprobe_init+0x173/0x210 [ 1555.156436] perf_uprobe_event_init+0xff/0x190 [ 1555.156456] perf_try_init_event+0x130/0x570 [ 1555.156481] perf_event_alloc.part.0+0xd96/0x2b70 [ 1555.156518] __do_sys_perf_event_open+0x579/0x2e60 [ 1555.156549] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1555.156584] ? perf_event_set_output+0x5b0/0x5b0 [ 1555.163703] ? wait_for_completion_io+0x270/0x270 [ 1555.164937] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1555.166080] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.167178] do_syscall_64+0x33/0x40 [ 1555.168026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1555.169123] RIP: 0033:0x7f27a2558b19 [ 1555.169934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.173843] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1555.175465] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1555.176994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1555.177007] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.177019] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1555.177031] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 1555.218043] FAULT_INJECTION: forcing a failure. [ 1555.218043] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.220623] CPU: 1 PID: 10463 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1555.222096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.223859] Call Trace: [ 1555.224422] dump_stack+0x107/0x167 [ 1555.225200] should_fail.cold+0x5/0xa [ 1555.226035] ? register_for_each_vma+0x476/0xc00 [ 1555.227050] should_failslab+0x5/0x20 [ 1555.227866] kmem_cache_alloc_trace+0x55/0x320 [ 1555.229025] register_for_each_vma+0x476/0xc00 [ 1555.230048] __uprobe_register+0x4df/0x880 [ 1555.231046] probe_event_enable+0x3c4/0xba0 [ 1555.232097] ? uprobe_perf_close+0x5f0/0x5f0 [ 1555.233244] trace_uprobe_register+0x54/0x730 [ 1555.234367] perf_trace_event_init+0x554/0x9c0 [ 1555.235440] perf_uprobe_init+0x173/0x210 [ 1555.236336] perf_uprobe_event_init+0xff/0x190 [ 1555.237402] perf_try_init_event+0x130/0x570 [ 1555.238409] perf_event_alloc.part.0+0xd96/0x2b70 [ 1555.239674] __do_sys_perf_event_open+0x579/0x2e60 [ 1555.240928] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1555.242071] ? perf_event_set_output+0x5b0/0x5b0 [ 1555.243089] ? wait_for_completion_io+0x270/0x270 [ 1555.244116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1555.245378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.246491] do_syscall_64+0x33/0x40 [ 1555.247289] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1555.248343] RIP: 0033:0x7fcf367ecb19 [ 1555.249288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.253682] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1555.255421] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1555.257031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1555.258576] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.260224] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1555.262079] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 [ 1555.343184] FAULT_INJECTION: forcing a failure. [ 1555.343184] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.346012] CPU: 0 PID: 10475 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1555.347588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.349468] Call Trace: [ 1555.350081] dump_stack+0x107/0x167 [ 1555.350976] should_fail.cold+0x5/0xa [ 1555.351912] ? create_object.isra.0+0x3a/0xa30 [ 1555.352960] should_failslab+0x5/0x20 [ 1555.353848] kmem_cache_alloc+0x5b/0x310 [ 1555.354778] ? mark_held_locks+0x9e/0xe0 [ 1555.355717] create_object.isra.0+0x3a/0xa30 [ 1555.356718] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1555.357895] kmem_cache_alloc_trace+0x151/0x320 [ 1555.358990] register_for_each_vma+0x476/0xc00 [ 1555.360058] __uprobe_register+0x4df/0x880 [ 1555.361038] probe_event_enable+0x3c4/0xba0 [ 1555.362034] ? uprobe_perf_close+0x5f0/0x5f0 [ 1555.363042] trace_uprobe_register+0x54/0x730 [ 1555.364072] perf_trace_event_init+0x554/0x9c0 [ 1555.365133] perf_uprobe_init+0x173/0x210 [ 1555.366095] perf_uprobe_event_init+0xff/0x190 [ 1555.367125] perf_try_init_event+0x130/0x570 [ 1555.368133] perf_event_alloc.part.0+0xd96/0x2b70 [ 1555.369247] __do_sys_perf_event_open+0x579/0x2e60 [ 1555.370383] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1555.371486] ? perf_event_set_output+0x5b0/0x5b0 [ 1555.372561] ? wait_for_completion_io+0x270/0x270 [ 1555.373699] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1555.374924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.376106] do_syscall_64+0x33/0x40 [ 1555.376975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1555.378162] RIP: 0033:0x7fc9de03eb19 [ 1555.379030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.383243] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1555.385016] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1555.386678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1555.388326] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.389979] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1555.391627] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:27:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 61) 18:27:47 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:27:47 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200200000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:27:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 61) 18:27:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,appraise_type=imasig,fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c00b92cb3ec624715f7a194a2024c3838069ccbbe6e3bd1159dc000413f510c9bcad1c6372c99ca5d34cfd7184519b02a81cbc63d850d7bcabd774488aa6f9aeea7158e5be5fef21641a6c0b34b89ae77e1dfa55d04b65145c69636c53a8bd58d833dd2"]) 18:27:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x3ff, 0xffff, 0x80000001}) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000140)=@v1={0x1000000, [{0x1, 0x1}]}, 0xc, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:27:47 executing program 7: keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x80) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/35, 0x23) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0xb, 0x0, @thr={0x0, &(0x7f0000000640)}}, &(0x7f00000004c0)=0x0) timer_gettime(r1, &(0x7f0000000500)) timer_gettime(r1, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000180)={0x0, 0xb, 0x0, @thr={0x0, &(0x7f0000000640)}}, &(0x7f00000004c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, &(0x7f0000000280)) timer_gettime(r2, &(0x7f0000000500)) timer_delete(r0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000700)="5e849e5bb8bb0b9668541f79a9257f70b7cb684356de88e126831a2432c01b2ed4e5ab7ca99a0243e7a65ebed19d0a47f2d955ebcf64c4ae620c26cfd124174a0b33bf47aac77736966539cc60", 0x4d, 0x4048054, &(0x7f0000000780)={0x11, 0x2, 0x0, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x6, 0x9, 0x1, 0x0, 0x5, 0x11, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x400, 0x196, 0x1, 0x0, 0x1, 0x3, 0x1750, 0x0, 0x7fff, 0x0, 0xfffffffffffffa62}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 18:27:47 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 74) [ 1569.235465] FAULT_INJECTION: forcing a failure. [ 1569.235465] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.238342] CPU: 0 PID: 10486 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1569.240120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1569.242261] Call Trace: [ 1569.242944] dump_stack+0x107/0x167 [ 1569.243902] should_fail.cold+0x5/0xa [ 1569.244891] ? create_object.isra.0+0x3a/0xa30 [ 1569.246087] should_failslab+0x5/0x20 [ 1569.247087] kmem_cache_alloc+0x5b/0x310 [ 1569.248148] ? mark_held_locks+0x9e/0xe0 [ 1569.249217] create_object.isra.0+0x3a/0xa30 [ 1569.250353] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1569.251688] kmem_cache_alloc_trace+0x151/0x320 [ 1569.252904] register_for_each_vma+0x476/0xc00 [ 1569.253989] __uprobe_register+0x4df/0x880 [ 1569.255085] probe_event_enable+0x3c4/0xba0 [ 1569.256204] ? uprobe_perf_close+0x5f0/0x5f0 [ 1569.257340] trace_uprobe_register+0x54/0x730 [ 1569.258545] perf_trace_event_init+0x554/0x9c0 [ 1569.259743] perf_uprobe_init+0x173/0x210 [ 1569.260834] perf_uprobe_event_init+0xff/0x190 [ 1569.262046] perf_try_init_event+0x130/0x570 [ 1569.263190] perf_event_alloc.part.0+0xd96/0x2b70 [ 1569.264454] __do_sys_perf_event_open+0x579/0x2e60 [ 1569.265512] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1569.266768] ? perf_event_set_output+0x5b0/0x5b0 [ 1569.267988] ? wait_for_completion_io+0x270/0x270 [ 1569.269280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1569.270500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1569.271569] do_syscall_64+0x33/0x40 [ 1569.272334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1569.273375] RIP: 0033:0x7fcf367ecb19 [ 1569.274145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1569.277900] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1569.279439] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1569.280902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1569.282368] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1569.283854] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1569.285406] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:27:47 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0xff, 0x1, 0x0, 0x4317, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x20000}, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/143, 0x8f, 0x8) msgsnd(0x0, &(0x7f00000007c0)={0x2}, 0x8, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000000c0)) 18:27:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,appraise_type=imasig,fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c00b92cb3ec624715f7a194a2024c3838069ccbbe6e3bd1159dc000413f510c9bcad1c6372c99ca5d34cfd7184519b02a81cbc63d850d7bcabd774488aa6f9aeea7158e5be5fef21641a6c0b34b89ae77e1dfa55d04b65145c69636c53a8bd58d833dd2"]) 18:27:47 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1569.388244] FAULT_INJECTION: forcing a failure. [ 1569.388244] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.390728] CPU: 1 PID: 10501 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1569.392201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1569.393983] Call Trace: [ 1569.394554] dump_stack+0x107/0x167 [ 1569.395342] should_fail.cold+0x5/0xa [ 1569.396169] ? register_for_each_vma+0x476/0xc00 [ 1569.397209] should_failslab+0x5/0x20 [ 1569.398058] kmem_cache_alloc_trace+0x55/0x320 [ 1569.399074] register_for_each_vma+0x476/0xc00 [ 1569.400104] __uprobe_register+0x4df/0x880 [ 1569.401055] probe_event_enable+0x3c4/0xba0 [ 1569.402016] ? uprobe_perf_close+0x5f0/0x5f0 18:27:47 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) [ 1569.402044] trace_uprobe_register+0x54/0x730 [ 1569.402078] perf_trace_event_init+0x554/0x9c0 [ 1569.402110] perf_uprobe_init+0x173/0x210 [ 1569.402138] perf_uprobe_event_init+0xff/0x190 [ 1569.402157] perf_try_init_event+0x130/0x570 [ 1569.402181] perf_event_alloc.part.0+0xd96/0x2b70 [ 1569.402216] __do_sys_perf_event_open+0x579/0x2e60 18:27:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,appraise_type=imasig,fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c00b92cb3ec624715f7a194a2024c3838069ccbbe6e3bd1159dc000413f510c9bcad1c6372c99ca5d34cfd7184519b02a81cbc63d850d7bcabd774488aa6f9aeea7158e5be5fef21641a6c0b34b89ae77e1dfa55d04b65145c69636c53a8bd58d833dd2"]) [ 1569.402247] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1569.402271] ? perf_event_set_output+0x5b0/0x5b0 [ 1569.402286] ? wait_for_completion_io+0x270/0x270 [ 1569.402339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1569.402361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1569.402386] do_syscall_64+0x33/0x40 [ 1569.402406] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1569.402419] RIP: 0033:0x7fc9de03eb19 [ 1569.402437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:27:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) getpeername$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 1569.402448] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1569.402470] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1569.402481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1569.402493] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1569.402505] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1569.402516] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 [ 1569.435283] FAULT_INJECTION: forcing a failure. [ 1569.435283] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.435309] CPU: 0 PID: 10502 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1569.435321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1569.435329] Call Trace: [ 1569.435357] dump_stack+0x107/0x167 [ 1569.435384] should_fail.cold+0x5/0xa [ 1569.435412] ? register_for_each_vma+0x476/0xc00 [ 1569.435433] should_failslab+0x5/0x20 [ 1569.435456] kmem_cache_alloc_trace+0x55/0x320 [ 1569.435490] register_for_each_vma+0x476/0xc00 [ 1569.435539] __uprobe_register+0x4df/0x880 [ 1569.435581] probe_event_enable+0x3c4/0xba0 [ 1569.435602] ? uprobe_perf_close+0x5f0/0x5f0 [ 1569.435632] trace_uprobe_register+0x54/0x730 [ 1569.435669] perf_trace_event_init+0x554/0x9c0 [ 1569.435704] perf_uprobe_init+0x173/0x210 [ 1569.435735] perf_uprobe_event_init+0xff/0x190 [ 1569.435763] perf_try_init_event+0x130/0x570 [ 1569.435790] perf_event_alloc.part.0+0xd96/0x2b70 [ 1569.435828] __do_sys_perf_event_open+0x579/0x2e60 [ 1569.435862] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1569.435888] ? perf_event_set_output+0x5b0/0x5b0 [ 1569.435905] ? wait_for_completion_io+0x270/0x270 [ 1569.435962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1569.435985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1569.436013] do_syscall_64+0x33/0x40 [ 1569.436036] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1569.436051] RIP: 0033:0x7f27a2558b19 [ 1569.436071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1569.436083] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1569.436107] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1569.436120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1569.436133] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1569.436146] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1569.436159] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 [ 1569.652141] loop7: detected capacity change from 0 to 32768 [ 1569.656304] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1569.673048] loop7: detected capacity change from 0 to 32768 [ 1569.685172] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 18:28:01 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 62) 18:28:01 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000090}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0xc8, 0x19, 0xc21, 0x0, 0x0, {0x7, 0x0, 0x2}, [@generic="820599b403ceca0d9535f9a1811c6954c9da1dac6146ed01333455be05decc230521d7d06ed277abcb7da081d78f38bcb1c5357a8c9bb969788eb908b8ab4890b62129b170eea33990eebcad6b58687b13db8c3a39a969be48fc24841243ffae53013c2c89e08092c276bd6ec9910da1109fb26d29f0e427d409bce58532e064076e780361bf29b741ebfe85a4627f91a067ccbc45145a6e7e14eda2b92439c7438017aafe77233884fdc0a38f128b5936"]}, 0xc8}, 0x1, 0x0, 0x0, 0x8880}, 0x44040) 18:28:01 executing program 7: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x93a, 0x8001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x1, 0x2, 0xd, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x8fb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x0, 0xb1}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xd6, 0xff, 0x7f, 0x40, 0x40}, 0x43, &(0x7f00000000c0)={0x5, 0xf, 0x43, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "c7563ac37e5185275dceba1a68054a78"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x9, 0x9}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x2c7b, 0xf000, 0x8, [0xc030, 0xff0000]}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x1, 0xf000, 0x8}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "15b70984528d306a0179741424460d5135cf3d0759cb9826e84b25333b9674e4ab50613dd55f407fe1e69dbf35af6bac6d277324e459a1cf753a0bd943412691bf4e1fe42e99bdfb57f19d86ffffe5d2ef523a0013ee110f6af2400852629e273c1cbf999807d3623a31b04f2d639d260d684b0e8641201c4b2d2fb28d6be0aaf27d890e8050360b7379951bec2e13b604ace5572cb29990360c31726f7e82ad34e88d113ac4505bdd6a1ed0fd8957"}}, &(0x7f00000003c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "6bd7b19d"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x477}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0x30, 0xc0, "6a654656e304f9e0a45b8d0c9b352c1d98960a64f334e433122dbfb83151b707db81f8aa5447f17f3819dbbab57ea783c26f60045e55516647232a3deb6aa71573498bca098c6b2fe46419a2c5d8f8bbfd704c792668097e7f278fcb7617f1ef0cb80e7c783354cafec7bc781a3c414c004d6fd38e3db95e7dd80f1407a926c207990e594a2c04b2de55f33b9eb4338fa805402150e5aae05b79760c516147f0506ef031a16f9bdaa996c4e47ce43fa72c2904574ffb3a89c0df8f48786750af"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4a}, &(0x7f0000000600)={0x20, 0x1, 0x1d, "4e6ddf7cb4bf4346eec038638f7015a2256808c9dd4120ad676bb41c1f"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0xec}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r1, 0x29, 0x3c, 0x0, &(0x7f0000000080)) 18:28:01 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:28:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 75) 18:28:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) [ 1583.035148] udc-core: couldn't find an available UDC or it's busy [ 1583.036659] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1583.038477] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. 18:28:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 62) 18:28:01 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200300000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1583.055600] FAULT_INJECTION: forcing a failure. [ 1583.055600] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.057566] CPU: 1 PID: 10535 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1583.058680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1583.060003] Call Trace: [ 1583.060438] dump_stack+0x107/0x167 [ 1583.061023] should_fail.cold+0x5/0xa [ 1583.061634] ? create_object.isra.0+0x3a/0xa30 [ 1583.062370] should_failslab+0x5/0x20 [ 1583.062978] kmem_cache_alloc+0x5b/0x310 [ 1583.063629] ? mark_held_locks+0x9e/0xe0 [ 1583.064281] create_object.isra.0+0x3a/0xa30 [ 1583.064981] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1583.065803] kmem_cache_alloc_trace+0x151/0x320 [ 1583.066563] register_for_each_vma+0x476/0xc00 [ 1583.067302] __uprobe_register+0x4df/0x880 [ 1583.067989] probe_event_enable+0x3c4/0xba0 [ 1583.068674] ? uprobe_perf_close+0x5f0/0x5f0 [ 1583.069374] trace_uprobe_register+0x54/0x730 [ 1583.070111] perf_trace_event_init+0x554/0x9c0 [ 1583.070842] perf_uprobe_init+0x173/0x210 [ 1583.071512] perf_uprobe_event_init+0xff/0x190 [ 1583.072112] perf_try_init_event+0x130/0x570 [ 1583.072816] perf_event_alloc.part.0+0xd96/0x2b70 [ 1583.073587] __do_sys_perf_event_open+0x579/0x2e60 [ 1583.074374] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1583.075136] ? perf_event_set_output+0x5b0/0x5b0 [ 1583.075883] ? wait_for_completion_io+0x270/0x270 [ 1583.076665] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1583.077499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1583.078323] do_syscall_64+0x33/0x40 [ 1583.078914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1583.079731] RIP: 0033:0x7f27a2558b19 [ 1583.080326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.083014] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1583.083993] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1583.084870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1583.085747] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.086638] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1583.087518] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 1583.094664] FAULT_INJECTION: forcing a failure. [ 1583.094664] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.097081] CPU: 0 PID: 10532 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1583.098551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1583.100298] Call Trace: 18:28:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) [ 1583.100860] dump_stack+0x107/0x167 [ 1583.101785] should_fail.cold+0x5/0xa [ 1583.102603] ? register_for_each_vma+0x476/0xc00 [ 1583.103594] should_failslab+0x5/0x20 [ 1583.104393] kmem_cache_alloc_trace+0x55/0x320 [ 1583.105363] register_for_each_vma+0x476/0xc00 [ 1583.106365] __uprobe_register+0x4df/0x880 [ 1583.107283] probe_event_enable+0x3c4/0xba0 [ 1583.108199] ? uprobe_perf_close+0x5f0/0x5f0 [ 1583.109130] trace_uprobe_register+0x54/0x730 [ 1583.110100] perf_trace_event_init+0x554/0x9c0 [ 1583.111070] perf_uprobe_init+0x173/0x210 [ 1583.111951] perf_uprobe_event_init+0xff/0x190 [ 1583.112915] perf_try_init_event+0x130/0x570 [ 1583.113852] perf_event_alloc.part.0+0xd96/0x2b70 [ 1583.114901] __do_sys_perf_event_open+0x579/0x2e60 [ 1583.115944] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1583.116957] ? perf_event_set_output+0x5b0/0x5b0 [ 1583.117964] ? wait_for_completion_io+0x270/0x270 [ 1583.119023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1583.120131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1583.121225] do_syscall_64+0x33/0x40 [ 1583.122019] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1583.123099] RIP: 0033:0x7fcf367ecb19 [ 1583.123879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.127755] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1583.129373] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1583.130877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1583.132378] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.133893] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1583.135396] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:28:01 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:28:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20830, 0xffffffffffffffff, 0x8000000) sendmmsg$inet6(r0, &(0x7f0000005000)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x2, @local, 0x800}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="62f3a79dbd035a7dbba16de944b8", 0xe}, {&(0x7f0000000200)="80c825db6ac50e89eeadfa218f1ef5d262ebbd805cbecebef013e64d03d7773088ab4ee587b753b0873a7808ecda463dae0e54f524d821700aafbc975117fbdaaae48a7c4e43f62c9c6d9bc4a7a19a4dd2cb13084db6c753d26ae98e248c0f0ad6adf4d9b9c361e1c75f4837da50b7ce5b3ff0b92aca6af0a54271345898021122090411", 0x84}], 0x2, &(0x7f0000000580)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dstopts_2292={{0x248, 0x29, 0x4, {0x62, 0x45, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0xc0, "07dab8739f8f8d5b3292f027b58329f72753bbe0f6ffd2dbccfb6dcac10ddacac55307da3845b2189d994705cccae3b1b4123d9f50d94380398ceba52152da5bac60064f0fc325d1fb9b464e0c50190812818369353e023fa4ea9ed8688f44ee9278fa78a80ee1b634f66c6ab31447fbf1ef4694a9016a530d0d741524ea6c5c5f2debfcd2e29b8916f0ce0d8f6666d9d2ab0794758dd9703674a05b70d989606c46d439319726ec3db20ad098b64537acc43d7162b3cb2a13feb93ca488e888"}, @generic={0xee, 0x7e, "202791183b24a5e3a5900da0facf764623fd3b9a75e458b9cf82e53fcdbf0ec94769d7ad2da93199d08c397232bf2935f4630382a87fd159b20a431e8e663a8d74f35db9c4c0e460bfb6b825f282110499c9498a311dedb7d95056f135c706b5f6dac959c9c21de62a711b12e0a615e5a0d11a69af1525671da57c1eef20"}, @generic={0xf7, 0xd6, "f476b55cd8344103b487396a6367cd11864e9257e936f3f0892679d1ce4d287d694f8100086b90ffb31dd4cdd328f26cd4fb0b7dbbbbe2510f74a2b6b7534c4b033e37fe6b593910c06d0c9b3d424a4ac141c1154b0914b6506506f32da698c35fee71f634f1a4a8df20f31450a81bbc2c8d624dcc78dab302acb45d33a7dd5a3a1c693dad1948ed5c7d646d2b698f6cad50318b18c4f4aa57b1bf2be915e0b293670dc5a6be603dc9bd86dfbaeea9085415234cda7c695f5b96d1b80ba51cf5529c6cbb58f9e5e238a4770217eac8cf969154986f7b"}]}}}, @hopopts={{0x88, 0x29, 0x36, {0x33, 0xd, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x21, "5b266c49262b32615bdbe526ea3cac3771fcf23a9c5107e31b5706cff6a81566ac"}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x20, {0x2, 0x6, 0x7, 0xfff7, [0x4, 0x1, 0x3]}}, @enc_lim={0x4, 0x1, 0xff}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @remote}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts={{0x20, 0x29, 0x37, {0x1, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}}}], 0x320}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f00000028c0)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000340)="f22b82ab6d5eb7cae8d5166cbed39c759aaf4312c0ac6ef23bdf357854005e748db9ba523f1ab6c87d22962a23f9d23f06c51b4d", 0x34}, {&(0x7f0000000380)="31037e19fc24f3e6ce3651422c8db18ead043460235036bdb28f5b9df05a91a2dc7132345eae62f9c5378d2c1866b48bfc3f0af8c4384f4a16b9667599c4f0c72bdf8631c61380c463ce3c67f03b4455aa09b168669bfb340021f5a15e83e5c64b8b1c3bf08d61910546375a2c586995997b553912955ae5813edb5040a3acc3a35ef8edb34855502d81e9a259f39739a30dc70a80f9e1b6ca039ec401bf06ead84ca7ccc0e16afeb33cbdf40b0c46c587d528e4aca6dcc312ce0d5039faaa56c42cac5aecd8c6bdc2d1640869c895a77f09b1576da9e4db6a13f0036ad0c957c745c63b9cf808c5d21a14f939a70c4955a2", 0xf2}, {&(0x7f00000018c0)="fda6f5410ee0ef104daa7a859f3c6e4e2a9056dddcf8951a8635f26f2a51f40069cfc596acd7509309f5321b1cdc2d18d57da6ac30110f23ece47f6a937669cbfd56cf7163029e0c93467a47d1da195fc4996b0ad0cf4708269fe8235de58b877cd2055f23426ceb3ae5d0eb4e421790c787e5e29f7c26b3a0bbae6bff802b2219ff1e648d5f9ea5750c9ce5685c72f73b08a336b3518d35d6bf7e3dd527e6ff709b0c7d548cd7c12a4f03e92d16d232cafa5d1332afad16a6fd551a757020903e7d3c683e14b9dcc326a4a59850217b81cfb77daae6aba972c5a4348ac7a653b1cc84d0c7de1384b9427925df6ea348c1902f8b1d3b48017770ac705363c267f21adefa5ad9e71644d9ca300edd0d0db942e9422de3c17f07f4546e09d786cf1207a84fc9840b12e78997f2a50f6b87a0b203b7c12e82bef1c0bf1bf13249ecec72f3415b7423cfcf5bd7bb49c9eebecc5bca5d2a1d54dd26490ef86a67043c5996d971d0ec1da0c519d0eca276e2af7b63a13bb1666ffa9cc893d51faf6667c78439753d3d6d804542981f9d33dfd98513c455f2b977055a0009dcf06021aa47861e5c9c29ea51269dea5ec306edf97f34fedab9bc7c13067ffa0d9b957d6e2dfffa7f09d30e30fb6d48e036b061adf2cf8382a09840124658bf20fbd163b6d66750f559fa274e553569022c787aeea901fa05b96938061bf3e686ece9ef9d2a775a332ae13d07076148f9181f23a3d2f0ce1bb84ee4f35d0a61a058f289b4ea7c54b8507e1dbc2a5db8811b63c35f96d0c97ab3d1edd3a78f08a0a4fd7d146b7c1d17a8c4985388498705e12dce42f5b2440e5554aecadc18b1795c21d4eb64c19dd93d1a2ea188a1ceae35d9b52ecdaf74b56a6506a3d6b888fa3d96774b7f40f94d1302fa78efcfe4afb14dc83be56e316a864d605965c5ad2c9507ffdc305584275790c60b4bd448dab609c0e544b390ee2ce43211f10ec148444f8d6acc8594221d26a7b7f8d66b484fb22645f513e19afb2f87aeebaad9486161d37bad103410e13e3db61fe33e277c6dc99fbf799d0447e730fe0dd4733e291277ea89b57f4f91912b62561fdc139dbe1bba97888b8de2d7f8e4045d7cbd6a38b062210e590c2f722ba81902aff9f17a6e0b83a2fafe9ffb278f81cf914348c1b6742b1aa19058c756a71520b4e80e47463ea59a083a52f0c610c335bada69a495c05cd3ac9ee83d6bf3a4a649bf566a2f8d2e4e04cabdfe9a3596dd10d885bca9c83576fe3e3a7577ee2c6dab2e0aa91d18fe82f8bb7b96c1eb38afead6e1fb39b4aed9af8cdfa91d30b53c80f7f584c5cc38fbb2af45ac6eec5559cdb342bb46197c1d2461db4984f72ac1fb63bf26fe08cd6dc045888c2044808bab8bf8b61aedc92f881fd768b0ccf183ca767c403b598f716626ca594397b628bf2e889d181125ddd6392d3239569bf8333644170cf71e8890380b0ea431e2502d78a81b2c49b991079560f108f3524d3eb26ecce6a232a591f9a46f857101d822abcb55314572d49853f8c74a7dc5ead1bdbbc2af5f76261f5afa90ce729afca7a0d1fde470b600ce321c90f8ce720b2ed2fa8d4867b12aee65edcd30c9fd0547a2b2e01e190982065548dabbc4924e5e2b3b481b3f99fff0b21027491e7e350d4f2c87be88941b99a08014e94a35c0b5cc03b03d2e66f2e705e18d74f94966b6dc18c9702a8dd6d4efc9734df68e2307028cf8ea14c9f0d38fc6e1ed5bb0b3bc39f936717d49c7bbd44882051013653a5dd8c0f2005bfb9a0e6c37c216919eb0607e7c1d6cae1499beb791648f6cff02753748825cc4b6cc021e60432a655d417885d281d97cb2aaad5eb3c59d084d997c2acf60215c9a2b03c4e89ff39e2b96a014424893b366b57238e225a4543f009e1895f4f0be0fd9df3a29c558523829fbd033ac3915f575b0eb25f32591760f445fedb77bf9428db0091475fc2ceec9990baaef6a750a371dd7187549cbadfe391c21eca2bc0480a6516f6a3d942492a6ecf2bd47593a8f497a66ce5f3f321d1c9672c563239c56ec914725ac7fef9a1e7198719a021391d0424d8018a093260d4747579e7892a091ee63a8e3d49efb8cbe35c11f8bc82f0d053ed01ac85be2c6e2174e6f004183366a096e3dc0fe3b1c581274a0d90a8879b88a6878521296a5e44448566760c3df6a257eb9e839b345307e62fe7ae917a74ca2576eec61c0009e84db4f473cf8333a7ef74628b3d8923344bc2a51e4ba026c75b4917768a213e1509bd7051a8c80cc7c7adccc136d893b30a619cd9549061174806150856e6d12dd2acac1a52d80bf9057d575bfeeb8608b36710d01d7eea21108c74a6aa13865f24d210f0604db8d5d8a7622ed58ca8e4e665e765458796d9bec302765e24d699c52346d789489d949d8685be6d3ef1a7be37c63f1ce727d891597b8aec295abb9ff22c4f1787e9d72167d1de735d9ed656161207fe7e96ca9283b3232c937d5d9745a1f7c7a3f354e5d4e50d6ab0e4ea19fe38b9ae2034b5353a4fe75ca3ecd9641db92c11069072c83b2df09efae6f556ed62d3c508d52b81c0cddf03c3f3d1a922cef4d79de893afe0822a89aba3610022417021040b53f8f0aab6311b15225451825ebf3273a2f8b462f27c8218fffbc49ec9fd84311310be7dccf89a5d1be8d6bcf9a976767559ee5be92fdf44094b7a67d6b528c34852d5f220f3b1987c0ad930b39049cd64105a6f3e00ab57aae860087c5793cbeb301dfb5238c705f823e256e4f3493a233f33e685161b28015d56729e22980afcc6e6adf6a2b33ddd2f7dcbef1a2d887f28642858247ce409b23752dfc0e509713bce12b1c2052fbd9071d65a1253859d7e7bc60c4d9b62a9320cd94aec5f5a503ad9c816df342801405c37fe187734a7000d39498933bd63e3043ee239152b687442345051636f6c6f3e768cecd3ef1fb9cf0abd97dfa75fe3a1ef41e5b7e1c5954c764046f7dd1858002669a397b4a247d4f09e67f69c3c7c51e23ad65abb1a3a7de59c5cdad65d85523aab07e436990ebf4208f14b92434bd0755e642e40abec38a477f929c781be3fee3759f8d0b2bcb5613fba16f5e44eaff77c63c71128bd37d0e95f3ec0615868b1a144546b93890cef323acc7a1069b0cbab7564607229444c4d7bf7490aae0960c5763e81106a2e329ce238bbf144304de96df44ea90bad0ac26baadc08dbc327c31d89cad2289dfcf83e7afa062387e71bd1a93d346070f22421242527cc78d4629389f3e7e6c0983545c0ebd649069b44e5405fd6007b881562e3ff5d661f43566a22fc5cd05620b7adf049c572713664fb73ae81a37cf23741153d4e958599a6f5d90cc7aa7a49e0f13be1e71680b9d489d84ce9ec87bc4d3254cff05a258e033166cd7345586e748743c02d4af8360fa3ed1fc859cc9e55dcf51d3b660ad54cec5cb1e08c7e532e139c9ad7b40fa00f4b555cc9a3677b924acf494a35c0fea6aed76a09dd102a5d7b683ebc35f722bf3585778c4206d9d7cc87e862e726ba7521ebd9ba50852d6c2cbff0847515d025fe3976e3e65c5f265e8aa4b6da74f3de332b586ef36adb1b7dc345b468e44f7f56d9650af013f035bf44631df88a6cda650bdc6c6856f6083f4935827e3f0706faae76bace94c73ae883ae0b4414f5a5627dcf883a28d3ac9256eda184b8ef143b7394281ae307f2ccddadea3748db58c881111cfd69793fc2a3be6f4b7ed085f6403947a162912915194d22434e8ed25bce8f5ce715c14580ffc8b3049907c7285cdf31c589a8cfe7e6a03f6bc18512e382fcd987647a3635744500ed555cbaf4ce12573cf2beaa25e0b4e2d7ea7943a6f00794ae93f5e398e70bb59c27fbc50169e1a487c2ac872851c5c41e70923a937c2e763b940fcb136ecb34336c752e936287c5e2f4fd2685f441beb4634d2a1ecefc3399478c094d546ef356c1f1579544540596d4543a5a4e24ae1d2a9583d3c26cfe07df562af22954dcdeb435d23ec57df5b0b4a471ff7853e38beef48d458bbed0e90131b9639474e24b91fe5399b116cb2544fb3f477e5fb964bc8bfc9e0645bcc617db466db6d3d1621e64acf205b5718def9d9a63f7db7ad82fd1640fea3820083997d6f9f0ff8638de837412aba48fd87f3b3429705d2ec257ef71ea14a9bf97f64156b031ac12b0a226709682149046799bcb4b62b2ea9676fc52940195bcc186d3bfd607d7cb7391bf032bf3d9e42c5ad1383868e765eb1a2b3d3bcedd36fce64733daf87f10bc44703617b3348842d9f9ecc0309a314f08b9617b45531444462310b320cbf5ce5472888f7b989f9b04e9c6d8869ea4c45578903f0f5e2125c121dfa288fa5aa54fd9db195b4ebef4d1a712b2ea8c4bf3992957ce187fde8aee10c121e00cd8f95c14e2c6bc6fa53d38379034185b4f574f70218ee2201a26005078f29d32c8adb42bd2d5f30145d0b64d9a8ad0d4cc5bdef8c9b8ce722dd883e7dce3997a59b9ef36dc0286a4f6c4df74806a980c339b3e73f5e1d223eeb8ac1bdd8b0711d1e7a16c2ae58e4cc492afe90e246e1be36b8bfaff01a7af1209bfb95e7f09c20e6966fce292dd49472f52aff8d9133a1b09f2640ad1ab40c109fda05237f11bebfef2d1438a0b0092c0a5a62f1a7b27ead2315753c9148cbbeccd002f51154177869bc3be3f9d9c8006f2e058f16803a3d037a819888700372380f872add44c3accb01a7a0a10b3d5f3d2585a21785d08db377a7d4737d18a5304acca718e2ecfb878b7bcca55de62c38804a6c573aeb13c468633b1b2e008fcb94174e4a31ba20148970575d2f7b6ee8a4abab7274b5fe343480fa542f1191526e14fb3efbda38081b1379f36c422e27cf5d745477cf638be6c7c57c1678df80688e814df7a57c599920db708ad5923a3db634beac0869e639dfa213b4b02dc7de656b5084f8e01d038ecf4c7293cf1975a1d464a84aa3e4acb0cdcdb0d5180c739a9f9c89972e99d6686b6763b29304521c9d2852fde33ee74cb6833ca9889020c6660c69de88d08b1edd5dda4c33588885b8213ffd7fe82ee57bfd55a6e16eab2c660c93377359f3ac40d627b3c9204c920db953a2744f7ed4638d757b0bc3b062352a089194d4b7d92207bb014544ce17d0b1bcf6dd861ea23021d6a12a8f698c7c781796d15aedf05af4a428b0dd6801a0b7347dff779e8c614c4042d881059ed43a181e09fcd1e515ae3f1e5facc49a42a403ba13cb9e98f400f055f00f34e27c7521076524da12338c76694c62f96cd00601ec19735bb20ffd712c369841cddf08ea36e4aba4673ed32711bc91a18613789d49b6cfaa9f1bb66f4f1b0e9643db6c0a43e896526dd9371c1c2210557a43205fc34a15d935868ea54e3c55c12acd0f467178f90096a49a4f85d38720030c47caa097477f7b39584efae82eee707555422693efb758134f92c89c0b6e38bd99ad43d79a9aa0c7f5e23752a3266f121e771392a264b7751397a1866626a20ae8a8b6b4aa49f36a6bd37ace1546c42824c9355f99c1019c0aead7115994f8a2fdb2559a4cdb8579cbf71761c06593dfe47ae048011f3e2e6d899f7ffd06a8b5590aa5d281a3a55992c7e54faa786bb32491fe429e476a3d52e71d8d715aa03ab66034cbcd87152e628c0635e07a48b601c12201a3e4b30f3f78e015da43ec3f54bde86b182c9fbb6ee5b9642ba69dc40e53d552d1e3239287f89d77eb6c0b98533b6dcece5e17e9efb0fc9c8b9fd6c73bc5dc1ce336", 0x1000}, {&(0x7f0000000480)="6337887a0bf6e97918af57b2d8a3a959", 0x10}, {&(0x7f00000004c0)="b2ec8c539140aabd9ad54fc8aceb1e145dd0c2d41d9fe50a40a08425c324aad410a50dd54730dcddae0305082aa7763ba4c0c398641c5a5179ef1a3ab1bd2032a62c8cae74c6308640c9275144", 0x4d}], 0x6, &(0x7f0000002940)=[@hopopts_2292={{0xc0, 0x29, 0x36, {0x3c, 0x14, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x8, 0x0, [0x8, 0x1, 0x6, 0x2, 0x8, 0x9]}}, @generic={0x1, 0x5b, "c6ad14940c2a1ec1491d6f1a6e846041778c13f411adf7fdd719514d328eb8bee209d28a3de39de21affea7ec19a9f3046ff508151621b7917265873c7e43cfd414efb8d456528c5e842c8c866a0f069d72483dde9adaccde880b9"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x1, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0xe8}}, {{&(0x7f0000002a40)={0xa, 0x4e23, 0x1000, @empty}, 0x1c, &(0x7f0000002d80)=[{&(0x7f0000002a80)="0537fc072daaa1ac2fdf61877c5cad79bc42e047ba298ae92d350b7af1b6e38a94ad79e4cbfdcf8dd2ded59553520f94b58a3791a753a939d478155d7706bc0380a03fa035c0c61054288eb537d4e7928c90b94dd7b4f64494b37a0bc1482ec0123dd8d0645e1d6491c3461992947f4c9663456efc89d26b247b749f4ac37dc531808e622170e2e96ee6a47a074661dd8276eb066b42efa0d4cca6e77e6a3e37ad01eaecfd4831c1ff7acbc7c3b9de5eb389f0004e69c32f7131fd454988e257d415e0dcefde94780dd3c60b05e75ba72a0ba16a5a074d079fe1ed266e1abe0ff330668ededadeae719feb2982352ba5", 0xf0}, {&(0x7f0000002b80)="537414b6883fbbbc1c14879bd4855c8acf33b58cfd0d58c62dc85d8bcd78fed473f299b639ff6a4c3056da7496696d3f7dd35a005224f211275e286a899af7e5025fd6f3b807eb8e2d482cf5b9ed0108854394dffdca1523d2f84d5584af6bbf54fe06839b2ef40e99f5d8590d56b13b8d5e7dc1cb8bc58f57bac44e37eab9b413752421b5c9ae1e979381afbafd53837715281680e0eaacfadf14ebcf0ae88760b9bc70c851902fc209878360cf334231c4f23cf5d608f35575778799d82bc122994fbb7df4866afc8f993baa029c1f5330afa596ed5bd177cfa44e906b68210afab027b1e828424b6b475fe7ba1f1d4e6157de6658ec14", 0xf8}, {&(0x7f0000002c80)="fcc8e27e6d4a2cc0f4de98ef6185c9b27b2bf5077b5a6eee2bdde0b283a15812c9e9cf12a2eff7f89ecec5d6bf", 0x2d}, {&(0x7f0000002cc0)="35af5055e78220bf8236f2590bdfd9386c19f7c36a9f13cbc9de1b4cd162a0f36f1ca1d892b6cca7c2f18cb8e7e92961436d", 0x32}, {&(0x7f0000002d00)="18747b94e5eea50c9e", 0x9}, {&(0x7f0000002d40)="5abbab72ecfe9fb2b27a8f7b8af6a352165037f9f6b7e966ee01973f810d9e4ee2e4649e7f1044b2f4949e4372eaa216654535e42acbbe62eaf9f5472300", 0x3e}], 0x6, &(0x7f0000002e00)=[@hopopts_2292={{0x60, 0x29, 0x36, {0x67, 0x8, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x68, [0x8, 0x1b4d, 0xffff, 0x1, 0x9, 0x1, 0x5]}}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x88, 0xa, 0x0, 0x1f, 0x0, [@private0, @local, @private2, @empty, @empty]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts={{0x100, 0x29, 0x37, {0x5e, 0x1c, '\x00', [@hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x18, {0x3, 0x4, 0x2, 0x4, [0x4c, 0x1]}}, @pad1, @generic={0x7f, 0x7f, "7afa974760495d524879f2793a7d06755397cc98f447992b07ca832f01ad48d4fb71c536c9ca15273ccd0079a13eb4d2d5fbc6ffb658901f6486b4d9b11dc7c0d2656b3abb838fb5cc50b83b8ae113bf9da97827e9daca66fd5604fdb9df22cb8b9edf5c03664dbb28bfaabc2dff1dc840715620c6d62f9e87c2a31bfbb9fe"}, @pad1, @ra={0x5, 0x2, 0x40}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x3}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3b2}}], 0x220}}, {{&(0x7f0000003040)={0xa, 0x4e21, 0x9, @local, 0x80000000}, 0x1c, &(0x7f0000004140)=[{&(0x7f0000003080)="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", 0x1000}, {&(0x7f0000004080)="a552f3e490e8d2b0395bb440a8174dbba277e32e91ce7a31653b0ff20c562f358b9e216851d90799f86f059f99d81eda3271509cbb84fc85cf1979b5", 0x3c}, {&(0x7f00000040c0)="e4a5beeb9a188cc5b0585260dd50d213d81f79bacc80c68c283773937d6fa7bca17bd90541d9d98f2f9cd21fc209543f14b57d39f61b67737dba0efa90f2a023b6c68ec118dbdffde6217924ae53111c687e12e21f8a614db1e3185781c5086ba92282", 0x63}], 0x3, &(0x7f0000004180)=[@hopopts={{0xb8, 0x29, 0x36, {0x89, 0x13, '\x00', [@generic={0x5, 0x8c, "43ec50afd396833b77a5e3a9ae538cc03363fb3e5b9ba520f6709a5db2a87ad654ae36eb8444784829f0ce765d23f78b8650b0b55692703c52da296cad19200c5e80f9b9041b9ca2e7c863fc9812a76c181195fcdda46b11dd49938f048ce05062d2fd8d18fcebef23ac42536f194e582ec758d7581420516eb6a8f981727b45424e61629aeff9d94fe195ac"}, @jumbo={0xc2, 0x4, 0x7fff}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0xa7b5}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x2c, 0x4, 0x2, 0xff, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x14}]}}}, @tclass={{0x14, 0x29, 0x43, 0x541}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff7}}], 0x120}}, {{&(0x7f00000042c0)={0xa, 0x4e24, 0x357, @loopback, 0x7ff}, 0x1c, &(0x7f0000004800)=[{&(0x7f0000004300)="6ae390251e3f28ecb6696e62a50bda62f537edecfb33eefc691884e31c096994c70f76c5f35f8e39c852e87c5ac6323731d188d266b30451a7d469bdcc967f222176635b66227a968bd341cc49c30edca530302cde51a4d9252a80a87f925a60fd69c8ec8c2433ae79de5cbbb5508ef8cee63075aca36b8c857c54553827605fba2b03c5577de5183a33eb4e9907910a4d05de520e9d79db8f49032b223ae41d27d3217b6552820ad66f81d82807cb5693c9", 0xb2}, {&(0x7f00000043c0)="c09ab9a85d", 0x5}, {&(0x7f0000004400)="ff283f07877b924d70e429027f1e70fee235d8eb8527d667dd535922558bd6d4c676e7beac3ecba046a9d4f934239ad75242c0d753f2d7c4b5fe04788887d24d51ba91268791c7deeaec423ed06870f3c1120b429a806245e0487d2ccb1eec9b9b2641d673f2fbe68c268e2020df12a435e44991ae30efe9a2b29f5631d1fa5e7a509385e2b4a02ae7780dbc50f7eb7f749cec94244c73b9c0039b3b2fe81d598daf5e8b78c7b46855f68783d37e0c68b3f6569e58056d0d8295ce0b2c86d69109fec4e4522aa9bdd5933903", 0xcc}, {&(0x7f0000004500)="e0be77101510bd7301a9570f84e74d0b5af8878bc451207bf5f566ddd8285caa983a4c791905778c8c439c1599dafc61288ad9c8e3abc63469296ddc0c18772e3cfac78117609b9be4bb268c", 0x4c}, {&(0x7f0000004580)="9ab54131973a867421afb6bfe8062f5f433ca55487834a04f4965447dcb07f6947d444135bcff6a472c96510a141e5705969bddd10a67dc50fa0b0bd36d510ade254f1a5fe3aa8fcbe1cc7e4c4d6905048a7ff5d4db0889a82937922760dfb0b963cd94887e41611079d1b076307afc455342914afedd92e211cc568a7fa533e7724b02707d0244a6ab2e1adba04aa918e2933f0a5967965c3e7565260a007b79b16d247bd66151ef9cc9cbc5d21f4a8e19dc4412f966c25905cc2273a0e6ca06be260e09986786b23967c40e3e3c6b497ce68d42cbcf47effcc99cf8b0859d0db3df39b49e3e2f203b1c0f116f3f596b1", 0xf1}, {&(0x7f0000004680)="a7af132173d7d5b6f259616daf559d5a82ac1a25f319cad460c00dd28ba1474b7e9d19d882be29924e32095a817d20c37c5aa4c56a47195e1d4c3157924e9f9aa7251871a932641eb8fe20ca3c5891fde597210f127f85d9bfb6f480acc589c99083627e639b6f2007196267250f1ee61bf9ee543bc93c4e1cab3195e2e87e9920dad7", 0x83}, {&(0x7f0000004740)="9c207feb8e8211a6efba3b377ea10c0b0908a77863c3313837bc69a15086904bfb5ed98623962d2a5075c61888754b500de572807f1a5cd1fa1cd96b9604089b7f3b128ef3ef075bed57c7124b0c4f78d5cfe38b065820e07f4c74bed3eb25e49a177b12cce40d247ec760a584a8e654c321525e8766398e334a3aa2e950ff85468ffd427acc27bbb07b67fad9bcde486b0fb9d5f8ad4d6ecdad6f92698e279d71d958480d192c8328d20fd0bd94cd7825076a778eb3f3bcca9add82d1", 0xbd}], 0x7, &(0x7f0000004880)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x33, 0x10, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @empty]}}}], 0x98}}, {{&(0x7f0000004940)={0xa, 0x4e21, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0xaba}, 0x1c, &(0x7f0000004e80)=[{&(0x7f0000004980)="7f49b83bcd3d62655ce7ebcf84ff61b9fd8d42bdc83f", 0x16}, {&(0x7f00000049c0)="451822de35f7129d0ea25730bf356ad66c3e2d879d254fb30b08c57384f36e8c155735198201", 0x26}, {&(0x7f0000004a00)="a124a3e243c152482430709d45a0406c2915e07dc937c97e7dd108871c99093d9d0791541c25a45a0d4014235dd90a47903da623c15a16227c0cd6f1b04fc0e21d9c42a4b0f2ea5c69ecfce012d3206a19a070a61d26766490ae4e6734e7fe8c25a3dd54bd1ffca4e89558558f044fbc616747b010c44769f1e757137ebf74d5e3119ff922ee8efa4537a0d01791745e24b089919a8d3f25a4a491a2bf2f", 0x9e}, {&(0x7f0000004ac0)="bda306d2091633307d3975be1def7a4258aca98a3091fa23c48ee0ff0f2b692a03ee2d652ff4a7c70ac2a3ff8287297b1c5a863c822f99407dcc6a9682c9100dc79788f6d237d30aa2ec6fb8599101aa127837d997d1fc7b5c13a39614a3eed445138f3024046ffed5cf395dd8df535b3e4423ced24464ef13ebacd4c3424d77321d88f52cfbfab7b48d71296d20998899666bda40bbd2845db6db3ce64e56979d2318a4407472f37729af5d4653c87e9dd85433a3e1f1b85743c4f35de070e2ee705431247f964510fac32507d22371bfbb59678903", 0xd6}, {&(0x7f0000004bc0)="5cb8fb13ac36112588990f972a81f8253191b66710745b2aa09d3b9dbab5b6f5b307cbf14e52a790bf4367923a8d937251003528bd93c44897fb4fe02243b7584f49467cb2bdf3675f172019e385b6ed5e6b62d1417c170e32e725aec274c4ef7240f7ebcf62", 0x66}, {&(0x7f0000004c40)="8658b2d136d06190e1afc940bddfb3d993cc9e616dc101c3f086b0ddbf1b046a9f6e523d75c7df027e0895f88e7ee45e112c459d6e96faaf3850dc21978f297ba6882ab92f3374134c65d251840b4072fb3f1c72131c95e98484c67bc3", 0x5d}, {&(0x7f0000004cc0)="9bd5b1adf9ff0cfbdb2bf0f1571b0b2217863156cba70df92aa0dbe5f5ec22801b1686ec052128f4886434ca0986c36c398bfaa2fc684d97175d2f44702b0314d77e0be4114bdd8aba91065b3c73b8484af425b9a68dcf17e2", 0x59}, {&(0x7f0000004d40)="2d109dce518f26f924a2b3d6c5dbec5b68f31737dd6adef7cb3be2d986e834b5e336a29c551a4b850ad910aedf4e953913253a186fdc6883d56c0d01dd2bd7a6258eb60855d5b3a907ac", 0x4a}, {&(0x7f0000004dc0)="d26b4af41386adf71397d775db62044f101bf1167b82baac9de3d291eafb76810d762b2018c8aef4cfff4d603955bf028d33fe23926d12c44120ec6478599eafbbd8069db4eaafb829b8c3faad00deaacf2ee25f4ca3c868cd77ef7db50904a2dd15c825d568f03333a6ae285613af91f0cfdfc69c2f9a523b8aa055a1774757027f2f403331454eed5a", 0x8a}], 0x9, &(0x7f0000004f40)=[@rthdr={{0x48, 0x29, 0x39, {0x8, 0x6, 0x2, 0xff, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}, @private1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x88}}], 0x6, 0x11) syz_io_uring_setup(0x7f24, &(0x7f0000000040)={0x0, 0x247e, 0x8, 0x0, 0x111}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1583.188261] FAULT_INJECTION: forcing a failure. [ 1583.188261] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.188286] CPU: 0 PID: 10531 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1583.191167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1583.192912] Call Trace: [ 1583.193474] dump_stack+0x107/0x167 [ 1583.194269] should_fail.cold+0x5/0xa [ 1583.194293] ? create_object.isra.0+0x3a/0xa30 [ 1583.194312] should_failslab+0x5/0x20 [ 1583.194332] kmem_cache_alloc+0x5b/0x310 [ 1583.194353] ? mark_held_locks+0x9e/0xe0 [ 1583.194378] create_object.isra.0+0x3a/0xa30 [ 1583.194395] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1583.194423] kmem_cache_alloc_trace+0x151/0x320 [ 1583.194454] register_for_each_vma+0x476/0xc00 [ 1583.194497] __uprobe_register+0x4df/0x880 [ 1583.194534] probe_event_enable+0x3c4/0xba0 [ 1583.194553] ? uprobe_perf_close+0x5f0/0x5f0 [ 1583.194579] trace_uprobe_register+0x54/0x730 [ 1583.194613] perf_trace_event_init+0x554/0x9c0 [ 1583.194644] perf_uprobe_init+0x173/0x210 [ 1583.194672] perf_uprobe_event_init+0xff/0x190 [ 1583.194691] perf_try_init_event+0x130/0x570 [ 1583.194715] perf_event_alloc.part.0+0xd96/0x2b70 [ 1583.194751] __do_sys_perf_event_open+0x579/0x2e60 [ 1583.194780] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1583.194804] ? perf_event_set_output+0x5b0/0x5b0 [ 1583.194819] ? wait_for_completion_io+0x270/0x270 [ 1583.194869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1583.194889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1583.194914] do_syscall_64+0x33/0x40 [ 1583.194935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1583.194947] RIP: 0033:0x7fc9de03eb19 [ 1583.194966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.194977] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1583.194999] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1583.195010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1583.195022] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.195038] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1583.231082] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:28:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 18:28:01 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:28:01 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x1, 0x40010, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x23, r4}}, 0x7ff) syz_io_uring_submit(r3, 0x0, &(0x7f00000005c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r2, 0x1, 0x0, 0x7, 0x0, 0x1, {0x0, r4}}, 0x3f) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x6, 0x0, 0x7, 0x1, &(0x7f0000000600)="8510b917648f799ee4f8f5bc0c3c3097a496f86617f2c5e1e28f4f5a135082369afcb3de9e0927ce1cb7d2c721767f83f03d6c3a4b368c837c39a317dc5cb7ce60261173af8bf3032398b62e2c4a9c8b7100cf03f0cd3facfcd73269dd61b7c1f5fee362656ff771fa65a43c0ae6e118049b6fbd969e923b65ca01fdf4ad6c0c28563641133285a65e2f0bcd2ddc1873535a1d1bfb4634a9f93a4291813c1d557960f3f882f7cf7106e57a351888fa40ab77ef62a30fe0af0e0045edd1774941792fab78e0e21015a2eb41cf7e2db0559c9f4b765a0d6bf7b4ee3f00079e13b856e8c113d9d1f656dc7d7783c9cba1d6b489746880a502f3efe50b49aded1e16631f36cfc276c14119d26039bfcf7fb61fb2342eee089ab8b34539144fa81f7af57a06487e205ab1fca7c92ee6939987cdf056e5f6710a56ad8b57f5178ab541ac07fed8bda90badb9d762e7e0d9b6ba4bc7dc3e884cabf6e9c0aca3cae49bf33d2537c2a49227c6f764bda2ec50df23445a3faa38eb3a97e59a746738cc25b15fd6524edf696d438073e5d7425d32d5e5e548ddc95594b0c354c3684eb12f2d30e9e47b98d2bf99493825b402cd796f2943a7034ec8554890de3bb25a45fa991e6d32d96747ec23b7f8b09642f7aa16d3e0ceb144e213d5d39d5d76da34eae1ed423d4a15d8df251dd1a388209d182caac2ee18469a12f3ec082c408769e7ddf284e3842b3649e22e5f61a80e6d81744ce2c8064d2971d8f1c4e2bc45d0aa221cbb333451776a882e84ab95c7a0c395982c1be2ff14085e6f52a3627bd59960dea660d3344c9798c99510c1044b7a5a1bc86b5ec687964002b3c283ab17b13cca04de40cd01ea90efdf7db9dffb7c3f89358c4eb56973095647bfd0f36f877920f839deb460ba574fb86296ddb74f15eecc119e856bedea7d248bc234f92b92fcf658f769bd59b7487983f0b3ea3ca02effedd548d87fbb707ba10316b98f6f6d0ca60d72453a4fae351a45983b5dfe348e2bc978f98351edb8f6a543ae03d36c0a22e1e4c9887204df6a8a52f2a73e3c0b5e39904a81d85f5f6324c43ef3918d9dbb7010150b18d8673d45c982a99255e1e687930be557e3744d331f58aefaa4f75ba8e95d3f14c4329360eaf62547c167328e41bc6e1e766d84b233db58197d5940f4b4f66ae4dbe6d66c2e1dac4dea530fe1793640877ed4debdae2361dd7a51982ed488c9b01362ec82532acdd0eeff33cd4968ba9ed628f4cc62ff7671b98f7e0a6f101b70b12076a6648cf6546976de2f50beb667e3a6ae792093f9fc1deda4ce479119a7c1df0b6c9bebb47659d835e04314b34378f51c4ed44edd7ac665c19267709f77202e1e8e54f6ddd4caadb7dff8addd20ea239c5211bdedbcd587dd0a33e63d04c5d38f38027584e8b8b5e8ec37787a4cc7c848b83c8120d8282186f70c4fe3ca10841465f13ead1dd534a10939665e9cf71319978ac41bc80088bb4ecf7f2f9c50940a902aca6e81db73a9a08afc3312b121a96d94d4d8138affb1486620e18bef19f6a5504c0802dc6c72878ec7ea57ec07275ed616fa9ed2ced73a17c2196fe6df7ced2b2f98adc04258e5574661bb74f51f3252fd4ce98c22338544b3f0e82381bebc6c25940e9ed5727e1e776e8ac35583f17bfdedd4fbca4a127ce85780fdf367b2c59bed15c5884b6b56ded11b5b8462b6834d277e7b381903e22da4a222f5affc49508d67af52b477fbdb7af6bedffe12fddb6ffdcc038c6b3fb3052cd94cb97a0a60d3dc88e625627621d0ba285096c4322e0780df11ac51a99030c2c64ab8fba378224ed715f6cfcf8c0b5446b2882b1f81ae1a2a7c42144f74b60dd11258b1d3e8c250562b51344752d11d5446394d3e2d9ddb8cfd558d6a136f37f21cacfb603c12141ee8394293e8f940eb523ebbe343de95a098dd829c99dfc2bf294cf0e07fa95080b9556b45fd1afce334129c45d92a3ca51bea4143965b25ee0855092877450e51bfb17541b2d16755a834f197c53f1168dec92775895c497199c2b10e284bd8280aabc449bd6fd554dcb116d6267967675db720f3208ee47e4706b5e1511e167eaf06626b9ccc7acb17c111fbbfc247f72e5d2487174b2c163485629ef32fd974aa33dd29f61ae8d287c6d90e035df0c92db56cf38fc8929a34bd31afe6a4615915f1ef665cd3a8b8e3988c4981f2e9b499a75e3f6f032b826541dc21fd5578c8e15b3bc12c94a0306e646a6ec0a497d83336851a855697f0e47e3cc3c216569174e98c06e45f36003ad5e87d80143a35a4df459176b30ac5ffb830f99060b3ca41a217e9fb35d7d6d8c1d7b4fc48a9d93c0725eb749a6a91edc43c66b45b05af4ebc753e76a90c469776eade008acf0d03081796233ec1814c4d843da0c81c7eda6557ee5fe1485198f898c709c61ea60044c286632c56b5d1c9dc466ed439aabf420f6655db03da9d7a58b32e3baa39b2344a155b84effc89d32e378fce601c69ad7b9cf5a10e819926015f8cc82ba3bebdafc5817617dc3a3a8b75fc18227914990b4ac4ab2316fdea407ed7651f997218d31d0bfff69e67dfe2ddd6e8a23c6810a339b965c20a80773fb890fa227c554c9beec7586dede9e86fcb419c2d7dfd95ada6eb407ee887a9b06aca43f6673dc5931d36a62581b83678609fceec502b73afd29ccbfabd4e2ad8b1a8ab8a300c55f18b9f0907e92f8a95bf774c9ed42a704f77bd91efb0cb3b026a0490e70304db2688adae9c29f293d626f015a9b846459b0090642914bf0731c81b3568b55b5d02f0ce21a0729e89d818705a47d7fc6b8ac0a15f108ac76e0eb670ab7a55950185a6c17aca0b2fa7a2d0f83c8d6aea2776fde7c3da98307b6bf377a1363fe5912205f83f13a8434b3429ab64f1354e82076c3456cbf38d5010b2ee64807f30348c2cd9a9296b1db3cc929cede3cea0d4836fe986cb0e5f78daa19f1ddfd1998c98ba85e57cf690e31633e8696eccaf32769109af2bf4b4c3f6722832665b326a893d6e7edbb3a5b858960f2c9d0b592c2cf0f1df5f081a447ff952898285f88ab31fd5c74d5fff2b4cd50720746c8b48171e1f4039754e99f856640e24d10ab08ad5ce5482d32f07fec5815b215bed91e10ae8e4aed6fedb10573b2b4a4d988cd711b39a2a28cdef01c228cfffaa577246fe26a5f87934753ed5601a3383df2157ff5a0bf1fd4f04d4c211765bc8110a3ffc4fcec161821985a35bc849907202bd993ca84426e5b5b90bbc931f11a43c7f81e64090aba0db133ef0c90af17a11096a998a0b9cbd6a967f87270e3fc23f9be208dc83c7e57566facd47269502eaeadff4d98255e18eb06970003a497e14288e5c9467151c9143a2fc130d2d8a5ff7f708218c652f4039f28b4aab7af43eb44ee89295d89de5372ffc2ec60f232d4937f0e87dc6e8fc2256e1f5c5eb969bc36c8597d2ced73ee3dcd0299dc9b82637df768d2d235ebd643af3928c2266b85676164d3c097ddf72c90977c25e2180ae18b10e66660c763bb025277b76c1485e73ddad587853a5a0a96db3ff0c0048fde6072e8e2703c935b522feee5ef32f99149149bcbc38526fd952f87a60a43793edaaebf7b4f5584076b8048090d60d024efe65bd032e167dd54124487a6fa72d4da387b22e3579f3839837a1075c04d1aacaa915d30acb20072a017da34147e55d5cd2e7b36e88465f375ab110bd79e8d1a2ce71b3d14d82270aa73f1fdaa11a21cd6f3cab6051baee06ed495baf91cc2b4ed31519b63ff227560ccadcaf816a8df711fdb28c6a77d41ddffd66e4a69c33bdbbf6dd3fc29ec174c0c65e782e564852018e62b1ed71cc463ff64cfb2fb8408ea282e2e755308d6c59edbf8ceff5c5f4f100e2c2d57681f5a6821c8b4e71a0f7101680ab8c6f8e39a8ad74007467333b2a0d57a39f7ba8cae21f8b5518661d2641a4dcc1fb209ac447cff90e7e056769131debc33717f034745467f186417bd258c2f68f05af7ca10352181cad1fb5e8288e8af32fd8a6a541cf9fecb6a654f29b00e6a4734f539ecbbb8129b3032cb6bba764d8df8e317d85ca8eae8044352c1d3469cdf42ba12881ea24127b13247ae6f557688a593eba29b8e45c592200615d1bdd86738fabb811dec36db9fb65b65970d2844dbe7a4f654b8c1b4a6372697bd9e328f265451c44750051cf85910d4010d76bef2c0ec2ae0a4473a1bcb3dcba16abf4f58f6de0536c80acf227c0611a08b1222048bcd717d4e1fe413edd5789ca9ec8fa0572afbcb6a549d585618874d7fe7ccde25184fe944410c4e1eccb0df9e495877c4cd167abd8b28cf7ddab5464029a2636132c516936b165f41bb5a51d9acb36002167f7d276e8a09ef38938bfcf6ccbb6d5a41d7913607a20fc6341a1e13094d94659a54dd0e8ea9cad8381c304b0d92971518c2aaeb0c2c894757277dfb647b9e12af8e66ec5416eee2124d229c20e6ae4a6a911c13115c9118937ea236ee6609a6303a4288b89a7c588148c50577af728e259183bc83f63c60fcc2d7b9da454e97bcc098dd401a8bf45512e476b6e529c9fce54327939a0285f7ff3e225ed1636b501cde4e68dc28a22196577fcafe4955a29af1c12781e75947634bef015479fc8a2f3836369ce35ef553b56083fce2352ad229b4ce608421c7e5117c11b8f56124a5c0c73660c34ed5a70abd10753c28bc7b4a7086acc867f2d364c58cab3a26d1911f626a72ae80db587e07042b7f6c8ea145dc459409503a0b86a5bdc5aef7e52917a88c8ae5b2770984481ab3ca3297930a2e84f08c2ee275e84ffd073edb92186382db62a31a8925e3b17ce38ed557f60d7f407bd4047e31a612f728a0ce7f8c22e6e51cbb23a18c1dd53478c05dc33a391de31de9a6188fb30c3a6ce95f39ddb41efcb6b1a81b630055b2cd6d26f465ab70d1836d4dd79bbfc3b97107b1e8af267ae8c5d1b0f54d75b6c7e2cd1606ee6293e088e24e73df7eceb8c5a9ca639ec1dd50eded5cf0548b90baf8f9604142e0fcec6db38b1c83864496e85ea67c8ad736ad27716822d56bd07ed2951051c8fd0ad3019e9ee040565a060753316f848609a2f2b2da088de586ca0868aba41fb0f3764848272d75450da75b567b27e905d3249bac80adb9f34383e2edeed1296a13e69b47a6920552ecbfdf70d0bd551e22edf2cb316532af8ab36e4a03f2257389d21d1e0d7c62c2a7117ef9fe528f5487892fa477806b3862ce5482f29610b23a88e4d2ef3dbfaf1722c8de5aa29038c7b7bdf611b248cac0aed1820221e4c8c04b760e18df896e74d140d01ca55b420f97c0658f8afa27e0aa67bb624304b247d779de752f9774541cc198fd5049671b3e5ce1638748e4f66e3b43cf6bf74b45c39d4eda1fc80e65e60980b620da103117786208ae010a4d29c0b25b9bcfa26ad0bfbd696760f7baa1e24df53d201755d6fba3c03547c021484f6d05cc5155ad9b8a4bfa3d546cf6db43f4e2daec55f78069a74d7ae2d5c90a9990714d51adc433b8cd7475bf2604fc89440284a1e09084b9ea2d4dacb26351fc083d5bf7c594dfb65ace14c9f82c25ed851ba50197ddfc80ade955fa69c6c280eb78af986b9a2b828fee730710e6387d4c681bbdb93eb57ea749f8b207b9daed0b75fdbccebdb843dce887aa98c7d7edbd141a95679422fe90873eb34adb5850263802a2da927b7bc4e3b1211d2f095b263aee65eb9754829d7ff14d7cb8cced2f5c2799674a39180309e34a552f63579a8dad101", 0x100, 0x0, 0x0, {0x2}}, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, r5, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101800, 0x0) openat(r8, &(0x7f0000000140)='./file0\x00', 0x8201, 0x0) io_uring_enter(r2, 0x802, 0x80d3, 0x3, &(0x7f0000000180)={[0x7fff]}, 0x8) sendfile(r6, r8, 0x0, 0x20d315) 18:28:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,appraise_type=imasig,fsname=.,fowner>', @ANYRESDEC=0x0]) 18:28:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 63) 18:28:01 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 63) 18:28:01 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1583.413537] FAULT_INJECTION: forcing a failure. [ 1583.413537] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.414967] CPU: 1 PID: 10564 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1583.415798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1583.416807] Call Trace: [ 1583.417134] dump_stack+0x107/0x167 [ 1583.417576] should_fail.cold+0x5/0xa [ 1583.418082] ? register_for_each_vma+0x476/0xc00 [ 1583.418658] should_failslab+0x5/0x20 [ 1583.419119] kmem_cache_alloc_trace+0x55/0x320 [ 1583.419675] register_for_each_vma+0x476/0xc00 [ 1583.420241] __uprobe_register+0x4df/0x880 [ 1583.420764] probe_event_enable+0x3c4/0xba0 [ 1583.421280] ? uprobe_perf_close+0x5f0/0x5f0 [ 1583.421815] trace_uprobe_register+0x54/0x730 [ 1583.422381] perf_trace_event_init+0x554/0x9c0 [ 1583.422939] perf_uprobe_init+0x173/0x210 [ 1583.423445] perf_uprobe_event_init+0xff/0x190 [ 1583.423996] perf_try_init_event+0x130/0x570 [ 1583.424532] perf_event_alloc.part.0+0xd96/0x2b70 [ 1583.425124] __do_sys_perf_event_open+0x579/0x2e60 [ 1583.425727] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1583.426321] ? perf_event_set_output+0x5b0/0x5b0 [ 1583.426889] ? wait_for_completion_io+0x270/0x270 [ 1583.427490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1583.428119] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1583.428744] do_syscall_64+0x33/0x40 [ 1583.429190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1583.429803] RIP: 0033:0x7fc9de03eb19 [ 1583.430255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.432466] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1583.433377] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1583.434238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1583.435098] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.435949] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1583.436805] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 [ 1583.473318] FAULT_INJECTION: forcing a failure. [ 1583.473318] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.476094] CPU: 0 PID: 10566 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1583.477746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1583.479742] Call Trace: [ 1583.480380] dump_stack+0x107/0x167 [ 1583.481259] should_fail.cold+0x5/0xa [ 1583.482193] ? register_for_each_vma+0x476/0xc00 [ 1583.483327] should_failslab+0x5/0x20 [ 1583.484244] kmem_cache_alloc_trace+0x55/0x320 [ 1583.485349] register_for_each_vma+0x476/0xc00 [ 1583.486486] __uprobe_register+0x4df/0x880 [ 1583.487519] probe_event_enable+0x3c4/0xba0 [ 1583.488550] ? uprobe_perf_close+0x5f0/0x5f0 [ 1583.489608] trace_uprobe_register+0x54/0x730 [ 1583.490715] perf_trace_event_init+0x554/0x9c0 [ 1583.492030] perf_uprobe_init+0x173/0x210 [ 1583.493032] perf_uprobe_event_init+0xff/0x190 [ 1583.494137] perf_try_init_event+0x130/0x570 [ 1583.495190] perf_event_alloc.part.0+0xd96/0x2b70 [ 1583.496351] __do_sys_perf_event_open+0x579/0x2e60 [ 1583.497531] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1583.498691] ? perf_event_set_output+0x5b0/0x5b0 [ 1583.499808] ? wait_for_completion_io+0x270/0x270 [ 1583.500992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1583.502254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1583.503491] do_syscall_64+0x33/0x40 [ 1583.504386] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1583.505611] RIP: 0033:0x7f27a2558b19 [ 1583.506528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.511018] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1583.512811] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1583.514505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1583.516204] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.517905] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1583.519609] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 1583.556523] udc-core: couldn't find an available UDC or it's busy [ 1583.558034] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 18:28:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 64) 18:28:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x228202) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0xffffffffffff6db6, 0x202501) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 18:28:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 76) 18:28:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) close(r0) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x4004804) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x7fffffff, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25, 0x4}, {0x0, 0x0, 0x4003}, {&(0x7f0000000480)="bb3dbce395655d00269e4e724a0cb4d445d8f26066c26e1d085fdd9d065e693c55085026d8506a68e4de5d12b4be40b700e26ffaca7bf5bfcbd65863cabf74fa12f53457eddeb8493acc272284fed819ed3284dc5bd3d4c45b34a6f7c4c90da9e847a7909a41c9cf81497425e070fbfd9c923a1fd9cce4b9af4a533bbf5273662ac15813283de94f627853f8fcc9c7f2a0097be4c8fb688dde7c1623299adea030fdf251169efe2b94c730d5a279eb797fba935f13c9b1ffab03e232ec7e286784c133c7e2785d80a26a7a9481db64ede19fb9b27595116b439e20b03bd7319ff244dacb6d352adf1fa94b551da2509c1e08b3efb8a8f992278247aacd0fd0485c732e1f8843169d910028ab6d4ca39542da5b5026ad166f02fde605e24e1502f88a3498586b1ec3fdaa1c6312cb2e42d865984383fb90b28ebe5f3745e95fca1400e1ef6c9bb20a2bb7a62fe5975f9d3d55f04cd2ee61150547e720ca2cf133c696915f254ac9c0e2f862afa0a2c405a230aee3f51b38d6db54a86812e79dd03149b8b06ef00a7e9a1cdb68fe2af3b82dea4b940fdfb3a2264fa3e4129ac7e952c2516e9e39c9b998c86aaae179f49bebe78138c7ecb1ef0501180a4c300861f93f8915cc7ed83fd32888f142cdfe262aa65dac756814e409066d6c358c5e20df3a7e50dbe1e035ae0720aba8a4d259e6915b2490c78b60ee215f7c32e77c0cb976e2156486a057da0cab6da621bc9f7b49e7b63d31a12c48b1f711b33af7a1e2118c97998783b6fdbb05e283eb031678be42adbcb91b9e41f86e63275862dbccf1a3be179234950fdba886b2712fae53d605253c267b02205f2756cc49b71bdaf93886b12fee88b353b9322d7f00360bb8f6f8229467d11fc096680d0ade190ef25786335f841cb438665d26539e9db3a144832b64afd554f37fa627722405ad62413973c829ed6e4d7227e2eab3b51cd69fad4273fd24ee3ec02f74ee22dde393781c7a91bc32387926f97b472da4f4345e63e2b137888926634844b63329e783b985ea5eb8775c5cfe6936fc7efe2a5a1e464b446ebfb1c52a494587450356d9e371c28ff21f271ff602f51d61fcc64cd6f5df16864b5abd3e97ebce894061ae11c92f9bb14496c34678ec1827d9409cc3022dabf2c6541d6b40bab48af65b5289b0e2e6983b488c4e8c0577f581e480e15c6711245b175786759583ba8c2282f68d6952c40d03480b95a270dffaf6364a5e33c89ff0859a599b804281f8c140514e634058647b3b23a8333c4cb67fa636da82c41212db1370ac47861db39e9491b11fde6edb8dfb23653e8710615b9dae1327d5dd2e34566e3d53d41d7a4cad36c4f70b33e01d50ed61d138f4c40d91776d38b2679787e1e239e118185feeade5cd53ec30d2a4658f6172376e61143317c9659d01dec600401103fee6d0c17cc9bd8015fd06871c700bc33a2331ead811aa5e747ef821402a4232fe7f5a3b5062a374b8555974e3af8164eaf4b4e7be5b8632437fba4b042f7b044a390614bfec9fe30de0a1ce74c914e58c0d7187b6771a776e47875ca80880748284aff8c69545e20868fe68c2c42c97522235d6093833bf0b7e0cbefa59bed09a11c10b82cee4e6b77e9cac8a7cdc878359f9b604ed0d087fdf9a5ce99f4b01961819a823654d6cb65922ee8399231d7734718aa3bacdd89ae18e3bb552efaff6a2eb5b93246043165d9181ee889bbc540b293243a558595edc53a0b3b9fb6bb05202b76417abcdbccf1bd0ee3f088c7fb6cb013330113103c284c5240cb7d4963d1bc4556d8b918f8b702b382723fcb7b302a760290b317e39ec45484be4fae51706c463f48b3c1aa6b771473aa58a60a3748e99b44555ab40df80d82bf3379814dc37a14445e5eabadb17496d667783496361330638e352cc9266f9be0e9c2a90644a6b283aaa6a8e6fa752abfe9dd57e4bfbcfbc745b6853c3bca65ab0fa219383e4e7d367ce704f15cf047346d6f773525dcf85fb8fd97dd3ba18cb37911179b54c40b4d0f4a1ba2727ab76a5c3f718fc99897fcd5e9112707974f92fa6d70356f38031231f9ca8e4d7464af45f8ef09821a5f25728e307e32bda8908de3e4dcd6a83920998b2c3588fc45ced37b866d2a9ed3f9a6fdfceaa2f409a868faa33545f92e44fefa0de5080e8894a3ee4f898b9726994606fbdc0c69a767bf81a3100afdd252017655e563c33a91d1defaa25973bd02d3da3b12d9953801bbea2bf922174660732857de5440f3a9d2ba5fa280f4f6aaae3e6c881dc575b71645d540bdf2bf0864de15954aed6058149bf5c7a3d5b1686ae2862afafd195ddfd1d2fb99c5e72302db1c2c8a66b28bf9aefd67b42406d05ab4e2b9a19ff7f78900ffe87114a6f6808707a4c47832db0c49f82016bc35b2b3e3b2916d02f2bea2747a711c32ecf62d5c7907a333ea09082c90dd9602cb4f02e9ea966df31051a8e714ffb1aef89d80ea77fb46ea8b7108c373703d157919a88774c20422f0f5e834fd10ff50e3bab51c901bc2dc964b7fdc31cbef8195fbcead02e1905d2d83840e0cf532cddd3adabbd003fae4f3632cf0344644355367f7ff4b8fe0af62e15cd70f1628aafe79de90dbe821bd85c0d9b746ec0c55185980af40a430951c70e3468c1be7e7ddafc396e57f4ba047b5729185ffb6b0836220487cd9e9dfabbff6760c520de32e752a155e0d4f6ea76203ea091be5350a3c8dc6d9042a0d15e6057afcb0e1c878653f0652a42e48765f7fbda735fba188252bbd502e1450592c9db5404cd6c94fe0595ccaad0697b2ec8bfa693a2e080a32bca298a4c218dee9ab2154df2c1339483617db3796b5277dc1202c3adcb9feb19b28c7a3acd39e0492206ec84448628853c439f73cbb8d5d2569c4c6a9975db9a3d643a7b3126f90b8f011a103e2a3d7f5992b506604fc737c73179f1f91e35fb90b3a12c1a385814701cd0aee7d55ece31424c48c266e366ce34429b50c94a567db7b7eec3b55febb8cfc9ce53a9a17438e9448a2c929b05f32c017a31e7123a6bf62e1e8f307f73725a180fd991294e8763de0ad14617d9ef11865d5cae5f25f553827928770534c3fe32b232ba58d54d5a52d552da6f890552d7db5d8731693ab9e7069a3ff9ca554fe5528bab9ed0341429b1b74a86db8837cf4128821bac2ef87c5aa1ff592be6ef5f2f0153b1d1dc8df130b74a4d898a889090332f393fd18c18cd78ebca08ec108ad5f73a08f3892dd8c1bdfaeaa4e8a5075848a0b267c165596fa3f6a3fc1afdad0f9968d7b161cdde6db9d1b77bd49ddb7b3cf31b6c1d02f99438656a56a9162d93e182f744a310670fd4d248e44ca820a2057970e7467d638f77d2c566b69f4337a98c759b1f7f74e4b7276d5dafd48dc2e8b3668b456702495d05cbdce6c3802d580495bdf86b36dc6dc5624f76b6be5c650f10a8424061e800005ce549e074100c444c4832b4d59e528485a1a931bff704b85262ca579e5b2619e9a4f2c710555838836ad891aea10a159722e2b54b515bc1cea35801b2c6ab734aed3c4e58ad7310d4bc020fcc7244182097cc77aeb280a41b8d3e6dcf920215aaa4385696ad17b9822aa5fccffc54dee2c6e25f7044ed7a8dc3c98b0e1dc750c3c6f9ec7274ed46a548346c35c3ebd1bf63a3aea08d8f3d93a2daec1900fba86c699122909dafd0777dead07b64e7b0417d586cc4f833cc9baad01d4a3449b41b6beb392c65282efeac2ae6f12f474ca51b02030addac8526b2ff5afba50bb032fd5fcae4ccec2532bf1efb6e6399243c920e5fb4794c8d00267199985014c6d9d36c4764a632c4de41eb8f89244fe3662a1a8b7bc4da569ac900e9a29854b2703d70730012a1a52d8b4b0fe2caeec21fdcd1f441423d6a73ee6106af3dd28988097dfbc424e284105506360b830dc34c39ffc2abb55cd235ca0f8488f4ea4a4de395fe29e16cd87a68e89142216c729fb0f71031f4354823bce38c02693b4ea83715c8b1fbf08c4bc1d7f23cc6674d2b4bfec82e9bf708f3d440b0c6d7c344fda55202dda1e1400e702fcb1cd04b4832f6f122b2c3cce8104909029df44fb2b82d8ee241bc323cc025d7a9de082f33590310f2927405db95c01284569425eb49bf18b012a4458436887fdec7b477c22b079a3a4521c008924fc21790a6c8047ae5a93bf396fc44d1a336d8a96d225daa267b8de96a1fa3ab24be4e1e00f6144a1dca5ec325504ff2ba4974ce59bfc10f2012fe35e8c5083172f24e5940cfba9f05a051219a47d3286c5a97e31d0335d9ffbf3c572a33f22c5296681f0c836aa9951a74d2b8f9a81b687ee423db796fecf71554f62e99bf3b44c086ed693a5616927708658a2cb8b3fb4e912e0c7ed3708bec60190cbdbe2fa3c38ab9e839b13b679a5776a1abccc4f5e30c220bf0e3dbc91d01b55e46fcce4dddfe5d1fe6f5ed6a4c88cfca7c4f12b545d8fff2d332789b8cfe272e36c00089b0e5c6a658f2fa52f082677fbaab23c92c48484166e54eec6db83ea2e2d926107499dfc35de32bbd292ad7f4f137857c203d7b78560a81d3526d34276298eea2c1810df2213dc8965fa7f212981e50d60baf7d664d9b304d20d53b70ab7702f114441ad909f2be6eeaf6ca220df8c74f6e60b1f2650c4cad6554cb6e2748f99906f2e8f8e3dd08454723e28aee113317e21f8d6fefea95c3219639ad0f94721b52207d778de9ad5d6a156797d3c64a8753a351db2b5a32e786b94aa3f5a0a71501fecf009607dcee86b185fb91cd1436dace0ec7ab85ea3b29450dd274e196d37a6c010d563dc771c746e22237c065b6de2020ca9186a5e57a7e7c05129f0cf64147423a407c6a8e633efa17ba8281d77cedab2ef4843ef81b1e1e5e87ae7f6379f3200b85638ba1ef4b5a1fe3f14956dc91692a0c8fda1ddfdceda4dd02808f7fbe32cb2a0f380fb59329666323bdc64b9f8a3d267b41d988f11bf8ed2edf625a6144a351975b48fd337a80f4e20082d0dcf9919b35f959a92f178a2b9f488a67ff077af7dff2f6e858ebc8b3f9ec3072af5f0a558e0383d2318e022d9a36f266002083843a075f21e4bb89fd014fbb9020793c399c09bf5b9ffe2da005393dd6ace32195ca5fd239a85392761e0c02ace51bd33670079c2adedbb8edbd20ab9ffadb9131541b04affcfd067a904914b89d477a7c4235ddc6be747be17204253ccc895b20a7191cede008a9bdc69a5a887054c00eb10756ef7d4bb8d6ea25446235d5e5e02febd85091c0c92a4ba362709cff10ee612da8a2a5aaa01bb23f27543ab1501ffafa27a5afa66af3efb7c6687eb005fda2aac40edcc2602763ac6eab1246e22f20ce315cf070d6a311f80caaa2a2aa899f84c9003bd55c5a1bf3751bafa05675c7f22383812409c2b01c68c7e3775d8478b344641c7f4e60a29cadb180a181481e24632ac54326217d7041a2e4666d1fb48728345c556701fff36300abf9832ff80bf4b526c20b256854a79d879f482de278c42704177bda6fb712f495ddffb03eb54ec00d68caca21d502ca2c6acb7cc6173c9ae8aa0c9becab9b353514d5642aa09ff32d5648412cfa58c98da7b5b5538f9fd53883fe4a65db9c585871ebc8ea9f8e087478dc86eb21001370fc806bca6b151e5d6335abc11f1dcf71aa554eb5d2f5ef84c7e16080681e47750442d7c5df74a522b4b90900e6f90eaab9f18167310e0309f47ce2a83b285b57403a666e19e9507a4ef884237472ffcaad280e144073155b5ab9", 0x1000, 0x2}, {&(0x7f0000000140)="ace64fe5d2ff7125010b42409b27f9aea16cbd8768d88e83e2711e68e74c3bbdc7fd89f8ad5446bd315500e0cba3e688b8057bfc845baedd494a0181c440f93c95b92851b424cdb0edab6df2bba6a502962820d9601d13ccca75c69f2ac254a0338eb3c2887f4e0f956401143b03ebb0ee05842539215672a70eeaa83cbcae724e726ee9fb3ff15af64d7a69d004acaf3d7f1526c84829caf91c57678881742ba75bcf87ca6ce42d669aa796c1faee022dd586cf1a121b64ddc5f4d5d8bb17ec2698839298b364ffa85364a6a5ead0d025eaf0e2cd55aecb72", 0xd9, 0x2}], 0x100014, &(0x7f00000004c0)=ANY=[]) r5 = openat(r4, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000000c) 18:28:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,appraise_type=imasig,fsname=.,fowner>']) 18:28:15 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 64) 18:28:15 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200400000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:28:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1597.022861] loop7: detected capacity change from 0 to 135266304 [ 1597.026574] FAULT_INJECTION: forcing a failure. [ 1597.026574] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.029224] CPU: 0 PID: 10578 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1597.030860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.032805] Call Trace: 18:28:15 executing program 5: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x778c, 0xeb49, 0x2, &(0x7f0000000300)={[0x5]}, 0x8) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000000000, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffefffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000480)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004ae995da37afc808c930f1c8457f3cc2e303e53bb9cb1bc43b59a94d0ee2f30ffe4ee8b562cc794391bc49e79cf776c2d9a75f3f62440225bdb274b8d03797f4eb82b6982f7d7678596201ba822068d77", 0x6d, 0x2100}], 0x0, &(0x7f0000000740)=ANY=[]) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffff9}}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0aac100eab16475025bcea8cec3a3879a020c22111eed3aa9c4fa85a7c9ac23adc7337153d2fd90c41b257b627e4284342f32b5a2fd7f069c316b56a188e063e1e248e5d1ddf9e636382cbc5d92ec295029a50c6de8e6710b4e55a0327c02c6eb21a769e12115722"], 0xd7) close(r1) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x3, 0xe1, 0x4, 0x0, 0xbb, 0x2040, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x700, 0x4, @perf_config_ext={0x7f, 0xfffffffffffffff8}, 0x1000, 0x5, 0x40004, 0x6, 0xff, 0x10c9, 0x0, 0x0, 0x7fffffff, 0x0, 0xe4}, 0xffffffffffffffff, 0xb, r1, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c010000130001000000000000000000ffffffff000000000000000000000000ff020000d99d9dc486823b1588e539aeb35ce407d4e96d230000000000000001000000000000b0e509421bd486d88249d7f320edf9a6bf05397fc1e63bbf8735c6620bee7cc5776c38bd8b0bd0ed00a8e391e5a8200200aa87ef4675e9894559cae30a09ebfe37b4c036a320e7ce56dbbabadfec7453f0d4877277145b381492e0db14d026c32ba0c7e47925a5dd6ea02f9644e3"], 0x13c}}, 0x0) [ 1597.033432] dump_stack+0x107/0x167 [ 1597.034425] should_fail.cold+0x5/0xa [ 1597.035327] ? register_for_each_vma+0x476/0xc00 [ 1597.036432] should_failslab+0x5/0x20 [ 1597.037322] kmem_cache_alloc_trace+0x55/0x320 [ 1597.038412] register_for_each_vma+0x476/0xc00 [ 1597.039516] __uprobe_register+0x4df/0x880 [ 1597.040533] probe_event_enable+0x3c4/0xba0 [ 1597.041546] ? uprobe_perf_close+0x5f0/0x5f0 [ 1597.042593] trace_uprobe_register+0x54/0x730 [ 1597.043661] perf_trace_event_init+0x554/0x9c0 [ 1597.044737] perf_uprobe_init+0x173/0x210 [ 1597.045711] perf_uprobe_event_init+0xff/0x190 [ 1597.046785] perf_try_init_event+0x130/0x570 [ 1597.047832] perf_event_alloc.part.0+0xd96/0x2b70 [ 1597.048988] __do_sys_perf_event_open+0x579/0x2e60 [ 1597.050165] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1597.051306] ? perf_event_set_output+0x5b0/0x5b0 [ 1597.052423] ? wait_for_completion_io+0x270/0x270 [ 1597.053597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1597.054846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.056074] do_syscall_64+0x33/0x40 [ 1597.056955] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.058205] RIP: 0033:0x7fc9de03eb19 [ 1597.059084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1597.063460] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1597.065276] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1597.066988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1597.068687] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1597.070395] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1597.072097] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 [ 1597.090171] loop7: detected capacity change from 0 to 135266304 18:28:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) close(r0) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x4004804) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x7fffffff, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25, 0x4}, {0x0, 0x0, 0x4003}, {&(0x7f0000000480)="bb3dbce395655d00269e4e724a0cb4d445d8f26066c26e1d085fdd9d065e693c55085026d8506a68e4de5d12b4be40b700e26ffaca7bf5bfcbd65863cabf74fa12f53457eddeb8493acc272284fed819ed3284dc5bd3d4c45b34a6f7c4c90da9e847a7909a41c9cf81497425e070fbfd9c923a1fd9cce4b9af4a533bbf5273662ac15813283de94f627853f8fcc9c7f2a0097be4c8fb688dde7c1623299adea030fdf251169efe2b94c730d5a279eb797fba935f13c9b1ffab03e232ec7e286784c133c7e2785d80a26a7a9481db64ede19fb9b27595116b439e20b03bd7319ff244dacb6d352adf1fa94b551da2509c1e08b3efb8a8f992278247aacd0fd0485c732e1f8843169d910028ab6d4ca39542da5b5026ad166f02fde605e24e1502f88a3498586b1ec3fdaa1c6312cb2e42d865984383fb90b28ebe5f3745e95fca1400e1ef6c9bb20a2bb7a62fe5975f9d3d55f04cd2ee61150547e720ca2cf133c696915f254ac9c0e2f862afa0a2c405a230aee3f51b38d6db54a86812e79dd03149b8b06ef00a7e9a1cdb68fe2af3b82dea4b940fdfb3a2264fa3e4129ac7e952c2516e9e39c9b998c86aaae179f49bebe78138c7ecb1ef0501180a4c300861f93f8915cc7ed83fd32888f142cdfe262aa65dac756814e409066d6c358c5e20df3a7e50dbe1e035ae0720aba8a4d259e6915b2490c78b60ee215f7c32e77c0cb976e2156486a057da0cab6da621bc9f7b49e7b63d31a12c48b1f711b33af7a1e2118c97998783b6fdbb05e283eb031678be42adbcb91b9e41f86e63275862dbccf1a3be179234950fdba886b2712fae53d605253c267b02205f2756cc49b71bdaf93886b12fee88b353b9322d7f00360bb8f6f8229467d11fc096680d0ade190ef25786335f841cb438665d26539e9db3a144832b64afd554f37fa627722405ad62413973c829ed6e4d7227e2eab3b51cd69fad4273fd24ee3ec02f74ee22dde393781c7a91bc32387926f97b472da4f4345e63e2b137888926634844b63329e783b985ea5eb8775c5cfe6936fc7efe2a5a1e464b446ebfb1c52a494587450356d9e371c28ff21f271ff602f51d61fcc64cd6f5df16864b5abd3e97ebce894061ae11c92f9bb14496c34678ec1827d9409cc3022dabf2c6541d6b40bab48af65b5289b0e2e6983b488c4e8c0577f581e480e15c6711245b175786759583ba8c2282f68d6952c40d03480b95a270dffaf6364a5e33c89ff0859a599b804281f8c140514e634058647b3b23a8333c4cb67fa636da82c41212db1370ac47861db39e9491b11fde6edb8dfb23653e8710615b9dae1327d5dd2e34566e3d53d41d7a4cad36c4f70b33e01d50ed61d138f4c40d91776d38b2679787e1e239e118185feeade5cd53ec30d2a4658f6172376e61143317c9659d01dec600401103fee6d0c17cc9bd8015fd06871c700bc33a2331ead811aa5e747ef821402a4232fe7f5a3b5062a374b8555974e3af8164eaf4b4e7be5b8632437fba4b042f7b044a390614bfec9fe30de0a1ce74c914e58c0d7187b6771a776e47875ca80880748284aff8c69545e20868fe68c2c42c97522235d6093833bf0b7e0cbefa59bed09a11c10b82cee4e6b77e9cac8a7cdc878359f9b604ed0d087fdf9a5ce99f4b01961819a823654d6cb65922ee8399231d7734718aa3bacdd89ae18e3bb552efaff6a2eb5b93246043165d9181ee889bbc540b293243a558595edc53a0b3b9fb6bb05202b76417abcdbccf1bd0ee3f088c7fb6cb013330113103c284c5240cb7d4963d1bc4556d8b918f8b702b382723fcb7b302a760290b317e39ec45484be4fae51706c463f48b3c1aa6b771473aa58a60a3748e99b44555ab40df80d82bf3379814dc37a14445e5eabadb17496d667783496361330638e352cc9266f9be0e9c2a90644a6b283aaa6a8e6fa752abfe9dd57e4bfbcfbc745b6853c3bca65ab0fa219383e4e7d367ce704f15cf047346d6f773525dcf85fb8fd97dd3ba18cb37911179b54c40b4d0f4a1ba2727ab76a5c3f718fc99897fcd5e9112707974f92fa6d70356f38031231f9ca8e4d7464af45f8ef09821a5f25728e307e32bda8908de3e4dcd6a83920998b2c3588fc45ced37b866d2a9ed3f9a6fdfceaa2f409a868faa33545f92e44fefa0de5080e8894a3ee4f898b9726994606fbdc0c69a767bf81a3100afdd252017655e563c33a91d1defaa25973bd02d3da3b12d9953801bbea2bf922174660732857de5440f3a9d2ba5fa280f4f6aaae3e6c881dc575b71645d540bdf2bf0864de15954aed6058149bf5c7a3d5b1686ae2862afafd195ddfd1d2fb99c5e72302db1c2c8a66b28bf9aefd67b42406d05ab4e2b9a19ff7f78900ffe87114a6f6808707a4c47832db0c49f82016bc35b2b3e3b2916d02f2bea2747a711c32ecf62d5c7907a333ea09082c90dd9602cb4f02e9ea966df31051a8e714ffb1aef89d80ea77fb46ea8b7108c373703d157919a88774c20422f0f5e834fd10ff50e3bab51c901bc2dc964b7fdc31cbef8195fbcead02e1905d2d83840e0cf532cddd3adabbd003fae4f3632cf0344644355367f7ff4b8fe0af62e15cd70f1628aafe79de90dbe821bd85c0d9b746ec0c55185980af40a430951c70e3468c1be7e7ddafc396e57f4ba047b5729185ffb6b0836220487cd9e9dfabbff6760c520de32e752a155e0d4f6ea76203ea091be5350a3c8dc6d9042a0d15e6057afcb0e1c878653f0652a42e48765f7fbda735fba188252bbd502e1450592c9db5404cd6c94fe0595ccaad0697b2ec8bfa693a2e080a32bca298a4c218dee9ab2154df2c1339483617db3796b5277dc1202c3adcb9feb19b28c7a3acd39e0492206ec84448628853c439f73cbb8d5d2569c4c6a9975db9a3d643a7b3126f90b8f011a103e2a3d7f5992b506604fc737c73179f1f91e35fb90b3a12c1a385814701cd0aee7d55ece31424c48c266e366ce34429b50c94a567db7b7eec3b55febb8cfc9ce53a9a17438e9448a2c929b05f32c017a31e7123a6bf62e1e8f307f73725a180fd991294e8763de0ad14617d9ef11865d5cae5f25f553827928770534c3fe32b232ba58d54d5a52d552da6f890552d7db5d8731693ab9e7069a3ff9ca554fe5528bab9ed0341429b1b74a86db8837cf4128821bac2ef87c5aa1ff592be6ef5f2f0153b1d1dc8df130b74a4d898a889090332f393fd18c18cd78ebca08ec108ad5f73a08f3892dd8c1bdfaeaa4e8a5075848a0b267c165596fa3f6a3fc1afdad0f9968d7b161cdde6db9d1b77bd49ddb7b3cf31b6c1d02f99438656a56a9162d93e182f744a310670fd4d248e44ca820a2057970e7467d638f77d2c566b69f4337a98c759b1f7f74e4b7276d5dafd48dc2e8b3668b456702495d05cbdce6c3802d580495bdf86b36dc6dc5624f76b6be5c650f10a8424061e800005ce549e074100c444c4832b4d59e528485a1a931bff704b85262ca579e5b2619e9a4f2c710555838836ad891aea10a159722e2b54b515bc1cea35801b2c6ab734aed3c4e58ad7310d4bc020fcc7244182097cc77aeb280a41b8d3e6dcf920215aaa4385696ad17b9822aa5fccffc54dee2c6e25f7044ed7a8dc3c98b0e1dc750c3c6f9ec7274ed46a548346c35c3ebd1bf63a3aea08d8f3d93a2daec1900fba86c699122909dafd0777dead07b64e7b0417d586cc4f833cc9baad01d4a3449b41b6beb392c65282efeac2ae6f12f474ca51b02030addac8526b2ff5afba50bb032fd5fcae4ccec2532bf1efb6e6399243c920e5fb4794c8d00267199985014c6d9d36c4764a632c4de41eb8f89244fe3662a1a8b7bc4da569ac900e9a29854b2703d70730012a1a52d8b4b0fe2caeec21fdcd1f441423d6a73ee6106af3dd28988097dfbc424e284105506360b830dc34c39ffc2abb55cd235ca0f8488f4ea4a4de395fe29e16cd87a68e89142216c729fb0f71031f4354823bce38c02693b4ea83715c8b1fbf08c4bc1d7f23cc6674d2b4bfec82e9bf708f3d440b0c6d7c344fda55202dda1e1400e702fcb1cd04b4832f6f122b2c3cce8104909029df44fb2b82d8ee241bc323cc025d7a9de082f33590310f2927405db95c01284569425eb49bf18b012a4458436887fdec7b477c22b079a3a4521c008924fc21790a6c8047ae5a93bf396fc44d1a336d8a96d225daa267b8de96a1fa3ab24be4e1e00f6144a1dca5ec325504ff2ba4974ce59bfc10f2012fe35e8c5083172f24e5940cfba9f05a051219a47d3286c5a97e31d0335d9ffbf3c572a33f22c5296681f0c836aa9951a74d2b8f9a81b687ee423db796fecf71554f62e99bf3b44c086ed693a5616927708658a2cb8b3fb4e912e0c7ed3708bec60190cbdbe2fa3c38ab9e839b13b679a5776a1abccc4f5e30c220bf0e3dbc91d01b55e46fcce4dddfe5d1fe6f5ed6a4c88cfca7c4f12b545d8fff2d332789b8cfe272e36c00089b0e5c6a658f2fa52f082677fbaab23c92c48484166e54eec6db83ea2e2d926107499dfc35de32bbd292ad7f4f137857c203d7b78560a81d3526d34276298eea2c1810df2213dc8965fa7f212981e50d60baf7d664d9b304d20d53b70ab7702f114441ad909f2be6eeaf6ca220df8c74f6e60b1f2650c4cad6554cb6e2748f99906f2e8f8e3dd08454723e28aee113317e21f8d6fefea95c3219639ad0f94721b52207d778de9ad5d6a156797d3c64a8753a351db2b5a32e786b94aa3f5a0a71501fecf009607dcee86b185fb91cd1436dace0ec7ab85ea3b29450dd274e196d37a6c010d563dc771c746e22237c065b6de2020ca9186a5e57a7e7c05129f0cf64147423a407c6a8e633efa17ba8281d77cedab2ef4843ef81b1e1e5e87ae7f6379f3200b85638ba1ef4b5a1fe3f14956dc91692a0c8fda1ddfdceda4dd02808f7fbe32cb2a0f380fb59329666323bdc64b9f8a3d267b41d988f11bf8ed2edf625a6144a351975b48fd337a80f4e20082d0dcf9919b35f959a92f178a2b9f488a67ff077af7dff2f6e858ebc8b3f9ec3072af5f0a558e0383d2318e022d9a36f266002083843a075f21e4bb89fd014fbb9020793c399c09bf5b9ffe2da005393dd6ace32195ca5fd239a85392761e0c02ace51bd33670079c2adedbb8edbd20ab9ffadb9131541b04affcfd067a904914b89d477a7c4235ddc6be747be17204253ccc895b20a7191cede008a9bdc69a5a887054c00eb10756ef7d4bb8d6ea25446235d5e5e02febd85091c0c92a4ba362709cff10ee612da8a2a5aaa01bb23f27543ab1501ffafa27a5afa66af3efb7c6687eb005fda2aac40edcc2602763ac6eab1246e22f20ce315cf070d6a311f80caaa2a2aa899f84c9003bd55c5a1bf3751bafa05675c7f22383812409c2b01c68c7e3775d8478b344641c7f4e60a29cadb180a181481e24632ac54326217d7041a2e4666d1fb48728345c556701fff36300abf9832ff80bf4b526c20b256854a79d879f482de278c42704177bda6fb712f495ddffb03eb54ec00d68caca21d502ca2c6acb7cc6173c9ae8aa0c9becab9b353514d5642aa09ff32d5648412cfa58c98da7b5b5538f9fd53883fe4a65db9c585871ebc8ea9f8e087478dc86eb21001370fc806bca6b151e5d6335abc11f1dcf71aa554eb5d2f5ef84c7e16080681e47750442d7c5df74a522b4b90900e6f90eaab9f18167310e0309f47ce2a83b285b57403a666e19e9507a4ef884237472ffcaad280e144073155b5ab9", 0x1000, 0x2}, {&(0x7f0000000140)="ace64fe5d2ff7125010b42409b27f9aea16cbd8768d88e83e2711e68e74c3bbdc7fd89f8ad5446bd315500e0cba3e688b8057bfc845baedd494a0181c440f93c95b92851b424cdb0edab6df2bba6a502962820d9601d13ccca75c69f2ac254a0338eb3c2887f4e0f956401143b03ebb0ee05842539215672a70eeaa83cbcae724e726ee9fb3ff15af64d7a69d004acaf3d7f1526c84829caf91c57678881742ba75bcf87ca6ce42d669aa796c1faee022dd586cf1a121b64ddc5f4d5d8bb17ec2698839298b364ffa85364a6a5ead0d025eaf0e2cd55aecb72", 0xd9, 0x2}], 0x100014, &(0x7f00000004c0)=ANY=[]) r5 = openat(r4, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000000c) 18:28:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:28:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>', @ANYRESDEC=0x0]) [ 1597.192198] FAULT_INJECTION: forcing a failure. [ 1597.192198] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.193794] CPU: 1 PID: 10573 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1597.194745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.195885] Call Trace: [ 1597.196253] dump_stack+0x107/0x167 [ 1597.196757] should_fail.cold+0x5/0xa [ 1597.197292] ? create_object.isra.0+0x3a/0xa30 [ 1597.197305] should_failslab+0x5/0x20 [ 1597.197318] kmem_cache_alloc+0x5b/0x310 [ 1597.197332] ? mark_held_locks+0x9e/0xe0 [ 1597.197349] create_object.isra.0+0x3a/0xa30 [ 1597.197360] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1597.197378] kmem_cache_alloc_trace+0x151/0x320 18:28:15 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200500000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1597.197399] register_for_each_vma+0x476/0xc00 [ 1597.197429] __uprobe_register+0x4df/0x880 [ 1597.197454] probe_event_enable+0x3c4/0xba0 [ 1597.197466] ? uprobe_perf_close+0x5f0/0x5f0 18:28:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="db"], 0xd7) close(r1) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x6, 0x0, 0x7, 0x4, 0x0, 0x5, 0x12840, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x1, @perf_config_ext={0x0, 0xf44b}, 0x44811, 0x0, 0xfffffffb, 0x9, 0x8, 0x7, 0xffff, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x3, r1, 0xa) close(r0) [ 1597.197484] trace_uprobe_register+0x54/0x730 [ 1597.197506] perf_trace_event_init+0x554/0x9c0 [ 1597.197528] perf_uprobe_init+0x173/0x210 [ 1597.197546] perf_uprobe_event_init+0xff/0x190 [ 1597.197559] perf_try_init_event+0x130/0x570 [ 1597.197575] perf_event_alloc.part.0+0xd96/0x2b70 [ 1597.197599] __do_sys_perf_event_open+0x579/0x2e60 [ 1597.197619] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1597.197635] ? perf_event_set_output+0x5b0/0x5b0 [ 1597.197645] ? wait_for_completion_io+0x270/0x270 [ 1597.197678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1597.197693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.197709] do_syscall_64+0x33/0x40 [ 1597.197723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.197731] RIP: 0033:0x7f27a2558b19 [ 1597.197743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:28:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) close(r0) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x4004804) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x7fffffff, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25, 0x4}, {0x0, 0x0, 0x4003}, {&(0x7f0000000480)="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", 0x1000, 0x2}, {&(0x7f0000000140)="ace64fe5d2ff7125010b42409b27f9aea16cbd8768d88e83e2711e68e74c3bbdc7fd89f8ad5446bd315500e0cba3e688b8057bfc845baedd494a0181c440f93c95b92851b424cdb0edab6df2bba6a502962820d9601d13ccca75c69f2ac254a0338eb3c2887f4e0f956401143b03ebb0ee05842539215672a70eeaa83cbcae724e726ee9fb3ff15af64d7a69d004acaf3d7f1526c84829caf91c57678881742ba75bcf87ca6ce42d669aa796c1faee022dd586cf1a121b64ddc5f4d5d8bb17ec2698839298b364ffa85364a6a5ead0d025eaf0e2cd55aecb72", 0xd9, 0x2}], 0x100014, &(0x7f00000004c0)=ANY=[]) r5 = openat(r4, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000000c) [ 1597.197750] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1597.197764] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1597.197772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1597.197780] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 18:28:15 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 65) 18:28:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 65) [ 1597.197787] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1597.197794] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 1597.209035] loop7: detected capacity change from 0 to 135266304 [ 1597.227411] FAULT_INJECTION: forcing a failure. [ 1597.227411] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.227435] CPU: 0 PID: 10588 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1597.227446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.227453] Call Trace: [ 1597.227478] dump_stack+0x107/0x167 [ 1597.227504] should_fail.cold+0x5/0xa [ 1597.227530] ? register_for_each_vma+0x476/0xc00 [ 1597.227550] should_failslab+0x5/0x20 [ 1597.227572] kmem_cache_alloc_trace+0x55/0x320 [ 1597.227605] register_for_each_vma+0x476/0xc00 [ 1597.227659] __uprobe_register+0x4df/0x880 [ 1597.227699] probe_event_enable+0x3c4/0xba0 [ 1597.227720] ? uprobe_perf_close+0x5f0/0x5f0 [ 1597.227748] trace_uprobe_register+0x54/0x730 [ 1597.227784] perf_trace_event_init+0x554/0x9c0 [ 1597.227819] perf_uprobe_init+0x173/0x210 [ 1597.227849] perf_uprobe_event_init+0xff/0x190 [ 1597.227869] perf_try_init_event+0x130/0x570 [ 1597.227896] perf_event_alloc.part.0+0xd96/0x2b70 [ 1597.227934] __do_sys_perf_event_open+0x579/0x2e60 [ 1597.227966] ? __mutex_unlock_slowpath+0xe1/0x600 18:28:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) close(r0) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x4004804) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x7fffffff, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25, 0x4}, {0x0, 0x0, 0x4003}, {&(0x7f0000000480)="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", 0x1000, 0x2}, {&(0x7f0000000140)="ace64fe5d2ff7125010b42409b27f9aea16cbd8768d88e83e2711e68e74c3bbdc7fd89f8ad5446bd315500e0cba3e688b8057bfc845baedd494a0181c440f93c95b92851b424cdb0edab6df2bba6a502962820d9601d13ccca75c69f2ac254a0338eb3c2887f4e0f956401143b03ebb0ee05842539215672a70eeaa83cbcae724e726ee9fb3ff15af64d7a69d004acaf3d7f1526c84829caf91c57678881742ba75bcf87ca6ce42d669aa796c1faee022dd586cf1a121b64ddc5f4d5d8bb17ec2698839298b364ffa85364a6a5ead0d025eaf0e2cd55aecb72", 0xd9, 0x2}], 0x100014, &(0x7f00000004c0)=ANY=[]) r5 = openat(r4, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000000c) [ 1597.227991] ? perf_event_set_output+0x5b0/0x5b0 [ 1597.228009] ? wait_for_completion_io+0x270/0x270 [ 1597.228063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1597.228086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.228112] do_syscall_64+0x33/0x40 [ 1597.228134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.228149] RIP: 0033:0x7fcf367ecb19 [ 1597.228168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1597.228180] RSP: 002b:00007fcf33d41188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1597.228203] RAX: ffffffffffffffda RBX: 00007fcf36900020 RCX: 00007fcf367ecb19 [ 1597.228216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1597.228228] RBP: 00007fcf33d411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1597.228240] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1597.228253] R13: 00007ffe161fc7bf R14: 00007fcf33d41300 R15: 0000000000022000 [ 1597.390452] FAULT_INJECTION: forcing a failure. [ 1597.390452] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.390484] CPU: 1 PID: 10617 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1597.390492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.390496] Call Trace: [ 1597.390515] dump_stack+0x107/0x167 [ 1597.390530] should_fail.cold+0x5/0xa [ 1597.390547] ? register_for_each_vma+0x476/0xc00 [ 1597.390559] should_failslab+0x5/0x20 [ 1597.390572] kmem_cache_alloc_trace+0x55/0x320 [ 1597.390591] register_for_each_vma+0x476/0xc00 [ 1597.390618] __uprobe_register+0x4df/0x880 [ 1597.390647] probe_event_enable+0x3c4/0xba0 [ 1597.390660] ? uprobe_perf_close+0x5f0/0x5f0 [ 1597.390677] trace_uprobe_register+0x54/0x730 [ 1597.390698] perf_trace_event_init+0x554/0x9c0 [ 1597.390718] perf_uprobe_init+0x173/0x210 [ 1597.390739] perf_uprobe_event_init+0xff/0x190 [ 1597.390752] perf_try_init_event+0x130/0x570 [ 1597.390767] perf_event_alloc.part.0+0xd96/0x2b70 [ 1597.390791] __do_sys_perf_event_open+0x579/0x2e60 [ 1597.390811] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1597.390825] ? perf_event_set_output+0x5b0/0x5b0 [ 1597.390835] ? wait_for_completion_io+0x270/0x270 [ 1597.390869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1597.390882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.390898] do_syscall_64+0x33/0x40 [ 1597.390910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.390918] RIP: 0033:0x7fc9de03eb19 [ 1597.390929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1597.390936] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1597.390950] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1597.390957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1597.390964] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1597.390971] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1597.390978] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 [ 1597.396560] FAULT_INJECTION: forcing a failure. [ 1597.396560] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.396571] CPU: 1 PID: 10618 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1597.396577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.396581] Call Trace: [ 1597.396593] dump_stack+0x107/0x167 [ 1597.396608] should_fail.cold+0x5/0xa [ 1597.396621] ? register_for_each_vma+0x476/0xc00 [ 1597.396632] should_failslab+0x5/0x20 [ 1597.396644] kmem_cache_alloc_trace+0x55/0x320 [ 1597.396662] register_for_each_vma+0x476/0xc00 [ 1597.396689] __uprobe_register+0x4df/0x880 [ 1597.396712] probe_event_enable+0x3c4/0xba0 [ 1597.396724] ? uprobe_perf_close+0x5f0/0x5f0 [ 1597.396744] trace_uprobe_register+0x54/0x730 [ 1597.396765] perf_trace_event_init+0x554/0x9c0 [ 1597.396784] perf_uprobe_init+0x173/0x210 [ 1597.396801] perf_uprobe_event_init+0xff/0x190 [ 1597.396813] perf_try_init_event+0x130/0x570 [ 1597.396827] perf_event_alloc.part.0+0xd96/0x2b70 [ 1597.396849] __do_sys_perf_event_open+0x579/0x2e60 [ 1597.396867] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1597.396881] ? perf_event_set_output+0x5b0/0x5b0 [ 1597.396891] ? wait_for_completion_io+0x270/0x270 [ 1597.396922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1597.396935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.396950] do_syscall_64+0x33/0x40 [ 1597.396962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.396969] RIP: 0033:0x7f27a2558b19 [ 1597.396979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1597.396986] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1597.396998] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1597.397005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1597.397012] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1597.397018] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1597.397025] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 1597.402930] loop7: detected capacity change from 0 to 135266304 [ 1597.493307] loop7: detected capacity change from 0 to 135266304 18:28:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:28:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfshat=fowner>,fowner>']) 18:28:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) close(r0) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x4004804) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x7fffffff, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25, 0x4}, {0x0, 0x0, 0x4003}, {&(0x7f0000000480)="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", 0x1000, 0x2}, {&(0x7f0000000140)="ace64fe5d2ff7125010b42409b27f9aea16cbd8768d88e83e2711e68e74c3bbdc7fd89f8ad5446bd315500e0cba3e688b8057bfc845baedd494a0181c440f93c95b92851b424cdb0edab6df2bba6a502962820d9601d13ccca75c69f2ac254a0338eb3c2887f4e0f956401143b03ebb0ee05842539215672a70eeaa83cbcae724e726ee9fb3ff15af64d7a69d004acaf3d7f1526c84829caf91c57678881742ba75bcf87ca6ce42d669aa796c1faee022dd586cf1a121b64ddc5f4d5d8bb17ec2698839298b364ffa85364a6a5ead0d025eaf0e2cd55aecb72", 0xd9, 0x2}], 0x100014, &(0x7f00000004c0)=ANY=[]) openat(r4, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 18:28:30 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 66) 18:28:30 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 77) 18:28:30 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x5, 0x10340) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000700)={{r1}, 0x0, 0x1e, @inherit={0x90, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, @subvolid}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) 18:28:30 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200600000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:28:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 66) [ 1611.647365] FAULT_INJECTION: forcing a failure. [ 1611.647365] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.648897] CPU: 0 PID: 10632 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1611.649796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 18:28:30 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200700000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1611.649801] Call Trace: [ 1611.649820] dump_stack+0x107/0x167 [ 1611.649836] should_fail.cold+0x5/0xa [ 1611.649853] ? register_for_each_vma+0x476/0xc00 [ 1611.649866] should_failslab+0x5/0x20 [ 1611.649880] kmem_cache_alloc_trace+0x55/0x320 [ 1611.649899] register_for_each_vma+0x476/0xc00 [ 1611.649927] __uprobe_register+0x4df/0x880 [ 1611.649952] probe_event_enable+0x3c4/0xba0 [ 1611.649964] ? uprobe_perf_close+0x5f0/0x5f0 [ 1611.649982] trace_uprobe_register+0x54/0x730 18:28:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) close(r0) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x4004804) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x7fffffff, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25, 0x4}, {0x0, 0x0, 0x4003}, {&(0x7f0000000480)="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", 0x1000, 0x2}, {&(0x7f0000000140)="ace64fe5d2ff7125010b42409b27f9aea16cbd8768d88e83e2711e68e74c3bbdc7fd89f8ad5446bd315500e0cba3e688b8057bfc845baedd494a0181c440f93c95b92851b424cdb0edab6df2bba6a502962820d9601d13ccca75c69f2ac254a0338eb3c2887f4e0f956401143b03ebb0ee05842539215672a70eeaa83cbcae724e726ee9fb3ff15af64d7a69d004acaf3d7f1526c84829caf91c57678881742ba75bcf87ca6ce42d669aa796c1faee022dd586cf1a121b64ddc5f4d5d8bb17ec2698839298b364ffa85364a6a5ead0d025eaf0e2cd55aecb72", 0xd9, 0x2}], 0x100014, &(0x7f00000004c0)=ANY=[]) openat(r4, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1611.650004] perf_trace_event_init+0x554/0x9c0 [ 1611.650024] perf_uprobe_init+0x173/0x210 [ 1611.650042] perf_uprobe_event_init+0xff/0x190 [ 1611.650055] perf_try_init_event+0x130/0x570 [ 1611.650071] perf_event_alloc.part.0+0xd96/0x2b70 [ 1611.650094] __do_sys_perf_event_open+0x579/0x2e60 [ 1611.650114] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1611.650129] ? perf_event_set_output+0x5b0/0x5b0 [ 1611.650139] ? wait_for_completion_io+0x270/0x270 18:28:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0]) [ 1611.650172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1611.650186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1611.650210] do_syscall_64+0x33/0x40 [ 1611.650224] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1611.650232] RIP: 0033:0x7fcf367ecb19 [ 1611.650244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.650251] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1611.650266] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1611.650273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1611.650281] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1611.650288] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1611.650296] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 [ 1611.693002] loop7: detected capacity change from 0 to 135266304 [ 1611.702689] FAULT_INJECTION: forcing a failure. [ 1611.702689] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.702712] CPU: 1 PID: 10640 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1611.702724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1611.702731] Call Trace: [ 1611.702765] dump_stack+0x107/0x167 [ 1611.702792] should_fail.cold+0x5/0xa [ 1611.702817] ? create_object.isra.0+0x3a/0xa30 [ 1611.702838] should_failslab+0x5/0x20 [ 1611.702859] kmem_cache_alloc+0x5b/0x310 [ 1611.702881] ? mark_held_locks+0x9e/0xe0 [ 1611.702909] create_object.isra.0+0x3a/0xa30 [ 1611.702927] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1611.702958] kmem_cache_alloc_trace+0x151/0x320 [ 1611.702992] register_for_each_vma+0x476/0xc00 [ 1611.703040] __uprobe_register+0x4df/0x880 [ 1611.703081] probe_event_enable+0x3c4/0xba0 [ 1611.703102] ? uprobe_perf_close+0x5f0/0x5f0 [ 1611.703131] trace_uprobe_register+0x54/0x730 [ 1611.703168] perf_trace_event_init+0x554/0x9c0 [ 1611.703203] perf_uprobe_init+0x173/0x210 [ 1611.703233] perf_uprobe_event_init+0xff/0x190 [ 1611.703255] perf_try_init_event+0x130/0x570 [ 1611.703281] perf_event_alloc.part.0+0xd96/0x2b70 [ 1611.703320] __do_sys_perf_event_open+0x579/0x2e60 [ 1611.703353] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1611.703379] ? perf_event_set_output+0x5b0/0x5b0 [ 1611.703396] ? wait_for_completion_io+0x270/0x270 [ 1611.703451] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1611.703474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1611.703502] do_syscall_64+0x33/0x40 [ 1611.703524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1611.703538] RIP: 0033:0x7f27a2558b19 [ 1611.703558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.703570] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1611.703594] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1611.703606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1611.703619] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1611.703631] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1611.703644] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 1611.800302] FAULT_INJECTION: forcing a failure. [ 1611.800302] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.825318] loop7: detected capacity change from 0 to 135266304 [ 1611.826213] CPU: 0 PID: 10647 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1611.826220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1611.826225] Call Trace: [ 1611.826245] dump_stack+0x107/0x167 [ 1611.826260] should_fail.cold+0x5/0xa [ 1611.826276] ? create_object.isra.0+0x3a/0xa30 [ 1611.826294] should_failslab+0x5/0x20 [ 1611.839757] kmem_cache_alloc+0x5b/0x310 [ 1611.839771] ? mark_held_locks+0x9e/0xe0 [ 1611.839787] create_object.isra.0+0x3a/0xa30 [ 1611.839798] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1611.839815] kmem_cache_alloc_trace+0x151/0x320 [ 1611.839835] register_for_each_vma+0x476/0xc00 [ 1611.843827] __uprobe_register+0x4df/0x880 [ 1611.844415] probe_event_enable+0x3c4/0xba0 [ 1611.845009] ? uprobe_perf_close+0x5f0/0x5f0 [ 1611.845616] trace_uprobe_register+0x54/0x730 [ 1611.846246] perf_trace_event_init+0x554/0x9c0 [ 1611.846881] perf_uprobe_init+0x173/0x210 [ 1611.847456] perf_uprobe_event_init+0xff/0x190 [ 1611.848089] perf_try_init_event+0x130/0x570 [ 1611.848694] perf_event_alloc.part.0+0xd96/0x2b70 [ 1611.849365] __do_sys_perf_event_open+0x579/0x2e60 [ 1611.850049] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1611.850716] ? perf_event_set_output+0x5b0/0x5b0 [ 1611.851363] ? wait_for_completion_io+0x270/0x270 [ 1611.852049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1611.852772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1611.853484] do_syscall_64+0x33/0x40 [ 1611.853996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1611.854708] RIP: 0033:0x7fc9de03eb19 [ 1611.855219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.857757] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1611.858809] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1611.859784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1611.860764] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1611.861746] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1611.862731] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:28:30 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 78) 18:28:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1611.983411] FAULT_INJECTION: forcing a failure. [ 1611.983411] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.986149] CPU: 1 PID: 10657 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1611.987794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1611.989758] Call Trace: [ 1611.990397] dump_stack+0x107/0x167 [ 1611.991262] should_fail.cold+0x5/0xa [ 1611.992166] ? create_object.isra.0+0x3a/0xa30 [ 1611.993243] should_failslab+0x5/0x20 [ 1611.994142] kmem_cache_alloc+0x5b/0x310 [ 1611.995142] ? mark_held_locks+0x9e/0xe0 [ 1611.996108] create_object.isra.0+0x3a/0xa30 [ 1611.997142] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1611.998356] kmem_cache_alloc_trace+0x151/0x320 [ 1611.999457] register_for_each_vma+0x476/0xc00 [ 1612.000553] __uprobe_register+0x4df/0x880 [ 1612.001564] probe_event_enable+0x3c4/0xba0 [ 1612.002582] ? uprobe_perf_close+0x5f0/0x5f0 [ 1612.003625] trace_uprobe_register+0x54/0x730 [ 1612.004694] perf_trace_event_init+0x554/0x9c0 [ 1612.005774] perf_uprobe_init+0x173/0x210 [ 1612.006754] perf_uprobe_event_init+0xff/0x190 [ 1612.007812] perf_try_init_event+0x130/0x570 [ 1612.008838] perf_event_alloc.part.0+0xd96/0x2b70 [ 1612.009975] __do_sys_perf_event_open+0x579/0x2e60 [ 1612.011138] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1612.012267] ? perf_event_set_output+0x5b0/0x5b0 [ 1612.013368] ? wait_for_completion_io+0x270/0x270 [ 1612.014536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1612.015750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1612.016950] do_syscall_64+0x33/0x40 [ 1612.017812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1612.019005] RIP: 0033:0x7fcf367ecb19 [ 1612.019868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1612.024119] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1612.025874] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1612.027540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1612.029199] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1612.030855] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1612.032486] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:28:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000500)={0x0, 0x0, 0x4}) removexattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)=@random={'os2.', 'cgroup2\x00'}) 18:28:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) close(r0) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x4004804) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x7fffffff, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25, 0x4}, {0x0, 0x0, 0x4003}, {&(0x7f0000000480)="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", 0x1000, 0x2}, {&(0x7f0000000140)="ace64fe5d2ff7125010b42409b27f9aea16cbd8768d88e83e2711e68e74c3bbdc7fd89f8ad5446bd315500e0cba3e688b8057bfc845baedd494a0181c440f93c95b92851b424cdb0edab6df2bba6a502962820d9601d13ccca75c69f2ac254a0338eb3c2887f4e0f956401143b03ebb0ee05842539215672a70eeaa83cbcae724e726ee9fb3ff15af64d7a69d004acaf3d7f1526c84829caf91c57678881742ba75bcf87ca6ce42d669aa796c1faee022dd586cf1a121b64ddc5f4d5d8bb17ec2698839298b364ffa85364a6a5ead0d025eaf0e2cd55aecb72", 0xd9, 0x2}], 0x100014, &(0x7f00000004c0)=ANY=[]) openat(r4, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) 18:28:45 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 79) 18:28:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 67) 18:28:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=version=9p2000.u,nodevmap,noextend,dfltgid=']) 18:28:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:28:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 67) 18:28:45 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200800000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1626.951445] FAULT_INJECTION: forcing a failure. [ 1626.951445] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.955644] CPU: 0 PID: 10664 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1626.955657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 18:28:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x801001, &(0x7f0000000200)=ANY=[]) [ 1626.955665] Call Trace: [ 1626.955694] dump_stack+0x107/0x167 [ 1626.955721] should_fail.cold+0x5/0xa [ 1626.955756] ? register_for_each_vma+0x476/0xc00 [ 1626.955777] should_failslab+0x5/0x20 [ 1626.955800] kmem_cache_alloc_trace+0x55/0x320 [ 1626.955833] register_for_each_vma+0x476/0xc00 [ 1626.955881] __uprobe_register+0x4df/0x880 [ 1626.955922] probe_event_enable+0x3c4/0xba0 [ 1626.955943] ? uprobe_perf_close+0x5f0/0x5f0 [ 1626.955972] trace_uprobe_register+0x54/0x730 [ 1626.956008] perf_trace_event_init+0x554/0x9c0 [ 1626.956044] perf_uprobe_init+0x173/0x210 [ 1626.956074] perf_uprobe_event_init+0xff/0x190 [ 1626.956096] perf_try_init_event+0x130/0x570 [ 1626.956123] perf_event_alloc.part.0+0xd96/0x2b70 [ 1626.956162] __do_sys_perf_event_open+0x579/0x2e60 [ 1626.956195] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1626.956220] ? perf_event_set_output+0x5b0/0x5b0 [ 1626.977982] ? wait_for_completion_io+0x270/0x270 [ 1626.978039] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1626.979876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1626.981083] do_syscall_64+0x33/0x40 [ 1626.981951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1626.983148] RIP: 0033:0x7fcf367ecb19 [ 1626.984015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1626.988302] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1626.990077] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1626.991744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1626.993412] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1626.995094] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1626.996771] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 [ 1627.004424] loop7: detected capacity change from 0 to 135266304 18:28:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:28:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) close(r0) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x4004804) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x7fffffff, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25, 0x4}, {0x0, 0x0, 0x4003}, {&(0x7f0000000480)="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", 0x1000, 0x2}, {&(0x7f0000000140)="ace64fe5d2ff7125010b42409b27f9aea16cbd8768d88e83e2711e68e74c3bbdc7fd89f8ad5446bd315500e0cba3e688b8057bfc845baedd494a0181c440f93c95b92851b424cdb0edab6df2bba6a502962820d9601d13ccca75c69f2ac254a0338eb3c2887f4e0f956401143b03ebb0ee05842539215672a70eeaa83cbcae724e726ee9fb3ff15af64d7a69d004acaf3d7f1526c84829caf91c57678881742ba75bcf87ca6ce42d669aa796c1faee022dd586cf1a121b64ddc5f4d5d8bb17ec2698839298b364ffa85364a6a5ead0d025eaf0e2cd55aecb72", 0xd9, 0x2}], 0x100014, &(0x7f00000004c0)=ANY=[]) 18:28:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:28:45 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x100000001, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="ab94f7aa287ebb2311b195b039d238d3b796f66a85a98578291a4a65f5dba9b9414f65cda221fe9b1b86c66cc397914ef69f72393511d810c51d21aa1fefa4fc34c03410e2e70407a500f057c41ef8c6bae17ae440c65f1af0e3854da3ace02f18091af9369f92094b02e652dcfb4e79473f3a2e02980e0ce83ea3ea23b9ef9cc6adb80fb6536c54c9cd084747abba81013ccdc0a7b1201d852524e660145cb91a0f2f5abfe00470e6850a6bdc62956cab629fe4d35f1ec965637bebd2e7b4b9fc95bd2e9a9f0f4c22144344fc69a4a2eef178c942123ca8c6ef44", 0xdb, 0x10001}], 0x108000, &(0x7f0000000280)=ANY=[@ANYBLOB="2649ffcec44037ae8ec400"]) getdents64(r0, &(0x7f0000000000)=""/53, 0x35) getdents(r0, &(0x7f0000000180)=""/251, 0xfb) 18:28:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 1627.160142] FAULT_INJECTION: forcing a failure. [ 1627.160142] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.161712] CPU: 1 PID: 10682 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1627.162630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1627.163727] Call Trace: [ 1627.164081] dump_stack+0x107/0x167 [ 1627.164563] should_fail.cold+0x5/0xa [ 1627.165069] ? register_for_each_vma+0x476/0xc00 [ 1627.165691] should_failslab+0x5/0x20 [ 1627.166193] kmem_cache_alloc_trace+0x55/0x320 [ 1627.166808] register_for_each_vma+0x476/0xc00 [ 1627.167424] __uprobe_register+0x4df/0x880 [ 1627.167994] probe_event_enable+0x3c4/0xba0 [ 1627.168559] ? uprobe_perf_close+0x5f0/0x5f0 [ 1627.169142] trace_uprobe_register+0x54/0x730 [ 1627.169741] perf_trace_event_init+0x554/0x9c0 [ 1627.170351] perf_uprobe_init+0x173/0x210 [ 1627.170908] perf_uprobe_event_init+0xff/0x190 [ 1627.171509] perf_try_init_event+0x130/0x570 [ 1627.172092] perf_event_alloc.part.0+0xd96/0x2b70 [ 1627.172206] loop7: detected capacity change from 0 to 135266304 [ 1627.172737] __do_sys_perf_event_open+0x579/0x2e60 [ 1627.174749] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1627.175385] ? perf_event_set_output+0x5b0/0x5b0 [ 1627.176011] ? wait_for_completion_io+0x270/0x270 [ 1627.176666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1627.177354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1627.178033] do_syscall_64+0x33/0x40 [ 1627.178530] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1627.179206] RIP: 0033:0x7f27a2558b19 [ 1627.179696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.182077] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1627.183080] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1627.184011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1627.184940] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.185869] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1627.186806] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 [ 1627.274574] FAULT_INJECTION: forcing a failure. [ 1627.274574] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.277108] CPU: 0 PID: 10681 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1627.278629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1627.280443] Call Trace: [ 1627.281029] dump_stack+0x107/0x167 [ 1627.281833] should_fail.cold+0x5/0xa [ 1627.282683] ? register_for_each_vma+0x476/0xc00 [ 1627.283716] should_failslab+0x5/0x20 [ 1627.284546] kmem_cache_alloc_trace+0x55/0x320 [ 1627.285551] register_for_each_vma+0x476/0xc00 [ 1627.286579] __uprobe_register+0x4df/0x880 [ 1627.287523] probe_event_enable+0x3c4/0xba0 [ 1627.288462] ? uprobe_perf_close+0x5f0/0x5f0 [ 1627.289426] trace_uprobe_register+0x54/0x730 [ 1627.290424] perf_trace_event_init+0x554/0x9c0 [ 1627.291433] perf_uprobe_init+0x173/0x210 [ 1627.292346] perf_uprobe_event_init+0xff/0x190 [ 1627.293340] perf_try_init_event+0x130/0x570 [ 1627.294302] perf_event_alloc.part.0+0xd96/0x2b70 [ 1627.295375] __do_sys_perf_event_open+0x579/0x2e60 [ 1627.296456] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1627.297508] ? perf_event_set_output+0x5b0/0x5b0 [ 1627.298540] ? wait_for_completion_io+0x270/0x270 [ 1627.299625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1627.300760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1627.301878] do_syscall_64+0x33/0x40 [ 1627.302719] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1627.303824] RIP: 0033:0x7fc9de03eb19 [ 1627.304624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.308577] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1627.310237] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1627.311786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1627.313335] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.314890] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1627.316439] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:28:58 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="201800000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:28:58 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x2, 0xa0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0xfffc, @local}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x890c, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0, 0x0, r5}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xd985, 0x3, 0x1, 0x0, 0x6, 0x7}, 0x20) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x190) r7 = dup(r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000080)={@local, 0x78, r9}) 18:28:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 68) 18:28:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:28:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) close(r0) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x4004804) 18:28:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 80) 18:28:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 18:28:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 68) [ 1639.989589] FAULT_INJECTION: forcing a failure. [ 1639.989589] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.992680] CPU: 0 PID: 10707 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1639.994484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1639.996632] Call Trace: [ 1639.997332] dump_stack+0x107/0x167 [ 1639.998293] should_fail.cold+0x5/0xa [ 1639.999314] ? ___slab_alloc+0x360/0x700 [ 1640.000455] ? create_object.isra.0+0x3a/0xa30 [ 1640.001648] should_failslab+0x5/0x20 [ 1640.002643] kmem_cache_alloc+0x5b/0x310 [ 1640.003724] create_object.isra.0+0x3a/0xa30 [ 1640.004870] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1640.006197] kmem_cache_alloc_trace+0x151/0x320 [ 1640.007443] register_for_each_vma+0x476/0xc00 18:28:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1640.008644] __uprobe_register+0x4df/0x880 [ 1640.009897] probe_event_enable+0x3c4/0xba0 [ 1640.010900] ? uprobe_perf_close+0x5f0/0x5f0 [ 1640.012128] trace_uprobe_register+0x54/0x730 [ 1640.013166] perf_trace_event_init+0x554/0x9c0 [ 1640.014458] perf_uprobe_init+0x173/0x210 [ 1640.015444] perf_uprobe_event_init+0xff/0x190 [ 1640.016722] perf_try_init_event+0x130/0x570 [ 1640.017799] perf_event_alloc.part.0+0xd96/0x2b70 [ 1640.019159] __do_sys_perf_event_open+0x579/0x2e60 [ 1640.020288] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1640.021636] ? perf_event_set_output+0x5b0/0x5b0 [ 1640.022722] ? wait_for_completion_io+0x270/0x270 [ 1640.023955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1640.025138] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1640.026309] do_syscall_64+0x33/0x40 [ 1640.027164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1640.028314] RIP: 0033:0x7fcf367ecb19 [ 1640.029156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1640.033247] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1640.035001] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1640.036634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1640.038264] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1640.039931] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1640.041561] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:28:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) close(r0) 18:28:58 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="201c00000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1640.094163] FAULT_INJECTION: forcing a failure. [ 1640.094163] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.096812] CPU: 0 PID: 10710 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1640.098365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1640.100253] Call Trace: [ 1640.100867] dump_stack+0x107/0x167 [ 1640.101697] should_fail.cold+0x5/0xa [ 1640.102566] ? create_object.isra.0+0x3a/0xa30 [ 1640.103599] should_failslab+0x5/0x20 [ 1640.104465] kmem_cache_alloc+0x5b/0x310 [ 1640.105398] ? mark_held_locks+0x9e/0xe0 [ 1640.106335] create_object.isra.0+0x3a/0xa30 [ 1640.107337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1640.108504] kmem_cache_alloc_trace+0x151/0x320 [ 1640.109586] register_for_each_vma+0x476/0xc00 [ 1640.110658] __uprobe_register+0x4df/0x880 18:28:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1640.111640] probe_event_enable+0x3c4/0xba0 [ 1640.112795] ? uprobe_perf_close+0x5f0/0x5f0 [ 1640.113817] trace_uprobe_register+0x54/0x730 [ 1640.114870] perf_trace_event_init+0x554/0x9c0 [ 1640.115923] perf_uprobe_init+0x173/0x210 [ 1640.116877] perf_uprobe_event_init+0xff/0x190 [ 1640.117918] perf_try_init_event+0x130/0x570 [ 1640.118941] perf_event_alloc.part.0+0xd96/0x2b70 [ 1640.120056] __do_sys_perf_event_open+0x579/0x2e60 [ 1640.121202] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1640.122373] ? perf_event_set_output+0x5b0/0x5b0 [ 1640.123462] ? wait_for_completion_io+0x270/0x270 [ 1640.124594] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1640.125795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1640.126983] do_syscall_64+0x33/0x40 [ 1640.127838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1640.129081] RIP: 0033:0x7fc9de03eb19 [ 1640.129928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1640.134136] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1640.135883] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1640.137523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1640.139229] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1640.140883] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1640.142548] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:28:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:28:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 1640.241479] FAULT_INJECTION: forcing a failure. [ 1640.241479] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.244038] CPU: 0 PID: 10720 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1640.245516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1640.247289] Call Trace: [ 1640.247861] dump_stack+0x107/0x167 [ 1640.248642] should_fail.cold+0x5/0xa [ 1640.249458] ? create_object.isra.0+0x3a/0xa30 [ 1640.250435] should_failslab+0x5/0x20 [ 1640.251255] kmem_cache_alloc+0x5b/0x310 [ 1640.252123] ? mark_held_locks+0x9e/0xe0 [ 1640.253007] create_object.isra.0+0x3a/0xa30 [ 1640.253949] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1640.255055] kmem_cache_alloc_trace+0x151/0x320 [ 1640.256069] register_for_each_vma+0x476/0xc00 [ 1640.257076] __uprobe_register+0x4df/0x880 [ 1640.257996] probe_event_enable+0x3c4/0xba0 [ 1640.258914] ? uprobe_perf_close+0x5f0/0x5f0 [ 1640.259852] trace_uprobe_register+0x54/0x730 [ 1640.260813] perf_trace_event_init+0x554/0x9c0 [ 1640.261789] perf_uprobe_init+0x173/0x210 [ 1640.262690] perf_uprobe_event_init+0xff/0x190 [ 1640.263660] perf_try_init_event+0x130/0x570 [ 1640.264625] perf_event_alloc.part.0+0xd96/0x2b70 [ 1640.265675] __do_sys_perf_event_open+0x579/0x2e60 [ 1640.266739] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1640.267765] ? perf_event_set_output+0x5b0/0x5b0 [ 1640.268770] ? wait_for_completion_io+0x270/0x270 [ 1640.269837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1640.270967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1640.272074] do_syscall_64+0x33/0x40 [ 1640.272877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1640.273979] RIP: 0033:0x7f27a2558b19 [ 1640.274802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1640.278743] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1640.280380] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1640.281924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1640.283485] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1640.285031] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1640.286591] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 18:28:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:28:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:28:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) 18:29:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) 18:29:13 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="206800000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:29:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/ieee80211', 0x0, 0x0) futimesat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) 18:29:13 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 81) 18:29:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 69) 18:29:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 69) 18:29:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1654.797684] FAULT_INJECTION: forcing a failure. [ 1654.797684] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.800193] CPU: 1 PID: 10751 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1654.801624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1654.803325] Call Trace: [ 1654.803898] dump_stack+0x107/0x167 [ 1654.804685] should_fail.cold+0x5/0xa [ 1654.805485] ? register_for_each_vma+0x476/0xc00 [ 1654.806501] should_failslab+0x5/0x20 [ 1654.807294] kmem_cache_alloc_trace+0x55/0x320 [ 1654.808262] register_for_each_vma+0x476/0xc00 [ 1654.809267] __uprobe_register+0x4df/0x880 [ 1654.810188] probe_event_enable+0x3c4/0xba0 [ 1654.811109] ? uprobe_perf_close+0x5f0/0x5f0 [ 1654.812039] trace_uprobe_register+0x54/0x730 [ 1654.812983] perf_trace_event_init+0x554/0x9c0 [ 1654.813940] perf_uprobe_init+0x173/0x210 [ 1654.814828] perf_uprobe_event_init+0xff/0x190 [ 1654.815770] perf_try_init_event+0x130/0x570 [ 1654.816685] perf_event_alloc.part.0+0xd96/0x2b70 [ 1654.817699] __do_sys_perf_event_open+0x579/0x2e60 [ 1654.818719] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1654.819824] ? perf_event_set_output+0x5b0/0x5b0 [ 1654.820879] ? wait_for_completion_io+0x270/0x270 [ 1654.821919] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1654.822975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1654.823500] 9pnet: Insufficient options for proto=fd [ 1654.823812] do_syscall_64+0x33/0x40 [ 1654.823830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1654.823852] RIP: 0033:0x7fcf367ecb19 [ 1654.827282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1654.830412] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1654.831741] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1654.832954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1654.834146] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1654.835355] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1654.836557] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:29:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1654.888218] 9pnet: Insufficient options for proto=fd [ 1654.893076] FAULT_INJECTION: forcing a failure. [ 1654.893076] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.894988] CPU: 1 PID: 10764 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1654.896125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1654.897494] Call Trace: [ 1654.897935] dump_stack+0x107/0x167 [ 1654.898538] should_fail.cold+0x5/0xa [ 1654.899182] ? register_for_each_vma+0x476/0xc00 [ 1654.899967] should_failslab+0x5/0x20 [ 1654.900604] kmem_cache_alloc_trace+0x55/0x320 [ 1654.900629] register_for_each_vma+0x476/0xc00 [ 1654.900664] __uprobe_register+0x4df/0x880 [ 1654.900695] probe_event_enable+0x3c4/0xba0 [ 1654.900710] ? uprobe_perf_close+0x5f0/0x5f0 [ 1654.900731] trace_uprobe_register+0x54/0x730 [ 1654.900759] perf_trace_event_init+0x554/0x9c0 [ 1654.900784] perf_uprobe_init+0x173/0x210 [ 1654.900807] perf_uprobe_event_init+0xff/0x190 [ 1654.900822] perf_try_init_event+0x130/0x570 [ 1654.900842] perf_event_alloc.part.0+0xd96/0x2b70 [ 1654.900870] __do_sys_perf_event_open+0x579/0x2e60 [ 1654.900894] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1654.900912] ? perf_event_set_output+0x5b0/0x5b0 [ 1654.900924] ? wait_for_completion_io+0x270/0x270 [ 1654.900965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1654.900981] ? syscall_enter_from_user_mode+0x1d/0x50 18:29:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1654.901000] do_syscall_64+0x33/0x40 [ 1654.901016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1654.901027] RIP: 0033:0x7f27a2558b19 [ 1654.901040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1654.901049] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1654.901065] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1654.901074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1654.901083] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1654.901092] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1654.901101] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 [ 1654.963451] FAULT_INJECTION: forcing a failure. [ 1654.963451] name failslab, interval 1, probability 0, space 0, times 0 18:29:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) [ 1654.965049] CPU: 0 PID: 10765 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1654.966159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1654.967320] Call Trace: [ 1654.967690] dump_stack+0x107/0x167 [ 1654.968199] should_fail.cold+0x5/0xa [ 1654.968728] ? register_for_each_vma+0x476/0xc00 [ 1654.969382] should_failslab+0x5/0x20 [ 1654.969909] kmem_cache_alloc_trace+0x55/0x320 [ 1654.970553] register_for_each_vma+0x476/0xc00 [ 1654.971205] __uprobe_register+0x4df/0x880 [ 1654.971803] probe_event_enable+0x3c4/0xba0 [ 1654.972398] ? uprobe_perf_close+0x5f0/0x5f0 [ 1654.973011] trace_uprobe_register+0x54/0x730 [ 1654.973640] perf_trace_event_init+0x554/0x9c0 [ 1654.974278] perf_uprobe_init+0x173/0x210 [ 1654.974866] perf_uprobe_event_init+0xff/0x190 [ 1654.975494] perf_try_init_event+0x130/0x570 [ 1654.976105] perf_event_alloc.part.0+0xd96/0x2b70 [ 1654.976781] __do_sys_perf_event_open+0x579/0x2e60 [ 1654.977461] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1654.978131] ? perf_event_set_output+0x5b0/0x5b0 [ 1654.978786] ? wait_for_completion_io+0x270/0x270 [ 1654.979474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1654.980198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1654.980911] do_syscall_64+0x33/0x40 [ 1654.981426] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1654.982133] RIP: 0033:0x7fc9de03eb19 [ 1654.982648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1654.985191] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1654.986241] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1654.987230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1654.988208] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1654.989184] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1654.990163] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 [ 1655.000217] 9pnet: Insufficient options for proto=fd 18:29:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:29:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:29:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 70) 18:29:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=versio']) 18:29:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:29:27 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20f000000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:29:27 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 70) 18:29:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:29:27 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 82) [ 1668.852652] FAULT_INJECTION: forcing a failure. [ 1668.852652] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.855221] CPU: 0 PID: 10792 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1668.856698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1668.858456] Call Trace: [ 1668.859046] dump_stack+0x107/0x167 [ 1668.859841] should_fail.cold+0x5/0xa [ 1668.860638] ? create_object.isra.0+0x3a/0xa30 [ 1668.861609] should_failslab+0x5/0x20 [ 1668.862423] kmem_cache_alloc+0x5b/0x310 [ 1668.863304] ? mark_held_locks+0x9e/0xe0 [ 1668.864181] create_object.isra.0+0x3a/0xa30 [ 1668.865123] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1668.866211] kmem_cache_alloc_trace+0x151/0x320 [ 1668.867233] register_for_each_vma+0x476/0xc00 [ 1668.868255] __uprobe_register+0x4df/0x880 [ 1668.869184] probe_event_enable+0x3c4/0xba0 [ 1668.870113] ? uprobe_perf_close+0x5f0/0x5f0 [ 1668.871069] trace_uprobe_register+0x54/0x730 [ 1668.872055] perf_trace_event_init+0x554/0x9c0 [ 1668.873042] perf_uprobe_init+0x173/0x210 [ 1668.873946] perf_uprobe_event_init+0xff/0x190 [ 1668.874936] perf_try_init_event+0x130/0x570 [ 1668.875885] perf_event_alloc.part.0+0xd96/0x2b70 [ 1668.876926] __do_sys_perf_event_open+0x579/0x2e60 [ 1668.877982] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1668.879037] ? perf_event_set_output+0x5b0/0x5b0 [ 1668.880062] ? wait_for_completion_io+0x270/0x270 [ 1668.881134] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1668.882263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1668.883389] do_syscall_64+0x33/0x40 [ 1668.884208] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1668.885320] RIP: 0033:0x7fc9de03eb19 [ 1668.886122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.890055] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1668.891686] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1668.893231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1668.894782] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1668.896492] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1668.898041] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:29:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:29:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) (fail_nth: 1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:29:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',']) [ 1669.018487] FAULT_INJECTION: forcing a failure. [ 1669.018487] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.020982] CPU: 0 PID: 10788 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1669.022472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.024261] Call Trace: [ 1669.024837] dump_stack+0x107/0x167 [ 1669.025616] should_fail.cold+0x5/0xa [ 1669.026454] ? create_object.isra.0+0x3a/0xa30 [ 1669.027473] should_failslab+0x5/0x20 [ 1669.028302] kmem_cache_alloc+0x5b/0x310 [ 1669.029183] ? mark_held_locks+0x9e/0xe0 [ 1669.030086] create_object.isra.0+0x3a/0xa30 [ 1669.031046] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.032143] kmem_cache_alloc_trace+0x151/0x320 [ 1669.033161] register_for_each_vma+0x476/0xc00 [ 1669.034189] __uprobe_register+0x4df/0x880 [ 1669.035135] probe_event_enable+0x3c4/0xba0 [ 1669.036069] ? uprobe_perf_close+0x5f0/0x5f0 [ 1669.037025] trace_uprobe_register+0x54/0x730 [ 1669.038023] perf_trace_event_init+0x554/0x9c0 [ 1669.039043] perf_uprobe_init+0x173/0x210 [ 1669.039958] perf_uprobe_event_init+0xff/0x190 [ 1669.040937] perf_try_init_event+0x130/0x570 [ 1669.041900] perf_event_alloc.part.0+0xd96/0x2b70 [ 1669.042298] FAULT_INJECTION: forcing a failure. [ 1669.042298] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.042968] __do_sys_perf_event_open+0x579/0x2e60 [ 1669.043003] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1669.046576] ? perf_event_set_output+0x5b0/0x5b0 [ 1669.047614] ? wait_for_completion_io+0x270/0x270 [ 1669.048693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.049837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.050970] do_syscall_64+0x33/0x40 [ 1669.051780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.052879] RIP: 0033:0x7fcf367ecb19 [ 1669.053667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.057628] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1669.059269] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1669.060791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1669.062306] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.063837] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1669.065343] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 [ 1669.066923] CPU: 1 PID: 10808 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 1669.067877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.069016] Call Trace: [ 1669.069380] dump_stack+0x107/0x167 [ 1669.069886] should_fail.cold+0x5/0xa [ 1669.070410] ? create_object.isra.0+0x3a/0xa30 [ 1669.071047] should_failslab+0x5/0x20 [ 1669.071572] kmem_cache_alloc+0x5b/0x310 [ 1669.072126] ? lock_downgrade+0x6d0/0x6d0 [ 1669.072702] create_object.isra.0+0x3a/0xa30 [ 1669.073303] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.074002] kmem_cache_alloc_trace+0x151/0x320 [ 1669.074644] tty_ldisc_get.part.0+0x70/0x180 [ 1669.075265] tty_set_ldisc+0x59/0x680 [ 1669.075800] tty_ioctl+0x6cc/0x18b0 [ 1669.076303] ? tty_fasync+0x390/0x390 [ 1669.076830] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1669.077624] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1669.078329] ? do_vfs_ioctl+0x283/0x10d0 [ 1669.078898] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1669.079628] ? generic_block_fiemap+0x60/0x60 [ 1669.080246] ? lock_downgrade+0x6d0/0x6d0 [ 1669.080817] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1669.081484] ? wait_for_completion_io+0x270/0x270 [ 1669.082149] ? selinux_file_ioctl+0xb6/0x270 [ 1669.082750] ? tty_fasync+0x390/0x390 [ 1669.083279] __x64_sys_ioctl+0x19a/0x210 [ 1669.083846] do_syscall_64+0x33/0x40 [ 1669.084355] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.085067] RIP: 0033:0x7f0fd8701b19 [ 1669.085571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.088060] RSP: 002b:00007f0fd5c77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1669.089089] RAX: ffffffffffffffda RBX: 00007f0fd8814f60 RCX: 00007f0fd8701b19 [ 1669.090052] RDX: 0000000020000140 RSI: 0000000000005423 RDI: 0000000000000004 [ 1669.091031] RBP: 00007f0fd5c771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.091997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.092979] R13: 00007ffe639377bf R14: 00007f0fd5c77300 R15: 0000000000022000 [ 1669.113049] FAULT_INJECTION: forcing a failure. [ 1669.113049] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.116593] CPU: 0 PID: 10803 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1669.118369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.120414] Call Trace: [ 1669.121075] dump_stack+0x107/0x167 [ 1669.122007] should_fail.cold+0x5/0xa [ 1669.122976] ? create_object.isra.0+0x3a/0xa30 [ 1669.124101] should_failslab+0x5/0x20 [ 1669.125045] kmem_cache_alloc+0x5b/0x310 [ 1669.126055] ? mark_held_locks+0x9e/0xe0 [ 1669.127076] create_object.isra.0+0x3a/0xa30 [ 1669.128156] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 18:29:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1669.129408] kmem_cache_alloc_trace+0x151/0x320 [ 1669.130670] register_for_each_vma+0x476/0xc00 [ 1669.131917] __uprobe_register+0x4df/0x880 [ 1669.133051] probe_event_enable+0x3c4/0xba0 [ 1669.134115] ? uprobe_perf_close+0x5f0/0x5f0 [ 1669.135223] trace_uprobe_register+0x54/0x730 [ 1669.136339] perf_trace_event_init+0x554/0x9c0 [ 1669.137461] perf_uprobe_init+0x173/0x210 [ 1669.138482] perf_uprobe_event_init+0xff/0x190 [ 1669.139633] perf_try_init_event+0x130/0x570 [ 1669.140729] perf_event_alloc.part.0+0xd96/0x2b70 [ 1669.141937] __do_sys_perf_event_open+0x579/0x2e60 [ 1669.143158] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1669.144335] ? perf_event_set_output+0x5b0/0x5b0 [ 1669.145485] ? wait_for_completion_io+0x270/0x270 [ 1669.146697] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.148015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.149290] do_syscall_64+0x33/0x40 [ 1669.150202] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.151461] RIP: 0033:0x7f27a2558b19 [ 1669.152376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.156852] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1669.158694] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1669.160449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1669.162172] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.163908] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1669.165610] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 18:29:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',']) 18:29:27 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200003000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:29:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) (fail_nth: 2) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1669.275377] FAULT_INJECTION: forcing a failure. [ 1669.275377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1669.278508] CPU: 0 PID: 10822 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 1669.280217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.282234] Call Trace: [ 1669.282887] dump_stack+0x107/0x167 [ 1669.283787] should_fail.cold+0x5/0xa [ 1669.284709] _copy_to_user+0x2e/0x180 [ 1669.285643] simple_read_from_buffer+0xcc/0x160 [ 1669.286791] proc_fail_nth_read+0x198/0x230 [ 1669.287873] ? proc_sessionid_read+0x230/0x230 [ 1669.288980] ? security_file_permission+0xb1/0xe0 [ 1669.290148] ? proc_sessionid_read+0x230/0x230 [ 1669.291252] vfs_read+0x228/0x620 [ 1669.292105] ksys_read+0x12d/0x260 [ 1669.292951] ? vfs_write+0xb10/0xb10 [ 1669.293840] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.295083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.296319] do_syscall_64+0x33/0x40 [ 1669.297204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.298418] RIP: 0033:0x7f0fd86b469c [ 1669.299311] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1669.303628] RSP: 002b:00007f0fd5c77170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1669.305442] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0fd86b469c [ 1669.307149] RDX: 000000000000000f RSI: 00007f0fd5c771e0 RDI: 0000000000000005 [ 1669.308833] RBP: 00007f0fd5c771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.310520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.312209] R13: 00007ffe639377bf R14: 00007f0fd5c77300 R15: 0000000000022000 18:29:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:43 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="208004000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:29:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 71) 18:29:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x103) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x1) 18:29:43 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 83) 18:29:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',']) 18:29:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:29:43 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 71) [ 1685.475429] FAULT_INJECTION: forcing a failure. [ 1685.475429] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.477055] CPU: 1 PID: 10839 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1685.478020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1685.479191] Call Trace: [ 1685.479571] dump_stack+0x107/0x167 [ 1685.480091] should_fail.cold+0x5/0xa [ 1685.480628] ? register_for_each_vma+0x476/0xc00 [ 1685.481296] should_failslab+0x5/0x20 [ 1685.481312] kmem_cache_alloc_trace+0x55/0x320 [ 1685.481335] register_for_each_vma+0x476/0xc00 [ 1685.481368] __uprobe_register+0x4df/0x880 [ 1685.484054] probe_event_enable+0x3c4/0xba0 [ 1685.484660] ? uprobe_perf_close+0x5f0/0x5f0 [ 1685.485280] trace_uprobe_register+0x54/0x730 [ 1685.485914] perf_trace_event_init+0x554/0x9c0 [ 1685.486557] perf_uprobe_init+0x173/0x210 [ 1685.487146] perf_uprobe_event_init+0xff/0x190 [ 1685.487779] perf_try_init_event+0x130/0x570 [ 1685.488397] perf_event_alloc.part.0+0xd96/0x2b70 [ 1685.489077] __do_sys_perf_event_open+0x579/0x2e60 [ 1685.489782] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1685.490465] ? perf_event_set_output+0x5b0/0x5b0 [ 1685.491143] ? wait_for_completion_io+0x270/0x270 [ 1685.491850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1685.492584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1685.493303] do_syscall_64+0x33/0x40 [ 1685.493821] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1685.494540] RIP: 0033:0x7fc9de03eb19 [ 1685.495069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1685.497612] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1685.498685] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1685.499692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1685.500686] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1685.501678] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1685.502681] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:29:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1685.570572] FAULT_INJECTION: forcing a failure. [ 1685.570572] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.573316] CPU: 0 PID: 10836 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1685.574950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1685.576932] Call Trace: [ 1685.576962] dump_stack+0x107/0x167 [ 1685.576990] should_fail.cold+0x5/0xa [ 1685.577013] ? ___slab_alloc+0x155/0x700 [ 1685.577036] ? create_object.isra.0+0x3a/0xa30 [ 1685.577058] should_failslab+0x5/0x20 [ 1685.577079] kmem_cache_alloc+0x5b/0x310 [ 1685.577111] create_object.isra.0+0x3a/0xa30 [ 1685.577130] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1685.577162] kmem_cache_alloc_trace+0x151/0x320 [ 1685.577197] register_for_each_vma+0x476/0xc00 [ 1685.577246] __uprobe_register+0x4df/0x880 [ 1685.577289] probe_event_enable+0x3c4/0xba0 [ 1685.589582] ? uprobe_perf_close+0x5f0/0x5f0 [ 1685.589612] trace_uprobe_register+0x54/0x730 [ 1685.591273] perf_trace_event_init+0x554/0x9c0 [ 1685.591309] perf_uprobe_init+0x173/0x210 [ 1685.591341] perf_uprobe_event_init+0xff/0x190 [ 1685.591365] perf_try_init_event+0x130/0x570 [ 1685.595029] perf_event_alloc.part.0+0xd96/0x2b70 [ 1685.595079] __do_sys_perf_event_open+0x579/0x2e60 [ 1685.596848] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1685.597998] ? perf_event_set_output+0x5b0/0x5b0 [ 1685.599124] ? wait_for_completion_io+0x270/0x270 [ 1685.600302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1685.601540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1685.602760] do_syscall_64+0x33/0x40 [ 1685.603651] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1685.604868] RIP: 0033:0x7fcf367ecb19 [ 1685.605747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1685.610108] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1685.611938] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1685.612893] 9pnet: Insufficient options for proto=fd [ 1685.613628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1685.613641] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1685.613657] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1685.619351] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:29:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:44 executing program 5: timerfd_create(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1d5e00, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)="dc0c860d48c8c1a1776ffbf31b119b48696ed00ba1cc8fa222f94fd46ece6801d71afc81a17abe11af03e65b04ab4afec8ac73d85c2379cbe16d92c450b2354ccfc2437b15c568d22c5d2695f81138aa154d27a1de713eaf3b8ec252a7cbaabb819356dec1734f961213c026bed58c2fb8302a193c03bf87913aacacb7cda2d92ff794be77a0110b26e9e7be01deb812a46e41aa030421d96e4ca7c428754dc1503d318bd3af1433b544a0a1c7c8162029deebfdf8bfb10369920f850313413c8a6bd882475a1e9a5bc45b32dcedb36d2fc7", 0x7ffff000}, {&(0x7f0000000040)="dd7abf32b3fe4320bf4cc572da", 0xd}, {&(0x7f0000000080)="0752000704659d7809703fe8609513de83db15", 0x13}, {&(0x7f00000004c0)="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", 0xf0f}], 0x4) 18:29:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x4b47, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:29:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fs']) [ 1685.684706] 9pnet: Insufficient options for proto=fd [ 1685.690548] FAULT_INJECTION: forcing a failure. [ 1685.690548] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.692088] CPU: 1 PID: 10843 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1685.692978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1685.694040] Call Trace: [ 1685.694383] dump_stack+0x107/0x167 [ 1685.694854] should_fail.cold+0x5/0xa [ 1685.695349] ? register_for_each_vma+0x476/0xc00 [ 1685.695647] 9p: Unknown Cache mode fs [ 1685.695955] should_failslab+0x5/0x20 [ 1685.695968] kmem_cache_alloc_trace+0x55/0x320 [ 1685.695988] register_for_each_vma+0x476/0xc00 [ 1685.698509] __uprobe_register+0x4df/0x880 [ 1685.699069] probe_event_enable+0x3c4/0xba0 [ 1685.699634] ? uprobe_perf_close+0x5f0/0x5f0 [ 1685.700223] trace_uprobe_register+0x54/0x730 [ 1685.700832] perf_trace_event_init+0x554/0x9c0 [ 1685.701430] perf_uprobe_init+0x173/0x210 [ 1685.701970] perf_uprobe_event_init+0xff/0x190 [ 1685.702578] perf_try_init_event+0x130/0x570 [ 1685.703168] perf_event_alloc.part.0+0xd96/0x2b70 [ 1685.703821] __do_sys_perf_event_open+0x579/0x2e60 [ 1685.704468] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1685.705088] ? perf_event_set_output+0x5b0/0x5b0 [ 1685.705709] ? wait_for_completion_io+0x270/0x270 [ 1685.706399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1685.707089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1685.707754] do_syscall_64+0x33/0x40 [ 1685.708232] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1685.708891] RIP: 0033:0x7f27a2558b19 [ 1685.709369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1685.711725] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1685.712692] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1685.713607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1685.714514] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1685.715426] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1685.716333] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 18:29:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fs']) 18:29:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @rand_addr=0xe4010105}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) close(r0) [ 1685.784682] 9pnet: Insufficient options for proto=fd [ 1685.787183] 9p: Unknown Cache mode fs 18:29:58 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 72) 18:29:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 84) 18:29:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x4b49, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1700.108618] FAULT_INJECTION: forcing a failure. [ 1700.108618] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.110155] CPU: 1 PID: 10876 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1700.111056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 18:29:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 72) [ 1700.112209] Call Trace: [ 1700.112228] dump_stack+0x107/0x167 [ 1700.112244] should_fail.cold+0x5/0xa [ 1700.112260] ? create_object.isra.0+0x3a/0xa30 [ 1700.112273] should_failslab+0x5/0x20 [ 1700.112287] kmem_cache_alloc+0x5b/0x310 18:29:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fs']) 18:29:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x204800, 0x0) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x36) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000100)) fcntl$setflags(r1, 0x2, 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000200)='./file0\x00', 0x1d8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r5) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x1, 0xa, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x5d, 0x3, 0x7e88, 0x4, @private2, @mcast1, 0x80, 0x40, 0x0, 0xdde3}}) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 18:29:58 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200005000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1700.112301] ? mark_held_locks+0x9e/0xe0 [ 1700.112317] create_object.isra.0+0x3a/0xa30 [ 1700.112328] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1700.112346] kmem_cache_alloc_trace+0x151/0x320 [ 1700.112366] register_for_each_vma+0x476/0xc00 [ 1700.112393] __uprobe_register+0x4df/0x880 [ 1700.112418] probe_event_enable+0x3c4/0xba0 [ 1700.112430] ? uprobe_perf_close+0x5f0/0x5f0 [ 1700.112447] trace_uprobe_register+0x54/0x730 [ 1700.112468] perf_trace_event_init+0x554/0x9c0 [ 1700.112488] perf_uprobe_init+0x173/0x210 [ 1700.112506] perf_uprobe_event_init+0xff/0x190 [ 1700.112518] perf_try_init_event+0x130/0x570 [ 1700.112534] perf_event_alloc.part.0+0xd96/0x2b70 [ 1700.112556] __do_sys_perf_event_open+0x579/0x2e60 [ 1700.112576] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1700.112591] ? perf_event_set_output+0x5b0/0x5b0 [ 1700.112601] ? wait_for_completion_io+0x270/0x270 [ 1700.112632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.112646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.112662] do_syscall_64+0x33/0x40 [ 1700.112675] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.112683] RIP: 0033:0x7f27a2558b19 [ 1700.112699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.112706] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1700.112719] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1700.112727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1700.112734] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.112741] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1700.112748] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 1700.133133] FAULT_INJECTION: forcing a failure. [ 1700.133133] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.156089] CPU: 1 PID: 10880 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1700.156096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.156101] Call Trace: [ 1700.156119] dump_stack+0x107/0x167 [ 1700.156139] should_fail.cold+0x5/0xa [ 1700.160043] ? create_object.isra.0+0x3a/0xa30 [ 1700.160056] should_failslab+0x5/0x20 [ 1700.160068] kmem_cache_alloc+0x5b/0x310 [ 1700.160081] ? mark_held_locks+0x9e/0xe0 [ 1700.160097] create_object.isra.0+0x3a/0xa30 [ 1700.160108] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1700.160125] kmem_cache_alloc_trace+0x151/0x320 [ 1700.160145] register_for_each_vma+0x476/0xc00 [ 1700.160172] __uprobe_register+0x4df/0x880 [ 1700.160196] probe_event_enable+0x3c4/0xba0 [ 1700.160208] ? uprobe_perf_close+0x5f0/0x5f0 [ 1700.160224] trace_uprobe_register+0x54/0x730 [ 1700.160246] perf_trace_event_init+0x554/0x9c0 [ 1700.160266] perf_uprobe_init+0x173/0x210 [ 1700.160283] perf_uprobe_event_init+0xff/0x190 [ 1700.160295] perf_try_init_event+0x130/0x570 [ 1700.160311] perf_event_alloc.part.0+0xd96/0x2b70 [ 1700.160333] __do_sys_perf_event_open+0x579/0x2e60 [ 1700.160353] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1700.160368] ? perf_event_set_output+0x5b0/0x5b0 [ 1700.160378] ? wait_for_completion_io+0x270/0x270 [ 1700.160418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.173452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.174127] do_syscall_64+0x33/0x40 [ 1700.174619] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.175301] RIP: 0033:0x7fcf367ecb19 [ 1700.175780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.178170] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1700.179155] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1700.180096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1700.181037] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.181974] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1700.182910] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 [ 1700.195609] 9p: Unknown Cache mode fs 18:29:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,ana']) 18:29:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1700.268762] FAULT_INJECTION: forcing a failure. [ 1700.268762] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.272698] CPU: 0 PID: 10886 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1700.274208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.276010] Call Trace: [ 1700.276584] dump_stack+0x107/0x167 [ 1700.277376] should_fail.cold+0x5/0xa [ 1700.278202] ? create_object.isra.0+0x3a/0xa30 [ 1700.279194] should_failslab+0x5/0x20 [ 1700.280031] kmem_cache_alloc+0x5b/0x310 [ 1700.280913] ? mark_held_locks+0x9e/0xe0 [ 1700.281801] create_object.isra.0+0x3a/0xa30 [ 1700.282747] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1700.283859] kmem_cache_alloc_trace+0x151/0x320 [ 1700.284872] register_for_each_vma+0x476/0xc00 [ 1700.285887] __uprobe_register+0x4df/0x880 [ 1700.286824] probe_event_enable+0x3c4/0xba0 [ 1700.287760] ? uprobe_perf_close+0x5f0/0x5f0 [ 1700.288716] trace_uprobe_register+0x54/0x730 [ 1700.289695] perf_trace_event_init+0x554/0x9c0 [ 1700.290690] perf_uprobe_init+0x173/0x210 [ 1700.291598] perf_uprobe_event_init+0xff/0x190 [ 1700.292579] perf_try_init_event+0x130/0x570 [ 1700.293529] perf_event_alloc.part.0+0xd96/0x2b70 [ 1700.294583] __do_sys_perf_event_open+0x579/0x2e60 [ 1700.295659] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1700.296700] ? perf_event_set_output+0x5b0/0x5b0 [ 1700.297714] ? wait_for_completion_io+0x270/0x270 [ 1700.298776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.299899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.301000] do_syscall_64+0x33/0x40 [ 1700.301792] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.302881] RIP: 0033:0x7fc9de03eb19 [ 1700.303681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.307588] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1700.309212] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1700.310729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1700.312267] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.313789] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1700.315297] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:29:58 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:29:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 73) 18:29:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:29:58 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1700.410601] FAULT_INJECTION: forcing a failure. [ 1700.410601] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.413251] CPU: 0 PID: 10904 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1700.414893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.416847] Call Trace: [ 1700.417487] dump_stack+0x107/0x167 [ 1700.418351] should_fail.cold+0x5/0xa [ 1700.419286] ? register_for_each_vma+0x476/0xc00 [ 1700.420400] should_failslab+0x5/0x20 [ 1700.421290] kmem_cache_alloc_trace+0x55/0x320 [ 1700.422350] register_for_each_vma+0x476/0xc00 [ 1700.423453] __uprobe_register+0x4df/0x880 [ 1700.424464] probe_event_enable+0x3c4/0xba0 [ 1700.425460] ? uprobe_perf_close+0x5f0/0x5f0 [ 1700.426484] trace_uprobe_register+0x54/0x730 [ 1700.427539] perf_trace_event_init+0x554/0x9c0 [ 1700.428606] perf_uprobe_init+0x173/0x210 [ 1700.429574] perf_uprobe_event_init+0xff/0x190 [ 1700.430646] perf_try_init_event+0x130/0x570 [ 1700.431700] perf_event_alloc.part.0+0xd96/0x2b70 [ 1700.432835] __do_sys_perf_event_open+0x579/0x2e60 [ 1700.433999] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1700.435096] ? perf_event_set_output+0x5b0/0x5b0 [ 1700.436187] ? wait_for_completion_io+0x270/0x270 [ 1700.437337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.438546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.439731] do_syscall_64+0x33/0x40 [ 1700.440596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.441758] RIP: 0033:0x7f27a2558b19 [ 1700.442619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.446818] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1700.448569] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1700.450175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1700.451791] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.453392] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1700.455016] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:29:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="00001500090400000000000000000200000000000000000000000000000000b62a94670100"/66, @ANYRES32=0x0, @ANYRES32=0x0], 0x4c}}, 0x0) 18:29:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 85) 18:29:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,ana']) [ 1700.567518] FAULT_INJECTION: forcing a failure. [ 1700.567518] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.570120] CPU: 0 PID: 10915 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1700.571694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.573548] Call Trace: [ 1700.574150] dump_stack+0x107/0x167 [ 1700.574977] should_fail.cold+0x5/0xa [ 1700.575858] ? register_for_each_vma+0x476/0xc00 [ 1700.576944] should_failslab+0x5/0x20 [ 1700.577812] kmem_cache_alloc_trace+0x55/0x320 [ 1700.578870] register_for_each_vma+0x476/0xc00 [ 1700.579935] __uprobe_register+0x4df/0x880 [ 1700.580925] probe_event_enable+0x3c4/0xba0 [ 1700.581889] ? uprobe_perf_close+0x5f0/0x5f0 [ 1700.582900] trace_uprobe_register+0x54/0x730 [ 1700.583942] perf_trace_event_init+0x554/0x9c0 [ 1700.584985] perf_uprobe_init+0x173/0x210 [ 1700.585934] perf_uprobe_event_init+0xff/0x190 [ 1700.586969] perf_try_init_event+0x130/0x570 [ 1700.587984] perf_event_alloc.part.0+0xd96/0x2b70 [ 1700.589092] __do_sys_perf_event_open+0x579/0x2e60 [ 1700.590230] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1700.591354] ? perf_event_set_output+0x5b0/0x5b0 [ 1700.592416] ? wait_for_completion_io+0x270/0x270 [ 1700.593551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.594736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.595916] do_syscall_64+0x33/0x40 [ 1700.596768] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.597928] RIP: 0033:0x7fcf367ecb19 [ 1700.598767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.602906] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1700.604629] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1700.606238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1700.607855] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.609463] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1700.611069] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:30:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:30:12 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 86) 18:30:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,ana']) 18:30:12 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 73) 18:30:12 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:30:12 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="afc9", 0x2, 0xffffff) write$P9_RREADDIR(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="22010000290200000000008001000000020000000000000049000000040000004007002e2f663c4bb4029d7078f5000700000000000000fcffffffffffffff8107002e2f66696c6530400300000006000000000000800000000000000507002e2f66696c653080020000000700000000000000170c0000000000000207002e2f66696c65300400000000050000000000000012a80000000000000007002e2f6669ec653000000000000000000000000000ffffff7fffffffff0207002e2f66696c653008000000000700000000000000b269ffffffffffff0507002e000000000000200001000000000000000507002e2f66696c6530f6b0372300f90000000000000000000000000000800007002e2f66696c6530501afe65e2a718e6b8a01e500e962faa007c8f2a18ace7d6174f52c906b7653e1e3fbcc18e96dbb8fd36dc8cd93ec9e4d71944e2212159b5340e65694af1d842335b667e04a86cad9e9ec3aa07d4ebf8ca48b6cc5e6ad6adec862975059c12751036e28790718274f7fe9e8438df1a89397cf1d12ebd745c53df420b104ab30dc788138ba8e6535a0017f6d1b4ce29861532c6b6d1b379dfc90b598afa4e7080b8a17f645550dca6bfce2a26fdb925b25ff61fc9b112470e3a4b7148838efa6b17aa6c902451d4ab90bed6f7ef352df458bafbbe4ba3a88dc8b894e013a84c52a6157e9bec52c59136ff753bc171e8ed32ab672e8989c0e076dd8c73d61737a210005cbeb29adf8d2a674c540967f9d358f114859718f33d1e466aaa7a7f64f63aaf7592b0868fdcebb2b6613e52ba4723b4420edb108d79d03790"], 0x122) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x80000001]}, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) dup2(r2, r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) copy_file_range(r5, &(0x7f00000001c0)=0x43f0, r6, &(0x7f0000000240)=0x5, 0x7fffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3ba4141e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) open(&(0x7f0000000040)='./file0\x00', 0x40, 0xd2) sendfile(0xffffffffffffffff, r0, 0x0, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/935], 0x3b7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) 18:30:12 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200006000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:30:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 74) [ 1714.271849] FAULT_INJECTION: forcing a failure. [ 1714.271849] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.274939] CPU: 0 PID: 10925 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1714.276464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1714.278282] Call Trace: [ 1714.278311] dump_stack+0x107/0x167 [ 1714.278336] should_fail.cold+0x5/0xa [ 1714.278361] ? create_object.isra.0+0x3a/0xa30 [ 1714.278381] should_failslab+0x5/0x20 [ 1714.278400] kmem_cache_alloc+0x5b/0x310 [ 1714.278421] ? mark_held_locks+0x9e/0xe0 [ 1714.278447] create_object.isra.0+0x3a/0xa30 [ 1714.278463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1714.278491] kmem_cache_alloc_trace+0x151/0x320 [ 1714.278522] register_for_each_vma+0x476/0xc00 [ 1714.278566] __uprobe_register+0x4df/0x880 [ 1714.278603] probe_event_enable+0x3c4/0xba0 [ 1714.278622] ? uprobe_perf_close+0x5f0/0x5f0 [ 1714.278648] trace_uprobe_register+0x54/0x730 [ 1714.278683] perf_trace_event_init+0x554/0x9c0 [ 1714.278730] perf_uprobe_init+0x173/0x210 [ 1714.278773] perf_uprobe_event_init+0xff/0x190 [ 1714.278796] perf_try_init_event+0x130/0x570 [ 1714.278821] perf_event_alloc.part.0+0xd96/0x2b70 [ 1714.278862] __do_sys_perf_event_open+0x579/0x2e60 [ 1714.298192] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1714.298217] ? perf_event_set_output+0x5b0/0x5b0 [ 1714.298234] ? wait_for_completion_io+0x270/0x270 [ 1714.298283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 18:30:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1714.298305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1714.298330] do_syscall_64+0x33/0x40 [ 1714.298350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1714.298364] RIP: 0033:0x7f27a2558b19 [ 1714.298383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1714.298394] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1714.298416] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1714.298427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1714.298439] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1714.298450] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 18:30:12 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004f40)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f00000003c0)=""/145, 0x91}], 0x3, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}, {{&(0x7f0000000540), 0x6e, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/194, 0xc2}], 0x3, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/127, 0x7f}, {&(0x7f0000000a00)=""/38, 0x26}], 0x2, &(0x7f0000000a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/33, 0x21}, {&(0x7f0000000c80)=""/214, 0xd6}, {&(0x7f0000000d80)=""/39, 0x27}, {&(0x7f0000000dc0)=""/66, 0x42}], 0x5, &(0x7f0000000ec0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000f40)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/25, 0x19}], 0x2}}, {{&(0x7f0000001040), 0x6e, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/122, 0x7a}, {&(0x7f0000001140)=""/132, 0x84}, {&(0x7f0000001200)=""/92, 0x5c}], 0x3, &(0x7f00000012c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001380), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001400)=""/195, 0xc3}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000001500)=""/253, 0xfd}, {&(0x7f0000001600)=""/55, 0x37}, {&(0x7f0000001640)=""/221, 0xdd}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/138, 0x8a}, {&(0x7f0000001840)=""/103, 0x67}, {&(0x7f00000018c0)=""/161, 0xa1}], 0x9}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001ac0)=""/34, 0x22}], 0x1, &(0x7f0000001b40)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/240, 0xf0}], 0x2, &(0x7f0000004e00)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x9, 0x40, &(0x7f0000005180)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000051c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x68, 0x3, 0x9, 0x5, 0x0, 0x69, 0x20, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1a137027, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x7, 0x45, 0x0, 0xa33, 0x1, 0xc7e2, 0x0, 0x5, 0x0, 0x80000000}, r1, 0x6, r2, 0x3) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001d06210c000000000400020039001180f217f38838867118d8f7d30f5e00c04164aa091d55e1cab9264fce85edde14acfec3678f7cb8ce6e8dd83a6dfdf5c178c05332b8940000004d89ec55294dd6ecd4afbe4ef5913ae9c0edc7c38897cb7c9e0a8d3c9046d30782e5926077515cc9157f0c1f1226cd5771f7512ecd63bc26b9f5578769299c1198997d6a1bc44d90256386a14beeb10faeb4af402d3a192db9f8f86ee0b10c621cc7dd7c650c892106be1976fb0488821aa05bdd00"/207], 0x50}}, 0x0) fcntl$addseals(r0, 0x409, 0x6) [ 1714.298462] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:30:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=ve']) 18:30:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1714.476583] FAULT_INJECTION: forcing a failure. [ 1714.476583] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.479601] CPU: 0 PID: 10926 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1714.481426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1714.483266] Call Trace: [ 1714.483866] dump_stack+0x107/0x167 [ 1714.484653] should_fail.cold+0x5/0xa [ 1714.485488] ? create_object.isra.0+0x3a/0xa30 [ 1714.486494] should_failslab+0x5/0x20 [ 1714.487485] kmem_cache_alloc+0x5b/0x310 [ 1714.488421] ? mark_held_locks+0x9e/0xe0 [ 1714.489306] create_object.isra.0+0x3a/0xa30 [ 1714.490255] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1714.491366] kmem_cache_alloc_trace+0x151/0x320 [ 1714.492399] register_for_each_vma+0x476/0xc00 [ 1714.493410] __uprobe_register+0x4df/0x880 [ 1714.494339] probe_event_enable+0x3c4/0xba0 [ 1714.495282] ? uprobe_perf_close+0x5f0/0x5f0 [ 1714.496258] trace_uprobe_register+0x54/0x730 [ 1714.497255] perf_trace_event_init+0x554/0x9c0 [ 1714.498252] perf_uprobe_init+0x173/0x210 [ 1714.499182] perf_uprobe_event_init+0xff/0x190 [ 1714.500181] perf_try_init_event+0x130/0x570 [ 1714.501145] perf_event_alloc.part.0+0xd96/0x2b70 [ 1714.502201] __do_sys_perf_event_open+0x579/0x2e60 [ 1714.502232] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1714.502255] ? perf_event_set_output+0x5b0/0x5b0 [ 1714.502272] ? wait_for_completion_io+0x270/0x270 [ 1714.502321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1714.502342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1714.502368] do_syscall_64+0x33/0x40 [ 1714.502389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1714.502402] RIP: 0033:0x7fcf367ecb19 [ 1714.502422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1714.502433] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1714.517100] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1714.517112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 18:30:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:30:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x20010, r1, 0x2c392000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x121002, 0x0) execveat(r2, &(0x7f0000000180)='./file1\x00', &(0x7f0000000440)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='}![{\x00', &(0x7f0000000280)='wfdno', &(0x7f00000002c0)='trans=fd,', &(0x7f0000000300)='/dev/bsg\x00', &(0x7f0000000340)='.\\\')\x00', &(0x7f0000000380)='+@@\x00', &(0x7f0000000400)='/dev/bsg\x00'], &(0x7f00000005c0)=[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='9p\x00', &(0x7f0000000540)='%\x9b&/\')[#&)\x19-/^\x00', &(0x7f0000000580)='\x00'], 0x100) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1714.517124] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1714.517136] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1714.517148] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:30:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1714.597200] 9pnet: Insufficient options for proto=fd 18:30:13 executing program 5: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="afc9", 0x2, 0xffffff) write$P9_RREADDIR(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x122) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x80000001]}, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) dup2(0xffffffffffffffff, r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) copy_file_range(r4, &(0x7f00000001c0)=0x43f0, r5, &(0x7f0000000240)=0x5, 0x7fffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3ba4141e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) open(&(0x7f0000000040)='./file0\x00', 0x40, 0xd2) sendfile(0xffffffffffffffff, r0, 0x0, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) [ 1714.656218] FAULT_INJECTION: forcing a failure. [ 1714.656218] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.659094] CPU: 0 PID: 10929 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1714.660880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1714.662966] Call Trace: [ 1714.663641] dump_stack+0x107/0x167 [ 1714.664576] should_fail.cold+0x5/0xa [ 1714.665557] ? register_for_each_vma+0x476/0xc00 [ 1714.666791] should_failslab+0x5/0x20 [ 1714.667775] kmem_cache_alloc_trace+0x55/0x320 [ 1714.668970] register_for_each_vma+0x476/0xc00 [ 1714.670299] __uprobe_register+0x4df/0x880 [ 1714.671545] probe_event_enable+0x3c4/0xba0 [ 1714.672648] ? uprobe_perf_close+0x5f0/0x5f0 [ 1714.673779] trace_uprobe_register+0x54/0x730 [ 1714.674941] perf_trace_event_init+0x554/0x9c0 [ 1714.676119] perf_uprobe_init+0x173/0x210 [ 1714.677197] perf_uprobe_event_init+0xff/0x190 [ 1714.678414] perf_try_init_event+0x130/0x570 [ 1714.679806] perf_event_alloc.part.0+0xd96/0x2b70 [ 1714.681301] __do_sys_perf_event_open+0x579/0x2e60 [ 1714.682793] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1714.684302] ? perf_event_set_output+0x5b0/0x5b0 [ 1714.685710] ? wait_for_completion_io+0x270/0x270 [ 1714.686974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1714.688308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1714.689611] do_syscall_64+0x33/0x40 [ 1714.690541] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1714.691837] RIP: 0033:0x7fc9de03eb19 [ 1714.692760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1714.697687] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1714.699596] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1714.701360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1714.703099] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1714.704833] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1714.706544] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:30:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:30:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 74) 18:30:26 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 87) 18:30:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,anam']) [ 1728.061477] FAULT_INJECTION: forcing a failure. 18:30:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 75) 18:30:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:30:26 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200007000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1728.061477] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.063297] CPU: 1 PID: 10971 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1728.064325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1728.065475] Call Trace: [ 1728.065856] dump_stack+0x107/0x167 [ 1728.066367] should_fail.cold+0x5/0xa [ 1728.066911] ? register_for_each_vma+0x476/0xc00 [ 1728.067586] should_failslab+0x5/0x20 [ 1728.068117] kmem_cache_alloc_trace+0x55/0x320 18:30:26 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x94, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000050}, 0x4008000) symlink(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0\x00') creat(0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x0) [ 1728.068758] register_for_each_vma+0x476/0xc00 [ 1728.069558] __uprobe_register+0x4df/0x880 [ 1728.070171] probe_event_enable+0x3c4/0xba0 [ 1728.070770] ? uprobe_perf_close+0x5f0/0x5f0 [ 1728.071395] trace_uprobe_register+0x54/0x730 [ 1728.072048] perf_trace_event_init+0x554/0x9c0 [ 1728.072692] perf_uprobe_init+0x173/0x210 [ 1728.073286] perf_uprobe_event_init+0xff/0x190 [ 1728.073925] perf_try_init_event+0x130/0x570 [ 1728.074543] perf_event_alloc.part.0+0xd96/0x2b70 [ 1728.075225] __do_sys_perf_event_open+0x579/0x2e60 [ 1728.075922] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1728.076604] ? perf_event_set_output+0x5b0/0x5b0 [ 1728.077262] ? wait_for_completion_io+0x270/0x270 [ 1728.077959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 18:30:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1728.078689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1728.079557] do_syscall_64+0x33/0x40 [ 1728.080083] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1728.080796] RIP: 0033:0x7fcf367ecb19 [ 1728.081318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.083878] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1728.084942] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1728.085934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1728.086926] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1728.087946] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1728.088945] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:30:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1728.162666] FAULT_INJECTION: forcing a failure. [ 1728.162666] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.164347] CPU: 1 PID: 10978 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1728.165313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1728.166466] Call Trace: [ 1728.166838] dump_stack+0x107/0x167 [ 1728.167348] should_fail.cold+0x5/0xa [ 1728.167891] ? register_for_each_vma+0x476/0xc00 [ 1728.168568] should_failslab+0x5/0x20 [ 1728.169100] kmem_cache_alloc_trace+0x55/0x320 [ 1728.169747] register_for_each_vma+0x476/0xc00 [ 1728.170394] __uprobe_register+0x4df/0x880 [ 1728.170998] probe_event_enable+0x3c4/0xba0 [ 1728.171602] ? uprobe_perf_close+0x5f0/0x5f0 [ 1728.172220] trace_uprobe_register+0x54/0x730 [ 1728.172852] perf_trace_event_init+0x554/0x9c0 [ 1728.173504] perf_uprobe_init+0x173/0x210 [ 1728.174087] perf_uprobe_event_init+0xff/0x190 [ 1728.174727] perf_try_init_event+0x130/0x570 [ 1728.175344] perf_event_alloc.part.0+0xd96/0x2b70 [ 1728.176031] __do_sys_perf_event_open+0x579/0x2e60 [ 1728.176723] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1728.177401] ? perf_event_set_output+0x5b0/0x5b0 [ 1728.178057] ? wait_for_completion_io+0x270/0x270 [ 1728.178752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1728.179492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1728.180221] do_syscall_64+0x33/0x40 [ 1728.180745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1728.181455] RIP: 0033:0x7f27a2558b19 [ 1728.181974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.184552] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1728.185612] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1728.186604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1728.187608] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1728.188605] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1728.189610] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 18:30:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:30:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,anam']) 18:30:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {0x9}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) r4 = signalfd(r0, &(0x7f0000000240)={[0xbe]}, 0x8) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x3c4, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x250, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5a, 0x4, "329a60c9f1ff0bbbe4267212a3f7bd9a944a90c26ea59d493bdff95e46a6b2b7d82f7a85d4e48ad957d7223d0618ff6482f92958c3dbe13a6f0f0acb41a81817f0ad73bd547265c8b0600190f661c045bee1b0a0688c"}, @ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "2e2a3d577897c6d71a8beb9cafa783c490f7c385417b29c9d957e933bb53ef317ebb41d7d729a1f29271b3268b72e69e4ed023674fbafcd10ffba82f2f43a9547af318a90bd895b1625c00c6f9dc4b0373a99524fff7bbd347b205a58ce5a4cdbcd104360eb296f884187ddcf507fdf362e048b5e402a2d7b8698d05175148f137ad7c46bb602f95369662c77277439852b8c2b6a53d20d1766d13e5f0db21f246d5d95f220291fcbe2ef91cba66c149050d6a8bc0d09a7e71bc259b339be3823e63b00fdd047a"}, @ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "8743379d8d103f6b84f05496ded236c122349e58609e50e80179187de3c4a2d18d030a4f19ba25319f6fb90598fdacc24ce92783edfab340193a85a4f7c7b06ee500750d48cf190ff61d84d7c5c9f45dfa86f1ff2641d197acf5358530055ec5677c6043c4b632dabe37d111fa20f1c67b46bac46a22265e2df4229d23224a990858befc3e5d22da0d86045e2370ab7ef7fbb984fb8672438097b99bda394074ceef955d5c393e6e5685de62"}, @ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "d183bf7fb1aceaed8c87b57cb919ee24b7cb4b05edb59505276e39c0ec4eb7b48904da7c0a1ef88a3a3383eb274b12a3d386668b75dea6052fa76ca6225614182fdebe02cab60857e4877025078c9ee5a5852a0e01c27718e28da5b4338bb3e597bc156033d51d833fd2bb"}]}, @ETHTOOL_A_WOL_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_SOPASS={0xf7, 0x3, "1e355bb077946d7130330334618593d0749438fedd627ff608df5e4f44557df9766ebd8134d6f9cc6b8cf3e1e8637320b8095d097e1d4c70bb8ce9da7e8770eb9c44fd31b62df72eea06d178d4dd6da3a90c29110a942cf2c8c25fbdfe3c00e5025cc3b8514fa25d070b2987bba490160791c3292ae7ba97fa767313380f864eebec3ba8576566f1ae87bf855455a3dd00162cc324c9cd5cd841c6c7c13a2874fe239e260be1f30bd92c4e276a5030585b19703aefccc773f8618d854bdeeae55498d747b30b5cfde05db5998b60698833c5cac26268e770e5e15f6e6ad8f7694b60086c505affce4bc5f1b44bb0ee527fced9"}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x8014}, 0x808) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)={0xe8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff267}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18ac4d46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYBLOB="89"]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000200)={0x3, 'wg1\x00', {0xffff}, 0x4}) 18:30:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1728.299920] FAULT_INJECTION: forcing a failure. [ 1728.299920] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.301364] CPU: 1 PID: 10990 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1728.302180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1728.303172] Call Trace: [ 1728.303494] dump_stack+0x107/0x167 [ 1728.303940] should_fail.cold+0x5/0xa [ 1728.304399] ? create_object.isra.0+0x3a/0xa30 [ 1728.304943] should_failslab+0x5/0x20 [ 1728.305403] kmem_cache_alloc+0x5b/0x310 [ 1728.305889] ? mark_held_locks+0x9e/0xe0 [ 1728.306378] create_object.isra.0+0x3a/0xa30 [ 1728.306902] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1728.307509] kmem_cache_alloc_trace+0x151/0x320 [ 1728.308081] register_for_each_vma+0x476/0xc00 [ 1728.308640] __uprobe_register+0x4df/0x880 [ 1728.309157] probe_event_enable+0x3c4/0xba0 [ 1728.309671] ? uprobe_perf_close+0x5f0/0x5f0 [ 1728.310197] trace_uprobe_register+0x54/0x730 [ 1728.310739] perf_trace_event_init+0x554/0x9c0 [ 1728.311286] perf_uprobe_init+0x173/0x210 [ 1728.311790] perf_uprobe_event_init+0xff/0x190 [ 1728.312329] perf_try_init_event+0x130/0x570 [ 1728.312854] perf_event_alloc.part.0+0xd96/0x2b70 [ 1728.313434] __do_sys_perf_event_open+0x579/0x2e60 [ 1728.314025] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1728.314597] ? perf_event_set_output+0x5b0/0x5b0 [ 1728.315153] ? wait_for_completion_io+0x270/0x270 [ 1728.315747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1728.316369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1728.316980] do_syscall_64+0x33/0x40 [ 1728.317421] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1728.318028] RIP: 0033:0x7fc9de03eb19 [ 1728.318479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.318486] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1728.318498] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1728.318505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1728.318512] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1728.318518] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1728.318525] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 [ 1728.330770] 9p: Unknown access argument ‰ [ 1728.339588] 9p: Unknown access argument ‰ 18:30:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,anam']) 18:30:41 executing program 5: timer_create(0x6, &(0x7f0000000100)={0x0, 0x80000011, 0x0, @thr={&(0x7f0000000200)="f9c67ea09a09b5a3b06a946d991ad7751ed83e0df7e444ec47926097b17cc4cb72bd81a85cc6e5635f8afadf6217b56547c999bea7197a7eb3aeb4fe42a6f4f40ef58866a44e6909b36a4c15764b438020a7291fec4c4ac00d04e97b9cd5d565aea4320b37b563cc2611b158f91f67acb687b5f1654a4be360d1e5d2cb758f79ad14303926f75907e6d3389e1d45450f237e471fb6cfc5f375076b65886c3ef4e4cbacbd4662fcc54eaee0627bab2d72e958397bcc047b27f9af484cae2b065b5f08", &(0x7f0000000040)="27dc35ae6b9e86d069265128b3a15bb855b5f419c64961b5257531077a36a6c5a4"}}, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x2, &(0x7f0000001440)=[{&(0x7f0000001300)="cbc8fe5f2dfcc3e0bce0ffcc99ff161f410c7723eadcedfc7f28fdf88be876090e9bbf039b99edf6d8e50c66cd678765b17c07b6c3c811a1db5c50690e9c90938fbba625a9ae3d66389837aab80b77d6a49f06514732d323c4b412a9fbbc291b302d43019eb1f31b02b2e05c5e67f5b1ca623f0d61c7f04499c2416dfad4d548dc0c97f3ca71707cac35b055534114fbca8da85d5684a31b6cf64f673b6107cf64c6876be1fa6a19e792fa330d9e8d56db4d97258fbcb14f22bf0eb3c78cdb3038a259f554b6dd4d70eb52", 0xcb, 0x7ff}, {&(0x7f0000001400), 0x0, 0x20}], 0x2000480, &(0x7f0000001480)={[{@dioread_nolock}, {@debug}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@data_journal}, {@journal_async_commit}, {@norecovery}, {@journal_checksum}, {@noinit_itable}, {@dioread_lock}, {@grpquota}], [{@subj_role={'subj_role', 0x3d, ':,@(!G'}}, {@uid_eq}, {@obj_role={'obj_role', 0x3d, ',}'}}, {@smackfshat={'smackfshat', 0x3d, '$)&'}}]}) pread64(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x0) 18:30:41 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200018000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:30:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 75) 18:30:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:30:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 88) 18:30:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 76) 18:30:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1742.723563] FAULT_INJECTION: forcing a failure. [ 1742.723563] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.725049] CPU: 0 PID: 11015 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1742.725927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1742.726997] Call Trace: [ 1742.727339] dump_stack+0x107/0x167 [ 1742.727819] should_fail.cold+0x5/0xa [ 1742.728301] ? create_object.isra.0+0x3a/0xa30 [ 1742.728880] should_failslab+0x5/0x20 [ 1742.729359] kmem_cache_alloc+0x5b/0x310 [ 1742.729870] ? mark_held_locks+0x9e/0xe0 [ 1742.730391] create_object.isra.0+0x3a/0xa30 [ 1742.730948] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1742.731587] kmem_cache_alloc_trace+0x151/0x320 [ 1742.732191] register_for_each_vma+0x476/0xc00 [ 1742.732776] __uprobe_register+0x4df/0x880 [ 1742.733328] probe_event_enable+0x3c4/0xba0 [ 1742.733869] ? uprobe_perf_close+0x5f0/0x5f0 [ 1742.734424] trace_uprobe_register+0x54/0x730 [ 1742.735001] perf_trace_event_init+0x554/0x9c0 [ 1742.735589] perf_uprobe_init+0x173/0x210 [ 1742.736121] perf_uprobe_event_init+0xff/0x190 [ 1742.736698] perf_try_init_event+0x130/0x570 [ 1742.737255] perf_event_alloc.part.0+0xd96/0x2b70 [ 1742.737886] __do_sys_perf_event_open+0x579/0x2e60 [ 1742.738510] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1742.739133] ? perf_event_set_output+0x5b0/0x5b0 [ 1742.739737] ? wait_for_completion_io+0x270/0x270 [ 1742.740360] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1742.741026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1742.741675] do_syscall_64+0x33/0x40 [ 1742.742143] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1742.742784] RIP: 0033:0x7fcf367ecb19 [ 1742.743258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.745585] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1742.746542] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1742.747436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1742.748336] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.749235] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1742.750122] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:30:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1742.783156] FAULT_INJECTION: forcing a failure. [ 1742.783156] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.784566] CPU: 0 PID: 11017 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1742.785464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1742.786526] Call Trace: [ 1742.786859] dump_stack+0x107/0x167 [ 1742.787328] should_fail.cold+0x5/0xa [ 1742.787827] ? register_for_each_vma+0x476/0xc00 [ 1742.788434] should_failslab+0x5/0x20 [ 1742.788924] kmem_cache_alloc_trace+0x55/0x320 [ 1742.789511] register_for_each_vma+0x476/0xc00 [ 1742.790108] __uprobe_register+0x4df/0x880 [ 1742.790660] probe_event_enable+0x3c4/0xba0 [ 1742.791217] ? uprobe_perf_close+0x5f0/0x5f0 [ 1742.791790] trace_uprobe_register+0x54/0x730 [ 1742.792372] perf_trace_event_init+0x554/0x9c0 [ 1742.792962] perf_uprobe_init+0x173/0x210 [ 1742.793496] perf_uprobe_event_init+0xff/0x190 [ 1742.794079] perf_try_init_event+0x130/0x570 [ 1742.794643] perf_event_alloc.part.0+0xd96/0x2b70 [ 1742.795269] __do_sys_perf_event_open+0x579/0x2e60 [ 1742.795909] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1742.796525] ? perf_event_set_output+0x5b0/0x5b0 [ 1742.797136] ? wait_for_completion_io+0x270/0x270 [ 1742.797770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1742.798442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1742.799110] do_syscall_64+0x33/0x40 [ 1742.799587] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1742.800256] RIP: 0033:0x7fc9de03eb19 [ 1742.800728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.803071] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1742.804057] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1742.804970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1742.805874] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.806777] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1742.807681] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:30:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1742.835949] FAULT_INJECTION: forcing a failure. [ 1742.835949] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.837127] 9pnet: Insufficient options for proto=fd [ 1742.837382] CPU: 0 PID: 11020 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1742.839445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1742.840455] Call Trace: [ 1742.840785] dump_stack+0x107/0x167 [ 1742.841240] should_fail.cold+0x5/0xa [ 1742.841716] ? create_object.isra.0+0x3a/0xa30 [ 1742.842283] should_failslab+0x5/0x20 [ 1742.842744] kmem_cache_alloc+0x5b/0x310 [ 1742.843252] ? mark_held_locks+0x9e/0xe0 [ 1742.843775] create_object.isra.0+0x3a/0xa30 [ 1742.844324] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1742.844961] kmem_cache_alloc_trace+0x151/0x320 [ 1742.845551] register_for_each_vma+0x476/0xc00 [ 1742.846132] __uprobe_register+0x4df/0x880 [ 1742.846671] probe_event_enable+0x3c4/0xba0 [ 1742.847215] ? uprobe_perf_close+0x5f0/0x5f0 [ 1742.847778] trace_uprobe_register+0x54/0x730 [ 1742.848344] perf_trace_event_init+0x554/0x9c0 [ 1742.848919] perf_uprobe_init+0x173/0x210 [ 1742.849442] perf_uprobe_event_init+0xff/0x190 [ 1742.850019] perf_try_init_event+0x130/0x570 [ 1742.850571] perf_event_alloc.part.0+0xd96/0x2b70 [ 1742.851182] __do_sys_perf_event_open+0x579/0x2e60 [ 1742.851810] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1742.852411] ? perf_event_set_output+0x5b0/0x5b0 [ 1742.853006] ? wait_for_completion_io+0x270/0x270 [ 1742.853624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1742.854276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1742.854920] do_syscall_64+0x33/0x40 [ 1742.855385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1742.856129] RIP: 0033:0x7f27a2558b19 [ 1742.856599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.858884] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1742.859838] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1742.860689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1742.861571] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.862454] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1742.863339] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:30:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1742.906221] 9pnet: Insufficient options for proto=fd 18:30:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 89) 18:30:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:30:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:30:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=']) [ 1742.993360] 9pnet: Insufficient options for proto=fd 18:30:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 76) [ 1743.031614] FAULT_INJECTION: forcing a failure. [ 1743.031614] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.034239] CPU: 1 PID: 11042 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1743.035845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1743.037767] Call Trace: [ 1743.038385] dump_stack+0x107/0x167 [ 1743.039231] should_fail.cold+0x5/0xa [ 1743.040133] ? register_for_each_vma+0x476/0xc00 [ 1743.041228] should_failslab+0x5/0x20 [ 1743.042109] kmem_cache_alloc_trace+0x55/0x320 [ 1743.043177] register_for_each_vma+0x476/0xc00 [ 1743.044270] __uprobe_register+0x4df/0x880 [ 1743.045269] probe_event_enable+0x3c4/0xba0 [ 1743.046264] ? uprobe_perf_close+0x5f0/0x5f0 [ 1743.047290] trace_uprobe_register+0x54/0x730 [ 1743.048350] perf_trace_event_init+0x554/0x9c0 [ 1743.049421] perf_uprobe_init+0x173/0x210 [ 1743.050390] perf_uprobe_event_init+0xff/0x190 [ 1743.051445] perf_try_init_event+0x130/0x570 [ 1743.052472] perf_event_alloc.part.0+0xd96/0x2b70 [ 1743.053606] __do_sys_perf_event_open+0x579/0x2e60 [ 1743.054751] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1743.055879] ? perf_event_set_output+0x5b0/0x5b0 [ 1743.056973] ? wait_for_completion_io+0x270/0x270 [ 1743.058120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1743.059328] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1743.060536] do_syscall_64+0x33/0x40 [ 1743.061397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1743.062585] RIP: 0033:0x7fcf367ecb19 [ 1743.063443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.067705] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1743.069465] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1743.071114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1743.072765] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.074411] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1743.076060] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:30:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:30:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:30:41 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20001c000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:30:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 77) [ 1743.202390] FAULT_INJECTION: forcing a failure. [ 1743.202390] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.205062] CPU: 1 PID: 11056 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1743.206713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1743.208650] Call Trace: [ 1743.209263] dump_stack+0x107/0x167 [ 1743.210111] should_fail.cold+0x5/0xa [ 1743.210994] ? create_object.isra.0+0x3a/0xa30 [ 1743.212057] should_failslab+0x5/0x20 [ 1743.212935] kmem_cache_alloc+0x5b/0x310 [ 1743.213871] ? mark_held_locks+0x9e/0xe0 [ 1743.214816] create_object.isra.0+0x3a/0xa30 [ 1743.215838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1743.217040] kmem_cache_alloc_trace+0x151/0x320 [ 1743.218134] register_for_each_vma+0x476/0xc00 [ 1743.219218] __uprobe_register+0x4df/0x880 [ 1743.220235] probe_event_enable+0x3c4/0xba0 [ 1743.221236] ? uprobe_perf_close+0x5f0/0x5f0 [ 1743.222263] trace_uprobe_register+0x54/0x730 [ 1743.223316] perf_trace_event_init+0x554/0x9c0 [ 1743.224390] perf_uprobe_init+0x173/0x210 [ 1743.225361] perf_uprobe_event_init+0xff/0x190 [ 1743.226418] perf_try_init_event+0x130/0x570 [ 1743.227441] perf_event_alloc.part.0+0xd96/0x2b70 [ 1743.228584] __do_sys_perf_event_open+0x579/0x2e60 [ 1743.229731] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1743.230854] ? perf_event_set_output+0x5b0/0x5b0 [ 1743.231951] ? wait_for_completion_io+0x270/0x270 [ 1743.233099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1743.234315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1743.235515] do_syscall_64+0x33/0x40 [ 1743.236390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1743.237579] RIP: 0033:0x7fc9de03eb19 [ 1743.238442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.242716] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1743.244488] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1743.246132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1743.247790] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.249439] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1743.251093] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 [ 1743.264852] FAULT_INJECTION: forcing a failure. [ 1743.264852] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.267435] CPU: 1 PID: 11058 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1743.269039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1743.270946] Call Trace: [ 1743.271552] dump_stack+0x107/0x167 [ 1743.272402] should_fail.cold+0x5/0xa [ 1743.273286] ? register_for_each_vma+0x476/0xc00 [ 1743.274373] should_failslab+0x5/0x20 [ 1743.275251] kmem_cache_alloc_trace+0x55/0x320 [ 1743.276322] register_for_each_vma+0x476/0xc00 [ 1743.277398] __uprobe_register+0x4df/0x880 [ 1743.278394] probe_event_enable+0x3c4/0xba0 [ 1743.279386] ? uprobe_perf_close+0x5f0/0x5f0 [ 1743.280418] trace_uprobe_register+0x54/0x730 [ 1743.281474] perf_trace_event_init+0x554/0x9c0 [ 1743.282539] perf_uprobe_init+0x173/0x210 [ 1743.283501] perf_uprobe_event_init+0xff/0x190 [ 1743.284565] perf_try_init_event+0x130/0x570 [ 1743.285585] perf_event_alloc.part.0+0xd96/0x2b70 [ 1743.286711] __do_sys_perf_event_open+0x579/0x2e60 [ 1743.287859] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1743.288967] ? perf_event_set_output+0x5b0/0x5b0 [ 1743.290053] ? wait_for_completion_io+0x270/0x270 [ 1743.291195] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1743.292406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1743.293598] do_syscall_64+0x33/0x40 [ 1743.294457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1743.295634] RIP: 0033:0x7f27a2558b19 [ 1743.296473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.300654] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1743.302341] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1743.303958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1743.305559] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.307168] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1743.308786] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:30:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:30:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 78) 18:30:55 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 77) 18:30:55 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200020000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:30:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=']) 18:30:55 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 90) 18:30:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:30:55 executing program 5: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000140), 0xc, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="1000000000000000000002000000600001800800030003000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="080003000300010018000180140002006272696467655f736c6176655f3000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x8044891) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x2) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) signalfd(r2, &(0x7f0000000300)={[0x4]}, 0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x70a12) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r3) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x801) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 1757.368890] FAULT_INJECTION: forcing a failure. [ 1757.368890] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.370442] CPU: 1 PID: 11065 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1757.371330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1757.372401] Call Trace: [ 1757.372758] dump_stack+0x107/0x167 [ 1757.373230] should_fail.cold+0x5/0xa [ 1757.373740] ? ___slab_alloc+0x155/0x700 [ 1757.374261] ? create_object.isra.0+0x3a/0xa30 [ 1757.374865] should_failslab+0x5/0x20 [ 1757.375353] kmem_cache_alloc+0x5b/0x310 [ 1757.375911] create_object.isra.0+0x3a/0xa30 [ 1757.376489] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1757.377166] kmem_cache_alloc_trace+0x151/0x320 [ 1757.377816] register_for_each_vma+0x476/0xc00 [ 1757.378447] __uprobe_register+0x4df/0x880 [ 1757.379033] probe_event_enable+0x3c4/0xba0 [ 1757.379606] ? uprobe_perf_close+0x5f0/0x5f0 [ 1757.380210] trace_uprobe_register+0x54/0x730 [ 1757.380816] perf_trace_event_init+0x554/0x9c0 [ 1757.381449] perf_uprobe_init+0x173/0x210 [ 1757.382005] perf_uprobe_event_init+0xff/0x190 [ 1757.382618] perf_try_init_event+0x130/0x570 [ 1757.383204] perf_event_alloc.part.0+0xd96/0x2b70 [ 1757.383881] __do_sys_perf_event_open+0x579/0x2e60 [ 1757.384545] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1757.385200] ? perf_event_set_output+0x5b0/0x5b0 [ 1757.385824] ? wait_for_completion_io+0x270/0x270 [ 1757.386523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1757.387217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1757.387924] do_syscall_64+0x33/0x40 [ 1757.388419] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1757.389106] RIP: 0033:0x7f27a2558b19 [ 1757.389598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1757.392032] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1757.393036] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1757.393969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1757.394911] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.395855] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1757.396791] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:30:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1757.468013] FAULT_INJECTION: forcing a failure. [ 1757.468013] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.470613] CPU: 0 PID: 11068 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1757.472230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1757.474136] Call Trace: [ 1757.474758] dump_stack+0x107/0x167 [ 1757.475592] should_fail.cold+0x5/0xa [ 1757.476503] ? register_for_each_vma+0x476/0xc00 [ 1757.477596] should_failslab+0x5/0x20 [ 1757.478483] kmem_cache_alloc_trace+0x55/0x320 [ 1757.479546] register_for_each_vma+0x476/0xc00 [ 1757.480639] __uprobe_register+0x4df/0x880 [ 1757.481740] probe_event_enable+0x3c4/0xba0 [ 1757.483155] ? uprobe_perf_close+0x5f0/0x5f0 [ 1757.484473] trace_uprobe_register+0x54/0x730 [ 1757.485800] perf_trace_event_init+0x554/0x9c0 [ 1757.487149] perf_uprobe_init+0x173/0x210 [ 1757.488207] perf_uprobe_event_init+0xff/0x190 [ 1757.489274] perf_try_init_event+0x130/0x570 [ 1757.490301] perf_event_alloc.part.0+0xd96/0x2b70 [ 1757.491432] __do_sys_perf_event_open+0x579/0x2e60 [ 1757.492576] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1757.493714] ? perf_event_set_output+0x5b0/0x5b0 [ 1757.494814] ? wait_for_completion_io+0x270/0x270 [ 1757.495971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1757.497190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1757.498383] do_syscall_64+0x33/0x40 [ 1757.499251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1757.500446] RIP: 0033:0x7fc9de03eb19 [ 1757.501324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1757.505554] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1757.507321] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1757.508986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1757.510628] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.512284] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1757.513940] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:30:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:30:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:30:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/4096, 0x1000) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x1) getdents64(r0, 0x0, 0x0) 18:30:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=']) [ 1757.664939] FAULT_INJECTION: forcing a failure. [ 1757.664939] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.667299] CPU: 0 PID: 11078 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1757.668692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1757.670349] Call Trace: [ 1757.670887] dump_stack+0x107/0x167 [ 1757.671621] should_fail.cold+0x5/0xa [ 1757.672396] ? create_object.isra.0+0x3a/0xa30 [ 1757.673315] should_failslab+0x5/0x20 [ 1757.674080] kmem_cache_alloc+0x5b/0x310 [ 1757.674896] ? mark_held_locks+0x9e/0xe0 [ 1757.675723] create_object.isra.0+0x3a/0xa30 [ 1757.676612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1757.677636] kmem_cache_alloc_trace+0x151/0x320 [ 1757.678583] register_for_each_vma+0x476/0xc00 [ 1757.679520] __uprobe_register+0x4df/0x880 [ 1757.680404] probe_event_enable+0x3c4/0xba0 [ 1757.681277] ? uprobe_perf_close+0x5f0/0x5f0 [ 1757.682219] trace_uprobe_register+0x54/0x730 [ 1757.683139] perf_trace_event_init+0x554/0x9c0 [ 1757.684085] perf_uprobe_init+0x173/0x210 [ 1757.684930] perf_uprobe_event_init+0xff/0x190 [ 1757.685845] perf_try_init_event+0x130/0x570 [ 1757.686735] perf_event_alloc.part.0+0xd96/0x2b70 [ 1757.687723] __do_sys_perf_event_open+0x579/0x2e60 [ 1757.688738] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1757.689717] ? perf_event_set_output+0x5b0/0x5b0 [ 1757.690664] ? wait_for_completion_io+0x270/0x270 [ 1757.691668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1757.692731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1757.693779] do_syscall_64+0x33/0x40 [ 1757.694537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1757.695578] RIP: 0033:0x7fcf367ecb19 [ 1757.696336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1757.700394] RSP: 002b:00007fcf33d41188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1757.701966] RAX: ffffffffffffffda RBX: 00007fcf36900020 RCX: 00007fcf367ecb19 [ 1757.703399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1757.704833] RBP: 00007fcf33d411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.706260] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1757.707687] R13: 00007ffe161fc7bf R14: 00007fcf33d41300 R15: 0000000000022000 18:31:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:31:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 91) 18:31:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX]) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xfff, 0x501a02) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x80) 18:31:08 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20003f000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:31:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:31:08 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 78) 18:31:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 79) [ 1770.173125] FAULT_INJECTION: forcing a failure. [ 1770.173125] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.174525] CPU: 1 PID: 11117 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1770.175313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.176267] Call Trace: [ 1770.176578] dump_stack+0x107/0x167 [ 1770.177004] should_fail.cold+0x5/0xa [ 1770.177455] ? register_for_each_vma+0x476/0xc00 [ 1770.178003] should_failslab+0x5/0x20 [ 1770.178451] kmem_cache_alloc_trace+0x55/0x320 18:31:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1770.179070] register_for_each_vma+0x476/0xc00 [ 1770.179689] __uprobe_register+0x4df/0x880 [ 1770.180190] probe_event_enable+0x3c4/0xba0 [ 1770.180676] ? uprobe_perf_close+0x5f0/0x5f0 [ 1770.181180] trace_uprobe_register+0x54/0x730 [ 1770.181705] perf_trace_event_init+0x554/0x9c0 [ 1770.182240] perf_uprobe_init+0x173/0x210 [ 1770.182724] perf_uprobe_event_init+0xff/0x190 [ 1770.183237] perf_try_init_event+0x130/0x570 [ 1770.183743] perf_event_alloc.part.0+0xd96/0x2b70 [ 1770.184304] __do_sys_perf_event_open+0x579/0x2e60 [ 1770.184863] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1770.185418] ? perf_event_set_output+0x5b0/0x5b0 [ 1770.185958] ? wait_for_completion_io+0x270/0x270 [ 1770.186525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.187123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.187710] do_syscall_64+0x33/0x40 [ 1770.188146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.188729] RIP: 0033:0x7f27a2558b19 [ 1770.189154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.191249] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1770.192131] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1770.192949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1770.193772] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.194579] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1770.195382] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:31:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800}]}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="9a6a926274e1398d9be87825385bea4dd30e7752fd78b1ef2b7c8edd07ffce84a71d21033f12483c77bb203f4e4afbd9a4b963ec89d56226f2b59ad8c98fd9ffd355e8cf337e7803ab9d7670f976b903a6864f19a3db1373e470e5f03420b1254be1201b38341f70c9310dc80df677cc565a520db2ea3a659a6c72f3547757db98ecf8e4fba7da59bbca89da00c1b4f6a12976522e8948b9147153"], 0xd7) close(r4) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x2, 0x0, r4, &(0x7f0000000300), &(0x7f0000000040)='./file1\x00', 0x4, 0x800, 0x1}, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, r8, 0x0) r9 = open(&(0x7f0000000440)='./file0\x00', 0x100, 0x48) connect$inet6(r9, &(0x7f0000000480)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0x1}, 0x1c) connect$unix(r5, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1770.259478] FAULT_INJECTION: forcing a failure. [ 1770.259478] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.260791] CPU: 1 PID: 11113 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1770.261566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.262509] Call Trace: [ 1770.262815] dump_stack+0x107/0x167 [ 1770.263232] should_fail.cold+0x5/0xa [ 1770.263673] ? register_for_each_vma+0x476/0xc00 [ 1770.264221] should_failslab+0x5/0x20 [ 1770.264664] kmem_cache_alloc_trace+0x55/0x320 [ 1770.265190] register_for_each_vma+0x476/0xc00 [ 1770.265731] __uprobe_register+0x4df/0x880 [ 1770.266222] probe_event_enable+0x3c4/0xba0 [ 1770.266712] ? uprobe_perf_close+0x5f0/0x5f0 [ 1770.267214] trace_uprobe_register+0x54/0x730 [ 1770.267730] perf_trace_event_init+0x554/0x9c0 [ 1770.268257] perf_uprobe_init+0x173/0x210 [ 1770.268737] perf_uprobe_event_init+0xff/0x190 [ 1770.269257] perf_try_init_event+0x130/0x570 [ 1770.269754] perf_event_alloc.part.0+0xd96/0x2b70 [ 1770.270308] __do_sys_perf_event_open+0x579/0x2e60 [ 1770.270865] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1770.271407] ? perf_event_set_output+0x5b0/0x5b0 [ 1770.271938] ? wait_for_completion_io+0x270/0x270 [ 1770.272514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.273104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.273684] do_syscall_64+0x33/0x40 [ 1770.274102] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.274685] RIP: 0033:0x7fcf367ecb19 [ 1770.275112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.277210] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1770.278083] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1770.278899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1770.279711] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.280536] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1770.281347] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:31:08 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200040000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1770.304543] FAULT_INJECTION: forcing a failure. [ 1770.304543] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.305931] CPU: 1 PID: 11121 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1770.306721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 18:31:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=']) [ 1770.307664] Call Trace: [ 1770.308166] dump_stack+0x107/0x167 [ 1770.308618] should_fail.cold+0x5/0xa [ 1770.309054] ? create_object.isra.0+0x3a/0xa30 [ 1770.309580] should_failslab+0x5/0x20 [ 1770.310009] kmem_cache_alloc+0x5b/0x310 [ 1770.310478] ? mark_held_locks+0x9e/0xe0 [ 1770.310947] create_object.isra.0+0x3a/0xa30 [ 1770.311447] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.312039] kmem_cache_alloc_trace+0x151/0x320 [ 1770.312574] register_for_each_vma+0x476/0xc00 [ 1770.313107] __uprobe_register+0x4df/0x880 [ 1770.313603] probe_event_enable+0x3c4/0xba0 [ 1770.314098] ? uprobe_perf_close+0x5f0/0x5f0 [ 1770.314609] trace_uprobe_register+0x54/0x730 [ 1770.315124] perf_trace_event_init+0x554/0x9c0 [ 1770.315647] perf_uprobe_init+0x173/0x210 [ 1770.316132] perf_uprobe_event_init+0xff/0x190 [ 1770.316646] perf_try_init_event+0x130/0x570 [ 1770.317152] perf_event_alloc.part.0+0xd96/0x2b70 [ 1770.317698] __do_sys_perf_event_open+0x579/0x2e60 [ 1770.318263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1770.318806] ? perf_event_set_output+0x5b0/0x5b0 [ 1770.319346] ? wait_for_completion_io+0x270/0x270 [ 1770.319902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.320505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.321091] do_syscall_64+0x33/0x40 [ 1770.321512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.322099] RIP: 0033:0x7fc9de03eb19 [ 1770.322528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.324638] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1770.325511] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1770.326329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1770.327141] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.327954] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1770.328781] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:31:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:31:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 80) [ 1770.434018] FAULT_INJECTION: forcing a failure. [ 1770.434018] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.435360] CPU: 1 PID: 11141 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1770.436143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.437092] Call Trace: [ 1770.437398] dump_stack+0x107/0x167 [ 1770.437820] should_fail.cold+0x5/0xa [ 1770.438254] ? create_object.isra.0+0x3a/0xa30 [ 1770.438771] should_failslab+0x5/0x20 [ 1770.439211] kmem_cache_alloc+0x5b/0x310 [ 1770.439677] ? mark_held_locks+0x9e/0xe0 [ 1770.440145] create_object.isra.0+0x3a/0xa30 [ 1770.440646] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.441225] kmem_cache_alloc_trace+0x151/0x320 [ 1770.441763] register_for_each_vma+0x476/0xc00 [ 1770.442296] __uprobe_register+0x4df/0x880 [ 1770.442784] probe_event_enable+0x3c4/0xba0 [ 1770.443276] ? uprobe_perf_close+0x5f0/0x5f0 [ 1770.443783] trace_uprobe_register+0x54/0x730 [ 1770.444314] perf_trace_event_init+0x554/0x9c0 [ 1770.444845] perf_uprobe_init+0x173/0x210 [ 1770.445330] perf_uprobe_event_init+0xff/0x190 [ 1770.445856] perf_try_init_event+0x130/0x570 [ 1770.446358] perf_event_alloc.part.0+0xd96/0x2b70 [ 1770.446921] __do_sys_perf_event_open+0x579/0x2e60 [ 1770.447491] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1770.448054] ? perf_event_set_output+0x5b0/0x5b0 [ 1770.448596] ? wait_for_completion_io+0x270/0x270 [ 1770.449161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.449758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.450342] do_syscall_64+0x33/0x40 [ 1770.450772] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.451350] RIP: 0033:0x7f27a2558b19 [ 1770.451780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.453874] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1770.454734] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1770.455553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1770.456374] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.457187] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1770.457990] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:31:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5424, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 92) 18:31:08 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 79) 18:31:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:31:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5425, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:08 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200068000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1770.556880] FAULT_INJECTION: forcing a failure. [ 1770.556880] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.558213] CPU: 1 PID: 11149 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1770.559004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.559949] Call Trace: [ 1770.560263] dump_stack+0x107/0x167 [ 1770.560680] should_fail.cold+0x5/0xa [ 1770.561111] ? register_for_each_vma+0x476/0xc00 [ 1770.561646] should_failslab+0x5/0x20 [ 1770.562075] kmem_cache_alloc_trace+0x55/0x320 [ 1770.562604] register_for_each_vma+0x476/0xc00 [ 1770.563138] __uprobe_register+0x4df/0x880 [ 1770.563631] probe_event_enable+0x3c4/0xba0 [ 1770.564139] ? uprobe_perf_close+0x5f0/0x5f0 [ 1770.564642] trace_uprobe_register+0x54/0x730 [ 1770.565165] perf_trace_event_init+0x554/0x9c0 [ 1770.565699] perf_uprobe_init+0x173/0x210 [ 1770.566178] perf_uprobe_event_init+0xff/0x190 [ 1770.566703] perf_try_init_event+0x130/0x570 [ 1770.567208] perf_event_alloc.part.0+0xd96/0x2b70 [ 1770.567769] __do_sys_perf_event_open+0x579/0x2e60 [ 1770.568345] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1770.568894] ? perf_event_set_output+0x5b0/0x5b0 [ 1770.569434] ? wait_for_completion_io+0x270/0x270 [ 1770.570008] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.570618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.571206] do_syscall_64+0x33/0x40 [ 1770.571644] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.572232] RIP: 0033:0x7fc9de03eb19 [ 1770.572659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.574738] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1770.575614] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1770.576428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1770.577233] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.578033] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1770.578841] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 [ 1770.630403] FAULT_INJECTION: forcing a failure. [ 1770.630403] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.631754] CPU: 1 PID: 11158 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1770.632541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.633476] Call Trace: [ 1770.633784] dump_stack+0x107/0x167 [ 1770.634204] should_fail.cold+0x5/0xa [ 1770.634648] ? create_object.isra.0+0x3a/0xa30 [ 1770.635177] should_failslab+0x5/0x20 [ 1770.635617] kmem_cache_alloc+0x5b/0x310 [ 1770.636096] ? mark_held_locks+0x9e/0xe0 [ 1770.636572] create_object.isra.0+0x3a/0xa30 [ 1770.637077] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.637655] kmem_cache_alloc_trace+0x151/0x320 [ 1770.638194] register_for_each_vma+0x476/0xc00 [ 1770.638732] __uprobe_register+0x4df/0x880 [ 1770.639225] probe_event_enable+0x3c4/0xba0 [ 1770.639718] ? uprobe_perf_close+0x5f0/0x5f0 [ 1770.640239] trace_uprobe_register+0x54/0x730 [ 1770.640756] perf_trace_event_init+0x554/0x9c0 [ 1770.641283] perf_uprobe_init+0x173/0x210 [ 1770.641760] perf_uprobe_event_init+0xff/0x190 [ 1770.642278] perf_try_init_event+0x130/0x570 [ 1770.642773] perf_event_alloc.part.0+0xd96/0x2b70 [ 1770.643328] __do_sys_perf_event_open+0x579/0x2e60 [ 1770.643885] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1770.644440] ? perf_event_set_output+0x5b0/0x5b0 [ 1770.644978] ? wait_for_completion_io+0x270/0x270 [ 1770.645540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1770.646136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1770.646723] do_syscall_64+0x33/0x40 [ 1770.647150] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.647730] RIP: 0033:0x7fcf367ecb19 [ 1770.648162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.650247] RSP: 002b:00007fcf33d41188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1770.651119] RAX: ffffffffffffffda RBX: 00007fcf36900020 RCX: 00007fcf367ecb19 [ 1770.651932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1770.652750] RBP: 00007fcf33d411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.653562] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1770.654370] R13: 00007ffe161fc7bf R14: 00007fcf33d41300 R15: 0000000000022000 18:31:23 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200480000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:31:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=']) 18:31:23 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 93) 18:31:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 81) 18:31:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:31:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="00f18ae2ff010000000000005343f4861d30a758d9340d50b21eae616aff528e30d72d2419321b78a3", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00'], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x500, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000054) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001540), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140800000002000013000000000000000000000006000b002900f04a38d859ae7c110ff859f800001cb0d42f231757ed33f4762f8b45c10c5ae7af23130858066b086cdf3f1bbac4722fe618db351c2359499eda54d029f5f3d829aec4d156798343c648e7c581afaa705584aec75506afdd4895b2445cc425f734"], 0x30}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000090000000c00018008000100ee6491ffc8c408f1538dba4f65c52d9f8ae1f6968e5e3c170f8857e34d0943325fe1253d93a04158cd294ffa3ecabe12e3617a47f5c65a8f74cc404637f923f2", @ANYRES32=r9, @ANYBLOB], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a80)={0x1c4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7f}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_OURS={0x17c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x40, 0x5, "d8118b2729ea6003c8c1749c315eee0f429b0c6cc7e9ec0113875513c0bab7d68e7665854567cbb39aefb8584868d7ead4071e9ab0ac09021f1fb099"}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')&}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'syz_tun\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',&\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_MASK={0xb3, 0x5, "dc8d46daec16d9d8a383354ccd0c97d9dce52573bd01f3340ae07ef5d0c05553eec4e5018093903ee1d15329b82adcf9b0a194620f02fe9dedebc5fb2d9cb8a1d742204bd91c50a7886074075d8c7c4889c6f0c9af1dac1549652dd4bf031e7274b6bd62d5a449e5586d25e544f46594614e9f46bfe521bfd5c454b004977f0a1cb4ce684be2e0426f37ae55446f3e15787d1e14c88719acc95f9ee64ea713c67a7aed0875e79a1292b0d1cd831c39"}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0xff83}, 0x1, 0x0, 0x0, 0x4009001}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) 18:31:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5427, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 80) [ 1785.130496] FAULT_INJECTION: forcing a failure. [ 1785.130496] name failslab, interval 1, probability 0, space 0, times 0 18:31:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) [ 1785.133095] CPU: 1 PID: 11176 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1785.134756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1785.136554] Call Trace: [ 1785.137120] dump_stack+0x107/0x167 [ 1785.137901] should_fail.cold+0x5/0xa [ 1785.138718] ? register_for_each_vma+0x476/0xc00 [ 1785.139729] should_failslab+0x5/0x20 [ 1785.140569] kmem_cache_alloc_trace+0x55/0x320 [ 1785.141549] register_for_each_vma+0x476/0xc00 [ 1785.142539] __uprobe_register+0x4df/0x880 [ 1785.143460] probe_event_enable+0x3c4/0xba0 [ 1785.144398] ? uprobe_perf_close+0x5f0/0x5f0 [ 1785.145337] trace_uprobe_register+0x54/0x730 [ 1785.146307] perf_trace_event_init+0x554/0x9c0 [ 1785.147295] perf_uprobe_init+0x173/0x210 [ 1785.148219] perf_uprobe_event_init+0xff/0x190 [ 1785.149192] perf_try_init_event+0x130/0x570 [ 1785.150133] perf_event_alloc.part.0+0xd96/0x2b70 [ 1785.151174] __do_sys_perf_event_open+0x579/0x2e60 [ 1785.152260] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1785.153284] ? perf_event_set_output+0x5b0/0x5b0 [ 1785.154282] ? wait_for_completion_io+0x270/0x270 [ 1785.155343] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1785.156483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1785.157579] do_syscall_64+0x33/0x40 [ 1785.158366] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.159450] RIP: 0033:0x7f27a2558b19 [ 1785.160259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1785.164169] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1785.165799] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1785.167307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1785.168841] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.170347] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1785.171857] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 1785.280688] FAULT_INJECTION: forcing a failure. [ 1785.280688] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.283112] CPU: 0 PID: 11169 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1785.284570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1785.286321] Call Trace: [ 1785.286879] dump_stack+0x107/0x167 [ 1785.287654] should_fail.cold+0x5/0xa [ 1785.288470] ? register_for_each_vma+0x476/0xc00 [ 1785.289469] should_failslab+0x5/0x20 [ 1785.290270] kmem_cache_alloc_trace+0x55/0x320 [ 1785.291249] register_for_each_vma+0x476/0xc00 [ 1785.292259] __uprobe_register+0x4df/0x880 [ 1785.293172] probe_event_enable+0x3c4/0xba0 [ 1785.294086] ? uprobe_perf_close+0x5f0/0x5f0 [ 1785.295019] trace_uprobe_register+0x54/0x730 [ 1785.295983] perf_trace_event_init+0x554/0x9c0 [ 1785.296975] perf_uprobe_init+0x173/0x210 [ 1785.297854] perf_uprobe_event_init+0xff/0x190 [ 1785.298817] perf_try_init_event+0x130/0x570 [ 1785.299746] perf_event_alloc.part.0+0xd96/0x2b70 [ 1785.300789] __do_sys_perf_event_open+0x579/0x2e60 [ 1785.301838] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1785.302852] ? perf_event_set_output+0x5b0/0x5b0 [ 1785.303863] ? wait_for_completion_io+0x270/0x270 [ 1785.304913] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1785.306017] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1785.307110] do_syscall_64+0x33/0x40 [ 1785.307894] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.308981] RIP: 0033:0x7fcf367ecb19 [ 1785.309761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1785.313651] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1785.315254] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1785.316763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1785.318272] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.319779] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1785.321295] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 [ 1785.352308] FAULT_INJECTION: forcing a failure. [ 1785.352308] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.354778] CPU: 1 PID: 11184 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1785.356272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1785.358032] Call Trace: [ 1785.358598] dump_stack+0x107/0x167 [ 1785.359377] should_fail.cold+0x5/0xa [ 1785.360220] ? create_object.isra.0+0x3a/0xa30 [ 1785.361203] should_failslab+0x5/0x20 [ 1785.362015] kmem_cache_alloc+0x5b/0x310 [ 1785.362883] ? mark_held_locks+0x9e/0xe0 [ 1785.363751] create_object.isra.0+0x3a/0xa30 [ 1785.364710] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1785.365801] kmem_cache_alloc_trace+0x151/0x320 [ 1785.366798] register_for_each_vma+0x476/0xc00 [ 1785.367792] __uprobe_register+0x4df/0x880 [ 1785.368735] probe_event_enable+0x3c4/0xba0 [ 1785.369649] ? uprobe_perf_close+0x5f0/0x5f0 [ 1785.370586] trace_uprobe_register+0x54/0x730 [ 1785.371558] perf_trace_event_init+0x554/0x9c0 [ 1785.372558] perf_uprobe_init+0x173/0x210 [ 1785.373446] perf_uprobe_event_init+0xff/0x190 [ 1785.374411] perf_try_init_event+0x130/0x570 [ 1785.375362] perf_event_alloc.part.0+0xd96/0x2b70 [ 1785.376427] __do_sys_perf_event_open+0x579/0x2e60 [ 1785.377484] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1785.378510] ? perf_event_set_output+0x5b0/0x5b0 [ 1785.379507] ? wait_for_completion_io+0x270/0x270 [ 1785.380591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1785.381704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1785.382803] do_syscall_64+0x33/0x40 [ 1785.383594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.384702] RIP: 0033:0x7fc9de03eb19 [ 1785.385493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1785.389401] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1785.391013] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1785.392553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1785.394062] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.395573] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1785.397110] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:31:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:38 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f0000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:31:38 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 81) 18:31:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=']) 18:31:38 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x80, 0x0, 0x4, 0x0, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcbbf9798ca4b17ed, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x62, 0x7, 0x3f, 0xa6, 0x0, 0xfffffffffffffc00, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x80, 0x6}, 0x20, 0x101, 0x2, 0x2, 0x1, 0x6, 0xffff, 0x0, 0x3f, 0x0, 0xfffffffffffffffa}, 0x0, 0xa, r1, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) r4 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x900c3, 0xc) quotactl(0x1, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)="d60a2419ac31ed55215da2d0a9c41bb285f83e1edf44de09757f2a868e24d6afe9551035cb81bb774c61c66e223939413660ae94b6e45829f0b59826") r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) open$dir(&(0x7f0000000040)='./file0\x00', 0x880, 0x118) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000000000000000008100005d0000000000004aca450bb027513ff2d094daa4911f2b9f45a9b1b4e95a3eedfb2502718dbd965ea43140abe0ab5d48318a09ac97ea7be0bb90fc5ce2051f50878870a43f4ef8aa5a25181c00dbb99007ed68d7213201eca0268a4e303547", @ANYRES32=r6], 0x38}}], 0x1, 0x0) 18:31:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) 18:31:38 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 94) 18:31:38 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 82) [ 1800.233379] FAULT_INJECTION: forcing a failure. [ 1800.233379] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.235973] CPU: 1 PID: 11198 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1800.237588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1800.239487] Call Trace: [ 1800.240103] dump_stack+0x107/0x167 [ 1800.240957] should_fail.cold+0x5/0xa [ 1800.241840] ? register_for_each_vma+0x476/0xc00 [ 1800.242930] should_failslab+0x5/0x20 [ 1800.243792] kmem_cache_alloc_trace+0x55/0x320 [ 1800.244868] register_for_each_vma+0x476/0xc00 [ 1800.245956] __uprobe_register+0x4df/0x880 [ 1800.246954] probe_event_enable+0x3c4/0xba0 [ 1800.247948] ? uprobe_perf_close+0x5f0/0x5f0 [ 1800.248991] trace_uprobe_register+0x54/0x730 [ 1800.250030] perf_trace_event_init+0x554/0x9c0 [ 1800.251097] perf_uprobe_init+0x173/0x210 [ 1800.252087] perf_uprobe_event_init+0xff/0x190 [ 1800.253163] perf_try_init_event+0x130/0x570 [ 1800.254185] perf_event_alloc.part.0+0xd96/0x2b70 [ 1800.255322] __do_sys_perf_event_open+0x579/0x2e60 [ 1800.256456] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1800.257560] ? perf_event_set_output+0x5b0/0x5b0 [ 1800.258626] ? wait_for_completion_io+0x270/0x270 [ 1800.259769] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1800.260984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1800.262185] do_syscall_64+0x33/0x40 [ 1800.263042] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1800.264223] RIP: 0033:0x7fc9de03eb19 [ 1800.265089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1800.269321] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1800.271070] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1800.272721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1800.274350] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1800.275969] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1800.277563] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:31:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) 18:31:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1800.365565] FAULT_INJECTION: forcing a failure. [ 1800.365565] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.368224] CPU: 1 PID: 11201 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1800.369793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1800.371647] Call Trace: [ 1800.372240] dump_stack+0x107/0x167 [ 1800.373065] should_fail.cold+0x5/0xa [ 1800.373926] ? create_object.isra.0+0x3a/0xa30 [ 1800.374974] should_failslab+0x5/0x20 [ 1800.375823] kmem_cache_alloc+0x5b/0x310 [ 1800.376749] ? mark_held_locks+0x9e/0xe0 [ 1800.377669] create_object.isra.0+0x3a/0xa30 [ 1800.378646] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1800.379789] kmem_cache_alloc_trace+0x151/0x320 [ 1800.380860] register_for_each_vma+0x476/0xc00 [ 1800.381924] __uprobe_register+0x4df/0x880 [ 1800.382903] probe_event_enable+0x3c4/0xba0 [ 1800.383887] ? uprobe_perf_close+0x5f0/0x5f0 [ 1800.384905] trace_uprobe_register+0x54/0x730 [ 1800.385940] perf_trace_event_init+0x554/0x9c0 [ 1800.386994] perf_uprobe_init+0x173/0x210 [ 1800.387947] perf_uprobe_event_init+0xff/0x190 [ 1800.388994] perf_try_init_event+0x130/0x570 [ 1800.389993] perf_event_alloc.part.0+0xd96/0x2b70 [ 1800.391108] __do_sys_perf_event_open+0x579/0x2e60 [ 1800.392236] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1800.393345] ? perf_event_set_output+0x5b0/0x5b0 [ 1800.394418] ? wait_for_completion_io+0x270/0x270 [ 1800.395549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1800.396750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1800.397927] do_syscall_64+0x33/0x40 [ 1800.398778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1800.399941] RIP: 0033:0x7f27a2558b19 [ 1800.400796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1800.404981] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1800.406714] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1800.408342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1800.409963] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1800.411583] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1800.413209] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:31:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:31:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:38 executing program 5: add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000240)="140e993b8ccc9d3a5dfe23dc1dbce7146baecd2989a24276260538c3c5165978dc2d3cdb5828954fafac0bd4bfd072d8d8adf1d9c428e7f973167763f2f41fdd41978427eb50939fb09f3341ca87de9d288d88eca2feb6539460ce538411e2331bd48b30bc077fadc4eeca54acf9cecc899e36aaed1dee6029b07e071c5cbc5d8a34492bb7dabbd925820b40afca7c3bfd6cb9d56898baec34912bf95e0d8d9348f2eb1b0a7d69affff8f336db5bd9427eb45c3fe626232cd46ac47c1a8d64d0c2a1e850a775a530d556f4b053b51bc8daa8e2b80c63d9c4f12eb41a96f26c739e19864ad7e52611d1df87f435e9ac40809ee119d7dd", 0xf6, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000340)='syz', 0x0) r1 = add_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$update(0x2, r1, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x2f, &(0x7f00000001c0), 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000040)=0xffffffffffffffc9) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x4005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000180), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r4) r5 = add_key(&(0x7f0000000280)='id_resolver\x00', 0x0, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000002c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r5) add_key(&(0x7f0000000480)='logon\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r5) 18:31:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1800.502697] 9pnet: Insufficient options for proto=fd [ 1800.513193] 9pnet: Insufficient options for proto=fd [ 1800.544909] FAULT_INJECTION: forcing a failure. [ 1800.544909] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.547474] CPU: 1 PID: 11212 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1800.549052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1800.550935] Call Trace: [ 1800.550963] dump_stack+0x107/0x167 [ 1800.550988] should_fail.cold+0x5/0xa [ 1800.551013] ? create_object.isra.0+0x3a/0xa30 [ 1800.551033] should_failslab+0x5/0x20 [ 1800.551053] kmem_cache_alloc+0x5b/0x310 [ 1800.551074] ? mark_held_locks+0x9e/0xe0 [ 1800.551101] create_object.isra.0+0x3a/0xa30 [ 1800.551119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1800.551149] kmem_cache_alloc_trace+0x151/0x320 [ 1800.551182] register_for_each_vma+0x476/0xc00 [ 1800.551227] __uprobe_register+0x4df/0x880 [ 1800.551267] probe_event_enable+0x3c4/0xba0 [ 1800.551287] ? uprobe_perf_close+0x5f0/0x5f0 [ 1800.551316] trace_uprobe_register+0x54/0x730 [ 1800.551351] perf_trace_event_init+0x554/0x9c0 [ 1800.551385] perf_uprobe_init+0x173/0x210 [ 1800.551414] perf_uprobe_event_init+0xff/0x190 [ 1800.551434] perf_try_init_event+0x130/0x570 [ 1800.551460] perf_event_alloc.part.0+0xd96/0x2b70 [ 1800.551498] __do_sys_perf_event_open+0x579/0x2e60 [ 1800.551529] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1800.551554] ? perf_event_set_output+0x5b0/0x5b0 [ 1800.551571] ? wait_for_completion_io+0x270/0x270 [ 1800.551624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1800.551646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1800.551672] do_syscall_64+0x33/0x40 [ 1800.551703] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1800.579138] RIP: 0033:0x7fcf367ecb19 [ 1800.579158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1800.579178] RSP: 002b:00007fcf33d41188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1800.585851] RAX: ffffffffffffffda RBX: 00007fcf36900020 RCX: 00007fcf367ecb19 [ 1800.587464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1800.589082] RBP: 00007fcf33d411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1800.590695] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1800.592315] R13: 00007ffe161fc7bf R14: 00007fcf33d41300 R15: 0000000000022000 18:31:39 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000080002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:31:55 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000100002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:31:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:31:55 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 95) 18:31:55 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 82) 18:31:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5450, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:31:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 83) 18:31:55 executing program 5: syz_open_procfs(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="2e2f660e9a34f6c86a0f337763a270c03ae3696c653000"]) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x1, 0x40010, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x23, r3}}, 0x7ff) syz_io_uring_submit(r2, 0x0, &(0x7f00000005c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r1, 0x1, 0x0, 0x7, 0x0, 0x1, {0x0, r3}}, 0x3f) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x6, 0x0, 0x7, 0x1, &(0x7f0000000600)="8510b917648f799ee4f8f5bc0c3c3097a496f86617f2c5e1e28f4f5a135082369afcb3de9e0927ce1cb7d2c721767f83f03d6c3a4b368c837c39a317dc5cb7ce60261173af8bf3032398b62e2c4a9c8b7100cf03f0cd3facfcd73269dd61b7c1f5fee362656ff771fa65a43c0ae6e118049b6fbd969e923b65ca01fdf4ad6c0c28563641133285a65e2f0bcd2ddc1873535a1d1bfb4634a9f93a4291813c1d557960f3f882f7cf7106e57a351888fa40ab77ef62a30fe0af0e0045edd1774941792fab78e0e21015a2eb41cf7e2db0559c9f4b765a0d6bf7b4ee3f00079e13b856e8c113d9d1f656dc7d7783c9cba1d6b489746880a502f3efe50b49aded1e16631f36cfc276c14119d26039bfcf7fb61fb2342eee089ab8b34539144fa81f7af57a06487e205ab1fca7c92ee6939987cdf056e5f6710a56ad8b57f5178ab541ac07fed8bda90badb9d762e7e0d9b6ba4bc7dc3e884cabf6e9c0aca3cae49bf33d2537c2a49227c6f764bda2ec50df23445a3faa38eb3a97e59a746738cc25b15fd6524edf696d438073e5d7425d32d5e5e548ddc95594b0c354c3684eb12f2d30e9e47b98d2bf99493825b402cd796f2943a7034ec8554890de3bb25a45fa991e6d32d96747ec23b7f8b09642f7aa16d3e0ceb144e213d5d39d5d76da34eae1ed423d4a15d8df251dd1a388209d182caac2ee18469a12f3ec082c408769e7ddf284e3842b3649e22e5f61a80e6d81744ce2c8064d2971d8f1c4e2bc45d0aa221cbb333451776a882e84ab95c7a0c395982c1be2ff14085e6f52a3627bd59960dea660d3344c9798c99510c1044b7a5a1bc86b5ec687964002b3c283ab17b13cca04de40cd01ea90efdf7db9dffb7c3f89358c4eb56973095647bfd0f36f877920f839deb460ba574fb86296ddb74f15eecc119e856bedea7d248bc234f92b92fcf658f769bd59b7487983f0b3ea3ca02effedd548d87fbb707ba10316b98f6f6d0ca60d72453a4fae351a45983b5dfe348e2bc978f98351edb8f6a543ae03d36c0a22e1e4c9887204df6a8a52f2a73e3c0b5e39904a81d85f5f6324c43ef3918d9dbb7010150b18d8673d45c982a99255e1e687930be557e3744d331f58aefaa4f75ba8e95d3f14c4329360eaf62547c167328e41bc6e1e766d84b233db58197d5940f4b4f66ae4dbe6d66c2e1dac4dea530fe1793640877ed4debdae2361dd7a51982ed488c9b01362ec82532acdd0eeff33cd4968ba9ed628f4cc62ff7671b98f7e0a6f101b70b12076a6648cf6546976de2f50beb667e3a6ae792093f9fc1deda4ce479119a7c1df0b6c9bebb47659d835e04314b34378f51c4ed44edd7ac665c19267709f77202e1e8e54f6ddd4caadb7dff8addd20ea239c5211bdedbcd587dd0a33e63d04c5d38f38027584e8b8b5e8ec37787a4cc7c848b83c8120d8282186f70c4fe3ca10841465f13ead1dd534a10939665e9cf71319978ac41bc80088bb4ecf7f2f9c50940a902aca6e81db73a9a08afc3312b121a96d94d4d8138affb1486620e18bef19f6a5504c0802dc6c72878ec7ea57ec07275ed616fa9ed2ced73a17c2196fe6df7ced2b2f98adc04258e5574661bb74f51f3252fd4ce98c22338544b3f0e82381bebc6c25940e9ed5727e1e776e8ac35583f17bfdedd4fbca4a127ce85780fdf367b2c59bed15c5884b6b56ded11b5b8462b6834d277e7b381903e22da4a222f5affc49508d67af52b477fbdb7af6bedffe12fddb6ffdcc038c6b3fb3052cd94cb97a0a60d3dc88e625627621d0ba285096c4322e0780df11ac51a99030c2c64ab8fba378224ed715f6cfcf8c0b5446b2882b1f81ae1a2a7c42144f74b60dd11258b1d3e8c250562b51344752d11d5446394d3e2d9ddb8cfd558d6a136f37f21cacfb603c12141ee8394293e8f940eb523ebbe343de95a098dd829c99dfc2bf294cf0e07fa95080b9556b45fd1afce334129c45d92a3ca51bea4143965b25ee0855092877450e51bfb17541b2d16755a834f197c53f1168dec92775895c497199c2b10e284bd8280aabc449bd6fd554dcb116d6267967675db720f3208ee47e4706b5e1511e167eaf06626b9ccc7acb17c111fbbfc247f72e5d2487174b2c163485629ef32fd974aa33dd29f61ae8d287c6d90e035df0c92db56cf38fc8929a34bd31afe6a4615915f1ef665cd3a8b8e3988c4981f2e9b499a75e3f6f032b826541dc21fd5578c8e15b3bc12c94a0306e646a6ec0a497d83336851a855697f0e47e3cc3c216569174e98c06e45f36003ad5e87d80143a35a4df459176b30ac5ffb830f99060b3ca41a217e9fb35d7d6d8c1d7b4fc48a9d93c0725eb749a6a91edc43c66b45b05af4ebc753e76a90c469776eade008acf0d03081796233ec1814c4d843da0c81c7eda6557ee5fe1485198f898c709c61ea60044c286632c56b5d1c9dc466ed439aabf420f6655db03da9d7a58b32e3baa39b2344a155b84effc89d32e378fce601c69ad7b9cf5a10e819926015f8cc82ba3bebdafc5817617dc3a3a8b75fc18227914990b4ac4ab2316fdea407ed7651f997218d31d0bfff69e67dfe2ddd6e8a23c6810a339b965c20a80773fb890fa227c554c9beec7586dede9e86fcb419c2d7dfd95ada6eb407ee887a9b06aca43f6673dc5931d36a62581b83678609fceec502b73afd29ccbfabd4e2ad8b1a8ab8a300c55f18b9f0907e92f8a95bf774c9ed42a704f77bd91efb0cb3b026a0490e70304db2688adae9c29f293d626f015a9b846459b0090642914bf0731c81b3568b55b5d02f0ce21a0729e89d818705a47d7fc6b8ac0a15f108ac76e0eb670ab7a55950185a6c17aca0b2fa7a2d0f83c8d6aea2776fde7c3da98307b6bf377a1363fe5912205f83f13a8434b3429ab64f1354e82076c3456cbf38d5010b2ee64807f30348c2cd9a9296b1db3cc929cede3cea0d4836fe986cb0e5f78daa19f1ddfd1998c98ba85e57cf690e31633e8696eccaf32769109af2bf4b4c3f6722832665b326a893d6e7edbb3a5b858960f2c9d0b592c2cf0f1df5f081a447ff952898285f88ab31fd5c74d5fff2b4cd50720746c8b48171e1f4039754e99f856640e24d10ab08ad5ce5482d32f07fec5815b215bed91e10ae8e4aed6fedb10573b2b4a4d988cd711b39a2a28cdef01c228cfffaa577246fe26a5f87934753ed5601a3383df2157ff5a0bf1fd4f04d4c211765bc8110a3ffc4fcec161821985a35bc849907202bd993ca84426e5b5b90bbc931f11a43c7f81e64090aba0db133ef0c90af17a11096a998a0b9cbd6a967f87270e3fc23f9be208dc83c7e57566facd47269502eaeadff4d98255e18eb06970003a497e14288e5c9467151c9143a2fc130d2d8a5ff7f708218c652f4039f28b4aab7af43eb44ee89295d89de5372ffc2ec60f232d4937f0e87dc6e8fc2256e1f5c5eb969bc36c8597d2ced73ee3dcd0299dc9b82637df768d2d235ebd643af3928c2266b85676164d3c097ddf72c90977c25e2180ae18b10e66660c763bb025277b76c1485e73ddad587853a5a0a96db3ff0c0048fde6072e8e2703c935b522feee5ef32f99149149bcbc38526fd952f87a60a43793edaaebf7b4f5584076b8048090d60d024efe65bd032e167dd54124487a6fa72d4da387b22e3579f3839837a1075c04d1aacaa915d30acb20072a017da34147e55d5cd2e7b36e88465f375ab110bd79e8d1a2ce71b3d14d82270aa73f1fdaa11a21cd6f3cab6051baee06ed495baf91cc2b4ed31519b63ff227560ccadcaf816a8df711fdb28c6a77d41ddffd66e4a69c33bdbbf6dd3fc29ec174c0c65e782e564852018e62b1ed71cc463ff64cfb2fb8408ea282e2e755308d6c59edbf8ceff5c5f4f100e2c2d57681f5a6821c8b4e71a0f7101680ab8c6f8e39a8ad74007467333b2a0d57a39f7ba8cae21f8b5518661d2641a4dcc1fb209ac447cff90e7e056769131debc33717f034745467f186417bd258c2f68f05af7ca10352181cad1fb5e8288e8af32fd8a6a541cf9fecb6a654f29b00e6a4734f539ecbbb8129b3032cb6bba764d8df8e317d85ca8eae8044352c1d3469cdf42ba12881ea24127b13247ae6f557688a593eba29b8e45c592200615d1bdd86738fabb811dec36db9fb65b65970d2844dbe7a4f654b8c1b4a6372697bd9e328f265451c44750051cf85910d4010d76bef2c0ec2ae0a4473a1bcb3dcba16abf4f58f6de0536c80acf227c0611a08b1222048bcd717d4e1fe413edd5789ca9ec8fa0572afbcb6a549d585618874d7fe7ccde25184fe944410c4e1eccb0df9e495877c4cd167abd8b28cf7ddab5464029a2636132c516936b165f41bb5a51d9acb36002167f7d276e8a09ef38938bfcf6ccbb6d5a41d7913607a20fc6341a1e13094d94659a54dd0e8ea9cad8381c304b0d92971518c2aaeb0c2c894757277dfb647b9e12af8e66ec5416eee2124d229c20e6ae4a6a911c13115c9118937ea236ee6609a6303a4288b89a7c588148c50577af728e259183bc83f63c60fcc2d7b9da454e97bcc098dd401a8bf45512e476b6e529c9fce54327939a0285f7ff3e225ed1636b501cde4e68dc28a22196577fcafe4955a29af1c12781e75947634bef015479fc8a2f3836369ce35ef553b56083fce2352ad229b4ce608421c7e5117c11b8f56124a5c0c73660c34ed5a70abd10753c28bc7b4a7086acc867f2d364c58cab3a26d1911f626a72ae80db587e07042b7f6c8ea145dc459409503a0b86a5bdc5aef7e52917a88c8ae5b2770984481ab3ca3297930a2e84f08c2ee275e84ffd073edb92186382db62a31a8925e3b17ce38ed557f60d7f407bd4047e31a612f728a0ce7f8c22e6e51cbb23a18c1dd53478c05dc33a391de31de9a6188fb30c3a6ce95f39ddb41efcb6b1a81b630055b2cd6d26f465ab70d1836d4dd79bbfc3b97107b1e8af267ae8c5d1b0f54d75b6c7e2cd1606ee6293e088e24e73df7eceb8c5a9ca639ec1dd50eded5cf0548b90baf8f9604142e0fcec6db38b1c83864496e85ea67c8ad736ad27716822d56bd07ed2951051c8fd0ad3019e9ee040565a060753316f848609a2f2b2da088de586ca0868aba41fb0f3764848272d75450da75b567b27e905d3249bac80adb9f34383e2edeed1296a13e69b47a6920552ecbfdf70d0bd551e22edf2cb316532af8ab36e4a03f2257389d21d1e0d7c62c2a7117ef9fe528f5487892fa477806b3862ce5482f29610b23a88e4d2ef3dbfaf1722c8de5aa29038c7b7bdf611b248cac0aed1820221e4c8c04b760e18df896e74d140d01ca55b420f97c0658f8afa27e0aa67bb624304b247d779de752f9774541cc198fd5049671b3e5ce1638748e4f66e3b43cf6bf74b45c39d4eda1fc80e65e60980b620da103117786208ae010a4d29c0b25b9bcfa26ad0bfbd696760f7baa1e24df53d201755d6fba3c03547c021484f6d05cc5155ad9b8a4bfa3d546cf6db43f4e2daec55f78069a74d7ae2d5c90a9990714d51adc433b8cd7475bf2604fc89440284a1e09084b9ea2d4dacb26351fc083d5bf7c594dfb65ace14c9f82c25ed851ba50197ddfc80ade955fa69c6c280eb78af986b9a2b828fee730710e6387d4c681bbdb93eb57ea749f8b207b9daed0b75fdbccebdb843dce887aa98c7d7edbd141a95679422fe90873eb34adb5850263802a2da927b7bc4e3b1211d2f095b263aee65eb9754829d7ff14d7cb8cced2f5c2799674a39180309e34a552f63579a8dad101", 0x100, 0x0, 0x0, {0x2}}, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, r4, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x210001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r8, &(0x7f0000000140)='./file0\x00', 0x8201, 0x0) io_uring_enter(r1, 0x7fe, 0x80d3, 0x3, &(0x7f0000000180)={[0x7fff]}, 0x8) sendfile(r6, r8, 0x0, 0x20d315) [ 1816.828654] 9pnet: Insufficient options for proto=fd [ 1816.829146] 9pnet: Insufficient options for proto=fd [ 1816.840648] FAULT_INJECTION: forcing a failure. [ 1816.840648] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.843217] CPU: 1 PID: 11256 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1816.844795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1816.844803] Call Trace: [ 1816.844831] dump_stack+0x107/0x167 [ 1816.844858] should_fail.cold+0x5/0xa [ 1816.844886] ? register_for_each_vma+0x476/0xc00 [ 1816.844907] should_failslab+0x5/0x20 [ 1816.844929] kmem_cache_alloc_trace+0x55/0x320 [ 1816.844963] register_for_each_vma+0x476/0xc00 [ 1816.845013] __uprobe_register+0x4df/0x880 [ 1816.845056] probe_event_enable+0x3c4/0xba0 [ 1816.845077] ? uprobe_perf_close+0x5f0/0x5f0 [ 1816.845107] trace_uprobe_register+0x54/0x730 [ 1816.845145] perf_trace_event_init+0x554/0x9c0 [ 1816.845181] perf_uprobe_init+0x173/0x210 [ 1816.845212] perf_uprobe_event_init+0xff/0x190 [ 1816.845234] perf_try_init_event+0x130/0x570 [ 1816.845261] perf_event_alloc.part.0+0xd96/0x2b70 [ 1816.845301] __do_sys_perf_event_open+0x579/0x2e60 [ 1816.845335] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1816.845361] ? perf_event_set_output+0x5b0/0x5b0 [ 1816.845379] ? wait_for_completion_io+0x270/0x270 [ 1816.845438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1816.867741] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1816.867770] do_syscall_64+0x33/0x40 [ 1816.867793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1816.867808] RIP: 0033:0x7f27a2558b19 18:31:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:31:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1816.867828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1816.867840] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1816.867864] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 18:31:55 executing program 5: keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x80) keyctl$read(0xb, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000640)}}, &(0x7f00000004c0)=0x0) timer_gettime(0x0, 0x0) timer_gettime(r0, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000180)={0x0, 0xb, 0x0, @thr={0x0, &(0x7f0000000640)}}, &(0x7f00000004c0)=0x0) timer_gettime(r1, &(0x7f0000000500)) timer_delete(0x0) keyctl$restrict_keyring(0x1d, 0xfffffffffffffff8, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)='\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 1816.867877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1816.867889] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1816.867902] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1816.867915] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 1816.916195] FAULT_INJECTION: forcing a failure. [ 1816.916195] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.916222] CPU: 1 PID: 11254 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1816.916234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1816.916242] Call Trace: [ 1816.916270] dump_stack+0x107/0x167 [ 1816.916296] should_fail.cold+0x5/0xa [ 1816.916321] ? create_object.isra.0+0x3a/0xa30 [ 1816.916343] should_failslab+0x5/0x20 [ 1816.916365] kmem_cache_alloc+0x5b/0x310 18:31:55 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000200002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1816.916391] ? mark_held_locks+0x9e/0xe0 18:31:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1816.916420] create_object.isra.0+0x3a/0xa30 [ 1816.916438] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1816.916480] kmem_cache_alloc_trace+0x151/0x320 [ 1816.916515] register_for_each_vma+0x476/0xc00 [ 1816.916566] __uprobe_register+0x4df/0x880 [ 1816.916609] probe_event_enable+0x3c4/0xba0 [ 1816.916630] ? uprobe_perf_close+0x5f0/0x5f0 [ 1816.916661] trace_uprobe_register+0x54/0x730 18:31:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 84) 18:31:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1816.916698] perf_trace_event_init+0x554/0x9c0 [ 1816.916741] perf_uprobe_init+0x173/0x210 [ 1816.916777] perf_uprobe_event_init+0xff/0x190 [ 1816.916799] perf_try_init_event+0x130/0x570 [ 1816.916826] perf_event_alloc.part.0+0xd96/0x2b70 [ 1816.916866] __do_sys_perf_event_open+0x579/0x2e60 [ 1816.916900] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1816.916927] ? perf_event_set_output+0x5b0/0x5b0 [ 1816.916944] ? wait_for_completion_io+0x270/0x270 18:31:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1816.917001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1816.917025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1816.917053] do_syscall_64+0x33/0x40 [ 1816.917075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1816.917089] RIP: 0033:0x7fc9de03eb19 [ 1816.917109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:31:55 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 96) [ 1816.917121] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1816.917145] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1816.917157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1816.917170] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1816.917182] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1816.917195] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 [ 1816.954890] FAULT_INJECTION: forcing a failure. [ 1816.954890] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.955087] CPU: 1 PID: 11251 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1816.955100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1816.955108] Call Trace: [ 1816.955136] dump_stack+0x107/0x167 [ 1816.955163] should_fail.cold+0x5/0xa [ 1816.955190] ? register_for_each_vma+0x476/0xc00 [ 1816.955211] should_failslab+0x5/0x20 [ 1816.955233] kmem_cache_alloc_trace+0x55/0x320 [ 1816.955267] register_for_each_vma+0x476/0xc00 [ 1816.955317] __uprobe_register+0x4df/0x880 [ 1816.955360] probe_event_enable+0x3c4/0xba0 [ 1816.955381] ? uprobe_perf_close+0x5f0/0x5f0 [ 1816.955411] trace_uprobe_register+0x54/0x730 [ 1816.955449] perf_trace_event_init+0x554/0x9c0 [ 1816.955485] perf_uprobe_init+0x173/0x210 [ 1816.955516] perf_uprobe_event_init+0xff/0x190 [ 1816.955538] perf_try_init_event+0x130/0x570 [ 1816.955565] perf_event_alloc.part.0+0xd96/0x2b70 [ 1816.955605] __do_sys_perf_event_open+0x579/0x2e60 [ 1816.955639] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1816.955665] ? perf_event_set_output+0x5b0/0x5b0 [ 1816.955683] ? wait_for_completion_io+0x270/0x270 [ 1816.955748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1816.955772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1816.955800] do_syscall_64+0x33/0x40 [ 1816.955822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1816.955837] RIP: 0033:0x7fcf367ecb19 [ 1816.955856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1816.955869] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1816.955892] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1816.955905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1816.955917] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1816.955929] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1816.955942] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 [ 1816.970637] 9pnet: Insufficient options for proto=fd [ 1817.010879] 9pnet: Insufficient options for proto=fd [ 1817.187665] 9pnet: Insufficient options for proto=fd [ 1817.189341] 9pnet: Insufficient options for proto=fd [ 1817.245332] 9pnet: Insufficient options for proto=fd [ 1817.270090] FAULT_INJECTION: forcing a failure. [ 1817.270090] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.270112] CPU: 1 PID: 11278 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1817.270123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1817.270130] Call Trace: [ 1817.270154] dump_stack+0x107/0x167 [ 1817.270178] should_fail.cold+0x5/0xa [ 1817.270201] ? create_object.isra.0+0x3a/0xa30 [ 1817.270220] should_failslab+0x5/0x20 [ 1817.270239] kmem_cache_alloc+0x5b/0x310 [ 1817.270259] ? mark_held_locks+0x9e/0xe0 [ 1817.270283] create_object.isra.0+0x3a/0xa30 [ 1817.270299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1817.270327] kmem_cache_alloc_trace+0x151/0x320 [ 1817.270364] register_for_each_vma+0x476/0xc00 [ 1817.270408] __uprobe_register+0x4df/0x880 [ 1817.270445] probe_event_enable+0x3c4/0xba0 [ 1817.270464] ? uprobe_perf_close+0x5f0/0x5f0 [ 1817.270490] trace_uprobe_register+0x54/0x730 [ 1817.270522] perf_trace_event_init+0x554/0x9c0 [ 1817.270554] perf_uprobe_init+0x173/0x210 [ 1817.270581] perf_uprobe_event_init+0xff/0x190 [ 1817.270600] perf_try_init_event+0x130/0x570 [ 1817.270624] perf_event_alloc.part.0+0xd96/0x2b70 [ 1817.270659] __do_sys_perf_event_open+0x579/0x2e60 [ 1817.270689] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1817.270711] ? perf_event_set_output+0x5b0/0x5b0 [ 1817.270726] ? wait_for_completion_io+0x270/0x270 [ 1817.270776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1817.270797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1817.270821] do_syscall_64+0x33/0x40 [ 1817.270841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1817.270854] RIP: 0033:0x7f27a2558b19 [ 1817.270872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.270883] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1817.270904] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1817.270915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1817.270926] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1817.270937] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1817.270948] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 [ 1817.345117] FAULT_INJECTION: forcing a failure. [ 1817.345117] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.345140] CPU: 1 PID: 11285 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1817.345150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1817.345156] Call Trace: [ 1817.345181] dump_stack+0x107/0x167 [ 1817.345204] should_fail.cold+0x5/0xa [ 1817.345226] ? create_object.isra.0+0x3a/0xa30 [ 1817.345245] should_failslab+0x5/0x20 [ 1817.345264] kmem_cache_alloc+0x5b/0x310 [ 1817.345284] ? mark_held_locks+0x9e/0xe0 [ 1817.345308] create_object.isra.0+0x3a/0xa30 [ 1817.345324] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1817.345352] kmem_cache_alloc_trace+0x151/0x320 [ 1817.345382] register_for_each_vma+0x476/0xc00 [ 1817.345425] __uprobe_register+0x4df/0x880 [ 1817.345463] probe_event_enable+0x3c4/0xba0 [ 1817.345481] ? uprobe_perf_close+0x5f0/0x5f0 [ 1817.345508] trace_uprobe_register+0x54/0x730 [ 1817.345540] perf_trace_event_init+0x554/0x9c0 [ 1817.345571] perf_uprobe_init+0x173/0x210 [ 1817.345599] perf_uprobe_event_init+0xff/0x190 [ 1817.345618] perf_try_init_event+0x130/0x570 [ 1817.345642] perf_event_alloc.part.0+0xd96/0x2b70 [ 1817.345676] __do_sys_perf_event_open+0x579/0x2e60 [ 1817.345707] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1817.345736] ? perf_event_set_output+0x5b0/0x5b0 [ 1817.345751] ? wait_for_completion_io+0x270/0x270 [ 1817.345806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1817.345826] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1817.345851] do_syscall_64+0x33/0x40 [ 1817.345870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1817.345882] RIP: 0033:0x7fcf367ecb19 [ 1817.345900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.345910] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1817.345931] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1817.345942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1817.345953] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1817.345963] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1817.345974] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:32:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5451, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:32:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:32:10 executing program 5: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/43, 0x2b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000002c0)) timer_delete(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x10401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) timer_gettime(r0, &(0x7f0000000400)) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000ac0)=ANY=[@ANYBLOB="040041b2042131d734a29ade8b0360792e8a53b0e02e668b3ca330f8b59aa7134170c5612d31161d11a6fbcd060200000024c5df081650478277b5405e62aba026eb436609209c45f379b7476400f18bcdde5eabc96bc52a72b288ef8e8d6c8201676b82e9ffc81985cabb4355c826bca201000dfd7397c81e880390f7118889a1b8f858430699a64f3107c5f47baebeaa56000000000000000029f7cfc5f87b6bb6d3c602f209a2aabeb298f06e73374ccc30d4fd279538bb65919ee41a214607c00774aa1c77e26391d2166fc59fc63a79db3192dfa1a84467ec07cb50e2ea1993a8bbbb1858e4422c6abd082b3754499174110315e3af92bf7333b16a06a6b9da003d50ec13a2a1633b83a0ac23914893e373000000e5f3dfd13672ea507188ac3799f84dc5feb7c30eccc2f8c3c6f6f390ed893e3df2d29efd9e3c471400a62cc65587d5ce2c4d723d2d02aa483147b430b361435e1f01dc5a3bf626957002a84006985e839e17639e0b607d5e50349af65f4f2bbd4d0346f1fdc1b2cffe4d20ca9404add59e86ba6adaaadf1d204882ab6c333951c4d1524ce9bcd4beaaa6b1d48329038ca4b24fdd5c7c0819d5c856a569abbe57c2c143709acff8b288c477a25e79eb3448c6a4e08a36402cd49229bd7f2832789d17c7e1e81a516f736faa5f78ca4ec4073f2b26e28f6e011beb747919f888890f14b3fd7aec1f8bd4f3ae3327459786fb19842dae42aa95cb3f20619c51b098f0f13ca7a757b0cd23bdee855c74363a84da3b78494040ab0e1c566c29cba52a7d0a20b11f98951e624b0cd5e1f2ee516bb3bdb0901fc92d5335e9ac4bb0dca63680f920f052626b4dcc070663a9f2dcebbf0c233a2dc307975f5f48ee74d68a5b9b67b6b3f92cef18a93e656b15e3aca7031d9e2b7f139420b5f7dab41000000000"], 0x4, 0x1) timer_delete(0x0) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000300)={0x800, 0x3, 0x7, 0xd7, 0x8000, 0x6}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_gettime(r0, &(0x7f0000000100)) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x11, 0x1, @tid=r1}, &(0x7f0000000340)) fcntl$getown(0xffffffffffffffff, 0x9) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:32:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 85) 18:32:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}, {@privport}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:32:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 83) 18:32:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 97) 18:32:10 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffff00002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1832.574658] 9pnet: Insufficient options for proto=fd 18:32:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@fscache}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1832.598056] FAULT_INJECTION: forcing a failure. [ 1832.598056] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.600599] CPU: 0 PID: 11300 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1832.602137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.603945] Call Trace: [ 1832.604534] dump_stack+0x107/0x167 [ 1832.605354] should_fail.cold+0x5/0xa [ 1832.606190] ? register_for_each_vma+0x476/0xc00 [ 1832.607221] should_failslab+0x5/0x20 [ 1832.608051] kmem_cache_alloc_trace+0x55/0x320 [ 1832.609084] register_for_each_vma+0x476/0xc00 [ 1832.610104] __uprobe_register+0x4df/0x880 [ 1832.611040] probe_event_enable+0x3c4/0xba0 [ 1832.611977] ? uprobe_perf_close+0x5f0/0x5f0 [ 1832.612960] trace_uprobe_register+0x54/0x730 [ 1832.613950] perf_trace_event_init+0x554/0x9c0 [ 1832.614955] perf_uprobe_init+0x173/0x210 [ 1832.615876] perf_uprobe_event_init+0xff/0x190 [ 1832.616904] perf_try_init_event+0x130/0x570 [ 1832.617875] perf_event_alloc.part.0+0xd96/0x2b70 [ 1832.618953] __do_sys_perf_event_open+0x579/0x2e60 [ 1832.620039] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1832.621129] ? perf_event_set_output+0x5b0/0x5b0 [ 1832.622165] ? wait_for_completion_io+0x270/0x270 [ 1832.623261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1832.624415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1832.625570] do_syscall_64+0x33/0x40 [ 1832.626390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1832.627514] RIP: 0033:0x7fcf367ecb19 [ 1832.628328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.632359] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1832.634050] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1832.635615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1832.637214] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.638783] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1832.640362] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:32:11 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x18000, 0x80) syz_io_uring_setup(0x8003a75, &(0x7f0000000080)={0x0, 0x6158, 0x10, 0x4000000, 0xfffffffb}, &(0x7f0000b4e000/0x3000)=nil, &(0x7f0000b4d000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x7fb) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r0, 0x0, &(0x7f00000001c0)="04f26a67c1d610ffeb011a9b8909ef4e3399ade0a94386cc51411876", 0x1c, 0x4004, 0x1}, 0xc1) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x8001, 0x2) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/180, 0x200007d8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000240)=0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') r5 = syz_open_dev$mouse(&(0x7f0000000100), 0x7, 0x4441) fcntl$addseals(r5, 0x409, 0xe) connect$inet6(r4, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x9) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 1832.648536] 9pnet: Insufficient options for proto=fd 18:32:11 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000102000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:32:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:32:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1832.741804] 9pnet: Insufficient options for proto=fd 18:32:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}, {@aname={'aname', 0x3d, 'vfat\x00'}}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1832.798454] FAULT_INJECTION: forcing a failure. [ 1832.798454] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.799877] CPU: 1 PID: 11307 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1832.800727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.801736] Call Trace: [ 1832.802062] dump_stack+0x107/0x167 [ 1832.802510] should_fail.cold+0x5/0xa [ 1832.802978] ? register_for_each_vma+0x476/0xc00 [ 1832.803552] should_failslab+0x5/0x20 [ 1832.804016] kmem_cache_alloc_trace+0x55/0x320 [ 1832.804573] register_for_each_vma+0x476/0xc00 [ 1832.805146] __uprobe_register+0x4df/0x880 [ 1832.805674] probe_event_enable+0x3c4/0xba0 [ 1832.806198] ? uprobe_perf_close+0x5f0/0x5f0 [ 1832.806737] trace_uprobe_register+0x54/0x730 [ 1832.807292] perf_trace_event_init+0x554/0x9c0 [ 1832.807854] perf_uprobe_init+0x173/0x210 [ 1832.808366] perf_uprobe_event_init+0xff/0x190 [ 1832.808927] perf_try_init_event+0x130/0x570 [ 1832.809466] perf_event_alloc.part.0+0xd96/0x2b70 [ 1832.810063] __do_sys_perf_event_open+0x579/0x2e60 [ 1832.810667] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1832.811256] ? perf_event_set_output+0x5b0/0x5b0 [ 1832.811832] ? wait_for_completion_io+0x270/0x270 [ 1832.812440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1832.813085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1832.813713] do_syscall_64+0x33/0x40 [ 1832.814163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1832.814781] RIP: 0033:0x7fc9de03eb19 [ 1832.815229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.817453] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1832.818371] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1832.819230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1832.820090] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.820955] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1832.821822] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:32:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x10b500, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) sched_getparam(r4, &(0x7f00000000c0)) r5 = getpgrp(0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x20004004) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="fc070313ad58872e8c64662dc0ff7f52a4db515073f829d2a2973c21c902848f7c3ca5e8de3740b5af1693560e750aa6b441fec32cb903"], 0x1c}}, 0x0) 18:32:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1832.866933] 9pnet: Insufficient options for proto=fd [ 1832.896916] FAULT_INJECTION: forcing a failure. [ 1832.896916] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.899274] CPU: 0 PID: 11308 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1832.900730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.902418] Call Trace: [ 1832.902971] dump_stack+0x107/0x167 [ 1832.903719] should_fail.cold+0x5/0xa [ 1832.904510] ? register_for_each_vma+0x476/0xc00 [ 1832.905484] should_failslab+0x5/0x20 [ 1832.906258] kmem_cache_alloc_trace+0x55/0x320 [ 1832.907196] register_for_each_vma+0x476/0xc00 [ 1832.908146] __uprobe_register+0x4df/0x880 [ 1832.909051] probe_event_enable+0x3c4/0xba0 [ 1832.909925] ? uprobe_perf_close+0x5f0/0x5f0 [ 1832.910827] trace_uprobe_register+0x54/0x730 [ 1832.911758] perf_trace_event_init+0x554/0x9c0 [ 1832.912715] perf_uprobe_init+0x173/0x210 [ 1832.913571] perf_uprobe_event_init+0xff/0x190 [ 1832.914499] perf_try_init_event+0x130/0x570 [ 1832.915397] perf_event_alloc.part.0+0xd96/0x2b70 [ 1832.916396] __do_sys_perf_event_open+0x579/0x2e60 [ 1832.917418] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1832.918437] ? perf_event_set_output+0x5b0/0x5b0 [ 1832.919419] ? wait_for_completion_io+0x270/0x270 [ 1832.920438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1832.921513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1832.922567] do_syscall_64+0x33/0x40 [ 1832.923327] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1832.924370] RIP: 0033:0x7f27a2558b19 [ 1832.925137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.928869] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1832.930421] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1832.931868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1832.933355] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.934898] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1832.936353] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 18:32:25 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000202000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:32:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}, {@access_uid}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:32:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 86) 18:32:25 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1f, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f00000002c0)=""/221, 0xdd}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/110, 0x6e}], 0x5}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000005c0)=""/71, 0x47}, {&(0x7f0000000180)=""/4, 0x4}, {&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000700)=""/14, 0xe}, {&(0x7f0000000740)=""/136, 0x88}, {&(0x7f0000000800)=""/248, 0xf8}, {&(0x7f0000000900)=""/146, 0x92}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x8, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001cf4ffffff0000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x118}}, {{&(0x7f0000001b80), 0x6e, &(0x7f0000004140)=[{&(0x7f0000001c00)=""/253, 0xfd}, {&(0x7f0000001d00)=""/19, 0x13}, {&(0x7f0000001d40)=""/53, 0x35}, {&(0x7f0000001d80)=""/216, 0xd8}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/41, 0x29}, {&(0x7f0000002ec0)=""/164, 0xa4}, {&(0x7f0000002f80)=""/192, 0xc0}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/243, 0xf3}], 0xa, &(0x7f0000004200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x90}}, {{&(0x7f00000042c0)=@abs, 0x6e, &(0x7f0000004700)=[{&(0x7f0000004340)=""/118, 0x76}, {&(0x7f00000043c0)}, {&(0x7f0000004400)=""/42, 0x2a}, {&(0x7f0000004440)=""/253, 0xfd}, {&(0x7f0000004540)=""/199, 0xc7}, {&(0x7f0000004640)=""/157, 0x9d}], 0x6}}], 0x4, 0x1, &(0x7f0000004880)={0x77359400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000048c0)={'nr0\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_team\x00'}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x8001) [ 1847.147719] 9pnet: Insufficient options for proto=fd 18:32:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:32:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:32:25 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 84) 18:32:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 98) [ 1847.170206] FAULT_INJECTION: forcing a failure. [ 1847.170206] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.171759] CPU: 1 PID: 11342 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1847.172684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.173814] Call Trace: [ 1847.174178] dump_stack+0x107/0x167 [ 1847.174672] should_fail.cold+0x5/0xa [ 1847.175192] ? create_object.isra.0+0x3a/0xa30 [ 1847.175809] should_failslab+0x5/0x20 [ 1847.176323] kmem_cache_alloc+0x5b/0x310 [ 1847.176881] ? mark_held_locks+0x9e/0xe0 [ 1847.177437] create_object.isra.0+0x3a/0xa30 [ 1847.178031] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1847.178717] kmem_cache_alloc_trace+0x151/0x320 [ 1847.179350] register_for_each_vma+0x476/0xc00 [ 1847.179981] __uprobe_register+0x4df/0x880 [ 1847.180560] probe_event_enable+0x3c4/0xba0 [ 1847.181146] ? uprobe_perf_close+0x5f0/0x5f0 [ 1847.181740] trace_uprobe_register+0x54/0x730 [ 1847.182355] perf_trace_event_init+0x554/0x9c0 [ 1847.182973] perf_uprobe_init+0x173/0x210 [ 1847.183533] perf_uprobe_event_init+0xff/0x190 [ 1847.184140] perf_try_init_event+0x130/0x570 [ 1847.184736] perf_event_alloc.part.0+0xd96/0x2b70 [ 1847.185400] __do_sys_perf_event_open+0x579/0x2e60 [ 1847.186063] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1847.186708] ? perf_event_set_output+0x5b0/0x5b0 [ 1847.187340] ? wait_for_completion_io+0x270/0x270 [ 1847.188005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.188708] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.189404] do_syscall_64+0x33/0x40 [ 1847.189900] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.190582] RIP: 0033:0x7fcf367ecb19 [ 1847.191069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.193505] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1847.194517] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1847.195462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1847.196403] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.197353] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1847.198306] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:32:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1847.222073] FAULT_INJECTION: forcing a failure. [ 1847.222073] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.224730] CPU: 0 PID: 11351 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1847.226678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.228637] Call Trace: [ 1847.229273] dump_stack+0x107/0x167 [ 1847.230152] should_fail.cold+0x5/0xa [ 1847.231074] ? create_object.isra.0+0x3a/0xa30 [ 1847.232174] should_failslab+0x5/0x20 [ 1847.233094] kmem_cache_alloc+0x5b/0x310 [ 1847.234056] ? mark_held_locks+0x9e/0xe0 [ 1847.235036] create_object.isra.0+0x3a/0xa30 [ 1847.236076] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1847.237296] kmem_cache_alloc_trace+0x151/0x320 [ 1847.238410] register_for_each_vma+0x476/0xc00 [ 1847.239538] __uprobe_register+0x4df/0x880 [ 1847.240575] probe_event_enable+0x3c4/0xba0 [ 1847.241619] ? uprobe_perf_close+0x5f0/0x5f0 [ 1847.242674] trace_uprobe_register+0x54/0x730 [ 1847.243753] perf_trace_event_init+0x554/0x9c0 [ 1847.244855] perf_uprobe_init+0x173/0x210 [ 1847.245856] perf_uprobe_event_init+0xff/0x190 [ 1847.247057] perf_try_init_event+0x130/0x570 [ 1847.248382] perf_event_alloc.part.0+0xd96/0x2b70 [ 1847.249847] __do_sys_perf_event_open+0x579/0x2e60 [ 1847.251326] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1847.252763] ? perf_event_set_output+0x5b0/0x5b0 [ 1847.254173] ? wait_for_completion_io+0x270/0x270 [ 1847.255646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.257213] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.258742] do_syscall_64+0x33/0x40 [ 1847.259861] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.261380] RIP: 0033:0x7f27a2558b19 [ 1847.262474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.267805] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1847.270013] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1847.272078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1847.274166] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.276228] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1847.278300] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:32:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:32:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe63, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 18:32:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5460, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1847.343171] 9pnet: Insufficient options for proto=fd [ 1847.349354] FAULT_INJECTION: forcing a failure. [ 1847.349354] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.350792] CPU: 1 PID: 11353 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1847.351664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.352711] Call Trace: [ 1847.353054] dump_stack+0x107/0x167 [ 1847.353519] should_fail.cold+0x5/0xa [ 1847.353999] ? create_object.isra.0+0x3a/0xa30 [ 1847.354572] should_failslab+0x5/0x20 [ 1847.355049] kmem_cache_alloc+0x5b/0x310 [ 1847.355560] ? mark_held_locks+0x9e/0xe0 [ 1847.356074] create_object.isra.0+0x3a/0xa30 [ 1847.356618] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1847.357263] kmem_cache_alloc_trace+0x151/0x320 [ 1847.357854] register_for_each_vma+0x476/0xc00 [ 1847.358437] __uprobe_register+0x4df/0x880 [ 1847.358979] probe_event_enable+0x3c4/0xba0 [ 1847.359513] ? uprobe_perf_close+0x5f0/0x5f0 [ 1847.360067] trace_uprobe_register+0x54/0x730 [ 1847.360640] perf_trace_event_init+0x554/0x9c0 [ 1847.361224] perf_uprobe_init+0x173/0x210 [ 1847.361752] perf_uprobe_event_init+0xff/0x190 [ 1847.362324] perf_try_init_event+0x130/0x570 [ 1847.362876] perf_event_alloc.part.0+0xd96/0x2b70 [ 1847.363490] __do_sys_perf_event_open+0x579/0x2e60 [ 1847.364108] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1847.364712] ? perf_event_set_output+0x5b0/0x5b0 [ 1847.365307] ? wait_for_completion_io+0x270/0x270 [ 1847.365928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.366577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.367223] do_syscall_64+0x33/0x40 [ 1847.367690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.368329] RIP: 0033:0x7fc9de03eb19 [ 1847.368795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.371067] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1847.372012] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1847.372902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1847.373785] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.374643] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1847.375526] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:32:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:32:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 99) 18:32:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:32:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1847.464480] 9pnet: Insufficient options for proto=fd [ 1847.495199] FAULT_INJECTION: forcing a failure. [ 1847.495199] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.497896] CPU: 0 PID: 11369 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1847.499530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.501503] Call Trace: [ 1847.502139] dump_stack+0x107/0x167 [ 1847.502999] should_fail.cold+0x5/0xa [ 1847.503912] ? register_for_each_vma+0x476/0xc00 [ 1847.505053] should_failslab+0x5/0x20 [ 1847.505954] kmem_cache_alloc_trace+0x55/0x320 [ 1847.507022] register_for_each_vma+0x476/0xc00 [ 1847.508134] __uprobe_register+0x4df/0x880 [ 1847.509157] probe_event_enable+0x3c4/0xba0 [ 1847.510168] ? uprobe_perf_close+0x5f0/0x5f0 [ 1847.511207] trace_uprobe_register+0x54/0x730 [ 1847.512295] perf_trace_event_init+0x554/0x9c0 [ 1847.513378] perf_uprobe_init+0x173/0x210 [ 1847.514341] perf_uprobe_event_init+0xff/0x190 [ 1847.515394] perf_try_init_event+0x130/0x570 [ 1847.516449] perf_event_alloc.part.0+0xd96/0x2b70 [ 1847.517585] __do_sys_perf_event_open+0x579/0x2e60 [ 1847.518726] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1847.519872] ? perf_event_set_output+0x5b0/0x5b0 [ 1847.520968] ? wait_for_completion_io+0x270/0x270 [ 1847.522114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.523355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.524547] do_syscall_64+0x33/0x40 [ 1847.525419] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.526637] RIP: 0033:0x7fcf367ecb19 [ 1847.527510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.531825] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1847.533917] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1847.535607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1847.537289] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.538966] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1847.540641] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:32:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 100) 18:32:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 87) 18:32:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d8c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000280)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x583601, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)={0x2, 0x1, 0x2, 0xbc, 0x1000, 0x7ff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x204002, 0x7944a6717284ed6b) close(r4) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000001500)={{r3}, "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) syz_io_uring_setup(0x63fb, &(0x7f0000000080)={0x0, 0xe3ed, 0x8, 0x2, 0xb7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000001c0), 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) close(0xffffffffffffffff) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x10, 0x2, 0x4}, 0x9}}, 0x18) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) 18:32:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) 18:32:40 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000302000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:32:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:32:40 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 85) 18:32:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x40086602, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1862.403731] FAULT_INJECTION: forcing a failure. [ 1862.403731] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.405969] CPU: 0 PID: 11380 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 1862.407318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1862.408916] Call Trace: [ 1862.409439] dump_stack+0x107/0x167 [ 1862.410146] should_fail.cold+0x5/0xa [ 1862.410889] ? create_object.isra.0+0x3a/0xa30 [ 1862.411074] 9pnet: Insufficient options for proto=fd [ 1862.411766] should_failslab+0x5/0x20 [ 1862.411785] kmem_cache_alloc+0x5b/0x310 [ 1862.411808] ? mark_held_locks+0x9e/0xe0 [ 1862.414761] create_object.isra.0+0x3a/0xa30 [ 1862.415610] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1862.416590] kmem_cache_alloc_trace+0x151/0x320 [ 1862.417508] register_for_each_vma+0x476/0xc00 [ 1862.418406] __uprobe_register+0x4df/0x880 [ 1862.419243] probe_event_enable+0x3c4/0xba0 [ 1862.420071] ? uprobe_perf_close+0x5f0/0x5f0 18:32:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1862.420926] trace_uprobe_register+0x54/0x730 [ 1862.421907] perf_trace_event_init+0x554/0x9c0 [ 1862.422790] perf_uprobe_init+0x173/0x210 [ 1862.423586] perf_uprobe_event_init+0xff/0x190 [ 1862.424458] perf_try_init_event+0x130/0x570 [ 1862.425323] perf_event_alloc.part.0+0xd96/0x2b70 [ 1862.426267] __do_sys_perf_event_open+0x579/0x2e60 [ 1862.427213] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1862.428131] ? perf_event_set_output+0x5b0/0x5b0 [ 1862.429042] ? wait_for_completion_io+0x270/0x270 [ 1862.429983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1862.430986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1862.431975] do_syscall_64+0x33/0x40 [ 1862.432686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1862.433678] RIP: 0033:0x7fcf367ecb19 [ 1862.434396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1862.437906] RSP: 002b:00007fcf33d62188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1862.439358] RAX: ffffffffffffffda RBX: 00007fcf368fff60 RCX: 00007fcf367ecb19 [ 1862.440714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1862.442084] RBP: 00007fcf33d621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1862.443432] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000003 [ 1862.444793] R13: 00007ffe161fc7bf R14: 00007fcf33d62300 R15: 0000000000022000 18:32:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) [ 1862.489165] 9pnet: Insufficient options for proto=fd 18:32:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:32:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r\\,'}}]}}) 18:32:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x40087602, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1862.560453] 9pnet: Insufficient options for proto=fd [ 1862.562610] FAULT_INJECTION: forcing a failure. [ 1862.562610] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.564963] CPU: 0 PID: 11388 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1862.566345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1862.568071] Call Trace: [ 1862.568627] dump_stack+0x107/0x167 [ 1862.569399] should_fail.cold+0x5/0xa [ 1862.570196] ? register_for_each_vma+0x476/0xc00 [ 1862.571187] should_failslab+0x5/0x20 [ 1862.571977] kmem_cache_alloc_trace+0x55/0x320 [ 1862.572933] register_for_each_vma+0x476/0xc00 [ 1862.573905] __uprobe_register+0x4df/0x880 [ 1862.574793] probe_event_enable+0x3c4/0xba0 [ 1862.575677] ? uprobe_perf_close+0x5f0/0x5f0 [ 1862.576588] trace_uprobe_register+0x54/0x730 [ 1862.577536] perf_trace_event_init+0x554/0x9c0 [ 1862.578493] perf_uprobe_init+0x173/0x210 [ 1862.579354] perf_uprobe_event_init+0xff/0x190 [ 1862.580293] perf_try_init_event+0x130/0x570 [ 1862.581209] perf_event_alloc.part.0+0xd96/0x2b70 [ 1862.582215] __do_sys_perf_event_open+0x579/0x2e60 [ 1862.583231] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1862.584219] ? perf_event_set_output+0x5b0/0x5b0 [ 1862.585187] ? wait_for_completion_io+0x270/0x270 [ 1862.586200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1862.587272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1862.588330] do_syscall_64+0x33/0x40 [ 1862.589096] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1862.590146] RIP: 0033:0x7f27a2558b19 [ 1862.590902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1862.594652] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1862.596199] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1862.597644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1862.599084] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1862.600523] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1862.601964] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 18:32:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1862.639611] FAULT_INJECTION: forcing a failure. [ 1862.639611] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.641846] CPU: 0 PID: 11401 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1862.643165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1862.644762] Call Trace: [ 1862.645299] dump_stack+0x107/0x167 [ 1862.646022] should_fail.cold+0x5/0xa [ 1862.646776] ? register_for_each_vma+0x476/0xc00 [ 1862.647710] should_failslab+0x5/0x20 [ 1862.648409] kmem_cache_alloc_trace+0x55/0x320 [ 1862.649319] register_for_each_vma+0x476/0xc00 [ 1862.650273] __uprobe_register+0x4df/0x880 [ 1862.651102] probe_event_enable+0x3c4/0xba0 [ 1862.651955] ? uprobe_perf_close+0x5f0/0x5f0 [ 1862.652857] trace_uprobe_register+0x54/0x730 [ 1862.653788] perf_trace_event_init+0x554/0x9c0 [ 1862.654731] perf_uprobe_init+0x173/0x210 [ 1862.655534] perf_uprobe_event_init+0xff/0x190 [ 1862.656462] perf_try_init_event+0x130/0x570 [ 1862.657374] perf_event_alloc.part.0+0xd96/0x2b70 [ 1862.658380] __do_sys_perf_event_open+0x579/0x2e60 [ 1862.659353] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1862.660330] ? perf_event_set_output+0x5b0/0x5b0 [ 1862.661302] ? wait_for_completion_io+0x270/0x270 [ 1862.662321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1862.663362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1862.664414] do_syscall_64+0x33/0x40 [ 1862.665186] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1862.666233] RIP: 0033:0x7fc9de03eb19 [ 1862.666983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1862.670714] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1862.672247] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1862.673706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1862.675146] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1862.676585] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1862.678067] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 [ 1862.686502] 9pnet: Insufficient options for proto=fd 18:32:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) 18:32:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:32:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:32:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 88) 18:32:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@dont_appraise}]}}) 18:32:54 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:32:54 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:32:54 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000402000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:32:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 86) 18:32:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x1c) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3b, &(0x7f0000000700)=""/4096, &(0x7f0000000040)=0x1000) r1 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x2, 0x0, 0x52, 0x80100, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080)}, 0x11, 0x400, 0x5, 0x2, 0x40, 0x9, 0x78, 0x0, 0x2, 0x0, 0x95c}, 0x0, 0x6, r1, 0xa) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) 18:32:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}}) [ 1875.791210] 9pnet: Insufficient options for proto=fd 18:32:54 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1875.810389] FAULT_INJECTION: forcing a failure. [ 1875.810389] name failslab, interval 1, probability 0, space 0, times 0 [ 1875.812012] CPU: 1 PID: 11434 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1875.812954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1875.814088] Call Trace: [ 1875.814452] dump_stack+0x107/0x167 [ 1875.814948] should_fail.cold+0x5/0xa [ 1875.815476] ? create_object.isra.0+0x3a/0xa30 [ 1875.816106] should_failslab+0x5/0x20 [ 1875.816620] kmem_cache_alloc+0x5b/0x310 [ 1875.817189] ? mark_held_locks+0x9e/0xe0 [ 1875.817744] create_object.isra.0+0x3a/0xa30 [ 1875.818339] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1875.819030] kmem_cache_alloc_trace+0x151/0x320 [ 1875.819668] register_for_each_vma+0x476/0xc00 [ 1875.820311] __uprobe_register+0x4df/0x880 [ 1875.820921] probe_event_enable+0x3c4/0xba0 [ 1875.821528] ? uprobe_perf_close+0x5f0/0x5f0 [ 1875.822142] trace_uprobe_register+0x54/0x730 [ 1875.822765] perf_trace_event_init+0x554/0x9c0 [ 1875.823401] perf_uprobe_init+0x173/0x210 [ 1875.823968] perf_uprobe_event_init+0xff/0x190 [ 1875.824600] perf_try_init_event+0x130/0x570 [ 1875.825211] perf_event_alloc.part.0+0xd96/0x2b70 [ 1875.825864] __do_sys_perf_event_open+0x579/0x2e60 [ 1875.826564] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1875.827214] ? perf_event_set_output+0x5b0/0x5b0 [ 1875.827848] ? wait_for_completion_io+0x270/0x270 [ 1875.828516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1875.829234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1875.829942] do_syscall_64+0x33/0x40 [ 1875.830446] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1875.831142] RIP: 0033:0x7f27a2558b19 [ 1875.831644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1875.834149] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1875.835198] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1875.836159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1875.837116] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1875.838083] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1875.839030] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:32:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}]}}) 18:32:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:32:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) [ 1875.927135] 9pnet: Insufficient options for proto=fd 18:32:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:32:54 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1876.007424] FAULT_INJECTION: forcing a failure. [ 1876.007424] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.009927] CPU: 0 PID: 11442 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1876.011469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.013352] Call Trace: [ 1876.013920] dump_stack+0x107/0x167 [ 1876.014695] should_fail.cold+0x5/0xa [ 1876.015516] ? create_object.isra.0+0x3a/0xa30 [ 1876.016538] should_failslab+0x5/0x20 [ 1876.017361] kmem_cache_alloc+0x5b/0x310 [ 1876.018229] ? mark_held_locks+0x9e/0xe0 [ 1876.019088] create_object.isra.0+0x3a/0xa30 [ 1876.020046] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1876.021150] kmem_cache_alloc_trace+0x151/0x320 [ 1876.022156] register_for_each_vma+0x476/0xc00 [ 1876.023158] __uprobe_register+0x4df/0x880 [ 1876.024141] probe_event_enable+0x3c4/0xba0 [ 1876.025101] ? uprobe_perf_close+0x5f0/0x5f0 [ 1876.026077] trace_uprobe_register+0x54/0x730 [ 1876.027053] perf_trace_event_init+0x554/0x9c0 [ 1876.028136] perf_uprobe_init+0x173/0x210 [ 1876.029059] perf_uprobe_event_init+0xff/0x190 [ 1876.030083] perf_try_init_event+0x130/0x570 [ 1876.031051] perf_event_alloc.part.0+0xd96/0x2b70 [ 1876.032112] __do_sys_perf_event_open+0x579/0x2e60 [ 1876.033220] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1876.034286] ? perf_event_set_output+0x5b0/0x5b0 [ 1876.035325] ? wait_for_completion_io+0x270/0x270 [ 1876.036454] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1876.037579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1876.038710] do_syscall_64+0x33/0x40 [ 1876.039521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1876.040634] RIP: 0033:0x7fc9de03eb19 [ 1876.041474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.045454] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1876.047144] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1876.048630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1876.050186] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1876.051705] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1876.053276] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 [ 1876.062632] 9pnet: Insufficient options for proto=fd 18:32:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}}) 18:32:54 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000502000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:33:11 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000080)) write$selinux_attr(r0, 0x0, 0x0) 18:33:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:33:11 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000602000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:33:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x80087601, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:33:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 89) 18:33:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:33:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:33:11 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 87) [ 1892.849298] 9pnet: Insufficient options for proto=fd 18:33:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1892.892110] FAULT_INJECTION: forcing a failure. [ 1892.892110] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.894155] CPU: 1 PID: 11479 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1892.895353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1892.896795] Call Trace: [ 1892.897259] dump_stack+0x107/0x167 [ 1892.897914] should_fail.cold+0x5/0xa [ 1892.898586] ? register_for_each_vma+0x476/0xc00 [ 1892.898603] should_failslab+0x5/0x20 [ 1892.898620] kmem_cache_alloc_trace+0x55/0x320 [ 1892.898645] register_for_each_vma+0x476/0xc00 [ 1892.898680] __uprobe_register+0x4df/0x880 [ 1892.898711] probe_event_enable+0x3c4/0xba0 [ 1892.898726] ? uprobe_perf_close+0x5f0/0x5f0 [ 1892.898748] trace_uprobe_register+0x54/0x730 [ 1892.898776] perf_trace_event_init+0x554/0x9c0 [ 1892.898801] perf_uprobe_init+0x173/0x210 [ 1892.898825] perf_uprobe_event_init+0xff/0x190 [ 1892.898841] perf_try_init_event+0x130/0x570 [ 1892.898861] perf_event_alloc.part.0+0xd96/0x2b70 [ 1892.898890] __do_sys_perf_event_open+0x579/0x2e60 18:33:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000440)="0000000000000000000000002446d29025514b1c8845339908ad0491010000000c00000000000000a8f4655f0000000000000000000000000000000000000000544760505f47fa2305f7851585fbf343fea3c9bf096b17464ec255f4b1173b07f669a16488f10c0982a2c1272f94a3f40e01b9a7337ac150bc0120f1775692070c9bfdce57def1056c750bb4e5bbc275a41266df86795de1821c1e4e5d523e711576eec01ba0ee9c839259683f40dbcf1d3ca2ef66", 0xb5, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100"/55, 0x37, 0x540}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d5f4655fd5f4655fd5f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f9000000"]) 18:33:11 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000702000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1892.898915] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1892.898934] ? perf_event_set_output+0x5b0/0x5b0 18:33:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1892.898947] ? wait_for_completion_io+0x270/0x270 [ 1892.898988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1892.899005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1892.899026] do_syscall_64+0x33/0x40 [ 1892.899043] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1892.899054] RIP: 0033:0x7fc9de03eb19 18:33:11 executing program 5: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x9, 0x3]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/87) r1 = syz_io_uring_setup(0x55fd, &(0x7f0000000140)={0x0, 0x4fb4, 0x10, 0x0, 0x1f4, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x511084, 0xa0, 0x11}, 0x18) dup2(r1, r2) r3 = syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) [ 1892.899069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:33:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 1892.899078] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1892.899096] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1892.899105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1892.899115] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1892.899124] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1892.899134] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 [ 1892.954807] 9pnet: Insufficient options for proto=fd 18:33:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1892.977358] FAULT_INJECTION: forcing a failure. [ 1892.977358] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.977378] CPU: 1 PID: 11489 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1892.977386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1892.977392] Call Trace: [ 1892.977413] dump_stack+0x107/0x167 18:33:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) [ 1892.977432] should_fail.cold+0x5/0xa [ 1892.977452] ? register_for_each_vma+0x476/0xc00 [ 1892.977467] should_failslab+0x5/0x20 [ 1892.977484] kmem_cache_alloc_trace+0x55/0x320 [ 1892.977507] register_for_each_vma+0x476/0xc00 [ 1892.977541] __uprobe_register+0x4df/0x880 [ 1892.977570] probe_event_enable+0x3c4/0xba0 [ 1892.977585] ? uprobe_perf_close+0x5f0/0x5f0 [ 1892.977606] trace_uprobe_register+0x54/0x730 [ 1892.977632] perf_trace_event_init+0x554/0x9c0 [ 1892.977657] perf_uprobe_init+0x173/0x210 [ 1892.977678] perf_uprobe_event_init+0xff/0x190 [ 1892.977694] perf_try_init_event+0x130/0x570 [ 1892.977712] perf_event_alloc.part.0+0xd96/0x2b70 [ 1892.977745] __do_sys_perf_event_open+0x579/0x2e60 [ 1892.977772] ? __mutex_unlock_slowpath+0xe1/0x600 18:33:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:33:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 90) [ 1892.977793] ? perf_event_set_output+0x5b0/0x5b0 [ 1892.977805] ? wait_for_completion_io+0x270/0x270 [ 1892.977845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1892.977862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1892.977882] do_syscall_64+0x33/0x40 [ 1892.977898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1892.977908] RIP: 0033:0x7f27a2558b19 [ 1892.977923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1892.977932] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1892.977948] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1892.977958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1892.977966] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1892.977975] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1892.977985] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 [ 1893.038696] 9pnet: Insufficient options for proto=fd [ 1893.101234] 9pnet: Insufficient options for proto=fd [ 1893.115252] FAULT_INJECTION: forcing a failure. [ 1893.115252] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.115267] CPU: 1 PID: 11510 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1893.115275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.115280] Call Trace: [ 1893.115299] dump_stack+0x107/0x167 [ 1893.115315] should_fail.cold+0x5/0xa [ 1893.115333] should_failslab+0x5/0x20 [ 1893.115347] __kmalloc_track_caller+0x79/0x370 [ 1893.115359] ? strndup_user+0x74/0xe0 [ 1893.115375] memdup_user+0x22/0xd0 [ 1893.115388] strndup_user+0x74/0xe0 [ 1893.115403] __x64_sys_mount+0x133/0x300 [ 1893.115416] ? copy_mnt_ns+0xa00/0xa00 [ 1893.115435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.115450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.115467] do_syscall_64+0x33/0x40 [ 1893.115482] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.115491] RIP: 0033:0x7f2a793b8b19 [ 1893.115503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.115511] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1893.115526] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1893.115534] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1893.115542] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1893.115550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1893.115558] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 1893.324126] 9pnet: Insufficient options for proto=fd [ 1893.436908] FAULT_INJECTION: forcing a failure. [ 1893.436908] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.438504] CPU: 1 PID: 11513 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1893.439468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.440627] Call Trace: [ 1893.440999] dump_stack+0x107/0x167 [ 1893.441529] should_fail.cold+0x5/0xa [ 1893.442060] ? create_object.isra.0+0x3a/0xa30 [ 1893.442696] should_failslab+0x5/0x20 [ 1893.443223] kmem_cache_alloc+0x5b/0x310 [ 1893.443795] ? mark_held_locks+0x9e/0xe0 [ 1893.444382] create_object.isra.0+0x3a/0xa30 [ 1893.444984] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1893.445705] kmem_cache_alloc_trace+0x151/0x320 [ 1893.446352] register_for_each_vma+0x476/0xc00 [ 1893.446997] __uprobe_register+0x4df/0x880 [ 1893.447595] probe_event_enable+0x3c4/0xba0 [ 1893.448189] ? uprobe_perf_close+0x5f0/0x5f0 [ 1893.448799] trace_uprobe_register+0x54/0x730 [ 1893.449450] perf_trace_event_init+0x554/0x9c0 [ 1893.450091] perf_uprobe_init+0x173/0x210 [ 1893.450668] perf_uprobe_event_init+0xff/0x190 [ 1893.451296] perf_try_init_event+0x130/0x570 [ 1893.451904] perf_event_alloc.part.0+0xd96/0x2b70 [ 1893.452576] __do_sys_perf_event_open+0x579/0x2e60 [ 1893.453258] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1893.453943] ? perf_event_set_output+0x5b0/0x5b0 [ 1893.454589] ? wait_for_completion_io+0x270/0x270 [ 1893.455272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.455997] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.456705] do_syscall_64+0x33/0x40 [ 1893.457217] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.457936] RIP: 0033:0x7f27a2558b19 [ 1893.458445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.460977] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1893.462031] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1893.463001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1893.463969] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.464938] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1893.465928] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:33:29 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000802000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:33:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r0 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x4) io_uring_setup(0x45ac, &(0x7f0000000240)={0x0, 0xdc66, 0x1, 0x2, 0x163}) r1 = epoll_create1(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = epoll_create(0x3ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x5, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x20000001}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000002100000018000000", @ANYRES32=r1, @ANYBLOB="00090000002fbcecaeb85ebcdbb8eb8e0a0000000000002e2f66696c613000"]) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') writev(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') writev(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') r5 = dup2(r3, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000000c0)={0x80000010}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) accept4$bt_l2cap(r6, 0x0, &(0x7f0000000000), 0x100800) 18:33:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:33:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:33:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) 18:33:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 88) 18:33:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:33:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 91) [ 1911.587935] FAULT_INJECTION: forcing a failure. [ 1911.587935] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.590988] CPU: 0 PID: 11532 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1911.592727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1911.594823] Call Trace: [ 1911.595490] dump_stack+0x107/0x167 [ 1911.596407] should_fail.cold+0x5/0xa [ 1911.597361] ? create_object.isra.0+0x3a/0xa30 [ 1911.598512] should_failslab+0x5/0x20 [ 1911.599467] kmem_cache_alloc+0x5b/0x310 [ 1911.600491] create_object.isra.0+0x3a/0xa30 [ 1911.601596] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1911.602874] __kmalloc_track_caller+0x177/0x370 [ 1911.604028] ? strndup_user+0x74/0xe0 [ 1911.604985] memdup_user+0x22/0xd0 [ 1911.605880] strndup_user+0x74/0xe0 [ 1911.606690] __x64_sys_mount+0x133/0x300 [ 1911.607590] ? copy_mnt_ns+0xa00/0xa00 [ 1911.608461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1911.609637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1911.610786] do_syscall_64+0x33/0x40 [ 1911.611614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1911.612751] RIP: 0033:0x7f2a793b8b19 [ 1911.613584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1911.617651] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1911.619336] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1911.620913] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1911.622501] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1911.624083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1911.625669] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 1911.631609] 9pnet: Insufficient options for proto=fd 18:33:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:33:30 executing program 5: openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_create(0x3ff) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x8}, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) 18:33:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) 18:33:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1911.734054] 9pnet: Insufficient options for proto=fd [ 1911.765892] FAULT_INJECTION: forcing a failure. [ 1911.765892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1911.768512] CPU: 0 PID: 11549 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1911.770055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1911.771994] Call Trace: [ 1911.772589] dump_stack+0x107/0x167 [ 1911.773434] should_fail.cold+0x5/0xa [ 1911.774320] _copy_from_user+0x2e/0x1b0 [ 1911.775211] memdup_user+0x65/0xd0 [ 1911.776003] strndup_user+0x74/0xe0 [ 1911.776820] __x64_sys_mount+0x133/0x300 [ 1911.777728] ? copy_mnt_ns+0xa00/0xa00 [ 1911.778602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1911.779774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1911.780925] do_syscall_64+0x33/0x40 [ 1911.781765] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1911.782907] RIP: 0033:0x7f2a793b8b19 [ 1911.783734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1911.787809] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1911.789502] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1911.791083] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1911.792662] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1911.794246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1911.795825] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 18:33:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1911.824044] FAULT_INJECTION: forcing a failure. [ 1911.824044] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.826558] CPU: 0 PID: 11537 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1911.828101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1911.829959] Call Trace: [ 1911.830553] dump_stack+0x107/0x167 [ 1911.831374] should_fail.cold+0x5/0xa [ 1911.832231] ? register_for_each_vma+0x476/0xc00 [ 1911.833287] should_failslab+0x5/0x20 [ 1911.834193] kmem_cache_alloc_trace+0x55/0x320 [ 1911.835228] register_for_each_vma+0x476/0xc00 [ 1911.836276] __uprobe_register+0x4df/0x880 [ 1911.837243] probe_event_enable+0x3c4/0xba0 [ 1911.838214] ? uprobe_perf_close+0x5f0/0x5f0 [ 1911.839218] trace_uprobe_register+0x54/0x730 [ 1911.840236] perf_trace_event_init+0x554/0x9c0 [ 1911.841282] perf_uprobe_init+0x173/0x210 [ 1911.842228] perf_uprobe_event_init+0xff/0x190 [ 1911.843249] perf_try_init_event+0x130/0x570 [ 1911.844244] perf_event_alloc.part.0+0xd96/0x2b70 [ 1911.845338] __do_sys_perf_event_open+0x579/0x2e60 [ 1911.846459] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1911.847542] ? perf_event_set_output+0x5b0/0x5b0 [ 1911.848598] ? wait_for_completion_io+0x270/0x270 [ 1911.849720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1911.850892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1911.852046] do_syscall_64+0x33/0x40 [ 1911.852882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1911.854029] RIP: 0033:0x7f27a2558b19 [ 1911.854857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1911.858946] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1911.860640] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1911.862232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1911.863821] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1911.865406] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1911.867001] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 [ 1911.955529] FAULT_INJECTION: forcing a failure. [ 1911.955529] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.957549] CPU: 1 PID: 11538 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1911.958768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1911.960230] Call Trace: [ 1911.960706] dump_stack+0x107/0x167 [ 1911.961341] should_fail.cold+0x5/0xa [ 1911.962011] ? create_object.isra.0+0x3a/0xa30 [ 1911.962807] should_failslab+0x5/0x20 [ 1911.963469] kmem_cache_alloc+0x5b/0x310 [ 1911.964210] ? mark_held_locks+0x9e/0xe0 [ 1911.964923] create_object.isra.0+0x3a/0xa30 [ 1911.965715] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1911.966608] kmem_cache_alloc_trace+0x151/0x320 [ 1911.967422] register_for_each_vma+0x476/0xc00 [ 1911.968221] __uprobe_register+0x4df/0x880 [ 1911.968957] probe_event_enable+0x3c4/0xba0 [ 1911.969708] ? uprobe_perf_close+0x5f0/0x5f0 [ 1911.970486] trace_uprobe_register+0x54/0x730 [ 1911.971253] perf_trace_event_init+0x554/0x9c0 [ 1911.972037] perf_uprobe_init+0x173/0x210 [ 1911.972747] perf_uprobe_event_init+0xff/0x190 [ 1911.973551] perf_try_init_event+0x130/0x570 [ 1911.974297] perf_event_alloc.part.0+0xd96/0x2b70 [ 1911.975128] __do_sys_perf_event_open+0x579/0x2e60 [ 1911.975957] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1911.976768] ? perf_event_set_output+0x5b0/0x5b0 [ 1911.977575] ? wait_for_completion_io+0x270/0x270 [ 1911.978415] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1911.979301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1911.980212] do_syscall_64+0x33/0x40 [ 1911.980843] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1911.981753] RIP: 0033:0x7fc9de03eb19 [ 1911.982386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1911.985501] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1911.986789] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1911.987985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1911.989173] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1911.990360] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1911.991582] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:33:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) 18:33:46 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:33:46 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 89) 18:33:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 92) 18:33:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:33:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:33:46 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001802000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:33:46 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x5420, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1927.792327] FAULT_INJECTION: forcing a failure. [ 1927.792327] name failslab, interval 1, probability 0, space 0, times 0 [ 1927.794792] CPU: 0 PID: 11564 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1927.796248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1927.797969] Call Trace: [ 1927.798526] dump_stack+0x107/0x167 [ 1927.799288] should_fail.cold+0x5/0xa [ 1927.800104] ? copy_mount_options+0x55/0x180 [ 1927.801028] should_failslab+0x5/0x20 [ 1927.801841] kmem_cache_alloc_trace+0x55/0x320 [ 1927.802815] ? _copy_from_user+0xfb/0x1b0 [ 1927.802843] copy_mount_options+0x55/0x180 [ 1927.802864] __x64_sys_mount+0x1a8/0x300 [ 1927.802882] ? copy_mnt_ns+0xa00/0xa00 18:33:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) [ 1927.802908] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 18:33:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1927.802929] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1927.802952] do_syscall_64+0x33/0x40 [ 1927.802972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1927.802984] RIP: 0033:0x7f2a793b8b19 [ 1927.803002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1927.803012] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1927.803033] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1927.803044] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1927.803055] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1927.803067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1927.803078] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 1927.806224] FAULT_INJECTION: forcing a failure. [ 1927.806224] name failslab, interval 1, probability 0, space 0, times 0 [ 1927.806249] CPU: 1 PID: 11562 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1927.806261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1927.806269] Call Trace: [ 1927.806297] dump_stack+0x107/0x167 [ 1927.806322] should_fail.cold+0x5/0xa [ 1927.806347] ? create_object.isra.0+0x3a/0xa30 [ 1927.806368] should_failslab+0x5/0x20 [ 1927.806388] kmem_cache_alloc+0x5b/0x310 [ 1927.806410] ? mark_held_locks+0x9e/0xe0 [ 1927.806437] create_object.isra.0+0x3a/0xa30 18:33:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) [ 1927.806454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1927.806484] kmem_cache_alloc_trace+0x151/0x320 18:33:46 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 1927.806516] register_for_each_vma+0x476/0xc00 [ 1927.806562] __uprobe_register+0x4df/0x880 [ 1927.806601] probe_event_enable+0x3c4/0xba0 18:33:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1927.806621] ? uprobe_perf_close+0x5f0/0x5f0 [ 1927.806650] trace_uprobe_register+0x54/0x730 [ 1927.806684] perf_trace_event_init+0x554/0x9c0 [ 1927.806718] perf_uprobe_init+0x173/0x210 [ 1927.806754] perf_uprobe_event_init+0xff/0x190 [ 1927.806774] perf_try_init_event+0x130/0x570 [ 1927.806800] perf_event_alloc.part.0+0xd96/0x2b70 [ 1927.806837] __do_sys_perf_event_open+0x579/0x2e60 [ 1927.806868] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1927.806893] ? perf_event_set_output+0x5b0/0x5b0 [ 1927.806910] ? wait_for_completion_io+0x270/0x270 [ 1927.806962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1927.806985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1927.807011] do_syscall_64+0x33/0x40 [ 1927.807033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1927.807046] RIP: 0033:0x7f27a2558b19 [ 1927.807066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1927.807078] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1927.807101] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1927.807118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1927.807130] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1927.807141] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1927.807154] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 1927.907445] FAULT_INJECTION: forcing a failure. [ 1927.907445] name failslab, interval 1, probability 0, space 0, times 0 [ 1927.907469] CPU: 0 PID: 11580 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1927.907479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1927.907485] Call Trace: [ 1927.907509] dump_stack+0x107/0x167 [ 1927.907531] should_fail.cold+0x5/0xa [ 1927.907553] ? create_object.isra.0+0x3a/0xa30 [ 1927.907570] should_failslab+0x5/0x20 [ 1927.907592] kmem_cache_alloc+0x5b/0x310 [ 1927.907621] create_object.isra.0+0x3a/0xa30 [ 1927.907637] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1927.907666] kmem_cache_alloc_trace+0x151/0x320 [ 1927.907687] ? _copy_from_user+0xfb/0x1b0 [ 1927.907713] copy_mount_options+0x55/0x180 [ 1927.907744] __x64_sys_mount+0x1a8/0x300 [ 1927.907761] ? copy_mnt_ns+0xa00/0xa00 [ 1927.907791] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1927.907812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1927.907834] do_syscall_64+0x33/0x40 [ 1927.907854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1927.907866] RIP: 0033:0x7f2a793b8b19 [ 1927.907884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1927.907895] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1927.907916] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1927.907927] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1927.907939] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1927.907950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1927.907961] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 1927.935865] FAULT_INJECTION: forcing a failure. [ 1927.935865] name failslab, interval 1, probability 0, space 0, times 0 [ 1927.935890] CPU: 1 PID: 11575 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1927.935902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1927.935909] Call Trace: [ 1927.935937] dump_stack+0x107/0x167 [ 1927.935962] should_fail.cold+0x5/0xa [ 1927.935989] ? register_for_each_vma+0x476/0xc00 [ 1927.936010] should_failslab+0x5/0x20 [ 1927.936032] kmem_cache_alloc_trace+0x55/0x320 [ 1927.936064] register_for_each_vma+0x476/0xc00 [ 1927.936111] __uprobe_register+0x4df/0x880 [ 1927.936158] probe_event_enable+0x3c4/0xba0 [ 1927.936178] ? uprobe_perf_close+0x5f0/0x5f0 [ 1927.936206] trace_uprobe_register+0x54/0x730 [ 1927.936242] perf_trace_event_init+0x554/0x9c0 [ 1927.936276] perf_uprobe_init+0x173/0x210 [ 1927.936306] perf_uprobe_event_init+0xff/0x190 [ 1927.936327] perf_try_init_event+0x130/0x570 [ 1927.936353] perf_event_alloc.part.0+0xd96/0x2b70 18:33:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1927.936391] __do_sys_perf_event_open+0x579/0x2e60 [ 1927.936423] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1927.936448] ? perf_event_set_output+0x5b0/0x5b0 [ 1927.936465] ? wait_for_completion_io+0x270/0x270 [ 1927.936520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1927.936543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1927.936570] do_syscall_64+0x33/0x40 [ 1927.936592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1927.936606] RIP: 0033:0x7fc9de03eb19 [ 1927.936626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1927.936638] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1927.936661] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1927.936673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1927.936686] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1927.936698] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1927.936711] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 [ 1928.012429] FAULT_INJECTION: forcing a failure. [ 1928.012429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1928.110438] CPU: 0 PID: 11587 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1928.110451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1928.110458] Call Trace: [ 1928.110482] dump_stack+0x107/0x167 [ 1928.110503] should_fail.cold+0x5/0xa [ 1928.110528] _copy_from_user+0x2e/0x1b0 [ 1928.110552] copy_mount_options+0x76/0x180 [ 1928.110571] __x64_sys_mount+0x1a8/0x300 [ 1928.110588] ? copy_mnt_ns+0xa00/0xa00 [ 1928.110611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 18:33:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 93) [ 1928.110631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1928.110653] do_syscall_64+0x33/0x40 [ 1928.110670] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1928.110681] RIP: 0033:0x7f2a793b8b19 [ 1928.110697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1928.110706] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1928.110731] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1928.110741] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1928.110751] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1928.110760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1928.110770] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 1928.241368] FAULT_INJECTION: forcing a failure. [ 1928.241368] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.243424] CPU: 0 PID: 11595 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1928.244653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1928.246103] Call Trace: [ 1928.246576] dump_stack+0x107/0x167 [ 1928.247225] should_fail.cold+0x5/0xa [ 1928.247913] ? register_for_each_vma+0x476/0xc00 [ 1928.248742] should_failslab+0x5/0x20 [ 1928.249414] kmem_cache_alloc_trace+0x55/0x320 [ 1928.250235] register_for_each_vma+0x476/0xc00 [ 1928.251063] __uprobe_register+0x4df/0x880 [ 1928.251828] probe_event_enable+0x3c4/0xba0 [ 1928.252597] ? uprobe_perf_close+0x5f0/0x5f0 [ 1928.253388] trace_uprobe_register+0x54/0x730 [ 1928.254208] perf_trace_event_init+0x554/0x9c0 [ 1928.255025] perf_uprobe_init+0x173/0x210 [ 1928.255763] perf_uprobe_event_init+0xff/0x190 [ 1928.256560] perf_try_init_event+0x130/0x570 [ 1928.257315] perf_event_alloc.part.0+0xd96/0x2b70 [ 1928.258187] __do_sys_perf_event_open+0x579/0x2e60 [ 1928.259052] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1928.259894] ? perf_event_set_output+0x5b0/0x5b0 [ 1928.260723] ? wait_for_completion_io+0x270/0x270 [ 1928.261585] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1928.262533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1928.263453] do_syscall_64+0x33/0x40 [ 1928.264116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1928.265016] RIP: 0033:0x7f27a2558b19 [ 1928.265665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1928.268856] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1928.270197] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1928.271454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1928.272699] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1928.273929] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1928.275164] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:34:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 94) 18:34:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:34:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xcf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:34:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) 18:34:10 executing program 5: sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fedbdf257700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000005f0000000500ee003f0000000500ee00db0000000800ef00010000000500ee00250000000800ef00050000000500ee005a0000000800ef0001000000"], 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x1810c1, 0x8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000240)={0x2, 0x8000, 0x3}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0x8) 18:34:10 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001c02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:34:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:34:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 90) [ 1952.260330] FAULT_INJECTION: forcing a failure. [ 1952.260330] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.262784] CPU: 1 PID: 11605 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1952.264243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.265995] Call Trace: [ 1952.266557] dump_stack+0x107/0x167 [ 1952.267327] should_fail.cold+0x5/0xa [ 1952.268134] ? getname_flags.part.0+0x50/0x4f0 [ 1952.269099] should_failslab+0x5/0x20 [ 1952.269899] kmem_cache_alloc+0x5b/0x310 [ 1952.270783] getname_flags.part.0+0x50/0x4f0 [ 1952.271728] ? _copy_from_user+0xfb/0x1b0 [ 1952.272609] user_path_at_empty+0xa1/0x100 [ 1952.273500] __x64_sys_mount+0x1e9/0x300 [ 1952.274359] ? copy_mnt_ns+0xa00/0xa00 [ 1952.275179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.276281] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.277357] do_syscall_64+0x33/0x40 [ 1952.278156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.279234] RIP: 0033:0x7f2a793b8b19 18:34:10 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00170000000000000a0000006bbcf60063000002"], 0x1c}}, 0x0) [ 1952.280031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.284096] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1952.285708] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1952.287231] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1952.288745] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1952.290245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1952.291742] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 1952.299545] FAULT_INJECTION: forcing a failure. [ 1952.299545] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.302048] CPU: 1 PID: 11600 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1952.303524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.305290] Call Trace: [ 1952.305851] dump_stack+0x107/0x167 [ 1952.306650] should_fail.cold+0x5/0xa [ 1952.307462] ? create_object.isra.0+0x3a/0xa30 [ 1952.308433] should_failslab+0x5/0x20 [ 1952.309239] kmem_cache_alloc+0x5b/0x310 [ 1952.310116] ? mark_held_locks+0x9e/0xe0 [ 1952.310998] create_object.isra.0+0x3a/0xa30 [ 1952.311935] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.313019] kmem_cache_alloc_trace+0x151/0x320 [ 1952.314020] register_for_each_vma+0x476/0xc00 [ 1952.315023] __uprobe_register+0x4df/0x880 [ 1952.315933] probe_event_enable+0x3c4/0xba0 [ 1952.316857] ? uprobe_perf_close+0x5f0/0x5f0 [ 1952.317806] trace_uprobe_register+0x54/0x730 [ 1952.318786] perf_trace_event_init+0x554/0x9c0 [ 1952.319765] perf_uprobe_init+0x173/0x210 [ 1952.320668] perf_uprobe_event_init+0xff/0x190 [ 1952.321635] perf_try_init_event+0x130/0x570 [ 1952.322585] perf_event_alloc.part.0+0xd96/0x2b70 [ 1952.323632] __do_sys_perf_event_open+0x579/0x2e60 [ 1952.324687] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1952.325715] ? perf_event_set_output+0x5b0/0x5b0 [ 1952.326718] ? wait_for_completion_io+0x270/0x270 [ 1952.327775] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.328893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.330008] do_syscall_64+0x33/0x40 [ 1952.330801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.331907] RIP: 0033:0x7f27a2558b19 [ 1952.332696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.336620] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1952.338244] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1952.339771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1952.341279] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.342797] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1952.344317] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:34:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) 18:34:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:34:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1952.425331] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1952.430347] FAULT_INJECTION: forcing a failure. [ 1952.430347] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.432724] CPU: 1 PID: 11615 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1952.434194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.435946] Call Trace: [ 1952.436509] dump_stack+0x107/0x167 [ 1952.437294] should_fail.cold+0x5/0xa [ 1952.438110] ? create_object.isra.0+0x3a/0xa30 [ 1952.439080] should_failslab+0x5/0x20 [ 1952.439879] kmem_cache_alloc+0x5b/0x310 [ 1952.440749] ? mark_held_locks+0x9e/0xe0 [ 1952.441617] create_object.isra.0+0x3a/0xa30 [ 1952.442557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.443629] kmem_cache_alloc_trace+0x151/0x320 [ 1952.444613] register_for_each_vma+0x476/0xc00 [ 1952.445602] __uprobe_register+0x4df/0x880 [ 1952.446534] probe_event_enable+0x3c4/0xba0 [ 1952.447446] ? uprobe_perf_close+0x5f0/0x5f0 [ 1952.448385] trace_uprobe_register+0x54/0x730 [ 1952.449351] perf_trace_event_init+0x554/0x9c0 [ 1952.450346] perf_uprobe_init+0x173/0x210 [ 1952.451227] perf_uprobe_event_init+0xff/0x190 [ 1952.452207] perf_try_init_event+0x130/0x570 [ 1952.453139] perf_event_alloc.part.0+0xd96/0x2b70 [ 1952.454188] __do_sys_perf_event_open+0x579/0x2e60 [ 1952.455236] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1952.456262] ? perf_event_set_output+0x5b0/0x5b0 [ 1952.457257] ? wait_for_completion_io+0x270/0x270 [ 1952.458306] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.459417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.460515] do_syscall_64+0x33/0x40 [ 1952.461310] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.462393] RIP: 0033:0x7fc9de03eb19 [ 1952.463192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.467044] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1952.468642] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1952.470151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1952.471652] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.473153] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1952.474654] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 [ 1952.480531] FAULT_INJECTION: forcing a failure. [ 1952.480531] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.484276] CPU: 0 PID: 11624 Comm: syz-executor.7 Not tainted 5.10.247 #1 18:34:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1952.485744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.487691] Call Trace: [ 1952.488262] dump_stack+0x107/0x167 [ 1952.489033] should_fail.cold+0x5/0xa [ 1952.489839] ? create_object.isra.0+0x3a/0xa30 [ 1952.490827] should_failslab+0x5/0x20 [ 1952.491627] kmem_cache_alloc+0x5b/0x310 [ 1952.492507] create_object.isra.0+0x3a/0xa30 [ 1952.493438] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.494535] kmem_cache_alloc+0x159/0x310 [ 1952.495434] getname_flags.part.0+0x50/0x4f0 [ 1952.496372] ? _copy_from_user+0xfb/0x1b0 [ 1952.497268] user_path_at_empty+0xa1/0x100 [ 1952.498168] __x64_sys_mount+0x1e9/0x300 [ 1952.499029] ? copy_mnt_ns+0xa00/0xa00 [ 1952.499856] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.500977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.502085] do_syscall_64+0x33/0x40 [ 1952.502870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.503945] RIP: 0033:0x7f2a793b8b19 [ 1952.504727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.508609] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1952.510224] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1952.511732] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1952.513237] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1952.514754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1952.516256] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 1952.549484] 9pnet: Could not find request transport: fd0x0000000000000004 18:34:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) 18:34:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1fe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:34:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 95) 18:34:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:34:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:34:11 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003f02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:34:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1952.671548] FAULT_INJECTION: forcing a failure. [ 1952.671548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1952.674092] CPU: 1 PID: 11632 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1952.675563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.677307] Call Trace: [ 1952.677866] dump_stack+0x107/0x167 [ 1952.678640] should_fail.cold+0x5/0xa [ 1952.679450] strncpy_from_user+0x34/0x470 [ 1952.680343] getname_flags.part.0+0x95/0x4f0 [ 1952.681273] ? _copy_from_user+0xfb/0x1b0 [ 1952.682151] user_path_at_empty+0xa1/0x100 [ 1952.683045] __x64_sys_mount+0x1e9/0x300 [ 1952.683910] ? copy_mnt_ns+0xa00/0xa00 [ 1952.684746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.685853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.686949] do_syscall_64+0x33/0x40 [ 1952.687735] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.688818] RIP: 0033:0x7f2a793b8b19 [ 1952.689605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.693472] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1952.695244] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1952.697032] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1952.698830] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1952.700619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1952.702416] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 18:34:11 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 91) [ 1952.736291] FAULT_INJECTION: forcing a failure. [ 1952.736291] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.738778] CPU: 0 PID: 11638 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1952.740214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.741934] Call Trace: [ 1952.742510] dump_stack+0x107/0x167 [ 1952.743263] should_fail.cold+0x5/0xa [ 1952.744051] ? register_for_each_vma+0x476/0xc00 [ 1952.745030] should_failslab+0x5/0x20 [ 1952.745814] kmem_cache_alloc_trace+0x55/0x320 [ 1952.746881] register_for_each_vma+0x476/0xc00 [ 1952.747844] __uprobe_register+0x4df/0x880 [ 1952.748723] probe_event_enable+0x3c4/0xba0 [ 1952.749483] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1952.749619] ? uprobe_perf_close+0x5f0/0x5f0 [ 1952.752246] trace_uprobe_register+0x54/0x730 [ 1952.753185] perf_trace_event_init+0x554/0x9c0 [ 1952.754138] perf_uprobe_init+0x173/0x210 [ 1952.755002] perf_uprobe_event_init+0xff/0x190 [ 1952.755956] perf_try_init_event+0x130/0x570 [ 1952.756867] perf_event_alloc.part.0+0xd96/0x2b70 [ 1952.757869] __do_sys_perf_event_open+0x579/0x2e60 [ 1952.758935] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1952.759936] ? perf_event_set_output+0x5b0/0x5b0 [ 1952.760908] ? wait_for_completion_io+0x270/0x270 [ 1952.761931] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.763039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.764118] do_syscall_64+0x33/0x40 [ 1952.764887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.765955] RIP: 0033:0x7f27a2558b19 [ 1952.766732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.770514] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1952.772099] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1952.773570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1952.775032] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.776497] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1952.777953] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:34:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1952.854327] FAULT_INJECTION: forcing a failure. [ 1952.854327] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.856828] CPU: 0 PID: 11645 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1952.858240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.859925] Call Trace: [ 1952.860456] dump_stack+0x107/0x167 [ 1952.861191] should_fail.cold+0x5/0xa [ 1952.861978] ? register_for_each_vma+0x476/0xc00 [ 1952.862936] should_failslab+0x5/0x20 [ 1952.863697] kmem_cache_alloc_trace+0x55/0x320 [ 1952.864637] register_for_each_vma+0x476/0xc00 [ 1952.865578] __uprobe_register+0x4df/0x880 [ 1952.866454] probe_event_enable+0x3c4/0xba0 [ 1952.867335] ? uprobe_perf_close+0x5f0/0x5f0 [ 1952.868236] trace_uprobe_register+0x54/0x730 [ 1952.869145] perf_trace_event_init+0x554/0x9c0 [ 1952.870095] perf_uprobe_init+0x173/0x210 [ 1952.870913] perf_uprobe_event_init+0xff/0x190 [ 1952.871800] perf_try_init_event+0x130/0x570 [ 1952.872688] perf_event_alloc.part.0+0xd96/0x2b70 [ 1952.873676] __do_sys_perf_event_open+0x579/0x2e60 [ 1952.874687] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1952.875668] ? perf_event_set_output+0x5b0/0x5b0 [ 1952.876631] ? wait_for_completion_io+0x270/0x270 [ 1952.877640] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.878713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.879649] 9pnet: Insufficient options for proto=fd [ 1952.879763] do_syscall_64+0x33/0x40 [ 1952.879783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.879805] RIP: 0033:0x7fc9de03eb19 [ 1952.883538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.887207] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1952.888721] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1952.890167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1952.891586] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.893014] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1952.894464] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:34:27 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:34:27 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 92) 18:34:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:34:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) 18:34:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1d) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:34:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:34:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 96) [ 1968.698194] FAULT_INJECTION: forcing a failure. [ 1968.698194] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.700814] CPU: 1 PID: 11655 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1968.702400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1968.704295] Call Trace: [ 1968.704906] dump_stack+0x107/0x167 [ 1968.705737] should_fail.cold+0x5/0xa [ 1968.706613] ? alloc_fs_context+0x57/0x840 [ 1968.707576] should_failslab+0x5/0x20 [ 1968.708446] kmem_cache_alloc_trace+0x55/0x320 [ 1968.709487] alloc_fs_context+0x57/0x840 [ 1968.710425] path_mount+0xab1/0x21e0 [ 1968.711278] ? strncpy_from_user+0x9e/0x470 [ 1968.712257] ? finish_automount+0xa90/0xa90 [ 1968.713240] ? getname_flags.part.0+0x1dd/0x4f0 [ 1968.714302] ? _copy_from_user+0xfb/0x1b0 [ 1968.715257] __x64_sys_mount+0x282/0x300 [ 1968.716178] ? copy_mnt_ns+0xa00/0xa00 [ 1968.717069] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1968.718273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1968.719447] do_syscall_64+0x33/0x40 [ 1968.720294] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1968.721456] RIP: 0033:0x7f2a793b8b19 [ 1968.722303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.726461] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1968.728178] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1968.729794] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1968.731423] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1968.733037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1968.734670] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 1968.742960] FAULT_INJECTION: forcing a failure. [ 1968.742960] name failslab, interval 1, probability 0, space 0, times 0 18:34:27 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 1968.745069] CPU: 0 PID: 11663 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1968.746501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1968.748015] Call Trace: [ 1968.748505] dump_stack+0x107/0x167 [ 1968.749186] should_fail.cold+0x5/0xa [ 1968.749475] 9pnet: Insufficient options for proto=fd [ 1968.749886] ? create_object.isra.0+0x3a/0xa30 [ 1968.749904] should_failslab+0x5/0x20 [ 1968.749930] kmem_cache_alloc+0x5b/0x310 [ 1968.753312] ? mark_held_locks+0x9e/0xe0 [ 1968.754063] create_object.isra.0+0x3a/0xa30 [ 1968.754880] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1968.755815] kmem_cache_alloc_trace+0x151/0x320 [ 1968.756683] register_for_each_vma+0x476/0xc00 [ 1968.757540] __uprobe_register+0x4df/0x880 [ 1968.758362] probe_event_enable+0x3c4/0xba0 [ 1968.759161] ? uprobe_perf_close+0x5f0/0x5f0 [ 1968.759974] trace_uprobe_register+0x54/0x730 [ 1968.760807] perf_trace_event_init+0x554/0x9c0 [ 1968.761650] perf_uprobe_init+0x173/0x210 [ 1968.762429] perf_uprobe_event_init+0xff/0x190 [ 1968.763275] perf_try_init_event+0x130/0x570 [ 1968.764091] perf_event_alloc.part.0+0xd96/0x2b70 [ 1968.764986] __do_sys_perf_event_open+0x579/0x2e60 [ 1968.765895] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1968.766802] ? perf_event_set_output+0x5b0/0x5b0 [ 1968.767667] ? wait_for_completion_io+0x270/0x270 [ 1968.768578] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1968.769538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1968.770494] do_syscall_64+0x33/0x40 [ 1968.771181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1968.772122] RIP: 0033:0x7f27a2558b19 [ 1968.772809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.776186] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1968.777578] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 1968.778893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1968.780194] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1968.781501] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1968.782825] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 18:34:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1968.812422] FAULT_INJECTION: forcing a failure. [ 1968.812422] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.814511] CPU: 0 PID: 11671 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1968.815771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1968.817268] Call Trace: [ 1968.817759] dump_stack+0x107/0x167 [ 1968.818433] should_fail.cold+0x5/0xa [ 1968.819125] ? create_object.isra.0+0x3a/0xa30 [ 1968.819946] should_failslab+0x5/0x20 [ 1968.820637] kmem_cache_alloc+0x5b/0x310 [ 1968.821376] ? mark_held_locks+0x9e/0xe0 [ 1968.822131] create_object.isra.0+0x3a/0xa30 [ 1968.822922] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1968.823852] kmem_cache_alloc_trace+0x151/0x320 [ 1968.824697] register_for_each_vma+0x476/0xc00 [ 1968.825552] __uprobe_register+0x4df/0x880 [ 1968.826357] probe_event_enable+0x3c4/0xba0 [ 1968.827149] ? uprobe_perf_close+0x5f0/0x5f0 [ 1968.827960] trace_uprobe_register+0x54/0x730 [ 1968.828790] perf_trace_event_init+0x554/0x9c0 [ 1968.829642] perf_uprobe_init+0x173/0x210 [ 1968.830418] perf_uprobe_event_init+0xff/0x190 [ 1968.831253] perf_try_init_event+0x130/0x570 [ 1968.832051] perf_event_alloc.part.0+0xd96/0x2b70 [ 1968.832947] __do_sys_perf_event_open+0x579/0x2e60 [ 1968.833847] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1968.834743] ? perf_event_set_output+0x5b0/0x5b0 [ 1968.835605] ? wait_for_completion_io+0x270/0x270 [ 1968.836510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1968.837477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1968.838433] do_syscall_64+0x33/0x40 [ 1968.839127] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1968.840050] RIP: 0033:0x7fc9de03eb19 [ 1968.840726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.844085] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1968.845478] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 1968.846779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1968.848081] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1968.849375] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1968.850683] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:34:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) 18:34:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:34:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1d00) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1968.911329] FAULT_INJECTION: forcing a failure. [ 1968.911329] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.913378] CPU: 0 PID: 11676 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1968.914622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1968.916088] Call Trace: [ 1968.916567] dump_stack+0x107/0x167 [ 1968.917229] should_fail.cold+0x5/0xa [ 1968.917907] ? create_object.isra.0+0x3a/0xa30 [ 1968.918731] should_failslab+0x5/0x20 [ 1968.919413] kmem_cache_alloc+0x5b/0x310 [ 1968.920139] create_object.isra.0+0x3a/0xa30 [ 1968.920914] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1968.921819] kmem_cache_alloc_trace+0x151/0x320 [ 1968.922662] alloc_fs_context+0x57/0x840 [ 1968.923388] path_mount+0xab1/0x21e0 [ 1968.924055] ? strncpy_from_user+0x9e/0x470 [ 1968.924827] ? finish_automount+0xa90/0xa90 [ 1968.925592] ? getname_flags.part.0+0x1dd/0x4f0 [ 1968.926430] ? _copy_from_user+0xfb/0x1b0 [ 1968.927176] __x64_sys_mount+0x282/0x300 [ 1968.927894] ? copy_mnt_ns+0xa00/0xa00 [ 1968.928587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1968.929519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1968.930450] do_syscall_64+0x33/0x40 [ 1968.931105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1968.932017] RIP: 0033:0x7f2a793b8b19 [ 1968.932681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.935920] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1968.937249] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1968.938510] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1968.939763] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1968.941008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1968.942265] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 1968.956244] 9pnet: Insufficient options for proto=fd 18:34:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:34:44 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x77, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:34:44 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 93) 18:34:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x20000) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:34:44 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="f42680ac97bd480d12be8f9f7c274a63312c37", @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf250a00000008003b000600000005002f0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x8080) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0)=r1, 0x12) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x81, 0x1, 0xc7, 0x0, 0x0, 0x100000001, 0x40, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x1dc, 0x2}, 0x100, 0x3f, 0x88c, 0x7, 0x1, 0x3, 0x8, 0x0, 0x8001, 0x0, 0x8001}, r1, 0x5, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f00000001d00210c000000000000000004000200d1001180f817f38838867118d8f7d30f5e00c04164aa091d55e1cab9264fce85edde14acfec3678f7cb8ce6e8dd83a6dfdf5c178c05332b894bfef0c75edf063672ce2ea179ed6975063aa21f55e3aae151d27d6069546a0030356ecc68bb21fa8c76fd8cdb50a1858916b2d8043b068bcbd882521dee5ed3990a74df47171c2d3a821e8aa5daa86c9618a90f0c8e5b831ce56aa2df7456ecd46dcf13f4f1e215dacb80b1fa684820000f1ee20238b5c31354069839cd36b49dad9b2ed18a00d48b324caf70c2add490800000082d5db8000000008005b00ac1e0101"], 0xf0}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) 18:34:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) 18:34:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 97) 18:34:44 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000006802000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1986.352743] FAULT_INJECTION: forcing a failure. [ 1986.352743] name failslab, interval 1, probability 0, space 0, times 0 [ 1986.355203] CPU: 0 PID: 11692 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1986.356657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1986.358423] Call Trace: [ 1986.358991] dump_stack+0x107/0x167 [ 1986.359762] should_fail.cold+0x5/0xa [ 1986.360567] ? legacy_init_fs_context+0x44/0xe0 [ 1986.361550] should_failslab+0x5/0x20 [ 1986.362356] kmem_cache_alloc_trace+0x55/0x320 [ 1986.363302] ? lockdep_init_map_type+0x2c7/0x780 [ 1986.364311] legacy_init_fs_context+0x44/0xe0 [ 1986.365243] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1986.366296] alloc_fs_context+0x4fd/0x840 [ 1986.367181] path_mount+0xab1/0x21e0 [ 1986.367977] ? strncpy_from_user+0x9e/0x470 [ 1986.368893] ? finish_automount+0xa90/0xa90 [ 1986.369799] ? getname_flags.part.0+0x1dd/0x4f0 [ 1986.369818] 9pnet: Insufficient options for proto=fd [ 1986.370787] ? _copy_from_user+0xfb/0x1b0 [ 1986.370829] __x64_sys_mount+0x282/0x300 [ 1986.373850] ? copy_mnt_ns+0xa00/0xa00 [ 1986.374866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1986.375974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1986.377067] do_syscall_64+0x33/0x40 [ 1986.377862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1986.378951] RIP: 0033:0x7f2a793b8b19 [ 1986.379743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1986.383631] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1986.385234] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1986.386745] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1986.388256] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1986.389760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1986.391278] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 1986.397110] FAULT_INJECTION: forcing a failure. [ 1986.397110] name failslab, interval 1, probability 0, space 0, times 0 [ 1986.399520] CPU: 1 PID: 11696 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1986.399532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1986.399539] Call Trace: [ 1986.399568] dump_stack+0x107/0x167 [ 1986.399594] should_fail.cold+0x5/0xa [ 1986.399621] ? register_for_each_vma+0x476/0xc00 [ 1986.399642] should_failslab+0x5/0x20 [ 1986.399663] kmem_cache_alloc_trace+0x55/0x320 [ 1986.399694] register_for_each_vma+0x476/0xc00 [ 1986.399747] __uprobe_register+0x4df/0x880 [ 1986.399787] probe_event_enable+0x3c4/0xba0 [ 1986.399807] ? uprobe_perf_close+0x5f0/0x5f0 [ 1986.399834] trace_uprobe_register+0x54/0x730 [ 1986.399872] perf_trace_event_init+0x554/0x9c0 [ 1986.399907] perf_uprobe_init+0x173/0x210 [ 1986.399936] perf_uprobe_event_init+0xff/0x190 [ 1986.399957] perf_try_init_event+0x130/0x570 [ 1986.399983] perf_event_alloc.part.0+0xd96/0x2b70 [ 1986.417144] __do_sys_perf_event_open+0x579/0x2e60 [ 1986.418215] ? __mutex_unlock_slowpath+0xe1/0x600 18:34:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) [ 1986.418239] ? perf_event_set_output+0x5b0/0x5b0 18:34:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) [ 1986.418256] ? wait_for_completion_io+0x270/0x270 [ 1986.418319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1986.418341] ? syscall_enter_from_user_mode+0x1d/0x50 18:34:44 executing program 5: mlockall(0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0xff, 0x2, 0x0, {0x0, 0x0, r0}}, 0x749b) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) mmap(&(0x7f00000f7000/0x1000)=nil, 0x1000, 0x1000005, 0x80010, r1, 0x6a7cc000) [ 1986.418367] do_syscall_64+0x33/0x40 [ 1986.418388] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1986.418401] RIP: 0033:0x7fc9de03eb19 [ 1986.418421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1986.418432] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1986.418454] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 1986.418466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1986.418477] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1986.418488] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1986.418500] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 [ 1986.480305] FAULT_INJECTION: forcing a failure. [ 1986.480305] name failslab, interval 1, probability 0, space 0, times 0 [ 1986.480370] CPU: 1 PID: 11708 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1986.480382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1986.480390] Call Trace: [ 1986.480419] dump_stack+0x107/0x167 [ 1986.480443] should_fail.cold+0x5/0xa [ 1986.480467] ? create_object.isra.0+0x3a/0xa30 [ 1986.480488] should_failslab+0x5/0x20 [ 1986.480508] kmem_cache_alloc+0x5b/0x310 [ 1986.480545] create_object.isra.0+0x3a/0xa30 [ 1986.480565] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1986.480600] kmem_cache_alloc_trace+0x151/0x320 [ 1986.480624] ? lockdep_init_map_type+0x2c7/0x780 [ 1986.480658] legacy_init_fs_context+0x44/0xe0 [ 1986.480679] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1986.480700] alloc_fs_context+0x4fd/0x840 [ 1986.480744] path_mount+0xab1/0x21e0 [ 1986.480780] ? strncpy_from_user+0x9e/0x470 [ 1986.480805] ? finish_automount+0xa90/0xa90 [ 1986.480830] ? getname_flags.part.0+0x1dd/0x4f0 [ 1986.480856] ? _copy_from_user+0xfb/0x1b0 [ 1986.480896] __x64_sys_mount+0x282/0x300 [ 1986.480917] ? copy_mnt_ns+0xa00/0xa00 [ 1986.480948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1986.480974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1986.481003] do_syscall_64+0x33/0x40 [ 1986.481029] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1986.481043] RIP: 0033:0x7f2a793b8b19 [ 1986.481063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1986.481078] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1986.481106] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1986.481123] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1986.481140] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1986.481155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1986.481172] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 1986.518328] 9pnet: Insufficient options for proto=fd [ 1986.522908] FAULT_INJECTION: forcing a failure. [ 1986.522908] name failslab, interval 1, probability 0, space 0, times 0 [ 1986.522931] CPU: 0 PID: 11706 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1986.522942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1986.522950] Call Trace: [ 1986.522977] dump_stack+0x107/0x167 [ 1986.523001] should_fail.cold+0x5/0xa [ 1986.523027] ? register_for_each_vma+0x476/0xc00 [ 1986.523046] should_failslab+0x5/0x20 [ 1986.523067] kmem_cache_alloc_trace+0x55/0x320 [ 1986.523099] register_for_each_vma+0x476/0xc00 [ 1986.523146] __uprobe_register+0x4df/0x880 [ 1986.523186] probe_event_enable+0x3c4/0xba0 [ 1986.523205] ? uprobe_perf_close+0x5f0/0x5f0 [ 1986.523232] trace_uprobe_register+0x54/0x730 [ 1986.523265] perf_trace_event_init+0x554/0x9c0 [ 1986.523298] perf_uprobe_init+0x173/0x210 [ 1986.523326] perf_uprobe_event_init+0xff/0x190 [ 1986.523345] perf_try_init_event+0x130/0x570 [ 1986.523369] perf_event_alloc.part.0+0xd96/0x2b70 [ 1986.523406] __do_sys_perf_event_open+0x579/0x2e60 [ 1986.579626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1986.580584] ? perf_event_set_output+0x5b0/0x5b0 [ 1986.581520] ? wait_for_completion_io+0x270/0x270 [ 1986.582497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1986.583530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1986.584555] do_syscall_64+0x33/0x40 [ 1986.585295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1986.586313] RIP: 0033:0x7f27a2558b19 [ 1986.587039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1986.590645] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1986.592139] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 1986.593529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1986.594930] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1986.596308] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1986.597685] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 18:34:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) 18:34:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) 18:34:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1d000000) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1986.712495] 9pnet: Insufficient options for proto=fd [ 1986.723096] FAULT_INJECTION: forcing a failure. [ 1986.723096] name failslab, interval 1, probability 0, space 0, times 0 [ 1986.725591] CPU: 1 PID: 11719 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 1986.727076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1986.727085] Call Trace: [ 1986.727112] dump_stack+0x107/0x167 [ 1986.727135] should_fail.cold+0x5/0xa [ 1986.727157] ? legacy_init_fs_context+0x44/0xe0 [ 1986.727176] should_failslab+0x5/0x20 [ 1986.727196] kmem_cache_alloc_trace+0x55/0x320 [ 1986.727217] ? lockdep_init_map_type+0x2c7/0x780 [ 1986.727241] legacy_init_fs_context+0x44/0xe0 18:34:45 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000048002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 1986.727258] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1986.727274] alloc_fs_context+0x4fd/0x840 [ 1986.727302] path_mount+0xab1/0x21e0 [ 1986.727329] ? strncpy_from_user+0x9e/0x470 [ 1986.727349] ? finish_automount+0xa90/0xa90 [ 1986.727369] ? getname_flags.part.0+0x1dd/0x4f0 [ 1986.727389] ? _copy_from_user+0xfb/0x1b0 [ 1986.727419] __x64_sys_mount+0x282/0x300 [ 1986.727438] ? copy_mnt_ns+0xa00/0xa00 [ 1986.727463] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1986.727486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1986.727512] do_syscall_64+0x33/0x40 [ 1986.727532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1986.727545] RIP: 0033:0x7f2a793b8b19 [ 1986.727563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1986.727574] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1986.727595] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 1986.727606] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1986.727618] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 1986.727629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1986.727640] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 18:35:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 18:35:02 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20ffffff8c02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:35:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 98) 18:35:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 94) 18:35:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) 18:35:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xfdfdffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:35:02 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2004.458446] FAULT_INJECTION: forcing a failure. [ 2004.458446] name failslab, interval 1, probability 0, space 0, times 0 [ 2004.460932] CPU: 1 PID: 11731 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2004.462396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2004.464160] Call Trace: [ 2004.464719] dump_stack+0x107/0x167 [ 2004.465500] should_fail.cold+0x5/0xa [ 2004.466306] ? create_object.isra.0+0x3a/0xa30 [ 2004.466332] FAULT_INJECTION: forcing a failure. [ 2004.466332] name failslab, interval 1, probability 0, space 0, times 0 [ 2004.469583] should_failslab+0x5/0x20 [ 2004.470394] kmem_cache_alloc+0x5b/0x310 [ 2004.471270] ? mark_held_locks+0x9e/0xe0 [ 2004.472130] create_object.isra.0+0x3a/0xa30 [ 2004.473061] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2004.474136] kmem_cache_alloc_trace+0x151/0x320 [ 2004.475150] register_for_each_vma+0x476/0xc00 [ 2004.476129] __uprobe_register+0x4df/0x880 [ 2004.477041] probe_event_enable+0x3c4/0xba0 [ 2004.477953] ? uprobe_perf_close+0x5f0/0x5f0 [ 2004.478890] trace_uprobe_register+0x54/0x730 [ 2004.479850] perf_trace_event_init+0x554/0x9c0 [ 2004.480832] perf_uprobe_init+0x173/0x210 [ 2004.481722] perf_uprobe_event_init+0xff/0x190 [ 2004.482695] perf_try_init_event+0x130/0x570 [ 2004.483636] perf_event_alloc.part.0+0xd96/0x2b70 [ 2004.484667] __do_sys_perf_event_open+0x579/0x2e60 [ 2004.485721] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2004.486743] ? perf_event_set_output+0x5b0/0x5b0 [ 2004.487732] ? wait_for_completion_io+0x270/0x270 [ 2004.488778] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2004.489886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2004.490989] do_syscall_64+0x33/0x40 [ 2004.491777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2004.492867] RIP: 0033:0x7f27a2558b19 [ 2004.493652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2004.497518] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2004.499122] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 2004.500622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 2004.502124] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2004.503622] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2004.505123] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 2004.506667] CPU: 0 PID: 11737 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2004.508272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2004.510146] Call Trace: [ 2004.510760] dump_stack+0x107/0x167 [ 2004.511589] should_fail.cold+0x5/0xa [ 2004.512457] ? create_object.isra.0+0x3a/0xa30 [ 2004.513503] should_failslab+0x5/0x20 [ 2004.514361] kmem_cache_alloc+0x5b/0x310 [ 2004.515295] create_object.isra.0+0x3a/0xa30 [ 2004.516284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2004.517431] kmem_cache_alloc_trace+0x151/0x320 [ 2004.518484] ? lockdep_init_map_type+0x2c7/0x780 [ 2004.519556] legacy_init_fs_context+0x44/0xe0 [ 2004.520561] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2004.521677] alloc_fs_context+0x4fd/0x840 [ 2004.522628] path_mount+0xab1/0x21e0 [ 2004.523473] ? strncpy_from_user+0x9e/0x470 [ 2004.524439] ? finish_automount+0xa90/0xa90 [ 2004.525406] ? getname_flags.part.0+0x1dd/0x4f0 [ 2004.526448] ? _copy_from_user+0xfb/0x1b0 [ 2004.527395] __x64_sys_mount+0x282/0x300 [ 2004.528307] ? copy_mnt_ns+0xa00/0xa00 [ 2004.529186] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2004.530450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2004.531634] do_syscall_64+0x33/0x40 [ 2004.532473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2004.533626] RIP: 0033:0x7f2a793b8b19 [ 2004.534476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2004.538674] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2004.540392] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 2004.542010] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 2004.543627] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 2004.545290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2004.546898] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 18:35:02 executing program 5: r0 = msgget(0x0, 0x0) r1 = msgget$private(0x0, 0xc) msgget$private(0x0, 0x0) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/77}, 0x55, 0x0, 0x2000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) sched_getparam(r2, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, 0x0, 0x0, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000100)=""/129) msgrcv(r3, &(0x7f0000000000)={0x0, ""/76}, 0x54, 0x3, 0x0) msgsnd(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000027434e63209ecc45d984e3e6e66769494eff14f133a0b3a1f12d917d432d6be1082db78feacde3b889b215fac31222ec17199b465658fa74eb33b5099cea94e41f09c7c21167ee3609c384e72577d08ec1303a6e9815781bad57b947ae51d16045e2aa943ae8a08e8b02d64d3768fee480b68c1359da9004e55a72415bf7b4641c1cc3f9ff5ab5e2eeecb37ec653ee357cb44c1eb13950dfac696c35bf6de94051efdfb93c16f61751ecc3cc1afc96459a8e613efebf"], 0xc6, 0x0) msgctl$IPC_RMID(r3, 0x0) r4 = inotify_init1(0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r5, r4, 0x0) [ 2004.606352] FAULT_INJECTION: forcing a failure. [ 2004.606352] name failslab, interval 1, probability 0, space 0, times 0 [ 2004.609071] CPU: 0 PID: 11742 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2004.610692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2004.612555] Call Trace: [ 2004.613158] dump_stack+0x107/0x167 [ 2004.613990] should_fail.cold+0x5/0xa [ 2004.614879] ? create_object.isra.0+0x3a/0xa30 [ 2004.615909] should_failslab+0x5/0x20 [ 2004.616776] kmem_cache_alloc+0x5b/0x310 [ 2004.617697] ? mark_held_locks+0x9e/0xe0 [ 2004.618711] create_object.isra.0+0x3a/0xa30 [ 2004.619710] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2004.620870] kmem_cache_alloc_trace+0x151/0x320 [ 2004.621935] register_for_each_vma+0x476/0xc00 [ 2004.623010] __uprobe_register+0x4df/0x880 [ 2004.623989] probe_event_enable+0x3c4/0xba0 [ 2004.624962] ? uprobe_perf_close+0x5f0/0x5f0 [ 2004.625963] trace_uprobe_register+0x54/0x730 [ 2004.627000] perf_trace_event_init+0x554/0x9c0 [ 2004.628050] perf_uprobe_init+0x173/0x210 [ 2004.628994] perf_uprobe_event_init+0xff/0x190 [ 2004.630025] perf_try_init_event+0x130/0x570 [ 2004.631033] perf_event_alloc.part.0+0xd96/0x2b70 [ 2004.632144] __do_sys_perf_event_open+0x579/0x2e60 [ 2004.633276] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2004.634367] ? perf_event_set_output+0x5b0/0x5b0 [ 2004.635441] ? wait_for_completion_io+0x270/0x270 [ 2004.636555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2004.637734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2004.638907] do_syscall_64+0x33/0x40 [ 2004.639747] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2004.640898] RIP: 0033:0x7fc9de03eb19 [ 2004.641737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2004.645876] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2004.647598] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 2004.649202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 2004.650810] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2004.652411] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2004.654011] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:35:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xfffffdfd) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:35:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16) 18:35:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 1) [ 2004.692881] audit: type=1400 audit(1769020503.126:132): avc: denied { watch_reads } for pid=11744 comm="syz-executor.5" path="/syzkaller-testdir319895063/syzkaller.02xsQG/320/file0" dev="sda" ino=16049 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 [ 2004.712738] FAULT_INJECTION: forcing a failure. [ 2004.712738] name failslab, interval 1, probability 0, space 0, times 0 [ 2004.715313] CPU: 1 PID: 11753 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2004.716785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2004.718551] Call Trace: [ 2004.718579] dump_stack+0x107/0x167 [ 2004.718602] should_fail.cold+0x5/0xa [ 2004.718626] should_failslab+0x5/0x20 [ 2004.718647] __kmalloc_track_caller+0x79/0x370 [ 2004.718663] ? strndup_user+0x74/0xe0 [ 2004.718686] memdup_user+0x22/0xd0 [ 2004.718703] strndup_user+0x74/0xe0 [ 2004.718724] __x64_sys_mount+0x133/0x300 [ 2004.718742] ? copy_mnt_ns+0xa00/0xa00 [ 2004.718768] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2004.718791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2004.718813] do_syscall_64+0x33/0x40 [ 2004.718833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2004.718846] RIP: 0033:0x7fbbb2ce3b19 [ 2004.718865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2004.718876] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2004.718896] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2004.718908] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2004.718920] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2004.718930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2004.718941] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2004.736900] FAULT_INJECTION: forcing a failure. [ 2004.736900] name failslab, interval 1, probability 0, space 0, times 0 [ 2004.759554] CPU: 1 PID: 11756 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2004.759565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2004.759571] Call Trace: [ 2004.759594] dump_stack+0x107/0x167 [ 2004.759623] should_fail.cold+0x5/0xa [ 2004.765005] ? v9fs_mount+0x5a/0x8f0 [ 2004.765793] should_failslab+0x5/0x20 [ 2004.766601] kmem_cache_alloc_trace+0x55/0x320 [ 2004.767561] ? v9fs_write_inode+0x60/0x60 [ 2004.768439] v9fs_mount+0x5a/0x8f0 [ 2004.769191] ? v9fs_write_inode+0x60/0x60 [ 2004.770066] legacy_get_tree+0x105/0x220 [ 2004.770947] vfs_get_tree+0x8e/0x300 [ 2004.771753] path_mount+0x1490/0x21e0 [ 2004.772571] ? strncpy_from_user+0x9e/0x470 [ 2004.773484] ? finish_automount+0xa90/0xa90 [ 2004.774393] ? getname_flags.part.0+0x1dd/0x4f0 [ 2004.775389] ? _copy_from_user+0xfb/0x1b0 [ 2004.776274] __x64_sys_mount+0x282/0x300 [ 2004.777138] ? copy_mnt_ns+0xa00/0xa00 [ 2004.777964] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2004.779074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2004.780168] do_syscall_64+0x33/0x40 [ 2004.780961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2004.782040] RIP: 0033:0x7f2a793b8b19 [ 2004.782837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2004.786721] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2004.788324] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 2004.789824] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 2004.791340] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 2004.792844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2004.794377] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 18:35:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 2) 18:35:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2004.851705] FAULT_INJECTION: forcing a failure. [ 2004.851705] name failslab, interval 1, probability 0, space 0, times 0 [ 2004.854104] CPU: 1 PID: 11760 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2004.855562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2004.857285] Call Trace: [ 2004.857849] dump_stack+0x107/0x167 [ 2004.858626] should_fail.cold+0x5/0xa [ 2004.859414] ? create_object.isra.0+0x3a/0xa30 [ 2004.860357] should_failslab+0x5/0x20 [ 2004.861148] kmem_cache_alloc+0x5b/0x310 [ 2004.861995] create_object.isra.0+0x3a/0xa30 [ 2004.862909] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2004.863949] __kmalloc_track_caller+0x177/0x370 [ 2004.864905] ? strndup_user+0x74/0xe0 [ 2004.865686] memdup_user+0x22/0xd0 [ 2004.866410] strndup_user+0x74/0xe0 [ 2004.867173] __x64_sys_mount+0x133/0x300 [ 2004.868010] ? copy_mnt_ns+0xa00/0xa00 [ 2004.868820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2004.869895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2004.870973] do_syscall_64+0x33/0x40 [ 2004.871750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2004.872808] RIP: 0033:0x7fbbb2ce3b19 [ 2004.873568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2004.877359] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2004.878981] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2004.880457] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 18:35:03 executing program 5: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000240)={0x0, @aes128, 0x0, @desc2}) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4305, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) getsockname(r4, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x6, 0xa1, 0x8, 0x3f, 0x0, 0xc, 0xa0, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x8004, 0x2, 0xff, 0x7, 0x100000002, 0x337, 0x4, 0x0, 0x9f3597d, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10, r5, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="280026bd702a826946", @ANYRES32, @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 2004.880469] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2004.880481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2004.880492] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:35:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 99) 18:35:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17) [ 2004.924265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2004.937054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2004.938572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2004.940961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:35:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 95) [ 2004.960920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2004.989497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2004.991270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2004.993201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2005.001539] FAULT_INJECTION: forcing a failure. [ 2005.001539] name failslab, interval 1, probability 0, space 0, times 0 [ 2005.004157] CPU: 0 PID: 11771 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2005.005717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2005.007590] Call Trace: [ 2005.008190] dump_stack+0x107/0x167 [ 2005.009023] should_fail.cold+0x5/0xa [ 2005.009891] ? create_object.isra.0+0x3a/0xa30 [ 2005.010933] should_failslab+0x5/0x20 [ 2005.011795] kmem_cache_alloc+0x5b/0x310 [ 2005.012726] create_object.isra.0+0x3a/0xa30 [ 2005.013719] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2005.014884] __kmalloc_track_caller+0x177/0x370 [ 2005.015932] ? v9fs_session_init+0xa7/0x1680 [ 2005.016930] ? kernel_text_address+0xf2/0x120 [ 2005.017953] kstrdup+0x36/0x70 [ 2005.018691] v9fs_session_init+0xa7/0x1680 [ 2005.019654] ? lock_release+0x680/0x680 [ 2005.020549] ? find_held_lock+0x2c/0x110 [ 2005.021479] ? kmem_cache_alloc_trace+0x151/0x320 [ 2005.022574] ? v9fs_show_options+0x690/0x690 [ 2005.023585] ? trace_hardirqs_on+0x5b/0x180 [ 2005.024562] ? kasan_unpoison_shadow+0x33/0x50 [ 2005.025593] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2005.026753] v9fs_mount+0x79/0x8f0 [ 2005.027560] ? v9fs_write_inode+0x60/0x60 [ 2005.028497] legacy_get_tree+0x105/0x220 [ 2005.029418] vfs_get_tree+0x8e/0x300 [ 2005.030260] path_mount+0x1490/0x21e0 [ 2005.031135] ? strncpy_from_user+0x9e/0x470 [ 2005.032110] ? finish_automount+0xa90/0xa90 [ 2005.033083] ? getname_flags.part.0+0x1dd/0x4f0 [ 2005.034130] ? _copy_from_user+0xfb/0x1b0 [ 2005.035089] __x64_sys_mount+0x282/0x300 [ 2005.036006] ? copy_mnt_ns+0xa00/0xa00 [ 2005.036892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2005.038077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2005.039263] do_syscall_64+0x33/0x40 [ 2005.040109] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2005.041263] RIP: 0033:0x7f2a793b8b19 [ 2005.042103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2005.046260] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2005.047983] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 2005.049590] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 2005.051205] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 2005.052818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2005.054431] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 2005.129295] FAULT_INJECTION: forcing a failure. [ 2005.129295] name failslab, interval 1, probability 0, space 0, times 0 [ 2005.131458] CPU: 1 PID: 11773 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2005.132724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2005.134260] Call Trace: [ 2005.134763] dump_stack+0x107/0x167 [ 2005.135435] should_fail.cold+0x5/0xa [ 2005.136147] ? register_for_each_vma+0x476/0xc00 [ 2005.137011] should_failslab+0x5/0x20 [ 2005.137717] kmem_cache_alloc_trace+0x55/0x320 [ 2005.138567] register_for_each_vma+0x476/0xc00 [ 2005.139440] __uprobe_register+0x4df/0x880 [ 2005.140234] probe_event_enable+0x3c4/0xba0 [ 2005.141024] ? uprobe_perf_close+0x5f0/0x5f0 [ 2005.141834] trace_uprobe_register+0x54/0x730 [ 2005.142674] perf_trace_event_init+0x554/0x9c0 [ 2005.143523] perf_uprobe_init+0x173/0x210 [ 2005.144279] perf_uprobe_event_init+0xff/0x190 [ 2005.145111] perf_try_init_event+0x130/0x570 [ 2005.145909] perf_event_alloc.part.0+0xd96/0x2b70 [ 2005.146801] __do_sys_perf_event_open+0x579/0x2e60 [ 2005.147696] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2005.148574] ? perf_event_set_output+0x5b0/0x5b0 [ 2005.149421] ? wait_for_completion_io+0x270/0x270 [ 2005.150321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2005.151284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2005.152216] do_syscall_64+0x33/0x40 [ 2005.152907] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2005.153834] RIP: 0033:0x7f27a2558b19 [ 2005.154519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2005.157814] RSP: 002b:00007f279faad188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2005.159183] RAX: ffffffffffffffda RBX: 00007f27a266c020 RCX: 00007f27a2558b19 [ 2005.160470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 2005.161766] RBP: 00007f279faad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2005.163051] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2005.164320] R13: 00007ffea997373f R14: 00007f279faad300 R15: 0000000000022000 [ 2005.225194] FAULT_INJECTION: forcing a failure. [ 2005.225194] name failslab, interval 1, probability 0, space 0, times 0 [ 2005.227787] CPU: 0 PID: 11775 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2005.229334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2005.231207] Call Trace: [ 2005.231809] dump_stack+0x107/0x167 [ 2005.232634] should_fail.cold+0x5/0xa [ 2005.233499] ? register_for_each_vma+0x476/0xc00 [ 2005.234575] should_failslab+0x5/0x20 [ 2005.235432] kmem_cache_alloc_trace+0x55/0x320 [ 2005.236468] register_for_each_vma+0x476/0xc00 [ 2005.237520] __uprobe_register+0x4df/0x880 [ 2005.238507] probe_event_enable+0x3c4/0xba0 [ 2005.239479] ? uprobe_perf_close+0x5f0/0x5f0 [ 2005.240485] trace_uprobe_register+0x54/0x730 [ 2005.241510] perf_trace_event_init+0x554/0x9c0 [ 2005.242556] perf_uprobe_init+0x173/0x210 [ 2005.243498] perf_uprobe_event_init+0xff/0x190 [ 2005.244528] perf_try_init_event+0x130/0x570 [ 2005.245531] perf_event_alloc.part.0+0xd96/0x2b70 [ 2005.246641] __do_sys_perf_event_open+0x579/0x2e60 [ 2005.247768] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2005.248860] ? perf_event_set_output+0x5b0/0x5b0 [ 2005.249924] ? wait_for_completion_io+0x270/0x270 [ 2005.251054] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2005.252244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2005.253409] do_syscall_64+0x33/0x40 [ 2005.254251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2005.255408] RIP: 0033:0x7fc9de03eb19 [ 2005.256247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2005.260396] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2005.262122] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 2005.263733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 2005.265337] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2005.266946] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2005.268548] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 18:35:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 96) 18:35:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c010000100001000000000000000000fe800000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000590002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088000000629e6388307b43e18b92db61d4172205fc000000085871b29d530fb685ae63"], 0x14c}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 18:35:19 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:35:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:35:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18) 18:35:19 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffff602000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2021.112425] FAULT_INJECTION: forcing a failure. [ 2021.112425] name failslab, interval 1, probability 0, space 0, times 0 18:35:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 3) 18:35:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 100) [ 2021.114856] CPU: 0 PID: 11784 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2021.116406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.118167] Call Trace: [ 2021.118740] dump_stack+0x107/0x167 [ 2021.119511] should_fail.cold+0x5/0xa [ 2021.120320] should_failslab+0x5/0x20 [ 2021.121125] __kmalloc_track_caller+0x79/0x370 [ 2021.122092] ? v9fs_session_init+0xa7/0x1680 [ 2021.123033] ? kernel_text_address+0xf2/0x120 [ 2021.123982] kstrdup+0x36/0x70 [ 2021.124666] v9fs_session_init+0xa7/0x1680 [ 2021.125565] ? lock_release+0x680/0x680 [ 2021.126408] ? find_held_lock+0x2c/0x110 [ 2021.127284] ? kmem_cache_alloc_trace+0x151/0x320 [ 2021.128306] ? v9fs_show_options+0x690/0x690 [ 2021.129248] ? trace_hardirqs_on+0x5b/0x180 [ 2021.130164] ? kasan_unpoison_shadow+0x33/0x50 [ 2021.131139] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.132217] v9fs_mount+0x79/0x8f0 [ 2021.132973] ? v9fs_write_inode+0x60/0x60 [ 2021.133853] legacy_get_tree+0x105/0x220 [ 2021.134720] vfs_get_tree+0x8e/0x300 [ 2021.135514] path_mount+0x1490/0x21e0 [ 2021.136326] ? strncpy_from_user+0x9e/0x470 [ 2021.137239] ? finish_automount+0xa90/0xa90 [ 2021.138151] ? getname_flags.part.0+0x1dd/0x4f0 [ 2021.139144] ? _copy_from_user+0xfb/0x1b0 [ 2021.140027] __x64_sys_mount+0x282/0x300 [ 2021.140892] ? copy_mnt_ns+0xa00/0xa00 [ 2021.141723] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.142840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.143934] do_syscall_64+0x33/0x40 [ 2021.144724] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.145808] RIP: 0033:0x7f2a793b8b19 [ 2021.146595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.150507] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2021.150529] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 2021.150541] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 18:35:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 4) [ 2021.150552] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 2021.150563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2021.150574] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 2021.157499] FAULT_INJECTION: forcing a failure. [ 2021.157499] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.157519] CPU: 1 PID: 11788 Comm: syz-executor.0 Not tainted 5.10.247 #1 18:35:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 19) [ 2021.157530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.157536] Call Trace: [ 2021.157557] dump_stack+0x107/0x167 [ 2021.157580] should_fail.cold+0x5/0xa [ 2021.157602] ? create_object.isra.0+0x3a/0xa30 [ 2021.157620] should_failslab+0x5/0x20 [ 2021.157639] kmem_cache_alloc+0x5b/0x310 18:35:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 5) [ 2021.157657] ? mark_held_locks+0x9e/0xe0 [ 2021.157683] create_object.isra.0+0x3a/0xa30 [ 2021.157705] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.157733] kmem_cache_alloc_trace+0x151/0x320 [ 2021.157764] register_for_each_vma+0x476/0xc00 [ 2021.157806] __uprobe_register+0x4df/0x880 [ 2021.157843] probe_event_enable+0x3c4/0xba0 [ 2021.157862] ? uprobe_perf_close+0x5f0/0x5f0 [ 2021.157888] trace_uprobe_register+0x54/0x730 [ 2021.157920] perf_trace_event_init+0x554/0x9c0 [ 2021.157952] perf_uprobe_init+0x173/0x210 [ 2021.157980] perf_uprobe_event_init+0xff/0x190 [ 2021.158000] perf_try_init_event+0x130/0x570 [ 2021.158024] perf_event_alloc.part.0+0xd96/0x2b70 [ 2021.158059] __do_sys_perf_event_open+0x579/0x2e60 18:35:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) [ 2021.158089] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2021.158112] ? perf_event_set_output+0x5b0/0x5b0 [ 2021.158128] ? wait_for_completion_io+0x270/0x270 [ 2021.158177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.158198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.158223] do_syscall_64+0x33/0x40 [ 2021.158243] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.158255] RIP: 0033:0x7f27a2558b19 18:35:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2021.158274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.158285] RSP: 002b:00007f279face188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2021.158305] RAX: ffffffffffffffda RBX: 00007f27a266bf60 RCX: 00007f27a2558b19 [ 2021.158317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 2021.158328] RBP: 00007f279face1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2021.158339] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000003 [ 2021.158351] R13: 00007ffea997373f R14: 00007f279face300 R15: 0000000000022000 [ 2021.173498] FAULT_INJECTION: forcing a failure. [ 2021.173498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2021.173517] CPU: 1 PID: 11794 Comm: syz-executor.3 Not tainted 5.10.247 #1 18:35:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) [ 2021.173526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 18:35:19 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffdfc02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2021.173532] Call Trace: [ 2021.173552] dump_stack+0x107/0x167 [ 2021.173574] should_fail.cold+0x5/0xa [ 2021.173600] _copy_from_user+0x2e/0x1b0 [ 2021.173621] memdup_user+0x65/0xd0 [ 2021.173638] strndup_user+0x74/0xe0 [ 2021.173657] __x64_sys_mount+0x133/0x300 [ 2021.173675] ? copy_mnt_ns+0xa00/0xa00 18:35:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 97) [ 2021.173699] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.173727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.173750] do_syscall_64+0x33/0x40 [ 2021.173770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 18:35:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 6) [ 2021.173781] RIP: 0033:0x7fbbb2ce3b19 [ 2021.173799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.173809] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2021.173830] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2021.173841] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2021.173852] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2021.173863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2021.173874] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2021.238378] FAULT_INJECTION: forcing a failure. [ 2021.238378] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.238401] CPU: 1 PID: 11791 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2021.238412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.238420] Call Trace: [ 2021.238445] dump_stack+0x107/0x167 [ 2021.238469] should_fail.cold+0x5/0xa [ 2021.238492] ? create_object.isra.0+0x3a/0xa30 [ 2021.238512] should_failslab+0x5/0x20 [ 2021.238532] kmem_cache_alloc+0x5b/0x310 [ 2021.238559] ? mark_held_locks+0x9e/0xe0 [ 2021.238585] create_object.isra.0+0x3a/0xa30 [ 2021.238601] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.238630] kmem_cache_alloc_trace+0x151/0x320 [ 2021.238673] register_for_each_vma+0x476/0xc00 [ 2021.238717] __uprobe_register+0x4df/0x880 [ 2021.238755] probe_event_enable+0x3c4/0xba0 [ 2021.238774] ? uprobe_perf_close+0x5f0/0x5f0 [ 2021.238800] trace_uprobe_register+0x54/0x730 [ 2021.238833] perf_trace_event_init+0x554/0x9c0 [ 2021.238865] perf_uprobe_init+0x173/0x210 [ 2021.238892] perf_uprobe_event_init+0xff/0x190 [ 2021.238912] perf_try_init_event+0x130/0x570 [ 2021.238936] perf_event_alloc.part.0+0xd96/0x2b70 [ 2021.238971] __do_sys_perf_event_open+0x579/0x2e60 [ 2021.239001] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2021.239025] ? perf_event_set_output+0x5b0/0x5b0 [ 2021.239041] ? wait_for_completion_io+0x270/0x270 [ 2021.239090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.239111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.239136] do_syscall_64+0x33/0x40 [ 2021.239156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.239169] RIP: 0033:0x7fc9de03eb19 [ 2021.239188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.239200] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2021.239221] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 2021.239233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 2021.239244] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2021.239255] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2021.239267] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 [ 2021.248446] FAULT_INJECTION: forcing a failure. [ 2021.248446] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.248465] CPU: 1 PID: 11804 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2021.248475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.248481] Call Trace: [ 2021.248501] dump_stack+0x107/0x167 [ 2021.248523] should_fail.cold+0x5/0xa [ 2021.248545] ? copy_mount_options+0x55/0x180 [ 2021.248562] should_failslab+0x5/0x20 [ 2021.248581] kmem_cache_alloc_trace+0x55/0x320 [ 2021.248601] ? _copy_from_user+0xfb/0x1b0 [ 2021.248627] copy_mount_options+0x55/0x180 [ 2021.248662] __x64_sys_mount+0x1a8/0x300 [ 2021.248679] ? copy_mnt_ns+0xa00/0xa00 [ 2021.248703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.248731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.248753] do_syscall_64+0x33/0x40 [ 2021.248776] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.248789] RIP: 0033:0x7fbbb2ce3b19 [ 2021.248806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.248816] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2021.248836] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2021.248846] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2021.248857] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2021.248868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2021.248880] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2021.296437] FAULT_INJECTION: forcing a failure. [ 2021.296437] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.296460] CPU: 1 PID: 11808 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2021.296472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.296478] Call Trace: [ 2021.296504] dump_stack+0x107/0x167 [ 2021.296528] should_fail.cold+0x5/0xa [ 2021.296551] ? create_object.isra.0+0x3a/0xa30 [ 2021.296570] should_failslab+0x5/0x20 [ 2021.296590] kmem_cache_alloc+0x5b/0x310 [ 2021.296616] create_object.isra.0+0x3a/0xa30 [ 2021.296634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.296670] __kmalloc_track_caller+0x177/0x370 [ 2021.296689] ? v9fs_session_init+0xe9/0x1680 [ 2021.296711] ? kernel_text_address+0xf2/0x120 [ 2021.296734] kstrdup+0x36/0x70 [ 2021.296754] v9fs_session_init+0xe9/0x1680 [ 2021.296776] ? lock_release+0x680/0x680 [ 2021.296795] ? find_held_lock+0x2c/0x110 [ 2021.296823] ? kmem_cache_alloc_trace+0x151/0x320 [ 2021.296843] ? v9fs_show_options+0x690/0x690 [ 2021.296878] ? trace_hardirqs_on+0x5b/0x180 [ 2021.296900] ? kasan_unpoison_shadow+0x33/0x50 [ 2021.296918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.296941] v9fs_mount+0x79/0x8f0 [ 2021.296961] ? v9fs_write_inode+0x60/0x60 [ 2021.296979] legacy_get_tree+0x105/0x220 [ 2021.297001] vfs_get_tree+0x8e/0x300 [ 2021.297020] path_mount+0x1490/0x21e0 [ 2021.297047] ? strncpy_from_user+0x9e/0x470 [ 2021.297067] ? finish_automount+0xa90/0xa90 [ 2021.297088] ? getname_flags.part.0+0x1dd/0x4f0 [ 2021.297108] ? _copy_from_user+0xfb/0x1b0 [ 2021.297137] __x64_sys_mount+0x282/0x300 [ 2021.297156] ? copy_mnt_ns+0xa00/0xa00 [ 2021.297181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.297203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.297226] do_syscall_64+0x33/0x40 [ 2021.297247] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.297259] RIP: 0033:0x7f2a793b8b19 [ 2021.297278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.297289] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2021.297310] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 2021.297322] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 2021.297334] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 2021.297345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2021.297357] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 2021.334368] FAULT_INJECTION: forcing a failure. [ 2021.334368] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.334388] CPU: 0 PID: 11811 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2021.334398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.334404] Call Trace: [ 2021.334427] dump_stack+0x107/0x167 [ 2021.334449] should_fail.cold+0x5/0xa [ 2021.334469] ? create_object.isra.0+0x3a/0xa30 [ 2021.334486] should_failslab+0x5/0x20 [ 2021.334505] kmem_cache_alloc+0x5b/0x310 [ 2021.334530] create_object.isra.0+0x3a/0xa30 [ 2021.334546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.334571] kmem_cache_alloc_trace+0x151/0x320 [ 2021.334599] copy_mount_options+0x55/0x180 [ 2021.334620] __x64_sys_mount+0x1a8/0x300 [ 2021.334638] ? copy_mnt_ns+0xa00/0xa00 [ 2021.334679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.334700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.334722] do_syscall_64+0x33/0x40 [ 2021.334741] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.334753] RIP: 0033:0x7fbbb2ce3b19 [ 2021.334771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.334782] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2021.334802] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2021.334813] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2021.334823] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2021.334834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2021.334845] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2021.406668] FAULT_INJECTION: forcing a failure. [ 2021.406668] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.406691] CPU: 1 PID: 11814 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2021.406702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.406708] Call Trace: [ 2021.406741] dump_stack+0x107/0x167 [ 2021.406764] should_fail.cold+0x5/0xa [ 2021.406784] ? p9_client_create+0xaf/0x1230 [ 2021.406804] should_failslab+0x5/0x20 [ 2021.406825] kmem_cache_alloc_trace+0x55/0x320 [ 2021.406843] ? find_held_lock+0x2c/0x110 [ 2021.406867] p9_client_create+0xaf/0x1230 [ 2021.406891] ? lock_downgrade+0x6d0/0x6d0 [ 2021.406916] ? p9_client_flush+0x430/0x430 [ 2021.406938] ? trace_hardirqs_on+0x5b/0x180 [ 2021.406960] ? lockdep_init_map_type+0x2c7/0x780 [ 2021.406984] ? __raw_spin_lock_init+0x36/0x110 [ 2021.407013] v9fs_session_init+0x1dd/0x1680 [ 2021.407034] ? lock_release+0x680/0x680 [ 2021.407064] ? kmem_cache_alloc_trace+0x151/0x320 [ 2021.407084] ? v9fs_show_options+0x690/0x690 [ 2021.407116] ? trace_hardirqs_on+0x5b/0x180 [ 2021.407137] ? kasan_unpoison_shadow+0x33/0x50 [ 2021.407156] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.407179] v9fs_mount+0x79/0x8f0 [ 2021.407200] ? v9fs_write_inode+0x60/0x60 [ 2021.407218] legacy_get_tree+0x105/0x220 [ 2021.407241] vfs_get_tree+0x8e/0x300 [ 2021.407260] path_mount+0x1490/0x21e0 [ 2021.407288] ? strncpy_from_user+0x9e/0x470 [ 2021.407308] ? finish_automount+0xa90/0xa90 [ 2021.407329] ? getname_flags.part.0+0x1dd/0x4f0 [ 2021.407349] ? _copy_from_user+0xfb/0x1b0 [ 2021.407379] __x64_sys_mount+0x282/0x300 [ 2021.407398] ? copy_mnt_ns+0xa00/0xa00 [ 2021.407423] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.407445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.407469] do_syscall_64+0x33/0x40 [ 2021.407489] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.407502] RIP: 0033:0x7f2a793b8b19 [ 2021.407520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.407531] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2021.407552] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 2021.407564] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 2021.407575] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 2021.407586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2021.407598] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 2021.561368] FAULT_INJECTION: forcing a failure. [ 2021.561368] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.561390] CPU: 0 PID: 11825 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2021.561401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.561408] Call Trace: [ 2021.561435] dump_stack+0x107/0x167 [ 2021.561458] should_fail.cold+0x5/0xa [ 2021.561481] ? create_object.isra.0+0x3a/0xa30 [ 2021.561500] should_failslab+0x5/0x20 [ 2021.561521] kmem_cache_alloc+0x5b/0x310 [ 2021.561541] ? kernel_text_address+0xf2/0x120 [ 2021.561566] create_object.isra.0+0x3a/0xa30 [ 2021.561591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.561618] kmem_cache_alloc_trace+0x151/0x320 [ 2021.561636] ? find_held_lock+0x2c/0x110 [ 2021.561661] p9_client_create+0xaf/0x1230 [ 2021.561681] ? lock_downgrade+0x6d0/0x6d0 [ 2021.561707] ? p9_client_flush+0x430/0x430 [ 2021.561736] ? trace_hardirqs_on+0x5b/0x180 [ 2021.561764] ? lockdep_init_map_type+0x2c7/0x780 [ 2021.561789] ? __raw_spin_lock_init+0x36/0x110 [ 2021.561818] v9fs_session_init+0x1dd/0x1680 [ 2021.561838] ? lock_release+0x680/0x680 [ 2021.561869] ? kmem_cache_alloc_trace+0x151/0x320 [ 2021.561889] ? v9fs_show_options+0x690/0x690 [ 2021.561920] ? trace_hardirqs_on+0x5b/0x180 [ 2021.561941] ? kasan_unpoison_shadow+0x33/0x50 [ 2021.561960] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.561983] v9fs_mount+0x79/0x8f0 [ 2021.562003] ? v9fs_write_inode+0x60/0x60 [ 2021.562021] legacy_get_tree+0x105/0x220 [ 2021.562044] vfs_get_tree+0x8e/0x300 [ 2021.562063] path_mount+0x1490/0x21e0 [ 2021.562090] ? strncpy_from_user+0x9e/0x470 [ 2021.562110] ? finish_automount+0xa90/0xa90 [ 2021.562130] ? getname_flags.part.0+0x1dd/0x4f0 [ 2021.562150] ? _copy_from_user+0xfb/0x1b0 [ 2021.562180] __x64_sys_mount+0x282/0x300 [ 2021.562198] ? copy_mnt_ns+0xa00/0xa00 [ 2021.562222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.562244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.562268] do_syscall_64+0x33/0x40 [ 2021.562288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.562301] RIP: 0033:0x7f2a793b8b19 [ 2021.562319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.562329] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2021.562350] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 2021.562362] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 2021.562373] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 2021.562385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2021.562397] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 2021.614342] FAULT_INJECTION: forcing a failure. [ 2021.614342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2021.614365] CPU: 1 PID: 11834 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2021.614376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.614382] Call Trace: [ 2021.614409] dump_stack+0x107/0x167 [ 2021.614432] should_fail.cold+0x5/0xa [ 2021.614461] _copy_from_user+0x2e/0x1b0 [ 2021.614490] copy_mount_options+0x76/0x180 [ 2021.614512] __x64_sys_mount+0x1a8/0x300 [ 2021.614531] ? copy_mnt_ns+0xa00/0xa00 [ 2021.614557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.614580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.614604] do_syscall_64+0x33/0x40 [ 2021.614624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.614637] RIP: 0033:0x7fbbb2ce3b19 [ 2021.614667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.614678] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2021.614699] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2021.614711] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2021.614729] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2021.614740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2021.614752] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2021.617846] FAULT_INJECTION: forcing a failure. [ 2021.617846] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.617866] CPU: 1 PID: 11829 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2021.617876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.617883] Call Trace: [ 2021.617903] dump_stack+0x107/0x167 [ 2021.617927] should_fail.cold+0x5/0xa [ 2021.617953] ? register_for_each_vma+0x476/0xc00 [ 2021.617972] should_failslab+0x5/0x20 [ 2021.617993] kmem_cache_alloc_trace+0x55/0x320 [ 2021.618024] register_for_each_vma+0x476/0xc00 [ 2021.618076] __uprobe_register+0x4df/0x880 [ 2021.618115] probe_event_enable+0x3c4/0xba0 [ 2021.618135] ? uprobe_perf_close+0x5f0/0x5f0 [ 2021.618162] trace_uprobe_register+0x54/0x730 [ 2021.618196] perf_trace_event_init+0x554/0x9c0 [ 2021.618230] perf_uprobe_init+0x173/0x210 [ 2021.618259] perf_uprobe_event_init+0xff/0x190 [ 2021.618279] perf_try_init_event+0x130/0x570 [ 2021.618304] perf_event_alloc.part.0+0xd96/0x2b70 [ 2021.618341] __do_sys_perf_event_open+0x579/0x2e60 [ 2021.618379] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2021.618403] ? perf_event_set_output+0x5b0/0x5b0 [ 2021.618420] ? wait_for_completion_io+0x270/0x270 [ 2021.618471] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.618493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.618519] do_syscall_64+0x33/0x40 [ 2021.618540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.618552] RIP: 0033:0x7fc9de03eb19 [ 2021.618572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.618583] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2021.618603] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 2021.618614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 2021.618626] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2021.618638] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2021.618660] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:35:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) 18:35:35 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:35:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:35:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x6, 0x40, 0xffffffff, 0xffff, 0x15, "cb876f1ef58531ba957b06911f42f6726dff90"}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:35:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c010000100001000000000000000000fe800000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000590002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088000000629e6388307b43e18b92db61d4172205fc000000085871b29d530fb685ae63"], 0x14c}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 18:35:35 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffffe02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:35:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 98) 18:35:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 7) [ 2037.305149] FAULT_INJECTION: forcing a failure. [ 2037.305149] name failslab, interval 1, probability 0, space 0, times 0 [ 2037.307645] CPU: 1 PID: 11852 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2037.309098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2037.310854] Call Trace: [ 2037.311415] dump_stack+0x107/0x167 [ 2037.312191] should_fail.cold+0x5/0xa [ 2037.313001] should_failslab+0x5/0x20 [ 2037.313805] __kmalloc_track_caller+0x79/0x370 [ 2037.314760] ? p9_client_create+0x41d/0x1230 [ 2037.315698] kstrdup+0x36/0x70 [ 2037.316377] p9_client_create+0x41d/0x1230 [ 2037.317268] ? lock_downgrade+0x6d0/0x6d0 [ 2037.318143] ? p9_client_flush+0x430/0x430 [ 2037.319048] ? trace_hardirqs_on+0x5b/0x180 [ 2037.319960] ? lockdep_init_map_type+0x2c7/0x780 [ 2037.320969] ? __raw_spin_lock_init+0x36/0x110 [ 2037.321953] v9fs_session_init+0x1dd/0x1680 [ 2037.321976] ? lock_release+0x680/0x680 [ 2037.322007] ? kmem_cache_alloc_trace+0x151/0x320 [ 2037.322027] ? v9fs_show_options+0x690/0x690 [ 2037.322058] ? trace_hardirqs_on+0x5b/0x180 [ 2037.322080] ? kasan_unpoison_shadow+0x33/0x50 [ 2037.322098] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2037.322122] v9fs_mount+0x79/0x8f0 [ 2037.322143] ? v9fs_write_inode+0x60/0x60 [ 2037.322160] legacy_get_tree+0x105/0x220 [ 2037.322183] vfs_get_tree+0x8e/0x300 [ 2037.322202] path_mount+0x1490/0x21e0 [ 2037.322228] ? strncpy_from_user+0x9e/0x470 [ 2037.322255] ? finish_automount+0xa90/0xa90 18:35:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 8) [ 2037.334724] ? getname_flags.part.0+0x1dd/0x4f0 [ 2037.334745] ? _copy_from_user+0xfb/0x1b0 [ 2037.334775] __x64_sys_mount+0x282/0x300 [ 2037.334793] ? copy_mnt_ns+0xa00/0xa00 [ 2037.334829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2037.334850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2037.334875] do_syscall_64+0x33/0x40 [ 2037.334895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2037.334908] RIP: 0033:0x7f2a793b8b19 [ 2037.334926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2037.334936] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2037.334957] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 2037.334969] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 2037.334980] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 2037.334991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2037.335002] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 2037.339025] FAULT_INJECTION: forcing a failure. [ 2037.339025] name failslab, interval 1, probability 0, space 0, times 0 [ 2037.339050] CPU: 0 PID: 11857 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2037.339062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2037.339070] Call Trace: [ 2037.339098] dump_stack+0x107/0x167 [ 2037.339125] should_fail.cold+0x5/0xa [ 2037.339151] ? getname_flags.part.0+0x50/0x4f0 [ 2037.339171] FAULT_INJECTION: forcing a failure. [ 2037.339171] name failslab, interval 1, probability 0, space 0, times 0 [ 2037.339187] should_failslab+0x5/0x20 18:35:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r4, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000200)) openat(0xffffffffffffffff, 0x0, 0x0, 0xe375d1901a7fcc3b) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "3509fee605b9ccfd47de6c9a051c781bab15583c9f9fcbbe5db1729457e590ebcce33c0891cedde5e647b740c1253ae7354788dbdac7ea95017b278a4f9235112f051590db8d862d632ce27674f6d4b015cbaad78fccda6e800d284e6695923780131abd570334bf785428d6f1470cface4545bf289322673e032ec34441c6536a68f664e8af41fcabc6822028a17687c2ed845d4e95fc5b9493ee00c2bbf11232890c1b4294c446c08c27c9bb34e4d16d617a546455a8a71b6dfaf859e3163be6d59b76dedf548b202bf8ac25820ab6683838ffe021ec2379c8b4be13f3e04d5f58bea10d51313603609c0e49d739c0cfcadfba9f0e6acb7caab4b60a8bef5140c84e83e88b8c2fc8dce66ccf6d55c35c97f8a829b870f4cca7d45d3ca62d0ac62613998da25aadac75976691b324ddfbaf1f25f9c10821c2783553a51b0cf51325e37181f714223c2df5db47dd8147af0b9578e498483ac4668cfb5e463e7bca6d8be78517846e54c11e93b04937e69af1ebada1cc079b8f8541b177fd020981d9db10ede3aff095379f0875e3cb55b43ed51dbb13b931e7123c1539a00c58da46e73c06931b67f6176ffb0148438cdba689a867ff6beae764c762c3703a42a40068d117ddd4a8d8045afe2dec8f2f37a9d919b1b9eeaa4629820ec88ecfff4a3d338cd7330ab4e52df6ea9b95a12da4387d7edbca032bd31250ad885be9d2d9dc9658d396414b8d6877920be96a4dd5f54422f21d492eaa99706cece8b0115c932bef2cf4d35764405138b58e2bb0feb0bb28763338b39864e34e773b0208915c1cc86d84e656d8dea7bb0f2c23a3555e32dcacbbc4b5aa6d31230f6d71b750adf29a32b1968f1931019117d661ea9123a92a8651d5e21fc6557578403403cad7f97d7b7fb2eee247c503d6b1e537500ab4b5d7d778b16cbcc1ee9babf4fb5acaceb1ab41401c5dca89b00b0d502224841d7608e0019b751e65d6919380c39ff564e0ac9bbee43f0f3bb9a9d06b0888eac091643a4412ab06c79f40f440f9972e0ec1c8f2b59970c94aabb03f1591edce9b8221d38e9f48d42eb9a68ca8d4b6b054bf12a010c3b7fadb0be26d2c57345331faad7b3e5cb98760d07622245023706b230246a8695aa24695eef69e184995930b1018174d2019ff642b96db8b08bc52c87aa86a3c1434722c26b0fbd1d37016bbd6d85063018c94b146ff7e646ba3e11a6739ea8d9190da01916530ce4f48561b52a2a66237ed8e3d3744e02711a4bc37cde0ff8257b72de7299d1e2fb2eafdf23e84a17566189b6a1ee3a7f85d337b36adecf9b4df619809cc1df2a406ef43b349f37c0583e9c5e7f749891b8faf6ba38e8d4e565c94b2161fc87a1bb58ba306adb4374e6981c1b3b6acd9ede164faad74142ad9494b0f3c820b49f4376c4bc9d481249dacacde844bbc97f0d8d40ba1153d3b85b6b7cf3002e918837b3f59bbbf7e8af7287f5c9f7b1cb0d1589c2548d78223166014868ebd05515cfafd891cddf0f1ef93dcb10f23bdf6e8557d216a3e1bcdfc7b16039afacdc37fc3863a2e927dd33e4e64e2fa870f83d4ae69c9ea521724decb781fa09ab14d5359b0c6d438b068942701fdc6ea41768d627a37820f26fa0aa2892544cb63f5ded8cccc336a069498e63b06a4222ba6b08cceb26a7725db79540dd3aa974186fc56900f27f271a1a4221185a8763dd44252f98a7564df839536847bddbe58341a3e39daf2f5636f6e1db2092b5754cb45f2ae081f8560a21a952f8498649be42af79619d285edc696960b39abe77706a4bf061ef70b159e8168365de9919bdfbc74f54b138117d8b1a31c8e60c382adb879df2005577d62ca076438066fe62539bb182e8a821c94ce1d27b3c683fdffe98a08be520f928961b8de88614e394fe3b7f0ff433ecdba15d1a9d0aa27a3a17a3018464dcea2418b382a6fc467b466b727df6376659074dd652c4995c2bf0271c4c4d3c81be11ac2376d96ecbc8859c022f586489b27731a24a2ed51daa6eefe9b2a9447dcd542a8cc58672c551dfd7921a38a8843c888dc05e8bf1aaa15a6f2a038aa7761dcff3335fc12160ea60c248aa914dd170a42bb82c5c1b3219e8045befb70a7d2f4e5c7254a9a33c875847e2fefa147a427d609323099a27b0b94415e72cdc6be7fa2a5f82f1405c8d91c0d9402b967eb871a216b2d1e54331bb66f6ce099d9a1d06d35455533ad293e9d62441de5ceba8ecccb4bc917efb249d3079db6c5a39eadf6de192d6436d1ccf23756d6d292d33330360d9762d31ee62927b7c29115807a5271cda0d9d2933f261cba8ad305cb589a6a0b94c9ebe11885bf544d283bf989a6d4f1ebba069a141bfd6e4de1b0b80cd1ae9fe97cbaa9b271ae3e435fc5636823ee31283ce81e9e26b284d55827c4af13910daf53ef3cd9f2abe2ea8ddca067a65354258859cbf868ffa2660de328c971263432c2fc5785346e9ec22c24031215e544a70a8d16167d59118b2edbad678dcb022cefbc5e6e26104ce25a196c7fa02a1706db31e40108ebd16e9abf386023c4b67ed78b439c1b6e061e771e476f1c51a6e70adcad6735f5a846d28f3c113e8be84f818a01f48390114c3c6b2f5ca861fbcf617c8b9673cb9db7884a9064448de953d84cadd871b13d74cddda771b5986c6b80f46efda39e1d02d6132d592bf68d5b019d5441f8a0fcdb902a832e23a2cf449a39d2065141d782d7ab578d57c4fca4b23d049afda5062c9ff043426d8a8c274acaf4f995289f3d869e921e7df59801d2648bc01957caca2326c9063b4cbc7d74bba4a390198b4661f36c14440c809eba4b19ce692cc3762e28c4428ba893cb1e7f85b1455763240ac74b762c3a8732f9e53305151884a5d20ab0ef105a246a5945da5ce747b4d76a9de1f45ba613d62085468af4a8237ce5fb9c379358c0c995e53150c0a6171afb8f298a2a9f16689a2c7b2eacf4f018eda58422d864d6828249008572b380b293e0920566db919572dc8720d8d23d6b7d47c9330a3cbcfe59a026c9e505b3f7dcb865c29321c68abfb40f256c0f7eb7db77e39b8e714cc0082adbf2a33cbde2a94ab94ffa6e6be6334d82a60deef79c2576584e6b71f160db840af6d1547bd8bf732373787b21eefa69b11d214deb31530718e58f4a9572d366a4b2ddd4e19ecfef7f647046e1856855d32a62e567b3815a7c13e835f83aa4556034cbd87aa426e73496f02b910f86c832f660839ac3e96e2f6f655e62c41b17835ab799eeddcc97bac4811d09775a951ecc07ca3242b30b048848b0cb9b30ec7dae89960e305f0ec40d5dc88a83c6ec6a66be5f69433efea13e6f6f4720f5b143f887be7f1ff39b0c11eedb90c53fe1b72696bf95dacb006033307de26cc656de900baa40d72ab6a7ecf8c0bb94899d3d4238ec242b15242782133908d0666d1c441a155551471888222677c1cd4b0a1f5f82b589fa4dd9a662b0f53ecd63bfe4f671aba580e7b6da9cdb55c5c9ad885c7ca70fc849b667e5d90ce5e6a2e2696654bb3f4fc245806044dc1da6970f28a79c53daaf71c9531da3063f8a7bbe3b5c246b39673e5fd9e8d4d7e5d9aa78a9ef5edad1041a956a29a2207d52dcda7ac2c81fffc121617c8cad64fd5f3428a6d89db181641203969df6103d9b7d32fe38afe693109435201f4894c84f85e749bae7db4d0c3c59245050b6f194a9024b9eb0bd2284730a8a75ce78f6a2400628b658110b63522aa48b1d6b1246e90b1a3d9f6e4a960078adf4bcd9435402f20ce0d2382f2726d3c6ee3b45b889507abbedfee84f0720bb3eae52212aa1a3fde19bc8390b2d43f7cb3b6186fcfa43164b90911202671cdbe0de0c3d428ab0a9ebdfbdc8ae1623c7b1eae5d997541f6ad35242825b06a4011b2a78fad26fa656f28fd3633af72b3a281cefb529deaec2eb1a4bd910bc59bb82a217117226bec941e1691363d68db4b7285346c946b52e83a0c1b256a9c48eb8dea21d416b4d458b98e4150b3115287a621bf8f96f339bcc59b6719220340183fb0e3df1c303d305289b944d4792eeb133087d8c03f3db477e86bf56f233238dba417b48001a713441fe3458e66ee23af9da2cdbbbbd5889836df200e830e9e5690c3a748aa07f2ae6456aa18d4a0b7c353d6da4df84ef70bb6a694660873597d44c03cf3c4f3de421ac5d5193461f5d7d1dc1684b965441da2286b82a21df04dc293d17c23a24ce722651a8dd331c3b130f8a1faf5007887beb67098640da6f9ee2a6942cddbca7158b2ea6871cc8299d3db202a3d6137237aae9b98c3e44c24b426677f629b9e14a9c00620b0a3262e4520d503f8a7ead375215b9e3bd438f5403a90b92f33d8bff47d17a9f602c7391ea8703e34eb6ace0532365cd769689be3f399e917f5b4369ac902104e9871f26014ec76d823f2f2a94d4fc8ca66bd6850bed57377c9dcba55857c471879d4d2fdabece24db9533fc61fdf67948eb6ee85dd88c0fe364302734ef5612ecc787db7a49d5f2bc9fb8dacdd87a35c26b2bc5c906bc2ac7ceaa5797b77583b9ab85e78a3d98783e9bdb95dfcfe2c59ed0942cf61463a951bf0a99ec2dea0b54c66a21483c8301cd54626ee171e7a855e011f8ed52de22a15ce85bb31a8f305907c8aae39b30e4a698aaa5feda35c6425b767cbf6754a5a0b8ae3b70b517fd84097f24d23e60ba0d7549725d9f687ee6ea116f22959700e9755d6a00012bdcab6f2d742d9bfd2bfdc790cd81a3d81fa17b56ec8cbcf7aa3a414680448e1b91079fb2787468174d536a758e42bd4c7bc06b29373874758637c320993df7ab89405e932acbd4340d66ff3d8c58af0188ff3f7bef4d1c2a1b6a662d18126c2e0ba2c24d8ae05747bfabb0bee799c70f8b1470c296186c0dd9c5c2c8536f1b1f0c24749e33435609b0060e4c3016eda9a9a74766c763d23eb3ea73ddd9ca37b550a7d9c96f58d1cf2101db43788cec161bf53930775cbdc62380f83ba7d882fe32b4d2154f6592326211121852c4fa7a1665f1db14aeb3d780218bba57034f6e7ce6a0d8943d27b2ebfae193d1c129e039dc88e6a861e9019adfdce76fc4057c9b9b22fe20f94244e80771f049d20a876cb71a0d101ac2c7dbe7a4dc1bfc272af4e8cb19939e8f5fcebdac78f069fd1b5ad5caeaf4deeb5e400634b5128fa4c956ae22507c4488b3ff04e5fb72aef6da68cdd0b297d4d767274af1fe855dd24e62b572d16577510079d21747813b7739a4a12b818dc37ee8c61aee1a6a77bbccf9123397c4e5e0da8f18f4ec5c276ba7c678fbf9aa219b8d864dd1b4a588db5e3147f576418631f719481e703ed7c0b1fe3b16c12647e4e1b38532027868e2ff02e27c15abc032af83c338d2088053b8"}) syz_io_uring_setup(0x8003a75, &(0x7f0000000080)={0x0, 0xa91f, 0x10, 0x0, 0x3be}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="3acbec63e00400aa2b2ab671"], 0xd7) close(0xffffffffffffffff) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f00000001c0)="7928c346985f6b702c88282a25086ae6ded17c61beac9970517353fb0dda247894fbf166b15fd16762624c47d93fc171be2273498824", 0x36) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) [ 2037.339209] kmem_cache_alloc+0x5b/0x310 [ 2037.339239] getname_flags.part.0+0x50/0x4f0 [ 2037.339263] ? _copy_from_user+0xfb/0x1b0 [ 2037.339289] user_path_at_empty+0xa1/0x100 [ 2037.339314] __x64_sys_mount+0x1e9/0x300 [ 2037.339335] ? copy_mnt_ns+0xa00/0xa00 [ 2037.339365] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2037.339389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2037.339415] do_syscall_64+0x33/0x40 [ 2037.339437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2037.339452] RIP: 0033:0x7fbbb2ce3b19 [ 2037.339473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:35:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) 18:35:35 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f0ffff02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:35:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2037.339485] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:35:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 99) [ 2037.339508] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2037.339521] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2037.339533] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2037.339546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2037.339558] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2037.339603] CPU: 1 PID: 11850 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2037.339614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2037.339621] Call Trace: [ 2037.339643] dump_stack+0x107/0x167 [ 2037.339667] should_fail.cold+0x5/0xa [ 2037.339689] ? create_object.isra.0+0x3a/0xa30 [ 2037.339708] should_failslab+0x5/0x20 [ 2037.339733] kmem_cache_alloc+0x5b/0x310 [ 2037.339753] ? mark_held_locks+0x9e/0xe0 18:35:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) [ 2037.339779] create_object.isra.0+0x3a/0xa30 [ 2037.339796] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2037.339825] kmem_cache_alloc_trace+0x151/0x320 [ 2037.339858] register_for_each_vma+0x476/0xc00 [ 2037.339904] __uprobe_register+0x4df/0x880 18:35:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 9) [ 2037.339944] probe_event_enable+0x3c4/0xba0 [ 2037.339963] ? uprobe_perf_close+0x5f0/0x5f0 [ 2037.339991] trace_uprobe_register+0x54/0x730 [ 2037.340025] perf_trace_event_init+0x554/0x9c0 [ 2037.340058] perf_uprobe_init+0x173/0x210 [ 2037.340087] perf_uprobe_event_init+0xff/0x190 [ 2037.340107] perf_try_init_event+0x130/0x570 [ 2037.340138] perf_event_alloc.part.0+0xd96/0x2b70 [ 2037.340176] __do_sys_perf_event_open+0x579/0x2e60 [ 2037.340207] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2037.340233] ? perf_event_set_output+0x5b0/0x5b0 [ 2037.340255] ? wait_for_completion_io+0x270/0x270 [ 2037.340312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2037.340338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2037.340370] do_syscall_64+0x33/0x40 [ 2037.340395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2037.340413] RIP: 0033:0x7fc9de03eb19 [ 2037.340436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2037.340453] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2037.340485] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 2037.340503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 2037.340520] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2037.340538] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2037.340555] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 [ 2037.421041] FAULT_INJECTION: forcing a failure. [ 2037.421041] name failslab, interval 1, probability 0, space 0, times 0 [ 2037.421063] CPU: 0 PID: 11864 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2037.421074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2037.421080] Call Trace: [ 2037.421114] dump_stack+0x107/0x167 [ 2037.421138] should_fail.cold+0x5/0xa [ 2037.421160] ? create_object.isra.0+0x3a/0xa30 [ 2037.421179] should_failslab+0x5/0x20 [ 2037.421199] kmem_cache_alloc+0x5b/0x310 [ 2037.421225] create_object.isra.0+0x3a/0xa30 [ 2037.421242] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2037.421268] kmem_cache_alloc+0x159/0x310 [ 2037.421295] getname_flags.part.0+0x50/0x4f0 [ 2037.421316] ? _copy_from_user+0xfb/0x1b0 [ 2037.421339] user_path_at_empty+0xa1/0x100 [ 2037.421362] __x64_sys_mount+0x1e9/0x300 [ 2037.421380] ? copy_mnt_ns+0xa00/0xa00 [ 2037.421407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2037.421428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2037.421452] do_syscall_64+0x33/0x40 [ 2037.421472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2037.421485] RIP: 0033:0x7fbbb2ce3b19 [ 2037.421505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2037.421516] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2037.421538] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2037.421549] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2037.421561] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2037.421573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2037.421585] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2037.609078] FAULT_INJECTION: forcing a failure. [ 2037.609078] name failslab, interval 1, probability 0, space 0, times 0 [ 2037.609101] CPU: 1 PID: 11871 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2037.609112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2037.609119] Call Trace: [ 2037.609145] dump_stack+0x107/0x167 [ 2037.609167] should_fail.cold+0x5/0xa [ 2037.609192] should_failslab+0x5/0x20 [ 2037.609212] __kmalloc_track_caller+0x79/0x370 [ 2037.609228] ? p9_client_create+0x41d/0x1230 [ 2037.609252] kstrdup+0x36/0x70 [ 2037.609270] p9_client_create+0x41d/0x1230 [ 2037.609292] ? lock_downgrade+0x6d0/0x6d0 [ 2037.609316] ? p9_client_flush+0x430/0x430 [ 2037.609338] ? trace_hardirqs_on+0x5b/0x180 [ 2037.609360] ? lockdep_init_map_type+0x2c7/0x780 [ 2037.609383] ? __raw_spin_lock_init+0x36/0x110 [ 2037.609411] v9fs_session_init+0x1dd/0x1680 [ 2037.609432] ? lock_release+0x680/0x680 [ 2037.609469] ? kmem_cache_alloc_trace+0x151/0x320 [ 2037.609489] ? v9fs_show_options+0x690/0x690 [ 2037.609520] ? trace_hardirqs_on+0x5b/0x180 [ 2037.609542] ? kasan_unpoison_shadow+0x33/0x50 [ 2037.609560] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2037.609583] v9fs_mount+0x79/0x8f0 [ 2037.609604] ? v9fs_write_inode+0x60/0x60 [ 2037.609621] legacy_get_tree+0x105/0x220 [ 2037.609644] vfs_get_tree+0x8e/0x300 [ 2037.609663] path_mount+0x1490/0x21e0 [ 2037.609690] ? strncpy_from_user+0x9e/0x470 [ 2037.609710] ? finish_automount+0xa90/0xa90 [ 2037.609730] ? getname_flags.part.0+0x1dd/0x4f0 [ 2037.609750] ? _copy_from_user+0xfb/0x1b0 [ 2037.609780] __x64_sys_mount+0x282/0x300 [ 2037.609798] ? copy_mnt_ns+0xa00/0xa00 [ 2037.609823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2037.609844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2037.609869] do_syscall_64+0x33/0x40 [ 2037.609889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2037.609902] RIP: 0033:0x7f2a793b8b19 [ 2037.609920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2037.609931] RSP: 002b:00007f2a7692e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2037.609953] RAX: ffffffffffffffda RBX: 00007f2a794cbf60 RCX: 00007f2a793b8b19 [ 2037.609964] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 2037.609976] RBP: 00007f2a7692e1d0 R08: 0000000020000340 R09: 0000000000000000 [ 2037.609986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2037.609997] R13: 00007fff923ab53f R14: 00007f2a7692e300 R15: 0000000000022000 [ 2037.674580] FAULT_INJECTION: forcing a failure. [ 2037.674580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2037.674645] CPU: 0 PID: 11879 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2037.674656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2037.674662] Call Trace: [ 2037.674690] dump_stack+0x107/0x167 [ 2037.674719] should_fail.cold+0x5/0xa [ 2037.674753] strncpy_from_user+0x34/0x470 [ 2037.674780] getname_flags.part.0+0x95/0x4f0 [ 2037.674800] ? _copy_from_user+0xfb/0x1b0 [ 2037.674840] user_path_at_empty+0xa1/0x100 [ 2037.674863] __x64_sys_mount+0x1e9/0x300 [ 2037.674880] ? copy_mnt_ns+0xa00/0xa00 [ 2037.674909] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2037.674931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2037.674956] do_syscall_64+0x33/0x40 [ 2037.674977] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2037.674990] RIP: 0033:0x7fbbb2ce3b19 [ 2037.675010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2037.675022] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2037.675043] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2037.675063] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2037.809829] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2037.809841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 18:35:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x17e7, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200), 0x4) [ 2037.809853] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2037.831943] FAULT_INJECTION: forcing a failure. [ 2037.831943] name failslab, interval 1, probability 0, space 0, times 0 [ 2037.834502] CPU: 0 PID: 11877 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2037.836131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2037.837883] Call Trace: [ 2037.838445] dump_stack+0x107/0x167 [ 2037.839226] should_fail.cold+0x5/0xa [ 2037.840035] ? register_for_each_vma+0x476/0xc00 [ 2037.841042] should_failslab+0x5/0x20 [ 2037.841855] kmem_cache_alloc_trace+0x55/0x320 [ 2037.842840] register_for_each_vma+0x476/0xc00 [ 2037.843841] __uprobe_register+0x4df/0x880 [ 2037.844764] probe_event_enable+0x3c4/0xba0 [ 2037.845679] ? uprobe_perf_close+0x5f0/0x5f0 [ 2037.846627] trace_uprobe_register+0x54/0x730 [ 2037.847600] perf_trace_event_init+0x554/0x9c0 [ 2037.848580] perf_uprobe_init+0x173/0x210 [ 2037.849471] perf_uprobe_event_init+0xff/0x190 [ 2037.850434] perf_try_init_event+0x130/0x570 [ 2037.851382] perf_event_alloc.part.0+0xd96/0x2b70 [ 2037.852419] __do_sys_perf_event_open+0x579/0x2e60 [ 2037.853470] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2037.854500] ? perf_event_set_output+0x5b0/0x5b0 [ 2037.855527] ? wait_for_completion_io+0x270/0x270 [ 2037.856586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2037.857695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2037.858793] do_syscall_64+0x33/0x40 [ 2037.859596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2037.860690] RIP: 0033:0x7fc9de03eb19 [ 2037.861475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2037.865381] RSP: 002b:00007fc9db5b4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2037.866995] RAX: ffffffffffffffda RBX: 00007fc9de151f60 RCX: 00007fc9de03eb19 [ 2037.868505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 2037.870019] RBP: 00007fc9db5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2037.871548] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2037.873052] R13: 00007ffc3eeb513f R14: 00007fc9db5b4300 R15: 0000000000022000 18:35:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:35:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 10) 18:35:51 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20fcfdffff02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:35:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x10000008}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:35:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:35:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x2, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:35:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:35:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) (fail_nth: 100) 18:35:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd00000000000000000000000000009051468d0e311640ae1d2159407b6a78e0c4e0b1af82ebdd48ab0cae2759c66093d8cf3fed15b55d1023383cd6071277bf8f78d373813b1347328b42448839513fa3b4d65e6f2cb24a87aef7f08db996a1933b156c6bc6f1267737759054505c4d7cf9f29d8fe7e593163929b71a94e0067317f88867f66c497efe829dcea580767ab94cff77ddc1678ce4b54d08d93e959f5137b427739bb508fc68fe7aacfd2641d331a315c10ef0f20beb48d35248829435c81a5376fc5495e1", @ANYRES32=r3, @ANYBLOB="080001000100000008000d0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x800) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x40d10, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2052.963220] FAULT_INJECTION: forcing a failure. [ 2052.963220] name failslab, interval 1, probability 0, space 0, times 0 [ 2052.964836] CPU: 1 PID: 11911 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2052.965793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2052.966937] Call Trace: [ 2052.967312] dump_stack+0x107/0x167 [ 2052.967813] should_fail.cold+0x5/0xa [ 2052.968332] ? alloc_fs_context+0x57/0x840 [ 2052.968911] should_failslab+0x5/0x20 [ 2052.969428] kmem_cache_alloc_trace+0x55/0x320 [ 2052.970052] alloc_fs_context+0x57/0x840 [ 2052.970613] path_mount+0xab1/0x21e0 [ 2052.971134] ? strncpy_from_user+0x9e/0x470 [ 2052.971718] ? finish_automount+0xa90/0xa90 [ 2052.972314] ? getname_flags.part.0+0x1dd/0x4f0 [ 2052.972949] ? _copy_from_user+0xfb/0x1b0 [ 2052.973519] __x64_sys_mount+0x282/0x300 [ 2052.974067] ? copy_mnt_ns+0xa00/0xa00 [ 2052.974603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2052.975316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2052.976018] do_syscall_64+0x33/0x40 [ 2052.976521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2052.977216] RIP: 0033:0x7fbbb2ce3b19 [ 2052.977718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2052.980207] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2052.981244] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2052.982201] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2052.983175] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2052.984140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2052.985109] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:35:51 executing program 5: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x23, r0}}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd_index=0x1, 0x8eb9, &(0x7f0000000340)="2c9d783c830bda2d3a55ed7fa0f2b87bcf815b84f6249829f1d1c354b15ecb6b585e24c4270f27d0132cbe07444d2e403970e5eae3a19cefbb130af1cbe7a67adeeca2083703195cbafb4ff0b631cdef742ecd5d5b1063c59bb07fc1678e08c6215032f8f8c8d13e682d8da09fa128b04b3c4fd4234caa5c9843ac54ead4cb041289f6c82fa19e72212bb04528b2557c6225bc7e45be4e96cc0a61b0d68058058479601671e7", 0xa6, 0x1, 0x1, {0x0, r0}}, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x24008044) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000000)="355b6d6836a7ce03dc60d3a96e01fc7e26bc988af1cd") getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000100), &(0x7f0000000180)=0x4) 18:35:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x7, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:35:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 11) [ 2053.087579] FAULT_INJECTION: forcing a failure. [ 2053.087579] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.089137] CPU: 1 PID: 11922 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2053.090035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.091116] Call Trace: [ 2053.091465] dump_stack+0x107/0x167 [ 2053.091944] should_fail.cold+0x5/0xa [ 2053.092439] ? create_object.isra.0+0x3a/0xa30 [ 2053.093032] should_failslab+0x5/0x20 [ 2053.093532] kmem_cache_alloc+0x5b/0x310 [ 2053.094061] create_object.isra.0+0x3a/0xa30 [ 2053.094626] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2053.095302] kmem_cache_alloc_trace+0x151/0x320 [ 2053.095921] alloc_fs_context+0x57/0x840 [ 2053.096460] path_mount+0xab1/0x21e0 [ 2053.096950] ? strncpy_from_user+0x9e/0x470 [ 2053.097514] ? finish_automount+0xa90/0xa90 [ 2053.098078] ? getname_flags.part.0+0x1dd/0x4f0 [ 2053.098683] ? _copy_from_user+0xfb/0x1b0 [ 2053.099237] __x64_sys_mount+0x282/0x300 [ 2053.099764] ? copy_mnt_ns+0xa00/0xa00 [ 2053.100273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.100950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.101614] do_syscall_64+0x33/0x40 [ 2053.102091] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.102750] RIP: 0033:0x7fbbb2ce3b19 [ 2053.103236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2053.105604] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2053.106578] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2053.107502] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2053.108422] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2053.109350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2053.110273] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:35:51 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f6f238139cab1f27d067f1339ea1cc079fd6e495a00a482b0d6f62d31281abe71104f81d28486418dab0c979f83e56be3a287445781a48da0711b94c8188b2ad3665f4000048e2dde09570f462769f20346c9f652cb8c5372f3cbfa5afd3362e8e2646cf8c305e52aa754d56484f362b73f8221c0264033f31ea163707d6775c"]) syz_io_uring_setup(0x5e27, &(0x7f0000000080)={0x0, 0x5c01, 0x1, 0x2, 0x2e9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x31713}, 0x8) socketpair(0x6, 0xc, 0x80000001, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200), 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/vmstat\x00', 0x0, 0x0) 18:35:51 executing program 5: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/43, 0x2b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000580)=0xc) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0x1f, 0x4, @thr={&(0x7f00000004c0)="53ecd78f1174ac566b3a981c3b86ea07a8eed9a3a76af0ca51e48787216b82983dde1adbbd651602fe1f9f1a8e68e84607c7ee184d870144713d30d2e6b9aa69d79f82a969398f819dfa9d7fa173d3826819101b728edf7951e74761faf61470ffa5e5c434e83a3e0f284e2c8aa4556fb03cae61ec74e996b6e3c46090fd70ca531e92d5d7f42be73be9a1090c1adbd2ddaf91eb26872ecdf556d45e401c2c7d71c39b47beaa34ed313f4d16bc339899aaeb6376bf", &(0x7f0000000140)}}, &(0x7f00000002c0)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(r0, &(0x7f0000000400)) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x4, 0x1) timer_delete(0x0) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000300)={0x800, 0x3, 0x7, 0xd7, 0x8000, 0x6}) timer_gettime(r0, &(0x7f0000000100)) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x11, 0x1}, &(0x7f0000000340)) fcntl$getown(0xffffffffffffffff, 0x9) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:35:51 executing program 5: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000016c0)={0x104, 0x13, &(0x7f00000012c0)="8098c0234a6414765963aeeacf0e912a96c7fa0fa46a93a989c9422c7ef45fe480394657f8a08b97337d5245388cdd2eb1279c0474ed9bf25567f0bea4f7401e8952ff82d9546868c98856aa41351f386c4797ad8bd59e4dfc4dbfe9f681a9860741905cd97d1984f9cfef2637a43fb04c6123c283754e6ceaef40040509947e4f2ef72eb5097e92eb421bac414abef14e83d958ad8e808b5a30ff55c99f4e173debb9e8ef6281b9ba861539dfe99a068a7cba38f60ec8680fe015037995940458b445b8fd7254fbdd4e4c6b89d6fb5bdfd237838517d4a7f430dfb918582ff13976243e810b612f0bd7c6d189a77b2150c1dc6b7045ac09efa69a753b5e3a401901755c00f78d59853d4b3e3231951d5046b46807681137a66f15ee7d8c3dd543d829e1d37f7a9a36608d5c507707372e473cdd66e9e8e87d9ef5c53eafcbf47d30574ae258b6643d9bc55d5939648e828e3ab90aa01ceccbbe34fd84ebb3e3d274f70908444cb0d866139a5ff22f60e9346f454fd7dd1938c7f6bff943e458ad16ef0c0e0ee2aff29edf46276ac20a2e6ce7b44df760d2502eb31c139317e3063ff4333e990c84f77ce60df65935649ad78c747e7c69179544129b51bfce09f5ae5e637fc423d31372dbd66ce976612974e8a44f7e599efa61473111a174b5bb3f416f45d6499061d1de362d2884625d9fddd413046f25a8db6fce8daf9b87e725424b13a4e9ecbac6666aca107a2fe0222bb1826dae94d66496c4e6e39b1afe8b7c95123a641ffa5d236ade3dda9dc27a83bde64a6d1391f02dce317ba474153b201356995335501309fe1c1b6f11641de054fd7313d2d1c7be9e8113bee42742b2841e1f17754f7aa8030b151549abcc849c749bedd57a1b93918ebfd6af9a308c67e5da6f11968b0c2f4bd772957f4a1a64faa9013717e35c833d68894c5d2deec008b560295aa6d9f45132cb832b9eed8008dde608d1b765dd8ea0df3da52b3465f1980062e6846b493f916f1b6a1970e1d8ce310ec35376e1e00168c59021a39eaecd1144e1160d897bd092c2389597effec661a3c16127a7d67b3fc24d1788cd3694be2aabbe154fb727b52603a25e395adc0cf9cccfc9df005f15d2e426db2923d7698ce322cf209ae13e7bec360e01ace7e2584fd9163bc20e2e1414e6b904c8487a79eb58c1b775ad9df435f2a6905903a343dbeb88445c575b8813da7ae04c8acd990f1d05f0d017310f2bdbabb9ec2f57bde46568269049ea5821d4ad571bee3624360777e30895f604f7d60df251cec3edb08c504ade17cbefc6d694fcbcb10e3ed2dc41b5bca1f70bdb97e7f96124a12be88ea45ddf04169df823a7f6c4548dbf6ee552c5cfbd00c9711570833dcfb13929dd43648c24e91d3259267fefba7e24aca2999e4ba30b963177d5f0960e9f61729532201c92b499"}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000740)=ANY=[]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x680, 0x20) recvmmsg$unix(r2, &(0x7f00000011c0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000000400)=""/71, 0x47}, {&(0x7f0000000240)=""/10, 0xa}], 0x4, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000700)=""/23, 0x17}, {&(0x7f0000000740)=""/96, 0x60}, {&(0x7f0000000b40)=""/61, 0x3d}, {&(0x7f0000000800)=""/49, 0x31}, {&(0x7f0000000840)=""/221, 0xdd}, {&(0x7f0000000940)=""/115, 0x73}, {&(0x7f00000009c0)=""/50, 0x32}, {&(0x7f0000000a00)=""/103, 0x67}], 0x9, &(0x7f0000000b40)}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c00)=""/198, 0xc6}, {&(0x7f0000000d00)=""/110, 0x6e}, {&(0x7f0000000d80)=""/163, 0xa3}, {&(0x7f0000000e40)=""/215, 0xd7}, {&(0x7f0000000f40)=""/85, 0x55}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x6, &(0x7f0000001040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}], 0x3, 0x40010101, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') openat(r3, &(0x7f0000000100)='./file0\x00', 0x40000, 0x0) 18:35:51 executing program 5: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xf2e0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x10000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x401) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffff) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7fff) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9b) 18:35:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 12) [ 2053.334051] FAULT_INJECTION: forcing a failure. [ 2053.334051] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.335428] CPU: 1 PID: 11942 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2053.336232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.337182] Call Trace: [ 2053.337493] dump_stack+0x107/0x167 [ 2053.337916] should_fail.cold+0x5/0xa [ 2053.338359] ? ___slab_alloc+0x155/0x700 [ 2053.338826] ? create_object.isra.0+0x3a/0xa30 [ 2053.339363] should_failslab+0x5/0x20 [ 2053.339803] kmem_cache_alloc+0x5b/0x310 [ 2053.340274] create_object.isra.0+0x3a/0xa30 [ 2053.340780] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2053.341368] kmem_cache_alloc_trace+0x151/0x320 [ 2053.341917] register_for_each_vma+0x476/0xc00 [ 2053.342454] __uprobe_register+0x4df/0x880 [ 2053.342954] probe_event_enable+0x3c4/0xba0 [ 2053.343468] ? uprobe_perf_close+0x5f0/0x5f0 [ 2053.343798] FAULT_INJECTION: forcing a failure. [ 2053.343798] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.343987] trace_uprobe_register+0x54/0x730 [ 2053.347037] perf_trace_event_init+0x554/0x9c0 [ 2053.347572] perf_uprobe_init+0x173/0x210 [ 2053.348057] perf_uprobe_event_init+0xff/0x190 [ 2053.348586] perf_try_init_event+0x130/0x570 [ 2053.349097] perf_event_alloc.part.0+0xd96/0x2b70 [ 2053.349659] __do_sys_perf_event_open+0x579/0x2e60 [ 2053.350228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2053.350782] ? perf_event_set_output+0x5b0/0x5b0 [ 2053.351330] ? wait_for_completion_io+0x270/0x270 [ 2053.351900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.352499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.353093] do_syscall_64+0x33/0x40 [ 2053.353520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.354105] RIP: 0033:0x7fc9de03eb19 [ 2053.354530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2053.356638] RSP: 002b:00007fc9db593188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2053.357505] RAX: ffffffffffffffda RBX: 00007fc9de152020 RCX: 00007fc9de03eb19 [ 2053.358317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 2053.359137] RBP: 00007fc9db5931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2053.359956] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000003 [ 2053.360772] R13: 00007ffc3eeb513f R14: 00007fc9db593300 R15: 0000000000022000 [ 2053.361619] CPU: 0 PID: 11945 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2053.363222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.365102] Call Trace: [ 2053.365708] dump_stack+0x107/0x167 [ 2053.366540] should_fail.cold+0x5/0xa [ 2053.367452] ? legacy_init_fs_context+0x44/0xe0 [ 2053.368521] should_failslab+0x5/0x20 [ 2053.369398] kmem_cache_alloc_trace+0x55/0x320 [ 2053.370437] ? lockdep_init_map_type+0x2c7/0x780 [ 2053.371534] legacy_init_fs_context+0x44/0xe0 [ 2053.372552] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2053.373684] alloc_fs_context+0x4fd/0x840 [ 2053.374639] path_mount+0xab1/0x21e0 [ 2053.375511] ? strncpy_from_user+0x9e/0x470 [ 2053.376499] ? finish_automount+0xa90/0xa90 [ 2053.377477] ? getname_flags.part.0+0x1dd/0x4f0 [ 2053.378535] ? _copy_from_user+0xfb/0x1b0 [ 2053.379497] __x64_sys_mount+0x282/0x300 [ 2053.380417] ? copy_mnt_ns+0xa00/0xa00 [ 2053.381314] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.382509] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.383703] do_syscall_64+0x33/0x40 [ 2053.384550] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.385702] RIP: 0033:0x7fbbb2ce3b19 [ 2053.386550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2053.390704] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2053.392447] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2053.394064] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2053.395694] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2053.397312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2053.398926] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:36:07 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x8, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:07 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="208cffffff02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:36:07 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) finit_module(r2, &(0x7f0000000000)='[]\x00', 0x2) 18:36:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0xc140, 0x2) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x4a) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x3, 0x1, 0x13, 0xcef, 0x2a, "08da0176e184a56d9bf9fe7c565dade148c4350c8f3cffb969674cbd2029f0f195070825d706d4ef69c4"}, 0x33, 0x0) 18:36:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 13) 18:36:07 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2068.666044] FAULT_INJECTION: forcing a failure. [ 2068.666044] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.668472] CPU: 0 PID: 11960 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2068.669936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.669944] Call Trace: [ 2068.669971] dump_stack+0x107/0x167 [ 2068.669994] should_fail.cold+0x5/0xa [ 2068.670016] ? create_object.isra.0+0x3a/0xa30 [ 2068.670034] should_failslab+0x5/0x20 [ 2068.670054] kmem_cache_alloc+0x5b/0x310 [ 2068.670079] create_object.isra.0+0x3a/0xa30 [ 2068.670095] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2068.670121] kmem_cache_alloc_trace+0x151/0x320 [ 2068.670141] ? lockdep_init_map_type+0x2c7/0x780 [ 2068.670166] legacy_init_fs_context+0x44/0xe0 [ 2068.670182] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2068.670198] alloc_fs_context+0x4fd/0x840 [ 2068.670224] path_mount+0xab1/0x21e0 [ 2068.670250] ? strncpy_from_user+0x9e/0x470 [ 2068.670278] ? finish_automount+0xa90/0xa90 18:36:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x9, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2068.686239] ? getname_flags.part.0+0x1dd/0x4f0 [ 2068.686259] ? _copy_from_user+0xfb/0x1b0 [ 2068.686287] __x64_sys_mount+0x282/0x300 [ 2068.686306] ? copy_mnt_ns+0xa00/0xa00 [ 2068.686330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.686351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.686374] do_syscall_64+0x33/0x40 [ 2068.686394] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.686408] RIP: 0033:0x7fbbb2ce3b19 [ 2068.686426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:36:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xa, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2068.686437] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2068.686457] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2068.686469] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2068.686480] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2068.686491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2068.686502] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:36:07 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[]) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x2000006, 0x13, r0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2004, @fd=r0, 0x10001, &(0x7f0000000300)=""/164, 0xa4, 0x4, 0x0, {0x0, r2}}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f00000005c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd, 0x1, 0x0, 0x7, 0x0, 0x1, {0x0, r2}}, 0x3f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x6, 0x0, 0x7, 0x1, &(0x7f0000000600)="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", 0x100, 0x0, 0x0, {0x2}}, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r3, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x3}, 0x101) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r6, &(0x7f0000000140)='./file0\x00', 0x8201, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20d315) 18:36:21 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="d1"], 0xd7) close(r0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x3f7, 0x1, 0x70bd2a, 0x25dfdbfc, {0x7, 0x7, './file1', './file1'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) r2 = syz_io_uring_setup(0x892, &(0x7f0000000340)={0x0, 0x2b04, 0x4, 0x2, 0xc0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020801000470008400f801", 0x17, 0xfffffffffffffffd}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000200)=ANY=[], 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}) 18:36:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) sched_getparam(r2, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x42, 0x40, 0x5, 0x8, 0x0, 0x9, 0x2008, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x5, 0x8000}, 0x0, 0x81, 0xd0, 0x9, 0x5, 0x2, 0x7ff, 0x0, 0x6, 0x0, 0x400}, r2, 0x0, r0, 0xb) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:36:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 14) 18:36:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:21 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20f6ffffff02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:36:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xb, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2082.948624] FAULT_INJECTION: forcing a failure. [ 2082.948624] name failslab, interval 1, probability 0, space 0, times 0 [ 2082.949956] CPU: 0 PID: 11996 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2082.950788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2082.951741] Call Trace: [ 2082.952070] dump_stack+0x107/0x167 [ 2082.952501] should_fail.cold+0x5/0xa [ 2082.952966] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2082.953600] should_failslab+0x5/0x20 [ 2082.954063] __kmalloc_node+0x76/0x420 [ 2082.954512] ? lock_downgrade+0x6d0/0x6d0 [ 2082.955019] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2082.955653] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2082.956252] ? trace_hardirqs_on+0x5b/0x180 [ 2082.956760] kmem_cache_alloc_trace+0x169/0x320 [ 2082.957318] ? lockdep_init_map_type+0x2c7/0x780 [ 2082.957913] legacy_init_fs_context+0x44/0xe0 [ 2082.958450] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2082.959019] alloc_fs_context+0x4fd/0x840 [ 2082.959664] path_mount+0xab1/0x21e0 [ 2082.960120] ? strncpy_from_user+0x9e/0x470 [ 2082.960643] ? finish_automount+0xa90/0xa90 [ 2082.961161] ? getname_flags.part.0+0x1dd/0x4f0 [ 2082.961735] ? _copy_from_user+0xfb/0x1b0 [ 2082.962234] __x64_sys_mount+0x282/0x300 [ 2082.962730] ? copy_mnt_ns+0xa00/0xa00 [ 2082.963180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2082.963830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2082.964448] do_syscall_64+0x33/0x40 [ 2082.964880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2082.965488] RIP: 0033:0x7fbbb2ce3b19 [ 2082.965932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2082.968147] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2082.969062] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2082.969871] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2082.970733] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2082.971608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2082.972412] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:36:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x10, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = mq_open(&(0x7f0000000040)='-\xbc*&{\x00', 0x2, 0x50, &(0x7f0000000080)={0x8000, 0x47f, 0x100, 0x3}) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x556, 0x5, 0x3}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r3) dup2(r3, r1) 18:36:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x700, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x21) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) close(0xffffffffffffffff) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="6f0512520a"]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004800) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0x2, 0xffffffffffffffff, &(0x7f0000000340)=0x3, 0x100, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x6200, 0x1f, 0x1}) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) fcntl$addseals(r2, 0x409, 0x2) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r3) r4 = openat(r3, &(0x7f00000001c0)='./file0\x00', 0x4080, 0x168) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 18:36:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1db, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:21 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20feffffff02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:36:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 15) 18:36:21 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2083.168720] FAULT_INJECTION: forcing a failure. [ 2083.168720] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.170080] CPU: 0 PID: 12026 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2083.170899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2083.171890] Call Trace: [ 2083.172215] dump_stack+0x107/0x167 [ 2083.172645] should_fail.cold+0x5/0xa [ 2083.173101] ? create_object.isra.0+0x3a/0xa30 [ 2083.173647] should_failslab+0x5/0x20 [ 2083.174099] kmem_cache_alloc+0x5b/0x310 [ 2083.174569] ? cred_has_capability.isra.0+0x152/0x2b0 [ 2083.175184] create_object.isra.0+0x3a/0xa30 [ 2083.175683] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2083.176381] kmem_cache_alloc_trace+0x151/0x320 [ 2083.177069] ? v9fs_write_inode+0x60/0x60 [ 2083.177686] v9fs_mount+0x5a/0x8f0 [ 2083.178228] ? v9fs_write_inode+0x60/0x60 [ 2083.178841] legacy_get_tree+0x105/0x220 [ 2083.179454] vfs_get_tree+0x8e/0x300 [ 2083.180012] path_mount+0x1490/0x21e0 [ 2083.180597] ? strncpy_from_user+0x9e/0x470 [ 2083.181241] ? finish_automount+0xa90/0xa90 [ 2083.181888] ? getname_flags.part.0+0x1dd/0x4f0 [ 2083.182582] ? _copy_from_user+0xfb/0x1b0 [ 2083.183211] __x64_sys_mount+0x282/0x300 [ 2083.183828] ? copy_mnt_ns+0xa00/0xa00 [ 2083.184425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2083.185216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2083.185961] do_syscall_64+0x33/0x40 [ 2083.186519] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2083.187269] RIP: 0033:0x7fbbb2ce3b19 [ 2083.187848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.190421] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2083.191444] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2083.192478] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2083.193521] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2083.194525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2083.195559] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:36:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 16) [ 2083.315049] FAULT_INJECTION: forcing a failure. [ 2083.315049] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.317801] CPU: 0 PID: 12031 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2083.319423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2083.321370] Call Trace: [ 2083.321991] dump_stack+0x107/0x167 [ 2083.322849] should_fail.cold+0x5/0xa [ 2083.323761] should_failslab+0x5/0x20 [ 2083.324656] __kmalloc_track_caller+0x79/0x370 [ 2083.325724] ? v9fs_session_init+0xa7/0x1680 [ 2083.326753] ? kernel_text_address+0xf2/0x120 [ 2083.327813] kstrdup+0x36/0x70 [ 2083.328568] v9fs_session_init+0xa7/0x1680 [ 2083.329562] ? lock_release+0x680/0x680 [ 2083.330491] ? find_held_lock+0x2c/0x110 [ 2083.331458] ? kmem_cache_alloc_trace+0x151/0x320 [ 2083.332588] ? v9fs_show_options+0x690/0x690 [ 2083.333630] ? trace_hardirqs_on+0x5b/0x180 [ 2083.334642] ? kasan_unpoison_shadow+0x33/0x50 [ 2083.335718] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2083.336908] v9fs_mount+0x79/0x8f0 [ 2083.337743] ? v9fs_write_inode+0x60/0x60 [ 2083.338712] legacy_get_tree+0x105/0x220 [ 2083.339675] vfs_get_tree+0x8e/0x300 [ 2083.340550] path_mount+0x1490/0x21e0 [ 2083.341451] ? strncpy_from_user+0x9e/0x470 [ 2083.342461] ? finish_automount+0xa90/0xa90 [ 2083.343480] ? getname_flags.part.0+0x1dd/0x4f0 [ 2083.344570] ? _copy_from_user+0xfb/0x1b0 [ 2083.345548] __x64_sys_mount+0x282/0x300 [ 2083.346497] ? copy_mnt_ns+0xa00/0xa00 [ 2083.347422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2083.348651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2083.349861] do_syscall_64+0x33/0x40 [ 2083.350733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2083.351941] RIP: 0033:0x7fbbb2ce3b19 [ 2083.352812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.357114] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2083.358896] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2083.360571] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2083.362242] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2083.363907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2083.365562] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:36:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x0, 0x79, 0xffff, 0x0, 0xbd}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 18:36:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x900, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 17) [ 2083.454071] FAULT_INJECTION: forcing a failure. [ 2083.454071] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.456186] CPU: 1 PID: 12041 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2083.457437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2083.458936] Call Trace: [ 2083.459426] dump_stack+0x107/0x167 [ 2083.460087] should_fail.cold+0x5/0xa [ 2083.460774] ? v9fs_mount+0x5a/0x8f0 [ 2083.461442] should_failslab+0x5/0x20 [ 2083.462134] kmem_cache_alloc_trace+0x55/0x320 [ 2083.462958] ? v9fs_write_inode+0x60/0x60 [ 2083.463739] v9fs_mount+0x5a/0x8f0 [ 2083.464398] ? v9fs_write_inode+0x60/0x60 [ 2083.465144] legacy_get_tree+0x105/0x220 [ 2083.465881] vfs_get_tree+0x8e/0x300 [ 2083.466545] path_mount+0x1490/0x21e0 [ 2083.467232] ? strncpy_from_user+0x9e/0x470 [ 2083.468015] ? finish_automount+0xa90/0xa90 [ 2083.468787] ? getname_flags.part.0+0x1dd/0x4f0 [ 2083.469620] ? _copy_from_user+0xfb/0x1b0 [ 2083.470369] __x64_sys_mount+0x282/0x300 [ 2083.471093] ? copy_mnt_ns+0xa00/0xa00 [ 2083.471804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2083.472739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2083.473665] do_syscall_64+0x33/0x40 [ 2083.474330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2083.475251] RIP: 0033:0x7fbbb2ce3b19 [ 2083.475921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.479213] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2083.480579] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2083.481854] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2083.483129] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2083.484409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2083.485688] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:36:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xa00, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 18) 18:36:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xb00, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2083.662360] FAULT_INJECTION: forcing a failure. [ 2083.662360] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.664247] CPU: 1 PID: 12053 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2083.665365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2083.666714] Call Trace: [ 2083.667152] dump_stack+0x107/0x167 [ 2083.667757] should_fail.cold+0x5/0xa [ 2083.668381] should_failslab+0x5/0x20 [ 2083.669003] __kmalloc_track_caller+0x79/0x370 [ 2083.669745] ? v9fs_session_init+0xe9/0x1680 [ 2083.670464] kstrdup+0x36/0x70 [ 2083.670992] v9fs_session_init+0xe9/0x1680 [ 2083.671694] ? lock_release+0x680/0x680 [ 2083.672343] ? find_held_lock+0x2c/0x110 [ 2083.673003] ? kmem_cache_alloc_trace+0x151/0x320 [ 2083.673778] ? v9fs_show_options+0x690/0x690 [ 2083.674495] ? trace_hardirqs_on+0x5b/0x180 [ 2083.675189] ? kasan_unpoison_shadow+0x33/0x50 [ 2083.675931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2083.676749] v9fs_mount+0x79/0x8f0 [ 2083.677327] ? v9fs_write_inode+0x60/0x60 [ 2083.677993] legacy_get_tree+0x105/0x220 [ 2083.678647] vfs_get_tree+0x8e/0x300 [ 2083.679248] path_mount+0x1490/0x21e0 [ 2083.679875] ? strncpy_from_user+0x9e/0x470 [ 2083.680568] ? finish_automount+0xa90/0xa90 [ 2083.681267] ? getname_flags.part.0+0x1dd/0x4f0 [ 2083.682014] ? _copy_from_user+0xfb/0x1b0 [ 2083.682688] __x64_sys_mount+0x282/0x300 [ 2083.683347] ? copy_mnt_ns+0xa00/0xa00 [ 2083.683980] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2083.684829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2083.685663] do_syscall_64+0x33/0x40 [ 2083.686262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2083.687089] RIP: 0033:0x7fbbb2ce3b19 [ 2083.687703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.690674] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2083.691906] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2083.693045] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2083.694184] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2083.695327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2083.696466] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:36:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001940)={{0x1, 0x1, 0x18, r2, {0x0, 0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8000, 0x5, 0x3, 0x37e, 0x19, "a5a112a4668fd9ec48df57c8d472e9ae64beb9"}) r3 = clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x1e}, &(0x7f0000000200)=""/242, 0xf2, &(0x7f0000000300)=""/1, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x20, 0xac, 0x2, 0x0, 0x6, 0x28004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000400), 0xd}, 0x40300, 0x7, 0x1, 0x3, 0xcb44, 0x101, 0xbd5a, 0x0, 0xfffffffd, 0x0, 0x1}, r4, 0x0, r0, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000480)={0x141c, 0x37, 0x0, 0x70bd2d, 0x25dfdbfe, {0xe}, [@generic="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", @generic="1750fb2b91e3c5526b265e6bf99b804e8c7c4760dbffe9eefb399eabdf98e8a78ce4a8a98913a09bc597aad5dbfe3393da9fd95f3a797f56afa53cecdcd81729dea2b2efbb7fa4863850e09441df95eb022468afdfa27f31bdfebdc4ab440a5cddc0f2545fe74031a1ebb3c092f266b92a62b13d4b2737f682a4f418e75def17c22718005dae03fbe4eab599a6e5b96edc2d9df27c6b0c50b74363a331f30afb1a8ac4b6096f9efcec233140503ce909a4eaf6214d54772217af33d581f792667005f4d96084368afd4bfffb344135fa481f7e2a7a77487790424a4304e1", @generic="bf9c4c7307d6b3dbb55dac6c5b28a61f1ae0e4e559305bc2f42ff9b4e4b2de7c20e3dccf7449d07344cf55c27672fe1a79688c3f97963294fd6769b747d1c2b568a8eb6dd0eec0e07ae7038d28c6d7789a52c07efcc5a8322ac3014957e4bd7cc7ddc57a6b463b4c96a2455bc381d867fc0c6039ec2b8ade47a59be47b82e5fce07c531d05a0e5e3c443961a9816149147a7c88fc939a038edaf552acf4012172e7fc466224a4e29d63d5fc5a892451ddd2123b651813e512e67d4d42763cce61e85204f9756bd8f4149689d8805b4239df16725cfb072", @generic="31f61dc5877cb872f40ddbdd55d7e79cad", @typed={0x8, 0xb, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x8, 0x0, 0x0, @u32}, @generic="eab5c193b742db6608b24372c4d7821db9b194e10f8d1e5573408b096899f2650592e1cf1189f3bc5c097d4f989cc459ef150bf70c443b456cd3a92a7c977cc9001181587eae7eb39b97f83effc2a65cf8455fd4a1837a5dc0ded45c8d155f17957af2962665488d39708fcf98a5a2982862289e43fe3e97", @nested={0x122, 0xd, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @pid=r3}, @generic="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", @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x9}, @typed={0xc, 0x29, 0x0, 0x0, @u64=0x6}]}, @generic="ab1ddcb9b5386df43006c9cee5b60034cea724364f0e466da2ea6a64b4add7ffe41f8dc3bd762a1cde811b8806393f0c950373636eee1e69f25cdf6693fb36372bc52b9df623e1c78d47b4ddc80ab49fbaf9630c13d625e9885b196cf18ae6ed82f807701a75c6f416919ab3c8cbe09a6be8b175355edf7aa4e1be14dd871da054d8fb427951f26fa7f2fff595457c9d1f9133bc0561"]}, 0x141c}, 0x1, 0x0, 0x0, 0x4081}, 0x400c010) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:36:22 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 19) 18:36:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2083.829388] FAULT_INJECTION: forcing a failure. [ 2083.829388] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.831732] CPU: 0 PID: 12063 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2083.833118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2083.834788] Call Trace: [ 2083.835336] dump_stack+0x107/0x167 [ 2083.836082] should_fail.cold+0x5/0xa [ 2083.836857] ? create_object.isra.0+0x3a/0xa30 [ 2083.837781] should_failslab+0x5/0x20 [ 2083.838550] kmem_cache_alloc+0x5b/0x310 [ 2083.839391] create_object.isra.0+0x3a/0xa30 [ 2083.840276] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2083.841305] __kmalloc_track_caller+0x177/0x370 [ 2083.842245] ? v9fs_session_init+0xa7/0x1680 [ 2083.843134] ? kernel_text_address+0xf2/0x120 [ 2083.844051] kstrdup+0x36/0x70 [ 2083.844704] v9fs_session_init+0xa7/0x1680 [ 2083.845567] ? lock_release+0x680/0x680 [ 2083.846368] ? find_held_lock+0x2c/0x110 [ 2083.847197] ? kmem_cache_alloc_trace+0x151/0x320 [ 2083.848179] ? v9fs_show_options+0x690/0x690 [ 2083.849078] ? trace_hardirqs_on+0x5b/0x180 [ 2083.849951] ? kasan_unpoison_shadow+0x33/0x50 [ 2083.850872] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2083.851905] v9fs_mount+0x79/0x8f0 [ 2083.852624] ? v9fs_write_inode+0x60/0x60 [ 2083.853458] legacy_get_tree+0x105/0x220 [ 2083.854282] vfs_get_tree+0x8e/0x300 [ 2083.855035] path_mount+0x1490/0x21e0 [ 2083.855818] ? strncpy_from_user+0x9e/0x470 [ 2083.856691] ? finish_automount+0xa90/0xa90 [ 2083.857561] ? getname_flags.part.0+0x1dd/0x4f0 [ 2083.858498] ? _copy_from_user+0xfb/0x1b0 [ 2083.859359] __x64_sys_mount+0x282/0x300 [ 2083.860183] ? copy_mnt_ns+0xa00/0xa00 [ 2083.860983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2083.862039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2083.863064] do_syscall_64+0x33/0x40 [ 2083.863812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2083.864840] RIP: 0033:0x7fbbb2ce3b19 [ 2083.865583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.869237] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2083.870744] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2083.872159] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2083.873571] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2083.874980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2083.876405] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:36:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 20) 18:36:34 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x77, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2096.580689] FAULT_INJECTION: forcing a failure. [ 2096.580689] name failslab, interval 1, probability 0, space 0, times 0 18:36:34 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x1020, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:34 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x7) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x4, 0x2}}}, 0x0) 18:36:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:34 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x4, 0x3ff, 0x8000, 0x7ff, 0x13, "36206643c37e51dd"}) dup3(0xffffffffffffffff, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2096.582311] CPU: 1 PID: 12079 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2096.583611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.584760] Call Trace: [ 2096.585132] dump_stack+0x107/0x167 [ 2096.585639] should_fail.cold+0x5/0xa [ 2096.586165] ? p9_client_create+0xaf/0x1230 [ 2096.586764] should_failslab+0x5/0x20 [ 2096.587292] kmem_cache_alloc_trace+0x55/0x320 [ 2096.587933] ? find_held_lock+0x2c/0x110 [ 2096.588498] p9_client_create+0xaf/0x1230 [ 2096.589075] ? lock_downgrade+0x6d0/0x6d0 [ 2096.589653] ? p9_client_flush+0x430/0x430 [ 2096.590238] ? trace_hardirqs_on+0x5b/0x180 [ 2096.590837] ? lockdep_init_map_type+0x2c7/0x780 [ 2096.591500] ? __raw_spin_lock_init+0x36/0x110 [ 2096.592143] v9fs_session_init+0x1dd/0x1680 [ 2096.592748] ? lock_release+0x680/0x680 [ 2096.593308] ? kmem_cache_alloc_trace+0x151/0x320 [ 2096.593979] ? v9fs_show_options+0x690/0x690 [ 2096.594600] ? trace_hardirqs_on+0x5b/0x180 [ 2096.595200] ? kasan_unpoison_shadow+0x33/0x50 [ 2096.595845] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2096.596556] v9fs_mount+0x79/0x8f0 18:36:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x2000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2096.596570] ? v9fs_write_inode+0x60/0x60 18:36:35 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000001000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2096.596582] legacy_get_tree+0x105/0x220 [ 2096.596597] vfs_get_tree+0x8e/0x300 [ 2096.596609] path_mount+0x1490/0x21e0 [ 2096.596626] ? strncpy_from_user+0x9e/0x470 [ 2096.596638] ? finish_automount+0xa90/0xa90 [ 2096.596651] ? getname_flags.part.0+0x1dd/0x4f0 [ 2096.596664] ? _copy_from_user+0xfb/0x1b0 [ 2096.596682] __x64_sys_mount+0x282/0x300 18:36:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 21) 18:36:35 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001940)={{0x1, 0x1, 0x18, r2, {0x0, 0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8000, 0x5, 0x3, 0x37e, 0x19, "a5a112a4668fd9ec48df57c8d472e9ae64beb9"}) r3 = clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x1e}, &(0x7f0000000200)=""/242, 0xf2, &(0x7f0000000300)=""/1, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x20, 0xac, 0x2, 0x0, 0x6, 0x28004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000400), 0xd}, 0x40300, 0x7, 0x1, 0x3, 0xcb44, 0x101, 0xbd5a, 0x0, 0xfffffffd, 0x0, 0x1}, r4, 0x0, r0, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000480)={0x141c, 0x37, 0x0, 0x70bd2d, 0x25dfdbfe, {0xe}, [@generic="135e527cb4593f08043388c8f08fe5f11a65becb63e3431d20bb553408755cffdad20bc4f6d1e46b8cc518b91b503656082b67cf4eab2f0ce5e76baff5ee5c9200e2a285debd600155a3263339083a1b2d7d2d5debb58166e2301b960b50e178e94ade1cbdcf5654d718c4794dff23eba5960fcd127ce18fe49a404f806adcf765e6f9c64762334ed11dc3e1f1c79da34c932a76982e153d5aefc0e16538219e940aab240b6305a054b95fe9a1d9eaec7c2df8b013a550cd729e225bb6dd78a43608cc1f91d5b8cd07e5897505cbce021a56a14bc1161cffa030128e5d932c4cc811f93530f08f254245aa072ade8f7130772c296b2aa658f11fdc0230bb27e68fac230e2851c02d9fcbb3e375da836df91a4c252a9447b28c73d62e41e6df4ccacee7a1bbc7415d4906c8820c704373ab9f511b4d1f6fe009572558303a237e6ce4495297d3a5c2ef253e60bd1938ce1a9c05fc8a4cf876601ef1dff6d7526baac2ccd1a974e4513deec23de47c641e5f760319ce24687dae739770e1dd8906283b62e9199a57435b91d91adb45e3235655fe05c1c9e8331232d48c47b0c70ed9c6315ae5f60ad6301731c27fae9f380494ac91ce37f01d1121a3f54edacf553082acd9cf7cf0e251a5156b8772e100b09afe23c8d5ff62f37ed8b132957bb3dd3faa3ef7f1c918c00aaaeac9b395ac8244363cb3981577f41c0c06454157954d1c4c9b295c1b0edabd9bcf7899541a119f51c421cdb84f078b14923a3eaff556a77e0bde1801e971d7d94f089b9a31d9aa2199949a635a6d526a2f5a07135ab95e5655e55e82f508f9991263e9b277d0f3ff6d38df0583ea63dea11d49f64b2d6c19ba56c955fcaae8e7e16fdbc86cd1688e30b4ed91040c9322cab3417b3ef16b3afaebb390f543c62cb3c117349231900ab09449a73d2bc741ce0837d8e305f9dbdcc222ca3ed638650d9582ccf48b06241d0f675cec064cae3c1260278882e2b16961258cc835d59af1f471c674eb3f50bf56b00bd57d91f496d5636a46e6a9614686fb23d080b760ca79cf39c84607b5426d0c2e240881eb0f23eb512ab72e6942a0b8396a305405aee02f2ed3c245cc5f4079298dadfd1952adf13d8a22debfe29ad99bc03591001a5d0940c94cf7f24021fa18a11a836636e235e86342d3e0528a23bfa69f1759950dea7944d1e687c2808cb77415e4fccace8bcf4223f30128bff90da54f9d47537ca0b6ef657992434e9d7ce170801628c84e27933bb8094af8f54ada0bd5162f3bf7b427dd4386871a5a93994c681e5ceee595a0767be3a2843a0c96626927ffe74106f2800bf56529bb982b5dc8185be4e7ed76b758d8cd91f4b89adbc98a92b9767f86fe86fc808ecaa33a3bcd467bcf7e78efaf4e286a59aef4666757acd0dcb987c19be5ae220f6f2f35025444a77a40de138f78619b3877e35f3c39436abec22356be63c0387990d54b8bd4495489af855e566f1e9cdc315c7a33c368a0c48ef1ee25210288b7993c8f3f0d4333b0d9bc1e09f636ea31eb13d8abc46e2fe978e16aa8791093eb9f9ab4c2ac1e9ed76480c6601d82b01e9b9b9132b0b3746322a5e1e274b823f678481531632f81912b960c97e484705b5087edb949d01fc4627f003d5d529de45c4fb72c750471364f516e8534986ce69d509c92e67b8245a05c669376e91b8189bdf6fa410b4448de8d335f99c64b2e7eb8421344aa8737ad54bede45898dbb23f8c52efd943dd335b571f13980e7331ebfe601678108930310aa80baffbdb401eb1f2ea825b407b59c8dba76c27145daad066e6862d9294735691ab39571029563e9abea7656cbe54aa53870cd215d05580b2126c53ec65024709ea62e754ce706da0c28593e042fd4d79886678884db6abc469fd8bc02e9a20325bf39a3f7600f1b5997d4911a3ba2999911bbb04c240acb08c85afece0538430b2d7dc22a4829498f4b026065a1adc8bfa15652fd91397da6327d8d8bd2f5e2048925a66b74f2a1711f80b354acc6c2d41dafdcc1a402efcf860a115baf9323550cf719f89d1165818eb04a0d14e38059959ea8158f2f0c94419487e5fecdf3adf2dd15e9ab5f28c32a6c72d65e419077e88f818305fd039a442dcf35885c93b477c09b42c7b70b4f1fc370ed29a38625635c83f7c0974e8955a70df60ea81d98b0dbeb2dde050ace87c447c117bdecc2f2812765ba303fb3367d2fcc4b6b492c34f15beb004093d967a294bc3f3fd4bfc6108823404e6d31b9f835f78cf070bd47a977f7b3116d108a4753fde1fc317b865a721adac04c549d0292533d9161fc59493540226f959f511ce4ae53648eb22ac959f487c35c0cf7ecc7ef5690d2eac22a0eec3921788bea652d6647f0fed93a7457917e4d9e66e04f692b36176e3be4b19a7c5b58c49bed24e176db75f440d7bd15b4942f43163403146db3f5c5f411b995215da46070c3c325b27b0a64d73262386570991872934930d5565f7eeec98673ddd3bd2a799eb6631f86f7e2c84de4a73892644af2cba209104a8f37fc0e7fde0db5b7918f949aefeb834207b75ffc0a6ae620184f790ffcf416d59b324b803c4a5d7f5e3c4873506582bc5c82ad1c2479abe641fb5b6f3598cce9bf8ebe83c58a0e607c16576e00ea9419aae77fb9ee51a5ba80d67364719a324b17e411f85c087ec46c36caf3cd779ee3cad2ca7ba63b992e91bc6590e234d3c40234e19f1641fa61cf846636f1f6c32e2859514aaee956f5681864a66817084b15bd12dd6bb8a199a6353a726aa5cecfb080f794febf8626618cf6ecf2e7ae1e8122be9ae85dddddbe8f199568b51a7cb5664b64b6275adb4a93ee514ef8a85d0feefdd8cdad57120b38f2479ddd9b18349c9da64718e0c28db084b01113b3aa4ceebf66dd4449f7e5d9a215b01ef4cbe9cd9bb7946d3cc24bd3241b80edb976eff99474e5b6c90fe442bbebe55b35a74c84c2cc034248611aa36917a9d8c21571d443485eec31b63661bfcb5d5e3c530f23eb417b86215de9d2bd65640e92b1b15ac36be6cc56b089079aba2688571f0d0965395d1738bd77a2b4fac018e3e70fffc32567a77b2d08f85ef94c2174a883c9456ac256906893897d9c2d7de634eb6f03c84162fbc406f35fb7a349143ac69c1785f74678edee4337ccc6a83730cc0ac92cd5202f1cc6b3a9db9b454c3cd1aceb188e70213aeab67be084bf45ed6677915950ef48d36735f81cb895e8a636496255694cfaf678eb875c72d3f50a54184d3822a370a55d7bd56627ed89a7ea23acd41b71738d0e1adcb6826414b9bffa8630d9f2119d320f964acefbf81d4e215ccdda554fe281788cecc13cbbb495160a36aad60072dbb959cd3730d0a4ddbfb8ea80f1507ca90103c8dca8ee73501ea2c94e303db3ec7d6dac50e7509a691156ced5cced6fff021796af3c5ef3515989a183bb9796fabf16045f42d53f69bc1be89f128dbc2863689391190b3437414d0af4d1b60c7feaf77d86c196901b6b28f21ae61c7b9a7957d051d6942b1ed895748d760ae424b9370544648c0102968570676e4fc0d82b438c106f0a4e71b34b025989d2f1bf50ec6dd748ee6d46b8c23f43a7e4b0ebcbdc6033c1e0fe644926ce0d0be6a12bb35df20141a3a68a4bac4bf8a9c9d1315468c74dd50b0bc9a9bd9532f94e321c27b0446c9ce0ca200b5e3c5733cd5c302061e4427759070c4cf92a7a32685a1b73bf29ca5d54ef5133bc524e8a988d235f6a6be1eada1c939c26962ecae936554b16b3e6d073d741ebd636368bf289861099ed9a0a5d4094fd853c849fdcd2b2baedfdf2e4e3aa7713268de3cc1db13964d7bfdd21574614ad057ad4d0c9c31ee72fc6f2cd6d1b572282c890162f9fdf3c4f5b8b197348ebdfd60fbf7196a58335337e59a8f5a2358311f28bc5338286d8b3f71e274c9b00c6bbed17e29c57b936258fae84178d17b61d0e58e9f2657a3cec19ebbe7dd9dd4a8103a23e6beaa34b827faa48fba79b7cce1e1486f8d4e56380239a38726fb05377816c27c59084db2f030d9912ddb7b5c14c05533339e898083404b28a4742b165af2ca0063591293d197a2b1d90516fa163767528e046a3d032fdbf67a9079e6bdff5bf2ff609f8c591586b92c54040714107a258f75031029918fa8933d1c71caf28482825991c5b68e99328ac61f1cb5f91d3815d4b3ea7af39ad9979c18249d063e33ff86a93320fefadc53505cd97866b254c72c522b00b6fe041bd3afaecd0f9cec91b1d4ce9a043dcb4dc5a42adabdcace195a79acce2bab79b47fbbf2595ae225c2d429ddd1239f367b5581cae5bffa59fc5bb21cab7a9bab94ece64c112e00ff6714f71b973db824e9845053c9ceabfb90563fb1cd4563e74198030f05c941f6b1d8d1c69c4882639750636c4dff0bbe89ebbc7673f7318e8839003b71ad5d844f389d406df7df220d10004f1a9561051f2006d8970da5b2982da783daf6e5d165393a395d174a165f1f4b3ea6488bf91614b71c0136764765b6efed5a33b56d4741e00766f36f8c5a93e300474e2f6a55946fa019ddf429b34f85b1b4692fa2e9dd10b68710c8e9ceaac7dd4985bfc716258d4fe13f9caca59d22b63c650545ca2bedcd697dce2b882a81030235cec574f2cb63a83aaa11c48dadf7e314ab87f93509597bec79e62135a214c0961ccd396911a5cba3491397b625e96832cc969beadeae8bd8516d51070502d52280fafd5ad9fcc458c4ecb3a781b15fb0d81643d3b9779757c4be1a99d91227c21c8a1f2f5411387ecd4c23a3bc223dbc28d13a1d4e05716c48aa5003aae111004c73dbe2f75eef19dfaccfd1b820793e7c1fbf53d83ed34b9d603c4fea99752356731fbb713c72f0ae61116456c35578c4e4f163d7b75cead79412e112f4adbf76e8fbd0d26357a21c040075ba4e03115e92b368283147bc8fdd3eca499bf92bbbada7440a13d66317337a389175cc9578bf27a5b1d65577f8b8f0a99436d6a68a94bacd3c175ee9265168a4ac5bf596b8411f06c871e2317d24d7e3aa53f1005cc16cad2f845d16b61172395a4f2b0eca1c43e29c3294c68fac63f49fae402a9793b2ee05df6579ec6d30f0a5d212620f22bcc22963f0f22412b257c25c6f1a8ee170cd70779342d1893dd69c327d19e7df5e38fd3544c7a538a1b56ea1d22816252cec39f9800d07dd97365fbc0f220fa388d2fe9e9c973ec931103571ef252a1c75ff0595744732df083f4ee052c71a084bf1720d85056445b174c094b251374ec0bdda4bae8e695fdd231c9491fb33b6218911306b36d4191400b4c4d364166db2ca40cf4eed7f27fad64e1482defd10e6e18d573b10796652c56747ce589e8ed3eeb1b30cdbbf6e7fd086ee7a8c03d1e6aad4a30abe6570f55bb4f39a25010de58eb6e25fe65b20745d955ecd10a3469e7d53a69515f074bc3a1693c4eac5e031c1328d723163253986bacc03556051bfa0ab6f4d23a56497c1f3b807d12774258835c1aeab03e8a0504fa5711a9278267a26fc540d38f2beeffb5cc899d721487fdeb8e88ddb4cfed79ed6d49ebea20ffb8ac5c1d17a58e49c4924ee901d0d0e62cfc2e76173e260b2c18522c73b7de02f66acfd49054d78d15176b26f413927a002ba7c424187e97d96fe50db32616c1ec35ba7f728b95388043d94ee6f1fa918e7f04a3ae393facc213e035f73d5b19af9240adc5dab77d56fc347e9521ccc581e0047d9818acaa988ccb0833d8fe2ab961eadd47fd24f92c", @generic="1750fb2b91e3c5526b265e6bf99b804e8c7c4760dbffe9eefb399eabdf98e8a78ce4a8a98913a09bc597aad5dbfe3393da9fd95f3a797f56afa53cecdcd81729dea2b2efbb7fa4863850e09441df95eb022468afdfa27f31bdfebdc4ab440a5cddc0f2545fe74031a1ebb3c092f266b92a62b13d4b2737f682a4f418e75def17c22718005dae03fbe4eab599a6e5b96edc2d9df27c6b0c50b74363a331f30afb1a8ac4b6096f9efcec233140503ce909a4eaf6214d54772217af33d581f792667005f4d96084368afd4bfffb344135fa481f7e2a7a77487790424a4304e1", @generic="bf9c4c7307d6b3dbb55dac6c5b28a61f1ae0e4e559305bc2f42ff9b4e4b2de7c20e3dccf7449d07344cf55c27672fe1a79688c3f97963294fd6769b747d1c2b568a8eb6dd0eec0e07ae7038d28c6d7789a52c07efcc5a8322ac3014957e4bd7cc7ddc57a6b463b4c96a2455bc381d867fc0c6039ec2b8ade47a59be47b82e5fce07c531d05a0e5e3c443961a9816149147a7c88fc939a038edaf552acf4012172e7fc466224a4e29d63d5fc5a892451ddd2123b651813e512e67d4d42763cce61e85204f9756bd8f4149689d8805b4239df16725cfb072", @generic="31f61dc5877cb872f40ddbdd55d7e79cad", @typed={0x8, 0xb, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x8, 0x0, 0x0, @u32}, @generic="eab5c193b742db6608b24372c4d7821db9b194e10f8d1e5573408b096899f2650592e1cf1189f3bc5c097d4f989cc459ef150bf70c443b456cd3a92a7c977cc9001181587eae7eb39b97f83effc2a65cf8455fd4a1837a5dc0ded45c8d155f17957af2962665488d39708fcf98a5a2982862289e43fe3e97", @nested={0x122, 0xd, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @pid=r3}, @generic="37e3c38a535e631ab1f08db93de679f9f365c21938dcd170e8cfcddda35ad8b98e32c3a8b46a1265f04ecd65c3cfc913bb4d05f5ada8e5e37416f1514f6600525d3fd9a3235cd6f0e92df6bd1c45d260facb00830ab10603a56990625c89b88638e5243ca947f00764670c821633faa5a3195a7f6b66522802af6cca02563ec8893af294afade12607afd3e23687b03504a7150c01fb00626af96c41544814f0075b04b191ce960d786d3f856f55bccb87b716ad0b82cb53889d5ef45f54625968f943649a2868c576d929452ed1de3c51f0d889413ff4dc387956c10a6f36bcd208c652460aa3bc1191ef6735da31d29419a66ae6082880760a2faf2841", @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x9}, @typed={0xc, 0x29, 0x0, 0x0, @u64=0x6}]}, @generic="ab1ddcb9b5386df43006c9cee5b60034cea724364f0e466da2ea6a64b4add7ffe41f8dc3bd762a1cde811b8806393f0c950373636eee1e69f25cdf6693fb36372bc52b9df623e1c78d47b4ddc80ab49fbaf9630c13d625e9885b196cf18ae6ed82f807701a75c6f416919ab3c8cbe09a6be8b175355edf7aa4e1be14dd871da054d8fb427951f26fa7f2fff595457c9d1f9133bc0561"]}, 0x141c}, 0x1, 0x0, 0x0, 0x4081}, 0x400c010) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2096.596694] ? copy_mnt_ns+0xa00/0xa00 [ 2096.596709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.596723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.596738] do_syscall_64+0x33/0x40 [ 2096.596751] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.596759] RIP: 0033:0x7fbbb2ce3b19 [ 2096.596770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.596777] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2096.596790] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2096.596797] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2096.596804] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2096.596811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2096.596819] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2096.684864] FAULT_INJECTION: forcing a failure. [ 2096.684864] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.684879] CPU: 1 PID: 12092 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2096.684886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.684891] Call Trace: [ 2096.684910] dump_stack+0x107/0x167 [ 2096.684926] should_fail.cold+0x5/0xa 18:36:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x2010, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2096.684942] ? create_object.isra.0+0x3a/0xa30 [ 2096.684954] should_failslab+0x5/0x20 [ 2096.684967] kmem_cache_alloc+0x5b/0x310 [ 2096.684980] ? kernel_text_address+0xf2/0x120 [ 2096.684999] create_object.isra.0+0x3a/0xa30 [ 2096.685010] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2096.685027] kmem_cache_alloc_trace+0x151/0x320 [ 2096.685040] ? find_held_lock+0x2c/0x110 [ 2096.685056] p9_client_create+0xaf/0x1230 [ 2096.685069] ? lock_downgrade+0x6d0/0x6d0 [ 2096.685085] ? p9_client_flush+0x430/0x430 [ 2096.685099] ? trace_hardirqs_on+0x5b/0x180 [ 2096.685114] ? lockdep_init_map_type+0x2c7/0x780 [ 2096.685129] ? __raw_spin_lock_init+0x36/0x110 [ 2096.685148] v9fs_session_init+0x1dd/0x1680 [ 2096.685165] ? lock_release+0x680/0x680 [ 2096.685185] ? kmem_cache_alloc_trace+0x151/0x320 [ 2096.685198] ? v9fs_show_options+0x690/0x690 [ 2096.685217] ? trace_hardirqs_on+0x5b/0x180 [ 2096.685231] ? kasan_unpoison_shadow+0x33/0x50 [ 2096.685242] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2096.685257] v9fs_mount+0x79/0x8f0 [ 2096.685271] ? v9fs_write_inode+0x60/0x60 [ 2096.685282] legacy_get_tree+0x105/0x220 [ 2096.685297] vfs_get_tree+0x8e/0x300 [ 2096.685310] path_mount+0x1490/0x21e0 [ 2096.685327] ? strncpy_from_user+0x9e/0x470 [ 2096.685340] ? finish_automount+0xa90/0xa90 [ 2096.685353] ? getname_flags.part.0+0x1dd/0x4f0 18:36:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xedc0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 22) [ 2096.685366] ? _copy_from_user+0xfb/0x1b0 [ 2096.685385] __x64_sys_mount+0x282/0x300 [ 2096.685396] ? copy_mnt_ns+0xa00/0xa00 [ 2096.685412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.685427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.685442] do_syscall_64+0x33/0x40 [ 2096.685455] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.685463] RIP: 0033:0x7fbbb2ce3b19 [ 2096.685475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.685482] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2096.685496] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2096.685503] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2096.685511] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2096.685518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2096.685526] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2096.942663] FAULT_INJECTION: forcing a failure. [ 2096.942663] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.942687] CPU: 1 PID: 12110 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2096.942698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.942705] Call Trace: [ 2096.942739] dump_stack+0x107/0x167 [ 2096.942761] should_fail.cold+0x5/0xa [ 2096.942785] should_failslab+0x5/0x20 [ 2096.942805] __kmalloc_track_caller+0x79/0x370 [ 2096.942821] ? p9_client_create+0x41d/0x1230 [ 2096.942844] kstrdup+0x36/0x70 [ 2096.942861] p9_client_create+0x41d/0x1230 [ 2096.942882] ? lock_downgrade+0x6d0/0x6d0 [ 2096.942905] ? p9_client_flush+0x430/0x430 [ 2096.942927] ? trace_hardirqs_on+0x5b/0x180 [ 2096.942948] ? lockdep_init_map_type+0x2c7/0x780 [ 2096.942969] ? __raw_spin_lock_init+0x36/0x110 [ 2096.942996] v9fs_session_init+0x1dd/0x1680 [ 2096.943016] ? lock_release+0x680/0x680 [ 2096.943044] ? kmem_cache_alloc_trace+0x151/0x320 [ 2096.943064] ? v9fs_show_options+0x690/0x690 [ 2096.943092] ? trace_hardirqs_on+0x5b/0x180 [ 2096.943113] ? kasan_unpoison_shadow+0x33/0x50 [ 2096.943130] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2096.943152] v9fs_mount+0x79/0x8f0 [ 2096.943172] ? v9fs_write_inode+0x60/0x60 [ 2096.943189] legacy_get_tree+0x105/0x220 [ 2096.943210] vfs_get_tree+0x8e/0x300 [ 2096.943228] path_mount+0x1490/0x21e0 [ 2096.943253] ? strncpy_from_user+0x9e/0x470 [ 2096.943272] ? finish_automount+0xa90/0xa90 [ 2096.943291] ? getname_flags.part.0+0x1dd/0x4f0 [ 2096.943311] ? _copy_from_user+0xfb/0x1b0 [ 2096.943339] __x64_sys_mount+0x282/0x300 [ 2096.943356] ? copy_mnt_ns+0xa00/0xa00 [ 2096.943380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.943400] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.943423] do_syscall_64+0x33/0x40 [ 2096.943442] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.943455] RIP: 0033:0x7fbbb2ce3b19 [ 2096.943483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.943494] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2096.943515] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2096.943526] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2096.943538] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2096.943549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2096.943560] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:36:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x80000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_uring_enter(r2, 0x5e41, 0x8c5e, 0x1, &(0x7f0000000040)={[0x9]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:36:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 23) 18:36:51 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001940)={{0x1, 0x1, 0x18, r2, {0x0, 0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8000, 0x5, 0x3, 0x37e, 0x19, "a5a112a4668fd9ec48df57c8d472e9ae64beb9"}) r3 = clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x1e}, &(0x7f0000000200)=""/242, 0xf2, &(0x7f0000000300)=""/1, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x20, 0xac, 0x2, 0x0, 0x6, 0x28004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000400), 0xd}, 0x40300, 0x7, 0x1, 0x3, 0xcb44, 0x101, 0xbd5a, 0x0, 0xfffffffd, 0x0, 0x1}, r4, 0x0, r0, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000480)={0x141c, 0x37, 0x0, 0x70bd2d, 0x25dfdbfe, {0xe}, [@generic="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", @generic="1750fb2b91e3c5526b265e6bf99b804e8c7c4760dbffe9eefb399eabdf98e8a78ce4a8a98913a09bc597aad5dbfe3393da9fd95f3a797f56afa53cecdcd81729dea2b2efbb7fa4863850e09441df95eb022468afdfa27f31bdfebdc4ab440a5cddc0f2545fe74031a1ebb3c092f266b92a62b13d4b2737f682a4f418e75def17c22718005dae03fbe4eab599a6e5b96edc2d9df27c6b0c50b74363a331f30afb1a8ac4b6096f9efcec233140503ce909a4eaf6214d54772217af33d581f792667005f4d96084368afd4bfffb344135fa481f7e2a7a77487790424a4304e1", @generic="bf9c4c7307d6b3dbb55dac6c5b28a61f1ae0e4e559305bc2f42ff9b4e4b2de7c20e3dccf7449d07344cf55c27672fe1a79688c3f97963294fd6769b747d1c2b568a8eb6dd0eec0e07ae7038d28c6d7789a52c07efcc5a8322ac3014957e4bd7cc7ddc57a6b463b4c96a2455bc381d867fc0c6039ec2b8ade47a59be47b82e5fce07c531d05a0e5e3c443961a9816149147a7c88fc939a038edaf552acf4012172e7fc466224a4e29d63d5fc5a892451ddd2123b651813e512e67d4d42763cce61e85204f9756bd8f4149689d8805b4239df16725cfb072", @generic="31f61dc5877cb872f40ddbdd55d7e79cad", @typed={0x8, 0xb, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x8, 0x0, 0x0, @u32}, @generic="eab5c193b742db6608b24372c4d7821db9b194e10f8d1e5573408b096899f2650592e1cf1189f3bc5c097d4f989cc459ef150bf70c443b456cd3a92a7c977cc9001181587eae7eb39b97f83effc2a65cf8455fd4a1837a5dc0ded45c8d155f17957af2962665488d39708fcf98a5a2982862289e43fe3e97", @nested={0x122, 0xd, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @pid=r3}, @generic="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", @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x9}, @typed={0xc, 0x29, 0x0, 0x0, @u64=0x6}]}, @generic="ab1ddcb9b5386df43006c9cee5b60034cea724364f0e466da2ea6a64b4add7ffe41f8dc3bd762a1cde811b8806393f0c950373636eee1e69f25cdf6693fb36372bc52b9df623e1c78d47b4ddc80ab49fbaf9630c13d625e9885b196cf18ae6ed82f807701a75c6f416919ab3c8cbe09a6be8b175355edf7aa4e1be14dd871da054d8fb427951f26fa7f2fff595457c9d1f9133bc0561"]}, 0x141c}, 0x1, 0x0, 0x0, 0x4081}, 0x400c010) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:36:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:36:51 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200002000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2113.592239] FAULT_INJECTION: forcing a failure. [ 2113.592239] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.595147] CPU: 0 PID: 12122 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2113.595160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.595168] Call Trace: [ 2113.595200] dump_stack+0x107/0x167 [ 2113.595242] should_fail.cold+0x5/0xa [ 2113.600831] ? create_object.isra.0+0x3a/0xa30 [ 2113.600857] should_failslab+0x5/0x20 [ 2113.602425] kmem_cache_alloc+0x5b/0x310 [ 2113.603464] ? kernel_text_address+0xf2/0x120 [ 2113.604642] create_object.isra.0+0x3a/0xa30 [ 2113.605761] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2113.607074] kmem_cache_alloc_trace+0x151/0x320 [ 2113.608259] ? find_held_lock+0x2c/0x110 [ 2113.609295] p9_client_create+0xaf/0x1230 [ 2113.610361] ? lock_downgrade+0x6d0/0x6d0 [ 2113.611417] ? p9_client_flush+0x430/0x430 [ 2113.612505] ? trace_hardirqs_on+0x5b/0x180 [ 2113.613596] ? lockdep_init_map_type+0x2c7/0x780 [ 2113.614818] ? __raw_spin_lock_init+0x36/0x110 [ 2113.615982] v9fs_session_init+0x1dd/0x1680 [ 2113.617073] ? lock_release+0x680/0x680 [ 2113.618093] ? kmem_cache_alloc_trace+0x151/0x320 [ 2113.619315] ? v9fs_show_options+0x690/0x690 [ 2113.620455] ? trace_hardirqs_on+0x5b/0x180 [ 2113.621395] ? kasan_unpoison_shadow+0x33/0x50 [ 2113.622348] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2113.623417] v9fs_mount+0x79/0x8f0 [ 2113.624171] ? v9fs_write_inode+0x60/0x60 [ 2113.625036] legacy_get_tree+0x105/0x220 [ 2113.625887] vfs_get_tree+0x8e/0x300 [ 2113.626672] path_mount+0x1490/0x21e0 [ 2113.627476] ? strncpy_from_user+0x9e/0x470 [ 2113.628399] ? finish_automount+0xa90/0xa90 [ 2113.629314] ? getname_flags.part.0+0x1dd/0x4f0 [ 2113.630296] ? _copy_from_user+0xfb/0x1b0 [ 2113.631179] __x64_sys_mount+0x282/0x300 [ 2113.632057] ? copy_mnt_ns+0xa00/0xa00 [ 2113.632889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2113.633988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2113.635084] do_syscall_64+0x33/0x40 [ 2113.635879] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2113.636960] RIP: 0033:0x7fbbb2ce3b19 [ 2113.637744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2113.641623] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2113.643211] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2113.644709] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2113.646193] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2113.647691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2113.649197] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:36:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x1000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000340)={0x7, 0x3ff, 0x5, 0x81, 0x8, "eaff95f2768b7d1d"}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) sched_getparam(r2, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) sched_getparam(r3, &(0x7f00000000c0)) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) clone3(&(0x7f00000002c0)={0x20018200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/55, 0x37, &(0x7f0000000180)=""/145, &(0x7f0000000240)=[0x0, 0x0, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x9, {r4}}, 0x58) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:36:52 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xd0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 24) 18:37:07 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x309400, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:37:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:07 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:07 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200003000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:37:07 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1fe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:07 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001940)={{0x1, 0x1, 0x18, r2, {0x0, 0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8000, 0x5, 0x3, 0x37e, 0x19, "a5a112a4668fd9ec48df57c8d472e9ae64beb9"}) r3 = clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x1e}, &(0x7f0000000200)=""/242, 0xf2, &(0x7f0000000300)=""/1, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x20, 0xac, 0x2, 0x0, 0x6, 0x28004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000400), 0xd}, 0x40300, 0x7, 0x1, 0x3, 0xcb44, 0x101, 0xbd5a, 0x0, 0xfffffffd, 0x0, 0x1}, r4, 0x0, r0, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000480)={0x141c, 0x37, 0x0, 0x70bd2d, 0x25dfdbfe, {0xe}, [@generic="135e527cb4593f08043388c8f08fe5f11a65becb63e3431d20bb553408755cffdad20bc4f6d1e46b8cc518b91b503656082b67cf4eab2f0ce5e76baff5ee5c9200e2a285debd600155a3263339083a1b2d7d2d5debb58166e2301b960b50e178e94ade1cbdcf5654d718c4794dff23eba5960fcd127ce18fe49a404f806adcf765e6f9c64762334ed11dc3e1f1c79da34c932a76982e153d5aefc0e16538219e940aab240b6305a054b95fe9a1d9eaec7c2df8b013a550cd729e225bb6dd78a43608cc1f91d5b8cd07e5897505cbce021a56a14bc1161cffa030128e5d932c4cc811f93530f08f254245aa072ade8f7130772c296b2aa658f11fdc0230bb27e68fac230e2851c02d9fcbb3e375da836df91a4c252a9447b28c73d62e41e6df4ccacee7a1bbc7415d4906c8820c704373ab9f511b4d1f6fe009572558303a237e6ce4495297d3a5c2ef253e60bd1938ce1a9c05fc8a4cf876601ef1dff6d7526baac2ccd1a974e4513deec23de47c641e5f760319ce24687dae739770e1dd8906283b62e9199a57435b91d91adb45e3235655fe05c1c9e8331232d48c47b0c70ed9c6315ae5f60ad6301731c27fae9f380494ac91ce37f01d1121a3f54edacf553082acd9cf7cf0e251a5156b8772e100b09afe23c8d5ff62f37ed8b132957bb3dd3faa3ef7f1c918c00aaaeac9b395ac8244363cb3981577f41c0c06454157954d1c4c9b295c1b0edabd9bcf7899541a119f51c421cdb84f078b14923a3eaff556a77e0bde1801e971d7d94f089b9a31d9aa2199949a635a6d526a2f5a07135ab95e5655e55e82f508f9991263e9b277d0f3ff6d38df0583ea63dea11d49f64b2d6c19ba56c955fcaae8e7e16fdbc86cd1688e30b4ed91040c9322cab3417b3ef16b3afaebb390f543c62cb3c117349231900ab09449a73d2bc741ce0837d8e305f9dbdcc222ca3ed638650d9582ccf48b06241d0f675cec064cae3c1260278882e2b16961258cc835d59af1f471c674eb3f50bf56b00bd57d91f496d5636a46e6a9614686fb23d080b760ca79cf39c84607b5426d0c2e240881eb0f23eb512ab72e6942a0b8396a305405aee02f2ed3c245cc5f4079298dadfd1952adf13d8a22debfe29ad99bc03591001a5d0940c94cf7f24021fa18a11a836636e235e86342d3e0528a23bfa69f1759950dea7944d1e687c2808cb77415e4fccace8bcf4223f30128bff90da54f9d47537ca0b6ef657992434e9d7ce170801628c84e27933bb8094af8f54ada0bd5162f3bf7b427dd4386871a5a93994c681e5ceee595a0767be3a2843a0c96626927ffe74106f2800bf56529bb982b5dc8185be4e7ed76b758d8cd91f4b89adbc98a92b9767f86fe86fc808ecaa33a3bcd467bcf7e78efaf4e286a59aef4666757acd0dcb987c19be5ae220f6f2f35025444a77a40de138f78619b3877e35f3c39436abec22356be63c0387990d54b8bd4495489af855e566f1e9cdc315c7a33c368a0c48ef1ee25210288b7993c8f3f0d4333b0d9bc1e09f636ea31eb13d8abc46e2fe978e16aa8791093eb9f9ab4c2ac1e9ed76480c6601d82b01e9b9b9132b0b3746322a5e1e274b823f678481531632f81912b960c97e484705b5087edb949d01fc4627f003d5d529de45c4fb72c750471364f516e8534986ce69d509c92e67b8245a05c669376e91b8189bdf6fa410b4448de8d335f99c64b2e7eb8421344aa8737ad54bede45898dbb23f8c52efd943dd335b571f13980e7331ebfe601678108930310aa80baffbdb401eb1f2ea825b407b59c8dba76c27145daad066e6862d9294735691ab39571029563e9abea7656cbe54aa53870cd215d05580b2126c53ec65024709ea62e754ce706da0c28593e042fd4d79886678884db6abc469fd8bc02e9a20325bf39a3f7600f1b5997d4911a3ba2999911bbb04c240acb08c85afece0538430b2d7dc22a4829498f4b026065a1adc8bfa15652fd91397da6327d8d8bd2f5e2048925a66b74f2a1711f80b354acc6c2d41dafdcc1a402efcf860a115baf9323550cf719f89d1165818eb04a0d14e38059959ea8158f2f0c94419487e5fecdf3adf2dd15e9ab5f28c32a6c72d65e419077e88f818305fd039a442dcf35885c93b477c09b42c7b70b4f1fc370ed29a38625635c83f7c0974e8955a70df60ea81d98b0dbeb2dde050ace87c447c117bdecc2f2812765ba303fb3367d2fcc4b6b492c34f15beb004093d967a294bc3f3fd4bfc6108823404e6d31b9f835f78cf070bd47a977f7b3116d108a4753fde1fc317b865a721adac04c549d0292533d9161fc59493540226f959f511ce4ae53648eb22ac959f487c35c0cf7ecc7ef5690d2eac22a0eec3921788bea652d6647f0fed93a7457917e4d9e66e04f692b36176e3be4b19a7c5b58c49bed24e176db75f440d7bd15b4942f43163403146db3f5c5f411b995215da46070c3c325b27b0a64d73262386570991872934930d5565f7eeec98673ddd3bd2a799eb6631f86f7e2c84de4a73892644af2cba209104a8f37fc0e7fde0db5b7918f949aefeb834207b75ffc0a6ae620184f790ffcf416d59b324b803c4a5d7f5e3c4873506582bc5c82ad1c2479abe641fb5b6f3598cce9bf8ebe83c58a0e607c16576e00ea9419aae77fb9ee51a5ba80d67364719a324b17e411f85c087ec46c36caf3cd779ee3cad2ca7ba63b992e91bc6590e234d3c40234e19f1641fa61cf846636f1f6c32e2859514aaee956f5681864a66817084b15bd12dd6bb8a199a6353a726aa5cecfb080f794febf8626618cf6ecf2e7ae1e8122be9ae85dddddbe8f199568b51a7cb5664b64b6275adb4a93ee514ef8a85d0feefdd8cdad57120b38f2479ddd9b18349c9da64718e0c28db084b01113b3aa4ceebf66dd4449f7e5d9a215b01ef4cbe9cd9bb7946d3cc24bd3241b80edb976eff99474e5b6c90fe442bbebe55b35a74c84c2cc034248611aa36917a9d8c21571d443485eec31b63661bfcb5d5e3c530f23eb417b86215de9d2bd65640e92b1b15ac36be6cc56b089079aba2688571f0d0965395d1738bd77a2b4fac018e3e70fffc32567a77b2d08f85ef94c2174a883c9456ac256906893897d9c2d7de634eb6f03c84162fbc406f35fb7a349143ac69c1785f74678edee4337ccc6a83730cc0ac92cd5202f1cc6b3a9db9b454c3cd1aceb188e70213aeab67be084bf45ed6677915950ef48d36735f81cb895e8a636496255694cfaf678eb875c72d3f50a54184d3822a370a55d7bd56627ed89a7ea23acd41b71738d0e1adcb6826414b9bffa8630d9f2119d320f964acefbf81d4e215ccdda554fe281788cecc13cbbb495160a36aad60072dbb959cd3730d0a4ddbfb8ea80f1507ca90103c8dca8ee73501ea2c94e303db3ec7d6dac50e7509a691156ced5cced6fff021796af3c5ef3515989a183bb9796fabf16045f42d53f69bc1be89f128dbc2863689391190b3437414d0af4d1b60c7feaf77d86c196901b6b28f21ae61c7b9a7957d051d6942b1ed895748d760ae424b9370544648c0102968570676e4fc0d82b438c106f0a4e71b34b025989d2f1bf50ec6dd748ee6d46b8c23f43a7e4b0ebcbdc6033c1e0fe644926ce0d0be6a12bb35df20141a3a68a4bac4bf8a9c9d1315468c74dd50b0bc9a9bd9532f94e321c27b0446c9ce0ca200b5e3c5733cd5c302061e4427759070c4cf92a7a32685a1b73bf29ca5d54ef5133bc524e8a988d235f6a6be1eada1c939c26962ecae936554b16b3e6d073d741ebd636368bf289861099ed9a0a5d4094fd853c849fdcd2b2baedfdf2e4e3aa7713268de3cc1db13964d7bfdd21574614ad057ad4d0c9c31ee72fc6f2cd6d1b572282c890162f9fdf3c4f5b8b197348ebdfd60fbf7196a58335337e59a8f5a2358311f28bc5338286d8b3f71e274c9b00c6bbed17e29c57b936258fae84178d17b61d0e58e9f2657a3cec19ebbe7dd9dd4a8103a23e6beaa34b827faa48fba79b7cce1e1486f8d4e56380239a38726fb05377816c27c59084db2f030d9912ddb7b5c14c05533339e898083404b28a4742b165af2ca0063591293d197a2b1d90516fa163767528e046a3d032fdbf67a9079e6bdff5bf2ff609f8c591586b92c54040714107a258f75031029918fa8933d1c71caf28482825991c5b68e99328ac61f1cb5f91d3815d4b3ea7af39ad9979c18249d063e33ff86a93320fefadc53505cd97866b254c72c522b00b6fe041bd3afaecd0f9cec91b1d4ce9a043dcb4dc5a42adabdcace195a79acce2bab79b47fbbf2595ae225c2d429ddd1239f367b5581cae5bffa59fc5bb21cab7a9bab94ece64c112e00ff6714f71b973db824e9845053c9ceabfb90563fb1cd4563e74198030f05c941f6b1d8d1c69c4882639750636c4dff0bbe89ebbc7673f7318e8839003b71ad5d844f389d406df7df220d10004f1a9561051f2006d8970da5b2982da783daf6e5d165393a395d174a165f1f4b3ea6488bf91614b71c0136764765b6efed5a33b56d4741e00766f36f8c5a93e300474e2f6a55946fa019ddf429b34f85b1b4692fa2e9dd10b68710c8e9ceaac7dd4985bfc716258d4fe13f9caca59d22b63c650545ca2bedcd697dce2b882a81030235cec574f2cb63a83aaa11c48dadf7e314ab87f93509597bec79e62135a214c0961ccd396911a5cba3491397b625e96832cc969beadeae8bd8516d51070502d52280fafd5ad9fcc458c4ecb3a781b15fb0d81643d3b9779757c4be1a99d91227c21c8a1f2f5411387ecd4c23a3bc223dbc28d13a1d4e05716c48aa5003aae111004c73dbe2f75eef19dfaccfd1b820793e7c1fbf53d83ed34b9d603c4fea99752356731fbb713c72f0ae61116456c35578c4e4f163d7b75cead79412e112f4adbf76e8fbd0d26357a21c040075ba4e03115e92b368283147bc8fdd3eca499bf92bbbada7440a13d66317337a389175cc9578bf27a5b1d65577f8b8f0a99436d6a68a94bacd3c175ee9265168a4ac5bf596b8411f06c871e2317d24d7e3aa53f1005cc16cad2f845d16b61172395a4f2b0eca1c43e29c3294c68fac63f49fae402a9793b2ee05df6579ec6d30f0a5d212620f22bcc22963f0f22412b257c25c6f1a8ee170cd70779342d1893dd69c327d19e7df5e38fd3544c7a538a1b56ea1d22816252cec39f9800d07dd97365fbc0f220fa388d2fe9e9c973ec931103571ef252a1c75ff0595744732df083f4ee052c71a084bf1720d85056445b174c094b251374ec0bdda4bae8e695fdd231c9491fb33b6218911306b36d4191400b4c4d364166db2ca40cf4eed7f27fad64e1482defd10e6e18d573b10796652c56747ce589e8ed3eeb1b30cdbbf6e7fd086ee7a8c03d1e6aad4a30abe6570f55bb4f39a25010de58eb6e25fe65b20745d955ecd10a3469e7d53a69515f074bc3a1693c4eac5e031c1328d723163253986bacc03556051bfa0ab6f4d23a56497c1f3b807d12774258835c1aeab03e8a0504fa5711a9278267a26fc540d38f2beeffb5cc899d721487fdeb8e88ddb4cfed79ed6d49ebea20ffb8ac5c1d17a58e49c4924ee901d0d0e62cfc2e76173e260b2c18522c73b7de02f66acfd49054d78d15176b26f413927a002ba7c424187e97d96fe50db32616c1ec35ba7f728b95388043d94ee6f1fa918e7f04a3ae393facc213e035f73d5b19af9240adc5dab77d56fc347e9521ccc581e0047d9818acaa988ccb0833d8fe2ab961eadd47fd24f92c", @generic="1750fb2b91e3c5526b265e6bf99b804e8c7c4760dbffe9eefb399eabdf98e8a78ce4a8a98913a09bc597aad5dbfe3393da9fd95f3a797f56afa53cecdcd81729dea2b2efbb7fa4863850e09441df95eb022468afdfa27f31bdfebdc4ab440a5cddc0f2545fe74031a1ebb3c092f266b92a62b13d4b2737f682a4f418e75def17c22718005dae03fbe4eab599a6e5b96edc2d9df27c6b0c50b74363a331f30afb1a8ac4b6096f9efcec233140503ce909a4eaf6214d54772217af33d581f792667005f4d96084368afd4bfffb344135fa481f7e2a7a77487790424a4304e1", @generic="bf9c4c7307d6b3dbb55dac6c5b28a61f1ae0e4e559305bc2f42ff9b4e4b2de7c20e3dccf7449d07344cf55c27672fe1a79688c3f97963294fd6769b747d1c2b568a8eb6dd0eec0e07ae7038d28c6d7789a52c07efcc5a8322ac3014957e4bd7cc7ddc57a6b463b4c96a2455bc381d867fc0c6039ec2b8ade47a59be47b82e5fce07c531d05a0e5e3c443961a9816149147a7c88fc939a038edaf552acf4012172e7fc466224a4e29d63d5fc5a892451ddd2123b651813e512e67d4d42763cce61e85204f9756bd8f4149689d8805b4239df16725cfb072", @generic="31f61dc5877cb872f40ddbdd55d7e79cad", @typed={0x8, 0xb, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x8, 0x0, 0x0, @u32}, @generic="eab5c193b742db6608b24372c4d7821db9b194e10f8d1e5573408b096899f2650592e1cf1189f3bc5c097d4f989cc459ef150bf70c443b456cd3a92a7c977cc9001181587eae7eb39b97f83effc2a65cf8455fd4a1837a5dc0ded45c8d155f17957af2962665488d39708fcf98a5a2982862289e43fe3e97", @nested={0x122, 0xd, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @pid=r3}, @generic="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", @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x9}, @typed={0xc, 0x29, 0x0, 0x0, @u64=0x6}]}, @generic="ab1ddcb9b5386df43006c9cee5b60034cea724364f0e466da2ea6a64b4add7ffe41f8dc3bd762a1cde811b8806393f0c950373636eee1e69f25cdf6693fb36372bc52b9df623e1c78d47b4ddc80ab49fbaf9630c13d625e9885b196cf18ae6ed82f807701a75c6f416919ab3c8cbe09a6be8b175355edf7aa4e1be14dd871da054d8fb427951f26fa7f2fff595457c9d1f9133bc0561"]}, 0x141c}, 0x1, 0x0, 0x0, 0x4081}, 0x400c010) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:37:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x2000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2129.127493] FAULT_INJECTION: forcing a failure. [ 2129.127493] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.129191] CPU: 1 PID: 12160 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2129.130126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2129.131251] Call Trace: [ 2129.131615] dump_stack+0x107/0x167 [ 2129.132124] should_fail.cold+0x5/0xa [ 2129.132653] should_failslab+0x5/0x20 [ 2129.133186] __kmalloc_track_caller+0x79/0x370 [ 2129.133809] ? p9_client_create+0x51e/0x1230 [ 2129.134411] kmemdup_nul+0x2d/0xa0 [ 2129.134891] p9_client_create+0x51e/0x1230 [ 2129.135481] ? p9_client_flush+0x430/0x430 [ 2129.136061] ? trace_hardirqs_on+0x5b/0x180 [ 2129.136646] ? lockdep_init_map_type+0x2c7/0x780 [ 2129.137301] ? __raw_spin_lock_init+0x36/0x110 [ 2129.137920] v9fs_session_init+0x1dd/0x1680 [ 2129.138502] ? lock_release+0x680/0x680 [ 2129.139038] ? kmem_cache_alloc_trace+0x151/0x320 [ 2129.139692] ? v9fs_show_options+0x690/0x690 [ 2129.140302] ? trace_hardirqs_on+0x5b/0x180 [ 2129.140889] ? kasan_unpoison_shadow+0x33/0x50 [ 2129.141511] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2129.141526] v9fs_mount+0x79/0x8f0 18:37:07 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2129.141540] ? v9fs_write_inode+0x60/0x60 18:37:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x7000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2129.141551] legacy_get_tree+0x105/0x220 [ 2129.141566] vfs_get_tree+0x8e/0x300 [ 2129.141579] path_mount+0x1490/0x21e0 [ 2129.141596] ? strncpy_from_user+0x9e/0x470 [ 2129.141609] ? finish_automount+0xa90/0xa90 [ 2129.141622] ? getname_flags.part.0+0x1dd/0x4f0 [ 2129.141636] ? _copy_from_user+0xfb/0x1b0 [ 2129.141655] __x64_sys_mount+0x282/0x300 18:37:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 25) [ 2129.141667] ? copy_mnt_ns+0xa00/0xa00 [ 2129.141683] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2129.141697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2129.141712] do_syscall_64+0x33/0x40 [ 2129.141726] entry_SYSCALL_64_after_hwframe+0x67/0xd1 18:37:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x8000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:37:07 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200004000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2129.141735] RIP: 0033:0x7fbbb2ce3b19 [ 2129.141747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2129.141754] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2129.141769] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2129.141776] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2129.141783] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2129.141790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2129.141798] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:37:07 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000086dd6096033f00303a00fc020000000000000000000000000000ff120000000000007800000000600009e60000000000000000000000000000ffffac1e0001fe8000000008000000000000000000bb"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x20, 0x2, 0x0, 0x0, "025711870210f26444ecf2c61b17c44f1057a8118f57c29797e40a40c74857dbdbd55bbdb1b733c2710df4ae4742be2908f508a516e13542c8c4225f03f5fe0a"}}}}, &(0x7f00000000c0)={0x0, 0x4, [0x565, 0xbff, 0xbb9, 0xbd1]}) syz_emit_ethernet(0x1d, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_emit_ethernet(0xfffffffffffffe25, &(0x7f0000000440)={@multicast, @local, @void, {@canfd={0xd, {{0x2, 0x1, 0x0, 0x1}, 0x38, 0x0, 0x0, 0x0, "599b7a665046264ee5621dcf28dad5b4474711775218f7c3f38c6b5bb66a055f5f0cd3bea8e64584fa41ef4bceb707186269893c6609120adacba8cef20dedaf"}}}}, &(0x7f0000000200)={0x0, 0x2003, [0x9f1, 0x7, 0x146, 0x9b8]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000005e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14001, 0x0, 0x0, 0x3, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() getpgrp(0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000140)=0x10001, 0x1000, 0x6) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x37f, 0xca4}, &(0x7f0000000100)) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000400)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) 18:37:07 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000, 0xffff}}, './file0\x00'}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2129.290509] FAULT_INJECTION: forcing a failure. [ 2129.290509] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.292062] CPU: 1 PID: 12182 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2129.292936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2129.293989] Call Trace: [ 2129.294328] dump_stack+0x107/0x167 [ 2129.294794] should_fail.cold+0x5/0xa [ 2129.295278] ? create_object.isra.0+0x3a/0xa30 [ 2129.295865] should_failslab+0x5/0x20 [ 2129.296347] kmem_cache_alloc+0x5b/0x310 [ 2129.296860] create_object.isra.0+0x3a/0xa30 [ 2129.297407] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2129.298049] __kmalloc_track_caller+0x177/0x370 [ 2129.298634] ? p9_client_create+0x51e/0x1230 [ 2129.299187] kmemdup_nul+0x2d/0xa0 [ 2129.299636] p9_client_create+0x51e/0x1230 [ 2129.300180] ? p9_client_flush+0x430/0x430 [ 2129.300716] ? trace_hardirqs_on+0x5b/0x180 [ 2129.301258] ? lockdep_init_map_type+0x2c7/0x780 [ 2129.301858] ? __raw_spin_lock_init+0x36/0x110 [ 2129.302437] v9fs_session_init+0x1dd/0x1680 [ 2129.302983] ? lock_release+0x680/0x680 [ 2129.303488] ? kmem_cache_alloc_trace+0x151/0x320 [ 2129.304102] ? v9fs_show_options+0x690/0x690 [ 2129.304661] ? trace_hardirqs_on+0x5b/0x180 [ 2129.305204] ? kasan_unpoison_shadow+0x33/0x50 [ 2129.305774] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2129.306410] v9fs_mount+0x79/0x8f0 [ 2129.306861] ? v9fs_write_inode+0x60/0x60 [ 2129.307377] legacy_get_tree+0x105/0x220 [ 2129.307895] vfs_get_tree+0x8e/0x300 [ 2129.308361] path_mount+0x1490/0x21e0 [ 2129.308845] ? strncpy_from_user+0x9e/0x470 [ 2129.309386] ? finish_automount+0xa90/0xa90 [ 2129.309928] ? getname_flags.part.0+0x1dd/0x4f0 [ 2129.310509] ? _copy_from_user+0xfb/0x1b0 [ 2129.311035] __x64_sys_mount+0x282/0x300 [ 2129.311543] ? copy_mnt_ns+0xa00/0xa00 [ 2129.312044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2129.312700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2129.313355] do_syscall_64+0x33/0x40 [ 2129.313820] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2129.314454] RIP: 0033:0x7fbbb2ce3b19 [ 2129.314919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2129.317211] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2129.318154] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2129.319037] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2129.319927] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2129.320829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2129.321723] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:37:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x9000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:37:07 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7fff, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000140)="eeb67a0f76d3922bc58c1f1039437e38e8ebf65e0e0e33d075f5844b8fda3cc9d261db977bce9712fe0524f391fd5df6d57d18d15018a7f068a50ee0ce06577e768316738e56e9d10e9d2e77a118d3297168b3f38cf652060254", 0x5a, 0x8}, {&(0x7f00000000c0)="b946dcb63d53c7", 0x7, 0xd6}, {&(0x7f00000001c0)="e8fd9fd4913a4714ca7e36546afdd39a806f4b29a7f684fa27e76494b0fd57e23767fb53e09a4a2f6e4d6283640cc47b360c8c708028899348c0ef81bf3bef9d456f5e0b14a026bf8f99614b479145e5047f6dfa551b2f6966b4ee5f73494f0d4c57c34350e9f398c849194b9c36ea7f5f4e", 0x72, 0xfffffffffffffffd}], 0x20, &(0x7f0000000340)={[{@shortname_mixed}, {@utf8no}, {@utf8no}], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x64, 0x31, 0x65, 0x39, 0x30, 0x62, 0x37], 0x2d, [0x35, 0x62, 0x65, 0x62], 0x2d, [0x32, 0x33, 0x39, 0x65], 0x2d, [0x62, 0x36, 0x4, 0x35], 0x2d, [0x30, 0x65, 0x63, 0x35, 0x31, 0x35, 0x8a23183e37d815bc, 0x64]}}}, {@obj_user={'obj_user', 0x3d, '\\}&('}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_measure}]}) sendfile(r1, r0, &(0x7f0000000240)=0x5, 0x80) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x100, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x105000, 0x0) r4 = inotify_init1(0x0) recvmsg$unix(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x1) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(r2, r3, 0x0, 0x100000001) 18:37:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 26) [ 2129.445968] FAULT_INJECTION: forcing a failure. [ 2129.445968] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.447372] CPU: 1 PID: 12203 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2129.448197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2129.449173] Call Trace: [ 2129.449490] dump_stack+0x107/0x167 [ 2129.449922] should_fail.cold+0x5/0xa [ 2129.450373] should_failslab+0x5/0x20 [ 2129.450829] __kmalloc_track_caller+0x79/0x370 [ 2129.451366] ? parse_opts.part.0+0x8e/0x340 [ 2129.451885] kstrdup+0x36/0x70 [ 2129.452263] parse_opts.part.0+0x8e/0x340 [ 2129.452752] ? p9_fd_show_options+0x1c0/0x1c0 [ 2129.453280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2129.453893] ? quarantine_put+0x8b/0x1a0 [ 2129.454362] ? trace_hardirqs_on+0x5b/0x180 [ 2129.454868] ? kfree+0xd7/0x340 [ 2129.455258] p9_fd_create+0x98/0x4a0 [ 2129.455696] ? p9_conn_create+0x510/0x510 [ 2129.456182] ? p9_client_create+0x798/0x1230 [ 2129.456695] ? kfree+0xd7/0x340 [ 2129.457080] ? do_raw_spin_unlock+0x4f/0x220 [ 2129.457594] p9_client_create+0x7ff/0x1230 [ 2129.458091] ? p9_client_flush+0x430/0x430 [ 2129.458588] ? trace_hardirqs_on+0x5b/0x180 [ 2129.459091] ? lockdep_init_map_type+0x2c7/0x780 [ 2129.459643] ? __raw_spin_lock_init+0x36/0x110 [ 2129.460191] v9fs_session_init+0x1dd/0x1680 [ 2129.460697] ? lock_release+0x680/0x680 [ 2129.461166] ? kmem_cache_alloc_trace+0x151/0x320 [ 2129.461729] ? v9fs_show_options+0x690/0x690 [ 2129.462247] ? trace_hardirqs_on+0x5b/0x180 [ 2129.462750] ? kasan_unpoison_shadow+0x33/0x50 [ 2129.463280] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2129.463879] v9fs_mount+0x79/0x8f0 [ 2129.464293] ? v9fs_write_inode+0x60/0x60 [ 2129.464774] legacy_get_tree+0x105/0x220 [ 2129.465249] vfs_get_tree+0x8e/0x300 [ 2129.465683] path_mount+0x1490/0x21e0 [ 2129.466130] ? strncpy_from_user+0x9e/0x470 [ 2129.466633] ? finish_automount+0xa90/0xa90 [ 2129.467133] ? getname_flags.part.0+0x1dd/0x4f0 [ 2129.467672] ? _copy_from_user+0xfb/0x1b0 [ 2129.468166] __x64_sys_mount+0x282/0x300 [ 2129.468663] ? copy_mnt_ns+0xa00/0xa00 [ 2129.469113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2129.469719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2129.470314] do_syscall_64+0x33/0x40 [ 2129.470748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2129.471339] RIP: 0033:0x7fbbb2ce3b19 [ 2129.471772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2129.473891] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2129.474765] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2129.475593] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2129.476419] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2129.477237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2129.478058] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2129.479004] 9pnet: Insufficient options for proto=fd 18:37:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x13, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xa000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:37:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x100}, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xd7) close(r2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x6) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="0106000001000000180000005bc8b28540d1603043fdf40f39b54c8b1fc358c82267dc32f532f71f1b54c5c97b9c192c9011e1a77a464de2a276b8a7faa6f7174ca2f060aa7d3fbda9d2214b621f66b1f7913435acd873aa68d8564abe85b0d56c137020ba933351f538f128dcdcd483e36e9f4d2a86041a5f3cb0fc3c6cd79ad9c61c", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) 18:37:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 27) 18:37:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:08 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200005000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2129.585201] FAULT_INJECTION: forcing a failure. [ 2129.585201] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.586630] CPU: 1 PID: 12212 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2129.587419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2129.588370] Call Trace: [ 2129.588677] dump_stack+0x107/0x167 [ 2129.589091] should_fail.cold+0x5/0xa [ 2129.589525] ? create_object.isra.0+0x3a/0xa30 [ 2129.590050] should_failslab+0x5/0x20 [ 2129.590480] kmem_cache_alloc+0x5b/0x310 [ 2129.590939] ? legacy_get_tree+0x105/0x220 [ 2129.591416] ? vfs_get_tree+0x8e/0x300 [ 2129.591869] create_object.isra.0+0x3a/0xa30 [ 2129.592365] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2129.592951] __kmalloc_track_caller+0x177/0x370 [ 2129.592962] ? parse_opts.part.0+0x8e/0x340 [ 2129.592975] kstrdup+0x36/0x70 [ 2129.592985] parse_opts.part.0+0x8e/0x340 [ 2129.592997] ? p9_fd_show_options+0x1c0/0x1c0 [ 2129.593012] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2129.593022] ? quarantine_put+0x8b/0x1a0 [ 2129.593030] ? trace_hardirqs_on+0x5b/0x180 [ 2129.593042] ? kfree+0xd7/0x340 [ 2129.593057] p9_fd_create+0x98/0x4a0 [ 2129.593066] ? p9_conn_create+0x510/0x510 [ 2129.593075] ? p9_client_create+0x798/0x1230 [ 2129.593085] ? kfree+0xd7/0x340 [ 2129.593093] ? do_raw_spin_unlock+0x4f/0x220 [ 2129.593107] p9_client_create+0x7ff/0x1230 [ 2129.593122] ? p9_client_flush+0x430/0x430 [ 2129.593133] ? trace_hardirqs_on+0x5b/0x180 [ 2129.593145] ? lockdep_init_map_type+0x2c7/0x780 [ 2129.593157] ? __raw_spin_lock_init+0x36/0x110 [ 2129.593173] v9fs_session_init+0x1dd/0x1680 [ 2129.593184] ? lock_release+0x680/0x680 [ 2129.593201] ? kmem_cache_alloc_trace+0x151/0x320 [ 2129.593212] ? v9fs_show_options+0x690/0x690 [ 2129.593228] ? trace_hardirqs_on+0x5b/0x180 [ 2129.593240] ? kasan_unpoison_shadow+0x33/0x50 [ 2129.593250] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2129.593263] v9fs_mount+0x79/0x8f0 [ 2129.593274] ? v9fs_write_inode+0x60/0x60 [ 2129.593283] legacy_get_tree+0x105/0x220 [ 2129.593295] vfs_get_tree+0x8e/0x300 [ 2129.593306] path_mount+0x1490/0x21e0 [ 2129.593321] ? strncpy_from_user+0x9e/0x470 [ 2129.593332] ? finish_automount+0xa90/0xa90 [ 2129.593343] ? getname_flags.part.0+0x1dd/0x4f0 [ 2129.593354] ? _copy_from_user+0xfb/0x1b0 [ 2129.593370] __x64_sys_mount+0x282/0x300 [ 2129.593381] ? copy_mnt_ns+0xa00/0xa00 [ 2129.593394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2129.593407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2129.593419] do_syscall_64+0x33/0x40 [ 2129.593431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2129.593438] RIP: 0033:0x7fbbb2ce3b19 [ 2129.593448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2129.593454] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2129.593466] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2129.593472] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2129.593479] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2129.593485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2129.593490] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:37:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xb000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:37:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x77, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) fcntl$addseals(r1, 0x409, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffefff, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x2, 0x1, 0x3, 0x90, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000300)='@+:\x00') preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57ed, 0x4006) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80800) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000ac0)={{r3}, 0x0, 0x10, @inherit={0x58, &(0x7f0000000500)={0x1, 0x2, 0x200, 0x80000000, {0x4, 0x1ff, 0x80008000, 0x1, 0x2}, [0xfffffffffffffff7, 0x8000000000000]}}, @subvolid=0x9}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, 0xffffffffffffffff, 0xd454000) [ 2142.687363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:37:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:37:21 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x22, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:21 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200006000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:37:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 28) [ 2142.718187] FAULT_INJECTION: forcing a failure. [ 2142.718187] name failslab, interval 1, probability 0, space 0, times 0 [ 2142.720997] CPU: 0 PID: 12242 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2142.722657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2142.722665] Call Trace: [ 2142.722693] dump_stack+0x107/0x167 [ 2142.722717] should_fail.cold+0x5/0xa [ 2142.722743] should_failslab+0x5/0x20 [ 2142.722764] __kmalloc_track_caller+0x79/0x370 [ 2142.722786] ? match_number+0xaf/0x1d0 [ 2142.722811] kmemdup_nul+0x2d/0xa0 [ 2142.722834] match_number+0xaf/0x1d0 [ 2142.722857] ? match_u64+0x190/0x190 [ 2142.722878] ? __kmalloc_track_caller+0x2c6/0x370 [ 2142.722900] ? memcpy+0x39/0x60 [ 2142.722925] parse_opts.part.0+0x1f3/0x340 [ 2142.722947] ? p9_fd_show_options+0x1c0/0x1c0 [ 2142.722977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2142.722997] ? trace_hardirqs_on+0x5b/0x180 [ 2142.723021] ? kfree+0xd7/0x340 [ 2142.723049] p9_fd_create+0x98/0x4a0 [ 2142.723068] ? p9_conn_create+0x510/0x510 [ 2142.723084] ? p9_client_create+0x798/0x1230 [ 2142.723105] ? kfree+0xd7/0x340 [ 2142.723122] ? do_raw_spin_unlock+0x4f/0x220 [ 2142.723149] p9_client_create+0x7ff/0x1230 [ 2142.723178] ? p9_client_flush+0x430/0x430 [ 2142.723200] ? trace_hardirqs_on+0x5b/0x180 [ 2142.723224] ? lockdep_init_map_type+0x2c7/0x780 [ 2142.723248] ? __raw_spin_lock_init+0x36/0x110 [ 2142.723277] v9fs_session_init+0x1dd/0x1680 [ 2142.723299] ? lock_release+0x680/0x680 [ 2142.723332] ? kmem_cache_alloc_trace+0x151/0x320 [ 2142.723353] ? v9fs_show_options+0x690/0x690 [ 2142.723385] ? trace_hardirqs_on+0x5b/0x180 [ 2142.723407] ? kasan_unpoison_shadow+0x33/0x50 [ 2142.723432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2142.723456] v9fs_mount+0x79/0x8f0 [ 2142.723478] ? v9fs_write_inode+0x60/0x60 [ 2142.723497] legacy_get_tree+0x105/0x220 [ 2142.723521] vfs_get_tree+0x8e/0x300 [ 2142.723541] path_mount+0x1490/0x21e0 [ 2142.723568] ? strncpy_from_user+0x9e/0x470 [ 2142.723590] ? finish_automount+0xa90/0xa90 [ 2142.723611] ? getname_flags.part.0+0x1dd/0x4f0 [ 2142.723632] ? _copy_from_user+0xfb/0x1b0 [ 2142.723663] __x64_sys_mount+0x282/0x300 [ 2142.723683] ? copy_mnt_ns+0xa00/0xa00 [ 2142.723709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2142.723731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2142.723756] do_syscall_64+0x33/0x40 [ 2142.723778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2142.723791] RIP: 0033:0x7fbbb2ce3b19 [ 2142.723811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2142.723822] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2142.723845] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2142.723857] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2142.723869] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2142.723881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2142.723894] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2142.743339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2142.743349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2142.744253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2142.765774] 9pnet: Insufficient options for proto=fd 18:37:34 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200007000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:37:34 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:34 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:37:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 29) 18:37:34 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x10000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:37:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:34 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x23, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2156.468288] FAULT_INJECTION: forcing a failure. [ 2156.468288] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.470923] CPU: 1 PID: 12262 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2156.472499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.472507] Call Trace: [ 2156.472535] dump_stack+0x107/0x167 18:37:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x20000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2156.472559] should_fail.cold+0x5/0xa [ 2156.472582] ? create_object.isra.0+0x3a/0xa30 [ 2156.472601] should_failslab+0x5/0x20 [ 2156.472622] kmem_cache_alloc+0x5b/0x310 [ 2156.472637] ? legacy_get_tree+0x105/0x220 [ 2156.472654] ? vfs_get_tree+0x8e/0x300 [ 2156.472678] create_object.isra.0+0x3a/0xa30 [ 2156.472696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2156.472723] __kmalloc_track_caller+0x177/0x370 [ 2156.472740] ? parse_opts.part.0+0x8e/0x340 [ 2156.472764] kstrdup+0x36/0x70 [ 2156.472784] parse_opts.part.0+0x8e/0x340 [ 2156.472806] ? p9_fd_show_options+0x1c0/0x1c0 [ 2156.472834] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.472852] ? quarantine_put+0x8b/0x1a0 [ 2156.472868] ? trace_hardirqs_on+0x5b/0x180 [ 2156.472891] ? kfree+0xd7/0x340 [ 2156.472918] p9_fd_create+0x98/0x4a0 [ 2156.472937] ? p9_conn_create+0x510/0x510 [ 2156.472952] ? p9_client_create+0x798/0x1230 [ 2156.472971] ? kfree+0xd7/0x340 [ 2156.472987] ? do_raw_spin_unlock+0x4f/0x220 [ 2156.473013] p9_client_create+0x7ff/0x1230 [ 2156.473041] ? p9_client_flush+0x430/0x430 [ 2156.473062] ? trace_hardirqs_on+0x5b/0x180 [ 2156.473085] ? lockdep_init_map_type+0x2c7/0x780 [ 2156.473108] ? __raw_spin_lock_init+0x36/0x110 [ 2156.473136] v9fs_session_init+0x1dd/0x1680 [ 2156.473158] ? lock_release+0x680/0x680 [ 2156.473188] ? kmem_cache_alloc_trace+0x151/0x320 [ 2156.473209] ? v9fs_show_options+0x690/0x690 [ 2156.473240] ? trace_hardirqs_on+0x5b/0x180 [ 2156.473261] ? kasan_unpoison_shadow+0x33/0x50 [ 2156.473280] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2156.473303] v9fs_mount+0x79/0x8f0 [ 2156.473324] ? v9fs_write_inode+0x60/0x60 [ 2156.473341] legacy_get_tree+0x105/0x220 [ 2156.473364] vfs_get_tree+0x8e/0x300 [ 2156.473383] path_mount+0x1490/0x21e0 [ 2156.473410] ? strncpy_from_user+0x9e/0x470 [ 2156.473430] ? finish_automount+0xa90/0xa90 [ 2156.473451] ? getname_flags.part.0+0x1dd/0x4f0 [ 2156.473472] ? _copy_from_user+0xfb/0x1b0 [ 2156.473502] __x64_sys_mount+0x282/0x300 [ 2156.473521] ? copy_mnt_ns+0xa00/0xa00 [ 2156.473547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.473569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.473593] do_syscall_64+0x33/0x40 [ 2156.473614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2156.473628] RIP: 0033:0x7fbbb2ce3b19 [ 2156.473648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.473659] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2156.473681] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 18:37:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 30) [ 2156.473693] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2156.473705] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2156.473717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2156.473729] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2156.657526] FAULT_INJECTION: forcing a failure. [ 2156.657526] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.660205] CPU: 1 PID: 12280 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2156.661777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.663646] Call Trace: [ 2156.664267] dump_stack+0x107/0x167 [ 2156.665093] should_fail.cold+0x5/0xa [ 2156.665959] should_failslab+0x5/0x20 [ 2156.666814] __kmalloc_track_caller+0x79/0x370 [ 2156.667844] ? match_number+0xaf/0x1d0 [ 2156.668727] ? kfree+0xd7/0x340 [ 2156.669476] kmemdup_nul+0x2d/0xa0 [ 2156.670282] match_number+0xaf/0x1d0 [ 2156.671123] ? match_u64+0x190/0x190 [ 2156.671964] ? __kmalloc_track_caller+0x2c6/0x370 [ 2156.673061] ? memcpy+0x39/0x60 [ 2156.673812] parse_opts.part.0+0x1f3/0x340 [ 2156.674774] ? p9_fd_show_options+0x1c0/0x1c0 [ 2156.675808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.677002] ? trace_hardirqs_on+0x5b/0x180 [ 2156.677983] ? kfree+0xd7/0x340 [ 2156.678739] p9_fd_create+0x98/0x4a0 [ 2156.679579] ? p9_conn_create+0x510/0x510 [ 2156.680537] ? p9_client_create+0x798/0x1230 [ 2156.681541] ? kfree+0xd7/0x340 [ 2156.682283] ? do_raw_spin_unlock+0x4f/0x220 [ 2156.683284] p9_client_create+0x7ff/0x1230 [ 2156.684256] ? p9_client_flush+0x430/0x430 [ 2156.685209] ? trace_hardirqs_on+0x5b/0x180 [ 2156.686183] ? lockdep_init_map_type+0x2c7/0x780 [ 2156.687251] ? __raw_spin_lock_init+0x36/0x110 [ 2156.688303] v9fs_session_init+0x1dd/0x1680 [ 2156.689274] ? lock_release+0x680/0x680 [ 2156.690179] ? kmem_cache_alloc_trace+0x151/0x320 [ 2156.691272] ? v9fs_show_options+0x690/0x690 [ 2156.692298] ? trace_hardirqs_on+0x5b/0x180 [ 2156.693270] ? kasan_unpoison_shadow+0x33/0x50 [ 2156.694293] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2156.695452] v9fs_mount+0x79/0x8f0 [ 2156.696271] ? v9fs_write_inode+0x60/0x60 [ 2156.697213] legacy_get_tree+0x105/0x220 [ 2156.698130] ? path_mount+0x1488/0x21e0 [ 2156.699039] vfs_get_tree+0x8e/0x300 [ 2156.699882] path_mount+0x1490/0x21e0 [ 2156.700762] ? strncpy_from_user+0x9e/0x470 [ 2156.701888] ? finish_automount+0xa90/0xa90 [ 2156.703066] ? getname_flags.part.0+0x1dd/0x4f0 [ 2156.704130] ? _copy_from_user+0xfb/0x1b0 [ 2156.705092] __x64_sys_mount+0x282/0x300 [ 2156.706020] ? copy_mnt_ns+0xa00/0xa00 [ 2156.706904] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.708087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.709256] do_syscall_64+0x33/0x40 [ 2156.710091] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2156.711248] RIP: 0033:0x7fbbb2ce3b19 [ 2156.712087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.716238] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2156.717952] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2156.719550] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2156.721165] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2156.722782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2156.724400] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2156.727337] 9pnet: Insufficient options for proto=fd 18:37:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x20100000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:37:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 31) 18:37:51 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:51 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x7, 0x800) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:37:51 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200008000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:37:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x27, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:51 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2173.079421] FAULT_INJECTION: forcing a failure. [ 2173.079421] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.082281] CPU: 0 PID: 12299 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2173.083918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2173.085903] Call Trace: [ 2173.085932] dump_stack+0x107/0x167 [ 2173.085961] should_fail.cold+0x5/0xa [ 2173.088276] ? create_object.isra.0+0x3a/0xa30 [ 2173.088309] should_failslab+0x5/0x20 [ 2173.088330] kmem_cache_alloc+0x5b/0x310 [ 2173.088361] create_object.isra.0+0x3a/0xa30 [ 2173.088379] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2173.088410] __kmalloc_track_caller+0x177/0x370 [ 2173.088431] ? match_number+0xaf/0x1d0 [ 2173.088459] kmemdup_nul+0x2d/0xa0 [ 2173.088483] match_number+0xaf/0x1d0 [ 2173.088507] ? match_u64+0x190/0x190 [ 2173.088529] ? __kmalloc_track_caller+0x2c6/0x370 [ 2173.088552] ? memcpy+0x39/0x60 [ 2173.088579] parse_opts.part.0+0x1f3/0x340 [ 2173.088603] ? p9_fd_show_options+0x1c0/0x1c0 [ 2173.088634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2173.088654] ? trace_hardirqs_on+0x5b/0x180 [ 2173.088679] ? kfree+0xd7/0x340 [ 2173.088709] p9_fd_create+0x98/0x4a0 [ 2173.088729] ? p9_conn_create+0x510/0x510 [ 2173.088746] ? p9_client_create+0x798/0x1230 [ 2173.088767] ? kfree+0xd7/0x340 [ 2173.088784] ? do_raw_spin_unlock+0x4f/0x220 [ 2173.088813] p9_client_create+0x7ff/0x1230 [ 2173.088844] ? p9_client_flush+0x430/0x430 [ 2173.088867] ? trace_hardirqs_on+0x5b/0x180 [ 2173.088892] ? lockdep_init_map_type+0x2c7/0x780 [ 2173.088918] ? __raw_spin_lock_init+0x36/0x110 [ 2173.088948] v9fs_session_init+0x1dd/0x1680 18:37:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x8cffffff, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2173.088988] ? kmem_cache_alloc_trace+0x151/0x320 [ 2173.089010] ? v9fs_show_options+0x690/0x690 [ 2173.089045] ? trace_hardirqs_on+0x5b/0x180 [ 2173.089068] ? kasan_unpoison_shadow+0x33/0x50 [ 2173.089089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2173.089114] v9fs_mount+0x79/0x8f0 [ 2173.089138] ? v9fs_write_inode+0x60/0x60 [ 2173.089156] legacy_get_tree+0x105/0x220 [ 2173.089182] vfs_get_tree+0x8e/0x300 [ 2173.089203] path_mount+0x1490/0x21e0 [ 2173.089232] ? strncpy_from_user+0x9e/0x470 [ 2173.089254] ? finish_automount+0xa90/0xa90 [ 2173.089276] ? getname_flags.part.0+0x1dd/0x4f0 [ 2173.089298] ? _copy_from_user+0xfb/0x1b0 [ 2173.089332] __x64_sys_mount+0x282/0x300 [ 2173.131703] ? copy_mnt_ns+0xa00/0xa00 [ 2173.131729] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2173.131750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2173.131775] do_syscall_64+0x33/0x40 [ 2173.131795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2173.131829] RIP: 0033:0x7fbbb2ce3b19 [ 2173.137511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2173.141518] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2173.143178] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2173.144740] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2173.146312] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2173.147890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2173.149476] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:37:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x1f, 0x81, 0x2, 0x0, 0x5998, 0x1014, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffff7f, 0x9}, 0x200, 0x0, 0x8001, 0x2, 0xdc, 0xae9, 0x5, 0x0, 0x1, 0x0, 0x40}, 0xffffffffffffffff, 0x3, r0, 0xb) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:37:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:37:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:37:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 32) 18:37:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000180)={{}, 0x0, 0x1a, @unused=[0x7fffffff, 0xba2, 0x5, 0xffffffff], @subvolid=0x5}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:37:51 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200018000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2173.422794] FAULT_INJECTION: forcing a failure. [ 2173.422794] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.425243] CPU: 0 PID: 12322 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2173.426722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2173.428488] Call Trace: [ 2173.429056] dump_stack+0x107/0x167 [ 2173.429841] should_fail.cold+0x5/0xa [ 2173.430669] ? create_object.isra.0+0x3a/0xa30 [ 2173.430688] should_failslab+0x5/0x20 [ 2173.430707] kmem_cache_alloc+0x5b/0x310 [ 2173.430732] create_object.isra.0+0x3a/0xa30 [ 2173.430748] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2173.430774] __kmalloc_track_caller+0x177/0x370 [ 2173.430793] ? match_number+0xaf/0x1d0 [ 2173.430816] kmemdup_nul+0x2d/0xa0 [ 2173.430836] match_number+0xaf/0x1d0 [ 2173.430857] ? match_u64+0x190/0x190 [ 2173.430876] ? __kmalloc_track_caller+0x2c6/0x370 [ 2173.430895] ? memcpy+0x39/0x60 [ 2173.430918] parse_opts.part.0+0x1f3/0x340 [ 2173.430938] ? p9_fd_show_options+0x1c0/0x1c0 [ 2173.430964] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2173.430982] ? trace_hardirqs_on+0x5b/0x180 [ 2173.431010] ? kfree+0xd7/0x340 [ 2173.445920] p9_fd_create+0x98/0x4a0 [ 2173.445938] ? p9_conn_create+0x510/0x510 [ 2173.445953] ? p9_client_create+0x798/0x1230 [ 2173.445971] ? kfree+0xd7/0x340 [ 2173.445986] ? do_raw_spin_unlock+0x4f/0x220 [ 2173.446010] p9_client_create+0x7ff/0x1230 [ 2173.446036] ? p9_client_flush+0x430/0x430 [ 2173.446056] ? trace_hardirqs_on+0x5b/0x180 [ 2173.446077] ? lockdep_init_map_type+0x2c7/0x780 [ 2173.446099] ? __raw_spin_lock_init+0x36/0x110 [ 2173.446125] v9fs_session_init+0x1dd/0x1680 [ 2173.446145] ? lock_release+0x680/0x680 [ 2173.446174] ? kmem_cache_alloc_trace+0x151/0x320 [ 2173.446193] ? v9fs_show_options+0x690/0x690 [ 2173.446222] ? trace_hardirqs_on+0x5b/0x180 [ 2173.446242] ? kasan_unpoison_shadow+0x33/0x50 [ 2173.446260] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2173.446282] v9fs_mount+0x79/0x8f0 [ 2173.446301] ? v9fs_write_inode+0x60/0x60 [ 2173.446318] legacy_get_tree+0x105/0x220 [ 2173.446339] vfs_get_tree+0x8e/0x300 [ 2173.446357] path_mount+0x1490/0x21e0 [ 2173.446383] ? strncpy_from_user+0x9e/0x470 [ 2173.446402] ? finish_automount+0xa90/0xa90 [ 2173.446421] ? getname_flags.part.0+0x1dd/0x4f0 [ 2173.446440] ? _copy_from_user+0xfb/0x1b0 [ 2173.446468] __x64_sys_mount+0x282/0x300 [ 2173.446486] ? copy_mnt_ns+0xa00/0xa00 [ 2173.446510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 18:37:52 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:52 executing program 5: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=""/102, &(0x7f0000000040)=0x66) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc500004e) creat(&(0x7f0000000200)='./file1\x00', 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:37:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xffffff8c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:37:52 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x48, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:37:52 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20001c000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:37:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2173.446530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2173.446553] do_syscall_64+0x33/0x40 [ 2173.446573] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2173.446586] RIP: 0033:0x7fbbb2ce3b19 [ 2173.446603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2173.446614] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:37:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 33) [ 2173.446634] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2173.446645] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2173.446657] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2173.446667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:37:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xfffffff6, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2173.446679] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:37:52 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2173.706296] FAULT_INJECTION: forcing a failure. [ 2173.706296] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.708800] CPU: 0 PID: 12351 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2173.710284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2173.712073] Call Trace: [ 2173.712656] dump_stack+0x107/0x167 [ 2173.713446] should_fail.cold+0x5/0xa [ 2173.714270] ? create_object.isra.0+0x3a/0xa30 [ 2173.715252] should_failslab+0x5/0x20 [ 2173.716073] kmem_cache_alloc+0x5b/0x310 [ 2173.716955] ? p9_fd_show_options+0x1c0/0x1c0 [ 2173.717927] create_object.isra.0+0x3a/0xa30 [ 2173.718873] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2173.719974] kmem_cache_alloc_trace+0x151/0x320 [ 2173.720991] p9_fd_create+0x161/0x4a0 [ 2173.721807] ? p9_conn_create+0x510/0x510 [ 2173.722690] ? p9_client_create+0x798/0x1230 [ 2173.723641] ? kfree+0xd7/0x340 [ 2173.724360] ? do_raw_spin_unlock+0x4f/0x220 [ 2173.725311] p9_client_create+0x7ff/0x1230 [ 2173.726226] ? p9_client_flush+0x430/0x430 [ 2173.727145] ? trace_hardirqs_on+0x5b/0x180 [ 2173.728078] ? lockdep_init_map_type+0x2c7/0x780 [ 2173.729109] ? __raw_spin_lock_init+0x36/0x110 [ 2173.730103] v9fs_session_init+0x1dd/0x1680 [ 2173.731041] ? lock_release+0x680/0x680 [ 2173.731909] ? kmem_cache_alloc_trace+0x151/0x320 [ 2173.732965] ? v9fs_show_options+0x690/0x690 [ 2173.733942] ? trace_hardirqs_on+0x5b/0x180 [ 2173.734887] ? kasan_unpoison_shadow+0x33/0x50 [ 2173.735887] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2173.737005] v9fs_mount+0x79/0x8f0 [ 2173.737782] ? v9fs_write_inode+0x60/0x60 [ 2173.738676] legacy_get_tree+0x105/0x220 [ 2173.739529] vfs_get_tree+0x8e/0x300 [ 2173.740349] path_mount+0x1490/0x21e0 [ 2173.741184] ? strncpy_from_user+0x9e/0x470 [ 2173.742129] ? finish_automount+0xa90/0xa90 [ 2173.743069] ? getname_flags.part.0+0x1dd/0x4f0 [ 2173.744081] ? _copy_from_user+0xfb/0x1b0 [ 2173.745000] __x64_sys_mount+0x282/0x300 [ 2173.745883] ? copy_mnt_ns+0xa00/0xa00 [ 2173.746734] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2173.747877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2173.749008] do_syscall_64+0x33/0x40 [ 2173.749818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2173.750929] RIP: 0033:0x7fbbb2ce3b19 [ 2173.751737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2173.755745] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2173.757406] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2173.758961] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2173.760523] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2173.762059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2173.763601] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:38:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 34) 18:38:08 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:08 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x4c, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:08 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200068000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:38:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xedc000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3361, &(0x7f0000000000)={0x0, 0xff74, 0x0, 0x3, 0x142}, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0xea97) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x15, 0x4, &(0x7f0000000480)=[{&(0x7f0000000240)="7e6bc210d45fcdd7e42d2a607183f7abf9c0b60fb07140856ecce12a76fa7e5aff8b9a2b6ec65709280516a4372f107dae7dfc2010e4a3cc80319ffbe3538e0810718d5ae0b9ce93041958ef8949eca21801cc556c72edfbcbe4ad7ccd33d784e0dfc796e34576693bdedc5bd9e1506c0fb21fc6ca891a3c35b44ef6f744b4b92e1851e53c9bb2edf144684b35c4a7c8d12c044d3c30eaa697269f07d7ca22070eccd6817768032535cba7672598a810b0ad4c1b399d8b841b8c", 0xba, 0x10001}, {&(0x7f0000000300)="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", 0xfa, 0x1}, {&(0x7f0000000400)="9ff28a7778fbf06283d6e3b0d346cbbf04a70daa9d4735ceb37e6a7cfc455c50f440ff12bf276bf615788ad53ff136691486b0be5cdb8187", 0x38, 0x3}, {&(0x7f0000000440)="161e41b6f78e788b4e9960158e65538e43f9d24556791eb26bcfffe2b53c09563eb5fb43761ea81401d335c83b24af", 0x2f, 0x3}], 0x4000, &(0x7f0000000500)={[{}, {').'}, {'+/O\''}, {'\x00'}, {'\x00'}], [{@uid_gt={'uid>', 0xee00}}, {@uid_gt={'uid>', 0xee00}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '(\\'}}]}) execveat(r5, &(0x7f0000000580)='./file0\x00', &(0x7f0000000700)=[&(0x7f00000005c0)='\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='&@\x00', &(0x7f0000000680)='-*}\x9d*!\x1a]\x00', &(0x7f00000006c0)='\x00'], &(0x7f0000000800)=[&(0x7f0000000740)='\x00', &(0x7f0000000780)='],o\x00', &(0x7f00000007c0)=':\xf2\x00'], 0x800) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2190.232355] FAULT_INJECTION: forcing a failure. [ 2190.232355] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.235297] CPU: 1 PID: 12366 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2190.237092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.239239] Call Trace: [ 2190.239930] dump_stack+0x107/0x167 [ 2190.240880] should_fail.cold+0x5/0xa [ 2190.241862] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 2190.243221] should_failslab+0x5/0x20 [ 2190.244199] kmem_cache_alloc+0x5b/0x310 [ 2190.245243] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2190.246406] p9_client_rpc+0x220/0x1370 [ 2190.247313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.248533] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2190.249768] ? pipe_poll+0x21b/0x800 [ 2190.250627] ? p9_fd_close+0x4a0/0x4a0 [ 2190.251511] ? wait_for_partner+0x3c0/0x3c0 [ 2190.252511] ? p9_fd_poll+0x1e0/0x2c0 [ 2190.253379] ? p9_fd_create+0x357/0x4a0 [ 2190.254283] ? p9_conn_create+0x510/0x510 [ 2190.255224] ? p9_client_create+0x798/0x1230 [ 2190.256220] ? kfree+0xd7/0x340 [ 2190.256975] ? do_raw_spin_unlock+0x4f/0x220 [ 2190.257982] p9_client_create+0xa76/0x1230 [ 2190.258950] ? p9_client_flush+0x430/0x430 [ 2190.259914] ? trace_hardirqs_on+0x5b/0x180 [ 2190.260905] ? lockdep_init_map_type+0x2c7/0x780 [ 2190.261993] ? __raw_spin_lock_init+0x36/0x110 [ 2190.263039] v9fs_session_init+0x1dd/0x1680 [ 2190.264022] ? lock_release+0x680/0x680 [ 2190.264947] ? kmem_cache_alloc_trace+0x151/0x320 [ 2190.266042] ? v9fs_show_options+0x690/0x690 [ 2190.267055] ? trace_hardirqs_on+0x5b/0x180 [ 2190.268047] ? kasan_unpoison_shadow+0x33/0x50 [ 2190.268068] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2190.268092] v9fs_mount+0x79/0x8f0 [ 2190.268113] ? v9fs_write_inode+0x60/0x60 [ 2190.268131] legacy_get_tree+0x105/0x220 [ 2190.268154] vfs_get_tree+0x8e/0x300 [ 2190.268174] path_mount+0x1490/0x21e0 [ 2190.268202] ? strncpy_from_user+0x9e/0x470 [ 2190.268222] ? finish_automount+0xa90/0xa90 [ 2190.268243] ? getname_flags.part.0+0x1dd/0x4f0 [ 2190.268264] ? _copy_from_user+0xfb/0x1b0 [ 2190.268294] __x64_sys_mount+0x282/0x300 [ 2190.268313] ? copy_mnt_ns+0xa00/0xa00 18:38:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x8000000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2190.268339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 18:38:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 35) [ 2190.268361] ? syscall_enter_from_user_mode+0x1d/0x50 18:38:08 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2190.268385] do_syscall_64+0x33/0x40 [ 2190.268406] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.268420] RIP: 0033:0x7fbbb2ce3b19 [ 2190.268441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.268452] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2190.268474] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2190.268496] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2190.268508] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2190.268520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.268532] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2190.393910] FAULT_INJECTION: forcing a failure. [ 2190.393910] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.396216] CPU: 0 PID: 12384 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2190.397621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.399255] Call Trace: [ 2190.399799] dump_stack+0x107/0x167 [ 2190.400539] should_fail.cold+0x5/0xa [ 2190.401317] ? create_object.isra.0+0x3a/0xa30 [ 2190.402227] should_failslab+0x5/0x20 [ 2190.403003] kmem_cache_alloc+0x5b/0x310 [ 2190.404040] create_object.isra.0+0x3a/0xa30 [ 2190.404924] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2190.405951] kmem_cache_alloc+0x159/0x310 [ 2190.406973] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2190.407997] p9_client_rpc+0x220/0x1370 [ 2190.408972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.410254] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2190.411309] ? pipe_poll+0x21b/0x800 [ 2190.412200] ? p9_fd_close+0x4a0/0x4a0 [ 2190.413165] ? wait_for_partner+0x3c0/0x3c0 [ 2190.414210] ? p9_fd_poll+0x1e0/0x2c0 [ 2190.414978] ? p9_fd_create+0x357/0x4a0 [ 2190.415951] ? p9_conn_create+0x510/0x510 [ 2190.416975] ? p9_client_create+0x798/0x1230 [ 2190.418047] ? kfree+0xd7/0x340 [ 2190.418860] ? do_raw_spin_unlock+0x4f/0x220 [ 2190.419954] p9_client_create+0xa76/0x1230 [ 2190.421017] ? p9_client_flush+0x430/0x430 [ 2190.422067] ? trace_hardirqs_on+0x5b/0x180 [ 2190.423137] ? lockdep_init_map_type+0x2c7/0x780 [ 2190.424093] ? __raw_spin_lock_init+0x36/0x110 [ 2190.425237] v9fs_session_init+0x1dd/0x1680 [ 2190.426303] ? lock_release+0x680/0x680 [ 2190.427117] ? kmem_cache_alloc_trace+0x151/0x320 [ 2190.428291] ? v9fs_show_options+0x690/0x690 [ 2190.429383] ? trace_hardirqs_on+0x5b/0x180 [ 2190.430453] ? kasan_unpoison_shadow+0x33/0x50 [ 2190.431580] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2190.432627] v9fs_mount+0x79/0x8f0 [ 2190.433493] ? v9fs_write_inode+0x60/0x60 [ 2190.434328] legacy_get_tree+0x105/0x220 [ 2190.435338] vfs_get_tree+0x8e/0x300 [ 2190.436098] path_mount+0x1490/0x21e0 [ 2190.436942] ? strncpy_from_user+0x9e/0x470 [ 2190.437808] ? finish_automount+0xa90/0xa90 [ 2190.438670] ? getname_flags.part.0+0x1dd/0x4f0 [ 2190.439579] ? _copy_from_user+0xfb/0x1b0 [ 2190.439614] __x64_sys_mount+0x282/0x300 [ 2190.441406] ? copy_mnt_ns+0xa00/0xa00 [ 2190.442161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.443159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.444136] do_syscall_64+0x33/0x40 [ 2190.444838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.445815] RIP: 0033:0x7fbbb2ce3b19 [ 2190.446528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.450046] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2190.451499] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2190.452861] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2190.454210] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2190.455552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.456915] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:38:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x100000000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x200000000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x700000000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x200) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xf7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0aa5ad5e8551845b839356e2a59434516a61199d73affb4b33b2b6daf8575ecc0cbd6f1b00a00f16ca"], 0xd7) close(r3) signalfd4(r3, &(0x7f0000000000)={[0x4]}, 0x8, 0x80400) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 36) [ 2190.682312] FAULT_INJECTION: forcing a failure. [ 2190.682312] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.684806] CPU: 1 PID: 12408 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2190.686282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.688037] Call Trace: [ 2190.688613] dump_stack+0x107/0x167 [ 2190.689391] should_fail.cold+0x5/0xa [ 2190.690194] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 2190.691314] should_failslab+0x5/0x20 [ 2190.692128] kmem_cache_alloc+0x5b/0x310 [ 2190.692157] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2190.692185] p9_client_rpc+0x220/0x1370 [ 2190.694751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.694779] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2190.694805] ? pipe_poll+0x21b/0x800 [ 2190.694821] ? p9_fd_close+0x4a0/0x4a0 [ 2190.694847] ? wait_for_partner+0x3c0/0x3c0 [ 2190.699262] ? p9_fd_poll+0x1e0/0x2c0 [ 2190.699291] ? p9_fd_create+0x357/0x4a0 [ 2190.700702] ? p9_conn_create+0x510/0x510 [ 2190.701561] ? p9_client_create+0x798/0x1230 [ 2190.702478] ? kfree+0xd7/0x340 [ 2190.703166] ? do_raw_spin_unlock+0x4f/0x220 [ 2190.704096] p9_client_create+0xa76/0x1230 [ 2190.704995] ? p9_client_flush+0x430/0x430 [ 2190.705887] ? trace_hardirqs_on+0x5b/0x180 [ 2190.706795] ? lockdep_init_map_type+0x2c7/0x780 [ 2190.707793] ? __raw_spin_lock_init+0x36/0x110 [ 2190.708777] v9fs_session_init+0x1dd/0x1680 [ 2190.709686] ? lock_release+0x680/0x680 [ 2190.710534] ? kmem_cache_alloc_trace+0x151/0x320 [ 2190.711547] ? v9fs_show_options+0x690/0x690 [ 2190.712498] ? trace_hardirqs_on+0x5b/0x180 [ 2190.713409] ? kasan_unpoison_shadow+0x33/0x50 [ 2190.714374] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2190.715455] v9fs_mount+0x79/0x8f0 [ 2190.716203] ? v9fs_write_inode+0x60/0x60 [ 2190.717091] legacy_get_tree+0x105/0x220 [ 2190.717950] vfs_get_tree+0x8e/0x300 [ 2190.718730] path_mount+0x1490/0x21e0 [ 2190.719536] ? strncpy_from_user+0x9e/0x470 [ 2190.720446] ? finish_automount+0xa90/0xa90 [ 2190.721363] ? getname_flags.part.0+0x1dd/0x4f0 [ 2190.722336] ? _copy_from_user+0xfb/0x1b0 [ 2190.723220] __x64_sys_mount+0x282/0x300 [ 2190.724070] ? copy_mnt_ns+0xa00/0xa00 [ 2190.724917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.726018] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.727108] do_syscall_64+0x33/0x40 [ 2190.727890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.728979] RIP: 0033:0x7fbbb2ce3b19 [ 2190.729761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.733623] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2190.735224] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2190.736761] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2190.738254] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2190.739734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.741227] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:38:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:23 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f0000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:38:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000180)={{}, 0x0, 0x1a, @unused=[0x7fffffff, 0xba2, 0x5, 0xffffffff], @subvolid=0x5}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x800000000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:23 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x68, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0xf, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x4, 0x9, 0x3ff, 0x8, 0x1, "a386173320f967b6"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x172) openat(r3, &(0x7f0000000080)='./file0\x00', 0x101400, 0x20) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 37) 18:38:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x900000000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2205.163810] FAULT_INJECTION: forcing a failure. [ 2205.163810] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.166506] CPU: 0 PID: 12430 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2205.168110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.170081] Call Trace: [ 2205.170715] dump_stack+0x107/0x167 [ 2205.171564] should_fail.cold+0x5/0xa 18:38:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000180)={{}, 0x0, 0x1a, @unused=[0x7fffffff, 0xba2, 0x5, 0xffffffff], @subvolid=0x5}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2205.172474] ? create_object.isra.0+0x3a/0xa30 [ 2205.173735] should_failslab+0x5/0x20 [ 2205.174626] kmem_cache_alloc+0x5b/0x310 [ 2205.175585] create_object.isra.0+0x3a/0xa30 [ 2205.176620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.177872] __kmalloc+0x16e/0x390 [ 2205.178732] p9_fcall_init+0x97/0x290 [ 2205.179645] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2205.180874] p9_client_rpc+0x220/0x1370 [ 2205.181828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.183089] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2205.184367] ? pipe_poll+0x21b/0x800 [ 2205.185254] ? p9_fd_close+0x4a0/0x4a0 [ 2205.186177] ? wait_for_partner+0x3c0/0x3c0 [ 2205.187188] ? p9_fd_poll+0x1e0/0x2c0 [ 2205.188085] ? p9_fd_create+0x357/0x4a0 [ 2205.189037] ? p9_conn_create+0x510/0x510 [ 2205.190017] ? p9_client_create+0x798/0x1230 [ 2205.191062] ? kfree+0xd7/0x340 [ 2205.191842] ? do_raw_spin_unlock+0x4f/0x220 [ 2205.192900] p9_client_create+0xa76/0x1230 [ 2205.193911] ? p9_client_flush+0x430/0x430 [ 2205.194918] ? trace_hardirqs_on+0x5b/0x180 [ 2205.195942] ? lockdep_init_map_type+0x2c7/0x780 [ 2205.197076] ? __raw_spin_lock_init+0x36/0x110 [ 2205.198167] v9fs_session_init+0x1dd/0x1680 [ 2205.199194] ? lock_release+0x680/0x680 [ 2205.200149] ? kmem_cache_alloc_trace+0x151/0x320 [ 2205.201294] ? v9fs_show_options+0x690/0x690 [ 2205.202346] ? trace_hardirqs_on+0x5b/0x180 [ 2205.203436] ? kasan_unpoison_shadow+0x33/0x50 [ 2205.204753] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.205972] v9fs_mount+0x79/0x8f0 [ 2205.206823] ? v9fs_write_inode+0x60/0x60 [ 2205.207803] legacy_get_tree+0x105/0x220 [ 2205.208781] vfs_get_tree+0x8e/0x300 [ 2205.209675] path_mount+0x1490/0x21e0 [ 2205.210590] ? strncpy_from_user+0x9e/0x470 [ 2205.211614] ? finish_automount+0xa90/0xa90 [ 2205.212637] ? getname_flags.part.0+0x1dd/0x4f0 [ 2205.213759] ? _copy_from_user+0xfb/0x1b0 [ 2205.214754] __x64_sys_mount+0x282/0x300 [ 2205.215722] ? copy_mnt_ns+0xa00/0xa00 [ 2205.216654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.217890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.219107] do_syscall_64+0x33/0x40 [ 2205.219985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2205.221197] RIP: 0033:0x7fbbb2ce3b19 [ 2205.222081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.226408] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2205.228209] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 18:38:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xa00000000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2205.228222] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2205.228234] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2205.228246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:38:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000180)={{}, 0x0, 0x1a, @unused=[0x7fffffff, 0xba2, 0x5, 0xffffffff], @subvolid=0x5}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2205.228259] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:38:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xb00000000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000008, 0x13, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x38f, 0x0, 0x4, 0x100000000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 38) [ 2205.394263] FAULT_INJECTION: forcing a failure. [ 2205.394263] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.395794] CPU: 1 PID: 12453 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2205.396678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.397739] Call Trace: [ 2205.398080] dump_stack+0x107/0x167 [ 2205.398539] should_fail.cold+0x5/0xa [ 2205.399019] ? p9_fcall_init+0x97/0x290 [ 2205.399518] should_failslab+0x5/0x20 [ 2205.399996] __kmalloc+0x72/0x390 [ 2205.400428] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.401084] p9_fcall_init+0x97/0x290 [ 2205.401573] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2205.402229] p9_client_rpc+0x220/0x1370 [ 2205.402243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.402259] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2205.402274] ? pipe_poll+0x21b/0x800 [ 2205.402283] ? p9_fd_close+0x4a0/0x4a0 [ 2205.402294] ? wait_for_partner+0x3c0/0x3c0 [ 2205.402305] ? p9_fd_poll+0x1e0/0x2c0 [ 2205.402320] ? p9_fd_create+0x357/0x4a0 [ 2205.402330] ? p9_conn_create+0x510/0x510 [ 2205.402338] ? p9_client_create+0x798/0x1230 [ 2205.402349] ? kfree+0xd7/0x340 [ 2205.402358] ? do_raw_spin_unlock+0x4f/0x220 [ 2205.402373] p9_client_create+0xa76/0x1230 [ 2205.402389] ? p9_client_flush+0x430/0x430 [ 2205.402402] ? trace_hardirqs_on+0x5b/0x180 [ 2205.402415] ? lockdep_init_map_type+0x2c7/0x780 [ 2205.402428] ? __raw_spin_lock_init+0x36/0x110 [ 2205.402446] v9fs_session_init+0x1dd/0x1680 [ 2205.402458] ? lock_release+0x680/0x680 [ 2205.402475] ? kmem_cache_alloc_trace+0x151/0x320 [ 2205.402486] ? v9fs_show_options+0x690/0x690 [ 2205.402505] ? trace_hardirqs_on+0x5b/0x180 [ 2205.402517] ? kasan_unpoison_shadow+0x33/0x50 [ 2205.402527] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.402540] v9fs_mount+0x79/0x8f0 [ 2205.402552] ? v9fs_write_inode+0x60/0x60 [ 2205.402564] legacy_get_tree+0x105/0x220 [ 2205.402577] vfs_get_tree+0x8e/0x300 [ 2205.402588] path_mount+0x1490/0x21e0 [ 2205.402604] ? strncpy_from_user+0x9e/0x470 [ 2205.402616] ? finish_automount+0xa90/0xa90 [ 2205.402628] ? getname_flags.part.0+0x1dd/0x4f0 [ 2205.402639] ? _copy_from_user+0xfb/0x1b0 [ 2205.402657] __x64_sys_mount+0x282/0x300 [ 2205.402667] ? copy_mnt_ns+0xa00/0xa00 [ 2205.402693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.421937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.422585] do_syscall_64+0x33/0x40 [ 2205.423055] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2205.423703] RIP: 0033:0x7fbbb2ce3b19 [ 2205.424172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.426482] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2205.426494] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2205.426501] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2205.426507] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2205.426514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2205.426535] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:38:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x200) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xf7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0aa5ad5e8551845b839356e2a59434516a61199d73affb4b33b2b6daf8575ecc0cbd6f1b00a00f16ca"], 0xd7) close(r3) signalfd4(r3, &(0x7f0000000000)={[0x4]}, 0x8, 0x80400) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:23 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000030002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:38:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:37 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200080040002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:38:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x200) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xf7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0aa5ad5e8551845b839356e2a59434516a61199d73affb4b33b2b6daf8575ecc0cbd6f1b00a00f16ca"], 0xd7) close(r3) signalfd4(r3, &(0x7f0000000000)={[0x4]}, 0x8, 0x80400) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:37 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 39) 18:38:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) io_uring_enter(r2, 0x7b19, 0x3e02, 0x3, &(0x7f0000000000)={[0x7fff]}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x22, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2219.429698] FAULT_INJECTION: forcing a failure. [ 2219.429698] name failslab, interval 1, probability 0, space 0, times 0 [ 2219.431338] CPU: 1 PID: 12474 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2219.432301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.433476] Call Trace: [ 2219.433852] dump_stack+0x107/0x167 [ 2219.434370] should_fail.cold+0x5/0xa [ 2219.434909] ? create_object.isra.0+0x3a/0xa30 [ 2219.435543] should_failslab+0x5/0x20 [ 2219.436079] kmem_cache_alloc+0x5b/0x310 [ 2219.436652] create_object.isra.0+0x3a/0xa30 [ 2219.437268] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2219.437982] __kmalloc+0x16e/0x390 [ 2219.438482] p9_fcall_init+0x97/0x290 [ 2219.439016] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2219.439729] p9_client_rpc+0x220/0x1370 [ 2219.440284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2219.441022] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2219.441765] ? pipe_poll+0x21b/0x800 [ 2219.442282] ? p9_fd_close+0x4a0/0x4a0 [ 2219.442827] ? wait_for_partner+0x3c0/0x3c0 [ 2219.443425] ? p9_fd_poll+0x1e0/0x2c0 [ 2219.443966] ? p9_fd_create+0x357/0x4a0 [ 2219.444525] ? p9_conn_create+0x510/0x510 [ 2219.445110] ? p9_client_create+0x798/0x1230 [ 2219.445731] ? kfree+0xd7/0x340 [ 2219.446199] ? do_raw_spin_unlock+0x4f/0x220 [ 2219.446822] p9_client_create+0xa76/0x1230 [ 2219.447431] ? p9_client_flush+0x430/0x430 [ 2219.448033] ? trace_hardirqs_on+0x5b/0x180 [ 2219.448641] ? lockdep_init_map_type+0x2c7/0x780 [ 2219.449315] ? __raw_spin_lock_init+0x36/0x110 [ 2219.449961] v9fs_session_init+0x1dd/0x1680 [ 2219.450581] ? lock_release+0x680/0x680 [ 2219.451142] ? kmem_cache_alloc_trace+0x151/0x320 [ 2219.451816] ? v9fs_show_options+0x690/0x690 [ 2219.452444] ? trace_hardirqs_on+0x5b/0x180 [ 2219.453066] ? kasan_unpoison_shadow+0x33/0x50 [ 2219.453703] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2219.454433] v9fs_mount+0x79/0x8f0 [ 2219.454934] ? v9fs_write_inode+0x60/0x60 [ 2219.455514] legacy_get_tree+0x105/0x220 [ 2219.456090] vfs_get_tree+0x8e/0x300 [ 2219.456620] path_mount+0x1490/0x21e0 [ 2219.457167] ? strncpy_from_user+0x9e/0x470 [ 2219.457772] ? finish_automount+0xa90/0xa90 [ 2219.458382] ? getname_flags.part.0+0x1dd/0x4f0 [ 2219.459029] ? _copy_from_user+0xfb/0x1b0 [ 2219.459613] __x64_sys_mount+0x282/0x300 [ 2219.460186] ? copy_mnt_ns+0xa00/0xa00 [ 2219.460737] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2219.461472] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2219.462196] do_syscall_64+0x33/0x40 [ 2219.462732] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2219.463446] RIP: 0033:0x7fbbb2ce3b19 [ 2219.463973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2219.466558] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2219.467615] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2219.468620] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2219.469638] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2219.470638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2219.471636] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:38:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x200) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xf7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0aa5ad5e8551845b839356e2a59434516a61199d73affb4b33b2b6daf8575ecc0cbd6f1b00a00f16ca"], 0xd7) close(r3) signalfd4(r3, &(0x7f0000000000)={[0x4]}, 0x8, 0x80400) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x2, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, @perf_config_ext, 0x1000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:38 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000050002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:38:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x7, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x3, 0x5, 0x40, 0x1, 0x1, "e44839307abce0fc54b814d594de62567a0e5e", 0x400, 0xfffff9d3}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='#'], 0xd7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0900000038b4bead352699008000002e2f66296c653100"]) close(r1) ioctl$KDSKBLED(r1, 0x4b65, 0x8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x7ffd) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:55 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000060002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:38:55 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x23, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:55 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x48, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 40) 18:38:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0), &(0x7f00000001c0)={0x0, 0xfb, 0x1015, 0x1, 0x4, "3da9cb1fa28234c060f13b55f6958a65", "85e3ae5a33ed8478cf1de5a83a9c99fb54eab35e6e3094c198872b1bb50f4bfc06c3f9da1dc4c0891c9bfbdbf81abd77064ac12731aeb8cea1a2c39283e9ebb40d8cea1dde2f27c5fbf7374705b874c80b6be481fe9937ac6dc3af34433e60ae20bee346a0e7e15e5b5356bd094c379507cbe98d5af960fb2f6467dd5c9a359a48d0cd2be9e919a91c243cff757aa22d2fc2b83937079946e780e0bd15b7e403fbc2d17b5db196190c8068574262af254c0c09e874fa58c7659093e560ada8a9cb012e82da61aa40b1a653c9340a3df364b2eed2c3223368e672c7656e79ffe6724e836e5abe461c7dc4c1a3a439101a1394a8a98118d7caee7448bfc725952ecfc1254c804880e3037efca7eaeeca5b5f78c3a9f1621fb56e71c4a8576099feabc75ce704d2d982e622be62a38be30cec7c639873b7c76c072b93d6d479f6799a8e6dd88e49b4a30572743c5b69841ee1a67f3b836a8182b8a2a04389e014aa13e00cdf3caadce84b4775f366385047251e28766b73e824b97243014de8f415da7521a74bbc1a39921da31367390177e2eb53b084b983907bf79b5b2a2a61d0ec702728d22568ff00890a88480b3f85b71f2ce8b995a1f833d5bb157739440728c5a7227ee32496d0f2a985064fe25a66a88ab11c3527045b44b51b6969eee792ad956b66f716b4b793b07296fa8d626bbe809110a81050dc8a593e8fa2b739ad5a3b16f13b7f81cea357b4073a82d5a67eeff62641580d67ce147f7313afd918de5ef5b5392016d72d454fc1872787807f4fb07fc25c1a14154556d895ea9485305ed62dc3ba4980b00144851223c1983c11a298ef3beff8fb07ffa109910a028f01b22807e351a09e4bdbe022dc6894c73f7a0fd06c756f77632a02b135570b1ef9463b2cfd04c0b44e3c1b0b60fb609b9d5256048abcdb56b026fd52ee0f03cd0932dfac7f7e87b33ea0139ff36d3bd1f125c20ad1d6c3b0bd4ec6a9b960449b65cccf9bf4fd4b8a93c562aecf4bd31252021bdede54fa38cf05203bea2a2b33d4739b36de442898432b950c971daa4be6cc73ff3efe349750c62a7bfd88243c3add43a7c21cd044e29ca13ec80446b743b0104a03e4116189b761b0e44ed7d401ca58d18209b3ba98498ab106148b07b02117e9a106889e93b3c9c16d9ad603edaa6ec5dfdadfd6b8e990e8affe292ed9e0ef048ea8bec96fc8691b41f282be8891eb19d23f6df5a3f2ed6c65f182c639f21448bd52c36546a33c7921882ff1af434ce95353972ed907b6e5be22d46fb66dfe02980430548a22b51185fa89ce742b9c0aa8902e4f920b8f8171cfb683088c9d612f372128f7c7812749074d48b02ed09ef21c1d38a3248717f1de7f6d12d03fb7bfad6f8f8be1ae57c4a9c1f4b99ebf361770719d4b363f22b3cd167ee3582c1ec7593bc3f36e56f7dc848dd174b9f1dcff3f873f1f99d16901b5a75025f373e49ff5f28c5a59d6e646f0c9edd9c19335e0d3d7bbe79007440b4af661861eff80d5de4e69d501b2789899c2217317192e9d589a38102aad5623d9585795fe527e15bb643814488c47225d586544cb1b6e855d4c157e7703ecf1e77072b4afd34326390d827516059d457ecfe0bbef2b355e957f08b4082a6301a1077ea12e06a9036868dd85b19ca07a43523245e431b84c19b531981035d9d21d379a700d1ad7faa08c364f3415218b735fb735319480b3cfd56c03d7ea5e90dece8cc2c0ff3c1362948163a6d5bc6ffcfd79b34dfd3cbc8061bdcca7ed0e5224455e470fa24af2f3c621c448892d31b69a1fb0c305ab9d4e0c7a64070d4a6418557ff636c3c2b2c3ef458de6438bca46500c1df58f67e1eb808551bd08a53119021bf0f5a0728adb0ca7c107cbf16e367dcad42155ddc4fe7691956b0d4a9643e5a8ede616582dd2f0ebfe3ba5abdf48169334d8a5149be60047d4b687544c68149b1555151e5397bed6cddf27e73ac8bc723d0d80564ddaf3a5cbffc70cb2d1858002d3d9cd3be63412bc7ec998fed7a5f52910f4e584e23e21c7159a4b9ea4712c1235e8c0600ae324fa022b77cb55dbc02c5b26ed1668962f283ca17b120d3998a94a7952d277351b103f500ce6bfcf7dcf0fa9538fab906e88198c94de436bb4e6b1509641ecd4ece082b87209dbf3b98ae31a4ada2143592d53cafafde839a3ac4d2534e2be760342e62f5751b26005aec6d4b5dfd0fb936a15fe346a49b362dd5cad4e15517a0b67ff14cd4ef30ebcb9af2bb8e2fb7857dd00297fbe85b5612300401c37ffc26900ec63eace24145962dfc21697b5110f84d0a4a76186993c87a8bd440a8d725ba0aa9ccd451556ed5da98bf5f12a52a666d5243332312942903d8d55349b43c9a77e7860a674f2f8971c017726d61f453d6ad4ed72572e3af37c8e09a0e91b5369545dbda9f609b6f72da36d1dad20619bfeee1c5e3cc8906f009f4d2624ea0b462ddae6fae2eef588d57fd8e75180e9233aa352adee3e71acd6b9adbbf788152024ba06d73175b19818699caff61e6cfc165b8b90407663c7a5bb14eb6757928e4375556d5c9f6fd540ced804b72b7adb2c44bf351f3e23c6ae02e81773515f393fd26d3067c367b0da9869ce760f46b2540e66f1935255cc5cfa1eaba91d3da0672e5b3659a4662528abdd6a447927700d36c80223a40a8f25a274d987fa9ef6c85c6fedb292b63116109f2f8a13c418a94fcee7483147e3fe1b15d0fed113ad32c69269affcfd63e51a5253aa2dd935b5c90ea38b1ce0deae742f4916c11e80e216b33688ea631398912af0a130f009f0a9a926bd921e0b0c4bf604dc83ed41c3e528e41aae069eef56ec271acab60b0e3a8cb87f62f0c861a3bbbe1c643c68edd2a12a53e36881a0bb3d90f9194f2aba7058aa495d87e680d8caa6931a196e278d26e16c01a3bfed92d17c81977fcf2fbe8763a7f449b94f93a04f39d33bb92b382a7f059d0e336f019293a8e2d979c5d3b0b19b1caa190171da56a362f0c86bc61842e44ddc39e7a7d540ee034a906a612b4370fd50b44a5d8e9be147bb0d9f65877a622952d164db8144d51a64b4f5fcc6b9a1157013de6525f1aa967ac42d769ec2f605eaf60eb6fe104955af14d7b185181f111ffea401525116142dc5989f9733b8e57fc0a1c50ce45a2646ee258a783acfc4710cd0dd9bb863fcd19aa6beeebe7caaf0c896023d215682eac365f618590e5d3f432b458b886be37235836fe000ab78f90dcad8c991de61a2a73cdb45f9588ed7e410aa5c27ab4c82a48878194fb4ff54b58aeef578c6f5b6175d44ec63aafc70a35e3ab8f6678dddada916b869519c7d1e39277bf2cf23f7755d7ee619be7749e4ec1cbc8a1bbd02fe33ccabe2264cb5c2839d21d0740f5e0624f75659b9481482f4fb923c9780918e06c0cf87e3dfd29182236146c75c22e8515e9aa7b885ef00d44cf3f5953554a486622c2e7c09c54bac48349c00f149cfd3946831144cd247f12d62a72e86f6164232e7dfbc853648aa816c96cb3d843bfb60a2bbd7c375a462159f94def81d0e4a94782acd86f6881c700c26cb28157aea74a637efc38eefe3abd33bf36a2f1c8af860c8560bc1245e7d9936b5441828fe92126b1d8c57a881f921e053fce185bef011cde3bca16f753a9afe579b56724d319ed6e2d30b610181f2d1fcb4377afd85290612b09b60fa4b62d3c01e98ece735ce38cc4264dec1f4e697570c8be448ffa839fc26f9eaa02aadb6a36be8bd6e8c77f53fae32369a4e44b4eb8d7e86944bd9c25a5c070114c67814d3174fc04c8d23767c2c99212422729a1902164e217cdea045c6b85f0266df9bd76eaf1a783713c84a2623c7bc869ed7fff1bab595ebd64d7ff185b9eec66d50ab791760786d7657dc0d3981a5381d4ede874a24a083da04e42a94d97fe45975ae43ac120b114d1a3f3d99d4ed4161b7bc46ec42f188369c3cdaba9ca5e1bc1d91a27f07cd0f107fd9750a6526b0cfaf4ae309b0c896c5ca519c4cf86d8edd7b069aea070f362ae19255c8724d10f2fdfa2836fc313cf01b81d39ba1633ea24953e6779c7015df376451f4c6a686d3cdb633531c5bc7367ab1c64f2fb68b86c4f8f9b4c8c08df801c7d30a0994fc515903250f713588db2bf49364bc2490c70baaa2a5dbcb80ae83bfcb00653ccdbcdfa1b1c5f9d605f77513f94ad349a01542bd117873cc07959c188eaba57cbff1fb59da6de2e624193a1400e8a664dd5713e65ef7deadec448f9593737ab4800205d13c071d2148f55937af9ebca4067ee4aa006f9c833a2b938ad42b692672d9eeaa03e83375373fc9230588461d21de62a80615bfd659ba4be90f21acca0889eba487b9c139b5efcd0510beb4e792469beccf1e05116a519d8ec640ae0e0c22bc7424a8359b8760f86788dde5e25a37be2610a32171d773e0df0fc27e4d377a95b483030295d1dd3543257652443fbc8912cf5b52af6e335306086ed128d86bd9c0da7e72b8d15bdcbd69437f442efaa8f559985ca2d45ebefefff5653e1661c3c0e11ca261f487c0345a2bfab09fa07dfe3a9dac2fa53dc4b877d80cc72f376c4f48f6c173744092c211794bcf297594664297db6e5d1958e9473683f5a99243a165e48b2986af9eec9c9588402d95d61c21fd54ab45be7185d0d1c3df17a198e7c04f901961db705943332dd0050eb15d591d606a89008af047cc45ccbbf8dd5362bbababada6393d6ec8107238583464bbe8312faf0cccda3f9163ec04e1242236f4be88eb6e36c722a0c0926781d1002136b447e8a2a035015dcb274411f405125295aaa874b0ba9aac675f0a540c37338ad011a651b7ab4d8a9c0314ee076c1b8023e9743985f05201dc5f06547173abe18ea8e3b2ee3286db9090372cf5d12b55ca9892efe09199a159a4e060b5aa387e8db8412beb122921d181846c57b05256f974651fee8a07a78f974ef430660410b64f6b750866cd1b0d48218279ba76b3cc644a890dec4d045a13bcb53ce64740af0cd80a6e69ec02d255fd0c3688e11ad459a3bbd16bcfa31a64f45a5faa60341c98affef3ff05e8b0ecc100678bcb3c038483c3148ad9ee312324cfdf3b4a416898ef3d3ccdb0e97d90753d2a716bd90a792409437b79fb366a6be98b2592d377f9b37ff90bf38cc6336c562cd4e854abec86b2c6a5be477aed05a6bafa1bd229ee64f35dbfdc46776fe9f6f993f1f4c485017356c76901712f49b0dbd68a20918d3b12c74b31010fe982c2c8951ce17d1609db1a76106bbeebc8f65205754dc6a10c73cff05318ef901e751439ad3a145f95776e10887b66113d0d7e260ba40567a8b925f7f9d9cf670228b40be476c987ab483371aa4c603b43ca77d253d255a1c208870de1b242717580761e03e9a1a493983fc995e7b371f67a0a71268e4a799767734943dc6b4a9b61a9a7a021a791d842c0057850b8d9625667a923a6ab619ddcac5cc05ce3dbb568714420d66aef478e29d9623929aa254c594b6ec0854f38968e144d3dda4d0b04d04c7523ecd9d424d93c3f205ccc411eb485f149bf35ec11a20d72041436e6e2f91db6c67dd6959e30cc88ecb9afc81d5ab57c23237492cd4e9659cded76106ed312cb49a87dfc71daeaecf194766a53c3eaccd12865b8a9111cd3db9302fcbcfb65580af76e16bc2e699cbb78f9e52aad48c47e4cbab04c22bb9b247e7b0044799aa72e8e7aa02da978f8d538d6bb749c60ed721fad3a997aba4d3bdd9768399ba3281d6be890a39921"}, 0x1015, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="2369173d38f0611ac918956e2a3d088c18f221ef35b2bcdc88839a5ac6591a920fc89f35e3a99f48e27d9334f4804fad3eaa308b1362854c310da24d5209bf0c947decfe7e289246000000000000000000"], 0xd7) close(r3) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:55 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x74, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2237.135173] FAULT_INJECTION: forcing a failure. [ 2237.135173] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.137856] CPU: 1 PID: 12533 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2237.137869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.137876] Call Trace: [ 2237.137902] dump_stack+0x107/0x167 [ 2237.137928] should_fail.cold+0x5/0xa [ 2237.137952] ? p9_fcall_init+0x97/0x290 [ 2237.137973] should_failslab+0x5/0x20 [ 2237.137993] __kmalloc+0x72/0x390 [ 2237.138012] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.138040] p9_fcall_init+0x97/0x290 [ 2237.138064] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2237.138098] p9_client_rpc+0x220/0x1370 [ 2237.150239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.150270] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2237.152670] ? pipe_poll+0x21b/0x800 [ 2237.153537] ? p9_fd_close+0x4a0/0x4a0 [ 2237.154425] ? wait_for_partner+0x3c0/0x3c0 [ 2237.155401] ? p9_fd_poll+0x1e0/0x2c0 [ 2237.156270] ? p9_fd_create+0x357/0x4a0 [ 2237.157177] ? p9_conn_create+0x510/0x510 [ 2237.158108] ? p9_client_create+0x798/0x1230 [ 2237.159102] ? kfree+0xd7/0x340 [ 2237.159847] ? do_raw_spin_unlock+0x4f/0x220 [ 2237.160848] p9_client_create+0xa76/0x1230 [ 2237.161821] ? p9_client_flush+0x430/0x430 [ 2237.162776] ? trace_hardirqs_on+0x5b/0x180 [ 2237.163757] ? lockdep_init_map_type+0x2c7/0x780 [ 2237.164832] ? __raw_spin_lock_init+0x36/0x110 [ 2237.165892] v9fs_session_init+0x1dd/0x1680 [ 2237.166881] ? lock_release+0x680/0x680 [ 2237.167800] ? kmem_cache_alloc_trace+0x151/0x320 [ 2237.168899] ? v9fs_show_options+0x690/0x690 [ 2237.169914] ? trace_hardirqs_on+0x5b/0x180 [ 2237.170898] ? kasan_unpoison_shadow+0x33/0x50 [ 2237.171938] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.173095] v9fs_mount+0x79/0x8f0 [ 2237.173904] ? v9fs_write_inode+0x60/0x60 [ 2237.174838] legacy_get_tree+0x105/0x220 [ 2237.175766] vfs_get_tree+0x8e/0x300 [ 2237.176616] path_mount+0x1490/0x21e0 [ 2237.177492] ? strncpy_from_user+0x9e/0x470 [ 2237.178462] ? finish_automount+0xa90/0xa90 [ 2237.179456] ? getname_flags.part.0+0x1dd/0x4f0 [ 2237.180516] ? _copy_from_user+0xfb/0x1b0 [ 2237.181481] __x64_sys_mount+0x282/0x300 [ 2237.182395] ? copy_mnt_ns+0xa00/0xa00 [ 2237.183285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.184475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.185661] do_syscall_64+0x33/0x40 [ 2237.186512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.187668] RIP: 0033:0x7fbbb2ce3b19 [ 2237.188506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.192715] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2237.194452] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2237.196051] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2237.197677] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2237.199303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.200920] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:38:55 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x48, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:38:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:38:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x9, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xa, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:38:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 41) 18:38:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x1c, 0x40, 0x2, 0x1000, 0x3, 0x6, 0x5, 0x1bd, 0x40, 0x1f0, 0x7, 0xcb3, 0x38, 0x2, 0x6, 0x100, 0x76b}, [{0x5, 0x261, 0x9, 0x4, 0x3f3, 0x2, 0x4, 0x4}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1678) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2237.347114] FAULT_INJECTION: forcing a failure. [ 2237.347114] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.350323] CPU: 1 PID: 12552 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2237.351935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.353889] Call Trace: [ 2237.354513] dump_stack+0x107/0x167 [ 2237.355371] should_fail.cold+0x5/0xa [ 2237.356270] ? create_object.isra.0+0x3a/0xa30 [ 2237.357350] should_failslab+0x5/0x20 [ 2237.358247] kmem_cache_alloc+0x5b/0x310 [ 2237.359208] create_object.isra.0+0x3a/0xa30 [ 2237.360237] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.361445] kmem_cache_alloc+0x159/0x310 [ 2237.362435] radix_tree_node_alloc.constprop.0+0x1e3/0x300 18:38:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xb, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2237.363840] idr_get_free+0x4b5/0x8f0 [ 2237.363922] idr_alloc_u32+0x170/0x2d0 [ 2237.363951] ? __fprop_inc_percpu_max+0x130/0x130 [ 2237.363976] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2237.364005] ? lock_release+0x680/0x680 [ 2237.364031] idr_alloc+0xc2/0x130 [ 2237.364053] ? idr_alloc_u32+0x2d0/0x2d0 [ 2237.364070] ? rwlock_bug.part.0+0x90/0x90 [ 2237.364106] p9_client_prepare_req.part.0+0x612/0xac0 [ 2237.364136] p9_client_rpc+0x220/0x1370 [ 2237.364158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.364189] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2237.364218] ? pipe_poll+0x21b/0x800 [ 2237.364237] ? p9_fd_close+0x4a0/0x4a0 [ 2237.364257] ? wait_for_partner+0x3c0/0x3c0 [ 2237.364280] ? p9_fd_poll+0x1e0/0x2c0 18:38:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2237.364310] ? p9_fd_create+0x357/0x4a0 [ 2237.364330] ? p9_conn_create+0x510/0x510 [ 2237.364347] ? p9_client_create+0x798/0x1230 [ 2237.364369] ? kfree+0xd7/0x340 [ 2237.364385] ? do_raw_spin_unlock+0x4f/0x220 [ 2237.364414] p9_client_create+0xa76/0x1230 [ 2237.364446] ? p9_client_flush+0x430/0x430 [ 2237.364470] ? trace_hardirqs_on+0x5b/0x180 [ 2237.364495] ? lockdep_init_map_type+0x2c7/0x780 [ 2237.364521] ? __raw_spin_lock_init+0x36/0x110 [ 2237.364552] v9fs_session_init+0x1dd/0x1680 [ 2237.364575] ? lock_release+0x680/0x680 [ 2237.364610] ? kmem_cache_alloc_trace+0x151/0x320 [ 2237.364632] ? v9fs_show_options+0x690/0x690 [ 2237.364667] ? trace_hardirqs_on+0x5b/0x180 [ 2237.364691] ? kasan_unpoison_shadow+0x33/0x50 [ 2237.364712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.364737] v9fs_mount+0x79/0x8f0 [ 2237.364761] ? v9fs_write_inode+0x60/0x60 [ 2237.364780] legacy_get_tree+0x105/0x220 [ 2237.364805] vfs_get_tree+0x8e/0x300 [ 2237.364826] path_mount+0x1490/0x21e0 [ 2237.364856] ? strncpy_from_user+0x9e/0x470 [ 2237.364878] ? finish_automount+0xa90/0xa90 [ 2237.364901] ? getname_flags.part.0+0x1dd/0x4f0 [ 2237.364925] ? _copy_from_user+0xfb/0x1b0 [ 2237.364960] __x64_sys_mount+0x282/0x300 [ 2237.364981] ? copy_mnt_ns+0xa00/0xa00 [ 2237.365026] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.365051] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.365078] do_syscall_64+0x33/0x40 [ 2237.365101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.365115] RIP: 0033:0x7fbbb2ce3b19 [ 2237.365136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.365149] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2237.365173] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2237.365186] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2237.365198] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2237.365211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.365224] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:39:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x700, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:39:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r0) accept4$unix(r0, 0x0, &(0x7f0000000000), 0x100000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, 0x0, 0x1, 0x0, 0x0, {0x9}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e24, 0x4, 0x4e21, 0x8001, 0x2, 0x0, 0xa0, 0x84, 0x0, r3}, {0xffa, 0x4, 0x7, 0x3, 0x7, 0x800, 0x1f, 0x5}, {0x1, 0x2, 0x6, 0x6}, 0xc8d4, 0x6e6bb4, 0x1, 0x0, 0x0, 0x3}, {{@in6=@local, 0x4d3, 0x6c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x34ff, 0x4, 0x2, 0x1f, 0x0, 0x1f, 0x5}}, 0xe8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 42) 18:39:10 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x48, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x27, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:10 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000070002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2251.878912] FAULT_INJECTION: forcing a failure. [ 2251.878912] name failslab, interval 1, probability 0, space 0, times 0 [ 2251.881246] CPU: 1 PID: 12575 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2251.882669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2251.884373] Call Trace: [ 2251.884918] dump_stack+0x107/0x167 [ 2251.885675] should_fail.cold+0x5/0xa [ 2251.886458] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2251.887646] should_failslab+0x5/0x20 [ 2251.888424] kmem_cache_alloc+0x5b/0x310 [ 2251.889251] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2251.890363] idr_get_free+0x4b5/0x8f0 [ 2251.891158] idr_alloc_u32+0x170/0x2d0 [ 2251.891962] ? __fprop_inc_percpu_max+0x130/0x130 [ 2251.892936] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2251.894013] ? lock_release+0x680/0x680 [ 2251.894799] idr_alloc+0xc2/0x130 [ 2251.895486] ? idr_alloc_u32+0x2d0/0x2d0 [ 2251.896287] ? rwlock_bug.part.0+0x90/0x90 [ 2251.897130] p9_client_prepare_req.part.0+0x612/0xac0 [ 2251.898164] p9_client_rpc+0x220/0x1370 [ 2251.898949] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2251.900035] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2251.901109] ? pipe_poll+0x21b/0x800 [ 2251.901862] ? p9_fd_close+0x4a0/0x4a0 [ 2251.902626] ? wait_for_partner+0x3c0/0x3c0 [ 2251.903478] ? p9_fd_poll+0x1e0/0x2c0 [ 2251.904256] ? p9_fd_create+0x357/0x4a0 [ 2251.905061] ? p9_conn_create+0x510/0x510 [ 2251.905869] ? p9_client_create+0x798/0x1230 [ 2251.906761] ? kfree+0xd7/0x340 [ 2251.907426] ? do_raw_spin_unlock+0x4f/0x220 [ 2251.908319] p9_client_create+0xa76/0x1230 [ 2251.909148] ? p9_client_flush+0x430/0x430 [ 2251.909986] ? trace_hardirqs_on+0x5b/0x180 [ 2251.910847] ? lockdep_init_map_type+0x2c7/0x780 [ 2251.911783] ? __raw_spin_lock_init+0x36/0x110 [ 2251.912680] v9fs_session_init+0x1dd/0x1680 [ 2251.913531] ? lock_release+0x680/0x680 [ 2251.914328] ? kmem_cache_alloc_trace+0x151/0x320 [ 2251.915275] ? v9fs_show_options+0x690/0x690 [ 2251.916141] ? trace_hardirqs_on+0x5b/0x180 [ 2251.916982] ? kasan_unpoison_shadow+0x33/0x50 [ 2251.917883] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2251.918895] v9fs_mount+0x79/0x8f0 [ 2251.919607] ? v9fs_write_inode+0x60/0x60 [ 2251.920435] legacy_get_tree+0x105/0x220 [ 2251.921255] vfs_get_tree+0x8e/0x300 [ 2251.922003] path_mount+0x1490/0x21e0 [ 2251.922771] ? strncpy_from_user+0x9e/0x470 [ 2251.923639] ? finish_automount+0xa90/0xa90 [ 2251.924481] ? getname_flags.part.0+0x1dd/0x4f0 [ 2251.925428] ? _copy_from_user+0xfb/0x1b0 [ 2251.926268] __x64_sys_mount+0x282/0x300 [ 2251.927080] ? copy_mnt_ns+0xa00/0xa00 [ 2251.927848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2251.928868] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2251.929895] do_syscall_64+0x33/0x40 [ 2251.930632] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2251.931638] RIP: 0033:0x7fbbb2ce3b19 [ 2251.932376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2251.936049] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2251.937511] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2251.938896] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2251.940279] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2251.941703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2251.943098] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:39:10 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="fbdc1c637a74a53974786b0dfc2dd9cc0c82fb4b6cd53997bc082ae8c273caa38c079da0da794cf7741cb14b59a54f8e6f437f8285747a5fc70afb1ba4a90342ffeb31ca2bd62ccd6e9be11a143f0563a2307f0773260039c4ecfb31f97e5be5d9e8554c70296c7b7e16ba93d11da7885e2ce1058d01708e006c958468679a6d28b1d71289ea6a94e3949d5b16dec29e34c8c5a13702d1eb3feb3a2df4250f075eb61eb25a4349391aeea0c56848eed458df409992d8009992b17446ccaffc2abb05147dbc061f6f7a21f8b27b62f002aca2aa1b5bf3adcf7843640fe631fe48824ecbd574a7348c91695343733031b9d26ecb059aef05a7580e0daed2dc06b73d148b62a7ae070b04683c450600cc510c848256239d4e1e9e36fb1f5237a5b2a2b26d1d6f86f10c4839d7cec3dc6b423f9a2b00566a41fc4ae94b2c5ca4e1dfe9bceb41a42a5fd8009eca8a8894d9b4cca231102400"/351], 0xd7) close(r1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x9) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x900, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:39:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4c0a01, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfb8, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 43) 18:39:26 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000180002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:39:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x48, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:26 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2267.941901] FAULT_INJECTION: forcing a failure. [ 2267.941901] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.944514] CPU: 0 PID: 12609 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2267.946124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2267.948063] Call Trace: [ 2267.948688] dump_stack+0x107/0x167 [ 2267.949548] should_fail.cold+0x5/0xa [ 2267.950440] ? create_object.isra.0+0x3a/0xa30 [ 2267.951516] should_failslab+0x5/0x20 [ 2267.952409] kmem_cache_alloc+0x5b/0x310 [ 2267.953381] create_object.isra.0+0x3a/0xa30 [ 2267.954409] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2267.955597] kmem_cache_alloc+0x159/0x310 [ 2267.956582] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2267.957895] idr_get_free+0x4b5/0x8f0 [ 2267.958808] idr_alloc_u32+0x170/0x2d0 [ 2267.959721] ? __fprop_inc_percpu_max+0x130/0x130 [ 2267.960836] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2267.962077] ? lock_release+0x680/0x680 [ 2267.963007] idr_alloc+0xc2/0x130 [ 2267.963812] ? idr_alloc_u32+0x2d0/0x2d0 [ 2267.964746] ? rwlock_bug.part.0+0x90/0x90 [ 2267.965756] p9_client_prepare_req.part.0+0x612/0xac0 [ 2267.966959] p9_client_rpc+0x220/0x1370 [ 2267.967878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2267.969102] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2267.970346] ? pipe_poll+0x21b/0x800 [ 2267.971226] ? p9_fd_close+0x4a0/0x4a0 [ 2267.972136] ? wait_for_partner+0x3c0/0x3c0 [ 2267.973158] ? p9_fd_poll+0x1e0/0x2c0 [ 2267.974081] ? p9_fd_create+0x357/0x4a0 [ 2267.975027] ? p9_conn_create+0x510/0x510 [ 2267.976005] ? p9_client_create+0x798/0x1230 [ 2267.977040] ? kfree+0xd7/0x340 [ 2267.977795] ? do_raw_spin_unlock+0x4f/0x220 [ 2267.978804] p9_client_create+0xa76/0x1230 [ 2267.979779] ? p9_client_flush+0x430/0x430 [ 2267.980744] ? trace_hardirqs_on+0x5b/0x180 [ 2267.981738] ? lockdep_init_map_type+0x2c7/0x780 [ 2267.982827] ? __raw_spin_lock_init+0x36/0x110 [ 2267.983881] v9fs_session_init+0x1dd/0x1680 [ 2267.984869] ? lock_release+0x680/0x680 [ 2267.985804] ? kmem_cache_alloc_trace+0x151/0x320 [ 2267.986914] ? v9fs_show_options+0x690/0x690 [ 2267.987938] ? trace_hardirqs_on+0x5b/0x180 [ 2267.988957] ? kasan_unpoison_shadow+0x33/0x50 [ 2267.990027] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2267.991201] v9fs_mount+0x79/0x8f0 [ 2267.992038] ? v9fs_write_inode+0x60/0x60 [ 2267.993004] legacy_get_tree+0x105/0x220 [ 2267.993969] vfs_get_tree+0x8e/0x300 [ 2267.994847] path_mount+0x1490/0x21e0 [ 2267.995755] ? strncpy_from_user+0x9e/0x470 [ 2267.996748] ? finish_automount+0xa90/0xa90 [ 2267.997734] ? getname_flags.part.0+0x1dd/0x4f0 [ 2267.998789] ? _copy_from_user+0xfb/0x1b0 [ 2267.999747] __x64_sys_mount+0x282/0x300 [ 2268.000678] ? copy_mnt_ns+0xa00/0xa00 [ 2268.001604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.002820] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2268.004030] do_syscall_64+0x33/0x40 [ 2268.004888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2268.006061] RIP: 0033:0x7fbbb2ce3b19 [ 2268.006923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2268.011107] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2268.012826] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2268.014457] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2268.016103] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2268.017703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2268.019303] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:39:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xa00, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:39:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/workqueue', 0x400200, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000040)={0x0, 0x1, r1, 0x7fffffff, 0x80000}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r4) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xb00, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:39:26 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000001c0002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:39:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1020, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:39:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 44) 18:39:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) sched_getparam(r1, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x1, 0x4, 0x8, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x4, @perf_bp, 0x50, 0x81, 0x6, 0x7, 0xfffffffffffffff7, 0xe3a7, 0x3, 0x0, 0x55, 0x0, 0x1e1f}, r1, 0x8, r0, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2268.295354] FAULT_INJECTION: forcing a failure. [ 2268.295354] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.297743] CPU: 1 PID: 12643 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2268.299244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2268.301048] Call Trace: [ 2268.301639] dump_stack+0x107/0x167 [ 2268.302430] should_fail.cold+0x5/0xa [ 2268.303260] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2268.304501] should_failslab+0x5/0x20 [ 2268.305324] kmem_cache_alloc+0x5b/0x310 [ 2268.306222] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2268.307441] idr_get_free+0x4b5/0x8f0 [ 2268.308281] idr_alloc_u32+0x170/0x2d0 [ 2268.309127] ? __fprop_inc_percpu_max+0x130/0x130 [ 2268.310182] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2268.311364] ? lock_release+0x680/0x680 [ 2268.311388] idr_alloc+0xc2/0x130 [ 2268.311407] ? idr_alloc_u32+0x2d0/0x2d0 [ 2268.311422] ? rwlock_bug.part.0+0x90/0x90 [ 2268.311453] p9_client_prepare_req.part.0+0x612/0xac0 [ 2268.311480] p9_client_rpc+0x220/0x1370 [ 2268.311499] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.311527] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2268.311556] ? pipe_poll+0x21b/0x800 [ 2268.319975] ? p9_fd_close+0x4a0/0x4a0 [ 2268.319994] ? wait_for_partner+0x3c0/0x3c0 [ 2268.320019] ? p9_fd_poll+0x1e0/0x2c0 [ 2268.322633] ? p9_fd_create+0x357/0x4a0 [ 2268.322658] ? p9_conn_create+0x510/0x510 [ 2268.324403] ? p9_client_create+0x798/0x1230 [ 2268.325381] ? kfree+0xd7/0x340 [ 2268.326108] ? do_raw_spin_unlock+0x4f/0x220 [ 2268.327056] p9_client_create+0xa76/0x1230 [ 2268.327085] ? p9_client_flush+0x430/0x430 [ 2268.327107] ? trace_hardirqs_on+0x5b/0x180 [ 2268.327129] ? lockdep_init_map_type+0x2c7/0x780 [ 2268.327152] ? __raw_spin_lock_init+0x36/0x110 18:39:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x2000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2268.327180] v9fs_session_init+0x1dd/0x1680 [ 2268.327201] ? lock_release+0x680/0x680 [ 2268.327231] ? kmem_cache_alloc_trace+0x151/0x320 [ 2268.327252] ? v9fs_show_options+0x690/0x690 [ 2268.327282] ? trace_hardirqs_on+0x5b/0x180 [ 2268.327307] ? kasan_unpoison_shadow+0x33/0x50 18:39:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:26 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000200002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2268.327326] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2268.327349] v9fs_mount+0x79/0x8f0 [ 2268.327370] ? v9fs_write_inode+0x60/0x60 [ 2268.327387] legacy_get_tree+0x105/0x220 [ 2268.327408] vfs_get_tree+0x8e/0x300 [ 2268.327427] path_mount+0x1490/0x21e0 [ 2268.327453] ? strncpy_from_user+0x9e/0x470 [ 2268.327473] ? finish_automount+0xa90/0xa90 [ 2268.327493] ? getname_flags.part.0+0x1dd/0x4f0 [ 2268.327512] ? _copy_from_user+0xfb/0x1b0 [ 2268.327542] __x64_sys_mount+0x282/0x300 [ 2268.327561] ? copy_mnt_ns+0xa00/0xa00 [ 2268.327586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.327606] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2268.327630] do_syscall_64+0x33/0x40 [ 2268.327650] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2268.327664] RIP: 0033:0x7fbbb2ce3b19 [ 2268.327682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2268.327694] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2268.327715] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2268.327727] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2268.327738] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2268.327749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2268.327761] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:39:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x13, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x4c, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:41 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000003f0002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:39:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1f, 0x0, 0x1f, 0x2, 0x0, 0x7, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp, 0x0, 0x1, 0x4, 0x3, 0x510, 0x2, 0x101, 0x0, 0x20, 0x0, 0x7}, 0x0, 0x6, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x2010, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:39:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 45) 18:39:41 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xedc0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2283.032310] FAULT_INJECTION: forcing a failure. [ 2283.032310] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.034641] CPU: 1 PID: 12671 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2283.036052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2283.037761] Call Trace: [ 2283.038309] dump_stack+0x107/0x167 [ 2283.039070] should_fail.cold+0x5/0xa [ 2283.039864] ? create_object.isra.0+0x3a/0xa30 [ 2283.040812] should_failslab+0x5/0x20 [ 2283.041609] kmem_cache_alloc+0x5b/0x310 [ 2283.042461] create_object.isra.0+0x3a/0xa30 [ 2283.043371] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2283.044431] kmem_cache_alloc+0x159/0x310 [ 2283.045306] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2283.046477] idr_get_free+0x4b5/0x8f0 [ 2283.047292] idr_alloc_u32+0x170/0x2d0 [ 2283.048105] ? __fprop_inc_percpu_max+0x130/0x130 [ 2283.049105] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2283.050228] ? lock_release+0x680/0x680 [ 2283.051058] idr_alloc+0xc2/0x130 [ 2283.051776] ? idr_alloc_u32+0x2d0/0x2d0 [ 2283.052609] ? rwlock_bug.part.0+0x90/0x90 [ 2283.053517] p9_client_prepare_req.part.0+0x612/0xac0 [ 2283.054600] p9_client_rpc+0x220/0x1370 [ 2283.055428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2283.056525] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2283.057645] ? pipe_poll+0x21b/0x800 [ 2283.058414] ? p9_fd_close+0x4a0/0x4a0 [ 2283.059220] ? wait_for_partner+0x3c0/0x3c0 [ 2283.060114] ? p9_fd_poll+0x1e0/0x2c0 [ 2283.060910] ? p9_fd_create+0x357/0x4a0 [ 2283.061737] ? p9_conn_create+0x510/0x510 [ 2283.062740] ? p9_client_create+0x798/0x1230 [ 2283.063672] ? kfree+0xd7/0x340 [ 2283.064366] ? do_raw_spin_unlock+0x4f/0x220 [ 2283.065303] p9_client_create+0xa76/0x1230 [ 2283.066241] ? p9_client_flush+0x430/0x430 [ 2283.067142] ? trace_hardirqs_on+0x5b/0x180 [ 2283.068057] ? lockdep_init_map_type+0x2c7/0x780 [ 2283.069066] ? __raw_spin_lock_init+0x36/0x110 [ 2283.070079] v9fs_session_init+0x1dd/0x1680 [ 2283.071014] ? lock_release+0x680/0x680 [ 2283.071046] ? kmem_cache_alloc_trace+0x151/0x320 [ 2283.071067] ? v9fs_show_options+0x690/0x690 [ 2283.071100] ? trace_hardirqs_on+0x5b/0x180 [ 2283.071122] ? kasan_unpoison_shadow+0x33/0x50 [ 2283.071140] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2283.071165] v9fs_mount+0x79/0x8f0 [ 2283.071186] ? v9fs_write_inode+0x60/0x60 [ 2283.071204] legacy_get_tree+0x105/0x220 [ 2283.071227] vfs_get_tree+0x8e/0x300 [ 2283.071246] path_mount+0x1490/0x21e0 [ 2283.071273] ? strncpy_from_user+0x9e/0x470 [ 2283.071293] ? finish_automount+0xa90/0xa90 [ 2283.071314] ? getname_flags.part.0+0x1dd/0x4f0 [ 2283.071333] ? _copy_from_user+0xfb/0x1b0 [ 2283.071365] __x64_sys_mount+0x282/0x300 [ 2283.071392] ? copy_mnt_ns+0xa00/0xa00 [ 2283.086431] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 18:39:41 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2283.086454] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2283.086479] do_syscall_64+0x33/0x40 [ 2283.086500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2283.086514] RIP: 0033:0x7fbbb2ce3b19 [ 2283.086532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2283.086543] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2283.086564] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 18:39:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x80000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2283.086576] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2283.086587] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2283.086598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2283.086610] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:39:56 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x22, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r3], 0xd7) close(r3) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/337], 0xd7) close(r4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x9, {0x0, r4}, 0x3, 0x3, 0x0, {0x0, 0x0, r0}}, 0x100) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:56 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x68, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:56 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 46) 18:39:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:39:56 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:56 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000400002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2298.236153] FAULT_INJECTION: forcing a failure. [ 2298.236153] name failslab, interval 1, probability 0, space 0, times 0 [ 2298.237709] CPU: 0 PID: 12702 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2298.238598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2298.239664] Call Trace: [ 2298.240014] dump_stack+0x107/0x167 [ 2298.240484] should_fail.cold+0x5/0xa [ 2298.240980] ? p9pdu_readf+0xadb/0x1d40 [ 2298.241493] should_failslab+0x5/0x20 [ 2298.241995] __kmalloc+0x72/0x390 [ 2298.242448] p9pdu_readf+0xadb/0x1d40 [ 2298.242949] ? pipe_poll+0x21b/0x800 [ 2298.243432] ? p9pdu_writef+0x100/0x100 [ 2298.243948] ? wait_woken+0x250/0x250 [ 2298.244447] ? p9_fd_create+0x357/0x4a0 [ 2298.244961] ? p9_conn_create+0x510/0x510 [ 2298.245490] ? p9_client_create+0x798/0x1230 [ 2298.246057] ? kfree+0xd7/0x340 [ 2298.246482] ? do_raw_spin_unlock+0x4f/0x220 [ 2298.247053] p9_client_create+0xaee/0x1230 [ 2298.247602] ? p9_client_flush+0x430/0x430 [ 2298.248148] ? trace_hardirqs_on+0x5b/0x180 [ 2298.248703] ? lockdep_init_map_type+0x2c7/0x780 [ 2298.249310] ? __raw_spin_lock_init+0x36/0x110 [ 2298.249910] v9fs_session_init+0x1dd/0x1680 [ 2298.250465] ? lock_release+0x680/0x680 [ 2298.250981] ? kmem_cache_alloc_trace+0x151/0x320 [ 2298.251600] ? v9fs_show_options+0x690/0x690 [ 2298.252173] ? trace_hardirqs_on+0x5b/0x180 [ 2298.252726] ? kasan_unpoison_shadow+0x33/0x50 [ 2298.253313] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2298.253977] v9fs_mount+0x79/0x8f0 [ 2298.254436] ? v9fs_write_inode+0x60/0x60 [ 2298.254968] legacy_get_tree+0x105/0x220 [ 2298.255491] vfs_get_tree+0x8e/0x300 [ 2298.255972] path_mount+0x1490/0x21e0 [ 2298.256462] ? strncpy_from_user+0x9e/0x470 [ 2298.257015] ? finish_automount+0xa90/0xa90 [ 2298.257570] ? getname_flags.part.0+0x1dd/0x4f0 [ 2298.258173] ? _copy_from_user+0xfb/0x1b0 [ 2298.258713] __x64_sys_mount+0x282/0x300 [ 2298.259233] ? copy_mnt_ns+0xa00/0xa00 [ 2298.259726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2298.260401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2298.261077] do_syscall_64+0x33/0x40 [ 2298.261090] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2298.261098] RIP: 0033:0x7fbbb2ce3b19 [ 2298.261110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2298.261128] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:39:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x2000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2298.265534] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2298.265541] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2298.265549] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2298.265556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2298.265563] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:39:56 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:39:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 47) 18:39:56 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000680002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2298.345652] FAULT_INJECTION: forcing a failure. [ 2298.345652] name failslab, interval 1, probability 0, space 0, times 0 [ 2298.347099] CPU: 0 PID: 12715 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2298.347961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2298.348963] Call Trace: [ 2298.349296] dump_stack+0x107/0x167 [ 2298.349750] should_fail.cold+0x5/0xa [ 2298.350220] ? create_object.isra.0+0x3a/0xa30 [ 2298.350781] should_failslab+0x5/0x20 [ 2298.351252] kmem_cache_alloc+0x5b/0x310 [ 2298.351758] create_object.isra.0+0x3a/0xa30 [ 2298.352296] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2298.352923] __kmalloc+0x16e/0x390 [ 2298.353372] p9pdu_readf+0xadb/0x1d40 [ 2298.353866] ? pipe_poll+0x21b/0x800 [ 2298.354329] ? p9pdu_writef+0x100/0x100 [ 2298.354823] ? p9_fd_poll+0x1e0/0x2c0 [ 2298.355316] ? p9_fd_create+0x357/0x4a0 [ 2298.355815] ? p9_conn_create+0x510/0x510 [ 2298.356338] ? p9_client_create+0x798/0x1230 [ 2298.356898] ? kfree+0xd7/0x340 [ 2298.357318] ? do_raw_spin_unlock+0x4f/0x220 [ 2298.357893] p9_client_create+0xaee/0x1230 [ 2298.358437] ? p9_client_flush+0x430/0x430 [ 2298.358981] ? trace_hardirqs_on+0x5b/0x180 [ 2298.359530] ? lockdep_init_map_type+0x2c7/0x780 [ 2298.360135] ? __raw_spin_lock_init+0x36/0x110 [ 2298.360711] v9fs_session_init+0x1dd/0x1680 [ 2298.361253] ? lock_release+0x680/0x680 [ 2298.361762] ? kmem_cache_alloc_trace+0x151/0x320 [ 2298.362360] ? v9fs_show_options+0x690/0x690 [ 2298.362922] ? trace_hardirqs_on+0x5b/0x180 [ 2298.363454] ? kasan_unpoison_shadow+0x33/0x50 [ 2298.364030] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2298.364668] v9fs_mount+0x79/0x8f0 [ 2298.365113] ? v9fs_write_inode+0x60/0x60 [ 2298.365631] legacy_get_tree+0x105/0x220 [ 2298.366150] vfs_get_tree+0x8e/0x300 [ 2298.366622] path_mount+0x1490/0x21e0 [ 2298.367110] ? strncpy_from_user+0x9e/0x470 [ 2298.367654] ? finish_automount+0xa90/0xa90 [ 2298.368204] ? getname_flags.part.0+0x1dd/0x4f0 [ 2298.368788] ? _copy_from_user+0xfb/0x1b0 [ 2298.369323] __x64_sys_mount+0x282/0x300 [ 2298.369838] ? copy_mnt_ns+0xa00/0xa00 [ 2298.370332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2298.370968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2298.371630] do_syscall_64+0x33/0x40 [ 2298.372101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2298.372749] RIP: 0033:0x7fbbb2ce3b19 [ 2298.373212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2298.375484] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2298.376437] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2298.377319] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2298.378208] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2298.379095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2298.379958] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:39:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="dc1400002300020026bd7000fedbdf2507000000cf023e801f4cb6381dec02a407bca27261756c2b7db29eca2c51b29fcc357e02210e31eb265a38cbba36995c01ebfa7d9387b95626b7ab029ad12fb2ebb30706a4a59aa03e5c49ee486a7ed5fa83c4ad235f65357be0423b4ceeb1604dca9c64ec523d01318d4855ba98b6867875dd699556c69e69558089fd3897861d449b1c1d6ea1c3163af79c5b3cefde0027ab4416be48824f48156507cfbc3626cdbfa8cda8ac5f539571369df22a178e169e200c2edbfdb22d264ab4a2e34d0664afaa688f96f7aaa793af136ecc1b473d46f54c316cd91333251efd571a3893ae95f19c8589d66f76610188a84770e6acd91ea8b8b85e865ec634a250f03447625268d87701c3c6bb1fce31afa265a7abe85c66f215923f762ae28bf8ce856ce669dcf8f465a8ab04000c0013a2ab2675c1a74370c1eca0fd24e85563e2a2affb50458542556ca6bac371363a85f4744bb7aab7952ecc5f5124ff3b331a8621b9f57d3b59f5b0abdb37e62ee2e65909a0e465923cd495d17af2196e1d560e878be6e5314df6a26e52c968af7cc546cd8dc3e4116c81c92c24d5a6adea7c15995368ba7823627c27396e3a4ed0ad0ef2b1a5e2dfb1b6cec8ab80bd52cb3cf0c0aa57125850a6041b62764eb846ef3bbea1e1d40f68e419abf0c7371fc7dcbda418881c7561c4bae1fd3fca48ff7c1d029ed9ee53f7959379c3e90a2609727e8e1d337215652fb66131c63d6d4b8da933786051231494929dcfb4d0e735627c1386082956b97c124335938ed7079751a7e8f44e23289094c33560958a2061dacbf03ff65c210209fef6820b05e3668bf98da2de75b95cf3e15e38df8cb016be181f24c1ac7ffd1b5051edd2e6bc9fbb168c6c451c0be3a7f11dc83fe745041d78ed4b93fa4d7d7c8cea9dcf41c28f928b8acced34ffb74111d22e52bfc9913ae64477a1fca96f29006f009309708e28d205572583cf1b3a38a5501f2449357df5e9515a355cc77581fa14bc3e13ffd200000000e9008f80dbfe028b63c114009400fe8000000000000000000000000000aa08003900ffffffff9822bfcdbe4c58dcdb544dd9ac3a67d5e6796ead828feea7c6c3eeb228026df62aa8770400020007dc8716f28a6a02e67a54a93c1e59176d5ee5c8c51ec5b3baa7480e36e2ea09d18b4b9c690b41c4d75b3682a582fc1db51127a99767f56e7cdc6a836f4c9d65a66081718505bf73655d06ab61e8ae3733f87265d1f0cd407f3c13d417cde03994efc229774c5822c60b813cf27c7243004dce6f9b55b0e56b83d5b2f4af0266d06f4056bd0bb95f60c66735ae770d3b219a1662a49a4cf7d9e51b410000009110658008006f00e00000029756f41e3a863c7756a6d57c9fa5e98d8e20edfc0ca14342cc6fef33c8e26d627ec0baee7ce8c8c3e821c3a694224488984d1b3be44f5e8758735725c78e9fab56418b8a6b8c6d3187ad205b348820541ed5f866d1f6169a15cbc5923dfbfde89103adc7bea14d0f799f92a6668b5b33ff48517c8797340d1d651ee96c1edc28fa3ad74909aeac53d732246bde2af5cc75142e116c649bc18d37f445a6e59b4994c737d29ca0de0a593601705c53fbd223e6c80c62baac55f2f1e2a488b02be4d3ddca995c163d1fc3fe691fc0882896a20b3fec3e60f41e71b4163273854ba1a464e3e022f90a07899f16a34d426a8eb96878a7ccc5b0ac9c3a50194edca110b784b80d936e050fca87b759fd62034dd0cd0f492bf0abd080c635fd4ea5fc0f105e3c2835b2f2626615a56c28b134c797db872f7076fd8401fc2095313b4734ec023213ce3c3a92e919c9252ca38ca237ba02ee6466bada98c8fdf597b324909c3802e8f346fada098b41ddc2aeba124b6e2746e97d6e0c5cd17b6efbb364076d661e37f6f545b69c0b0de4ac5ad0042b673002f281535b34671dad0f15462cebed922c927300a39d154ee6d011e881c3e87174f0f5b84c693fffc68e2107b67a6cf4feee4cc37de13d8d4cafc975033f0a606f1c5833f331eaa70186b5f7a5720c8faf39dcc69b7ff3259c3733f9b1feab1045c8d0313efffb04e8941a83e9cbcd3d8f74acfe449c5f64c866a6fe671b38c0ab8906b2065d98f652afad486fd1a67f03f82e567c3fc11cf30908045dd57893ea9f42ee13fc7d77490775a90eacb31c80f2e8147f940a77cee481283ab213522a77e25d52e92181ccdeb09324f92bd83c74a1dd10816d449d9a8040b3b089340f8a3688c64af9bf09bf2f1039d2055ca32fb241572e20770f903f3cfd5589a20387547c9e29f431d4734c062645b6f29c8e5fb3da0854c2513630696501e4546422a90d166e63a78be2cdf9798571b030163e0531ebfbe56552ea5406fecbe97b96225ae1e3ff27f96a8bf26f3d1753691dc8ab0a255555862c7c826cb9a01efb13d49d54d27439cc81d27c8d78367dace5a7da8b74006c613c90eda7cf93d99f4a2002f0357f03ec78928bd245e6d21cc1c7257504c7b8b7dbd744ea7a1192be64ed4dc83056f3907854a9a9c2b958b5e4a94977b31321c48c71036376245ae945a394b0bae424c6aa8691dfbe6a20e5987cf227d9a17a7f2fe1fe64f10874032c20715ed6b76b934397905112edb169c17c99eedcf065e8bbf4f7a8145935cc1a2c3643534eb6a94bd8732800889c713fc1e665b8f3195d7700ee3de148a45703493a4ba3064959055ac0069d04cc47aa1c8317a2af406a3a9de044e8acb89aae854b6102676ae119b7f2c26d1c03df70dbd9f7edf0e4d3543b901dd76e1a46ea7124e0724303659b73a86e5a4bcdb06e14773a69205a09dd69544076eaaa6ea19ef343ca73c7fa8243466813c392c7ec0e9ee32ec3cbb2b5ee96cbdca555ee75f5ba5660abc83e6dd27cb6f709c1cb9a2a88ccbb56f22bc37205a754d2fe218615e74872b8fbb5de0f5ace30b4b4cf9544e7310f1eac8a6da9eead177e16aaec4a8250c0d0f32a2c7851cf0a710c6d32839cb11ff3aa759c48f465caa6d750abaf90966c53396c5d6502a35b31da27b52eaccb4dcb1d9b2b7312263c52b213539c13d08639c0f80d0b24e768b98519f8e159bcb9e8a4e4da450e718fd113567e32e2ce1061b9009a4bd6b24a444fe74cefdc79827a76fa2056b4474b101f8a34ed7903eb1ec5571f5a61d6d4c90ba9a69e4b2c343495399505d8aa52aeafef597c2ae69e10ab3dd7d7e3d9b2271ac0aca6cfdf3fb0d91ae5d74a4433fc3f28ea46ef81e256bd363ea75ed4e2300f73b62100e0acb631f5bbef3f35571505d5a0387e5a40f42274fe40ff7eddd27ee4c860a15c49de193745ccb62a620a54fff097351db0120a251df87c3393e99bd87211c086177887cf027063cbe19c30715a7f4ccd08138323c945f1b61f235cbbfaf42743a98d18c6de61c879c8b61a1fca49de66af7191c821bd53d0915c384a9046c4ed7101b8efda0b7016f0ddbdb13a6a3f2f73257ce77b6a97205e413bd4d31721bfbe764a74f491f3eb0c7f116a13833230c83824c1d3947fb5d0e8815f4c1a5231f6047b3d570e98421e79210ef2e1e9ef337e8e9a94550b76ae1ef6590bdd94cd96de7be6dbb71ccb856ac1c845f708d246a991f2d1d899b76137dcb004c33ddc71c6291171cec53542fc76fae5da017224b01bcd68635e998124c574e91772e77a9bfe00dd5280766888402082bba46bcf11d99b7b8b34caeef4d2410d8e7b64e07cc5c014b3c358d9e9d810cd2d682032e0b7f5a17f275ad5a268cb9be24c0723fb3f4795cfed46881d44e2d1e23d9afba542f6d53930f92d7d85b064b27bee855cfcfe720f6a6b4fa7072495129684be652be5682bdb7a88fd4bef35d71c5f221e9a182f6fd061c73692e68463ad8d12f8e3a8daf7354f1de6a7c698bf4e80fbe5d34f35e5bbbb0882fcd5fc60ebd86bb6fd89497bf601fca39319f04b9da3d7d76269e0a3c69b48c175748beeaca52e4fde1531b2696610d5510db822718a4cbda4b2488620e4c780c2109d7ec728fb371e496cd3a499ff4ea61d98300735a7b9eab1d2410db04830141ff014fe10f826d9d5d7c12c329d8348edc6519ae41ca82bbf73c5cf68c72e1dbc87fd0f5eba9db303687287a589e85d8e31ce0d14d764d572e4e0b57f6fdb7708031a3c8dfc466f3e87954eca1907010c43733e877914dc88c38c639203827c754899cf2b018f8219f6ee43fe55ea7f79355599aefd46342d56cbf7bc17b96ea56f81a42472a641645d2125ef8423f18ddbaca7571a2abec109a370fe05380672107726fdf28caef50c88b64c1840cc8c1bc04e5dda23a6d795b992e7deb955cd842f7b11c953bfddd377c425dc8396498cadad6b1b79c4d3a6259d76e5223f6590eb5239c2707f7747c73bf0cd49e00f2befafbd2d777475570416c313205d98fe82203bb336547f06deb7bccf3f891ffd85e194ef730cb48cf38cb19d5e4b8ee5cf23e18eae9bfd980c7c309fa4de2180c5da8124e3af25d12da7caa200e34269324131c5f3313dd6437a36a4354f61207601b728fb464d90080cb7535a2784c8e7de0e9853b05813f7575287d5c38a04c3fdafa8c65096cdba461ce82dfb4da69e76cc8eb53bd6ad7d25cc5f7f850a88bb89c820b2edd6344a68ae0dc805c36f1946a2fc5d2194fb3a9c9e7b8be86a248c65ab5aee8b200477f406f31f64629fb2450cc306090e0371331be429a98ba4a08e9d2f646bef4da4d88b5b6f6a1aac3a3ac064ff219ecadc74bb5c8de8d724df6b4d1e96c0b45d02824372c91edc6f16c81b742b01bdf14e051267a63a4de39c25f713159f3422cd79ff7d45b4150eaa2a10e3cd893e67f65a9c86ee6c03b05659709e3260e384b8f144b162b47b9f47eed6b8432c1bf876c7a718481d7b737168e9ebafa4047ee4f3c366b85540761e87fadd02d01e0ebd3ba93a9b47edd563ccfbb6c412241de35f1e80a4924b881321b74d5bcab808545fd00545bc2d1cb4b34e31632720b762fd94a7d6888924c448860f90f0756c821581b50ed54836aea0bfb7d9e5e4215fcda020f8003103f4b8663bdc08820e487649f173999ab839614253f7345fd9fa2e4ad453cf180d49c5014471c9c91173945dae4dfc46c6549155eb23c02b413bda79f363fff94f4bdd5ddacd8bcc3d144f9b843f563a9dbe74a33f1a0297778335e4ccbc73bf7d5eadef4bd2f373ace6f25683138e40c2bc15468aa8a13063056c40bec653fdee028f1ce11daaa8abbfa8be8d9271e06b4f051c4d2db884200f39dac875e11bfd93ac1c1f3f2eabe336a0c202f0d852c558b2766eeab75d119b6ed808862a2cbcf9445aa951c2aa309a14ffc35ec512116395469afc809ce5b01e02d0e888265f5de6784162a1fe633198a1caf638a8ff267c718155de807e783968dbdc929e3015bc39136831f8dc78b15476e48305f401a4602d8b73d63c55645e76ecc140382f05eff78fcee1dcfec68dca5a5d57d49612e6b33247fd147921a126b3106c5f0df68eb30cb7bc65ded95505dccd2385b5f7374c66ed9044311a43bae9a1f5ede3ca37a948290608aa9f1a0e7548185f0cfcdd53b7c2401785724ec6ed2e3b7afd7d7945ab476b0cd8c0c9cda79e78dc5a50aeb2a1d208ab2e031b88ab6fe1f7336a79474eeba9d22622a18003c3c4b8238bbf31be7351785c361d07b705e7fcef699644f8281e546c38f5c6758ada821669e38c0a35466322dec66177da645aff394d89c7187912ad58374bed64fc97c846d227e56720e257f5fe591f37aec7872059745273ed3eb922740422ca6801fc1072fe268d4fdc3b9732f9092f0b1816b8f1bcf7447c2a9c256aa43219ddf5ec7d36531faf8543da936e6452e3811c1d1c2176a3a8b48029fad7b0fbfc471a00cdae6898f1d81b327ffa4e060ed1173d1c321455e8fbd8ba7a0cb654835a2f4e251e2fdda7020036f5746ddd8e5562250d414e1c81d3b4abe2209bc233f58f0c53689c06d689a6e652b42ccca1edc4bab82a7b3d6e0f1dfac9885bdee60c9f6bd7a9944ae5622d080bee5df4c240236512d792253120386bb3b93196f7c8a31236f33ee5288c23c0acf6bc1a7279dd12324b0037b2e0060ce16c58d35745b3601b877b424c39894c8720ad2d09629044e4651156904a56821af8ef3171fc0779fd8f442bb08588ac912afa2e4f87614656b9c4c1d1bde9f03a5a91be1c406fad5d53ee3d932a2d499ff5532d58793bdc64be99f41e13b7dc7b5d659dfbe2a7988f9e775424262cba92d6b3439a2c5cd63ae0179a91cd51cd86f6dfd10b03d2bb9e49be872b24513c19f0f97895bc89353d1dadfdbe8401c7c4bfceca3463eb740bc173961a954cd54c08d4ac2e9202869a067454c23b68803c5791f9f027a2bbf1049068ceb341373e8471fcd4d3ef6aa280f2bd50ee0dcd221964a60c224c2043668f546649a5aaba7aa65fd171c6208c7b9e86513464e48a799e5a924fd32dc0e4ecd23f5e0f0a276918c7b54e791eda63d567eb1f60abed082370f2c1851b03162485a809a78ca022aff4186eec701042876d4a04f1c0a2589f8409d29dcb29e3c4fa0734e0c7b69cd16b237640a9fbe61b06b7a6d78581ebe3b729f04181ae8ca40114006aacdbd47c9c4bc26ac8f203f0ea4162df4f2e96f97eab9b296d493906a4e96e09e8ff80ff0edd23198aad5a41020456c176a7bd2312558aa8066c903d5d83025e95362912b14c5080089682651b4b9abf47adfd04d1f34993d035029f662ddd6de77b8b5d9fcb0864beee065a7964a66dbb44f5d8f55604211589d25d99c05125034190f7f3fb6f475a61928210281af487cb553cda55607e19882981750ff81bb699b6463f4756098b573c225be25c59d8928248fed455ba50c86eadbbca19276b994bfce5b0152798f3963b56a5e0755b46d2b8a6bdbc8122634f28aff96dc59eb75e7312fde6e4cf16291b77db0d40c1330f7029b1d7d65c307729673f40f25fa52e18ec19b93425e7c0e2344b6a8384a4ca06ee99533b6757362ea170ca0f717929c548050de180270dfad762d25e4442903f1b4f4dd176de9b98d52d31a0606bfaea7b8c90670dc506855b703aded9f29bc60d94f3e90fa60dd68a417855511d61409efd501fcdb04c9d30347fabf4de5a08005b00000000006eb2e0395f3336cf1c1dc219e9c20f5a2b56e7e4531bd5289ca574f041909f016b6d58e71820fd7d43b07779580d2aaf3666ea12fb90e8a5f10e2394975c037f1dd2c4bf5dd1ba2cfea9d8e64a85fef10908fd366afe82eaa29f4a8b2fd5ed32891883dd0d9e02d579e45e524f08002700", @ANYRES32=r1, @ANYBLOB="0500530000c582d2c26801fb15ff9100000000000063000200d4eed79a671cf07e6b4d69e811dce8d960e67990b6da864dcfb96b915ea0290a93b80893565937216f24684fc4051017e7323503d64c4570adb77e62acc89b8d8704f1c0cffc9ff8beb20b3f491837f742cc0e0b389a13d7b96873477840f90008004700", @ANYRES32=r2, @ANYBLOB="339bee73f91f680fcb5c13fd"], 0x14dc}}, 0x48880) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x6a, 0x6, 0x10000, 0x8001, 0x1a, "cc423ecd02dd4d88b932fdd60a1d9f1ade07ce"}) 18:40:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x7000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:40:11 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200004800002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:40:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:11 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x23, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:11 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 48) 18:40:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x20) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x7f, 0x5, 0x0, 0x0, 0x6, 0x2000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4ede, 0x2, @perf_config_ext={0x10001, 0x4}, 0x2101, 0x3, 0x2, 0x4, 0x8, 0x7d8, 0x5, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, r2, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:40:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xb, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2313.288448] FAULT_INJECTION: forcing a failure. [ 2313.288448] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.289863] CPU: 1 PID: 12742 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2313.290650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2313.291592] Call Trace: [ 2313.291906] dump_stack+0x107/0x167 [ 2313.292328] should_fail.cold+0x5/0xa [ 2313.292765] should_failslab+0x5/0x20 [ 2313.293199] __kmalloc_track_caller+0x79/0x370 [ 2313.293209] ? kasprintf+0xbb/0xf0 [ 2313.293227] ? __delete_object+0xb3/0x100 [ 2313.295125] kvasprintf+0xb5/0x150 [ 2313.295528] ? bust_spinlocks+0xe0/0xe0 [ 2313.295985] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2313.296592] kasprintf+0xbb/0xf0 [ 2313.296975] ? kvasprintf_const+0x1a0/0x1a0 [ 2313.297464] ? kmem_cache_free+0x249/0x2d0 [ 2313.297961] ? p9_client_create+0xbfa/0x1230 [ 2313.298465] p9_client_create+0xc1b/0x1230 [ 2313.298953] ? p9_client_flush+0x430/0x430 [ 2313.299437] ? trace_hardirqs_on+0x5b/0x180 [ 2313.299931] ? lockdep_init_map_type+0x2c7/0x780 [ 2313.300470] ? __raw_spin_lock_init+0x36/0x110 [ 2313.300997] v9fs_session_init+0x1dd/0x1680 [ 2313.301486] ? lock_release+0x680/0x680 [ 2313.301964] ? kmem_cache_alloc_trace+0x151/0x320 [ 2313.301974] ? v9fs_show_options+0x690/0x690 [ 2313.301990] ? trace_hardirqs_on+0x5b/0x180 [ 2313.302001] ? kasan_unpoison_shadow+0x33/0x50 [ 2313.302010] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 18:40:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 49) [ 2313.302023] v9fs_mount+0x79/0x8f0 [ 2313.302033] ? v9fs_write_inode+0x60/0x60 [ 2313.302043] legacy_get_tree+0x105/0x220 [ 2313.302055] vfs_get_tree+0x8e/0x300 [ 2313.302065] path_mount+0x1490/0x21e0 [ 2313.302079] ? strncpy_from_user+0x9e/0x470 [ 2313.302089] ? finish_automount+0xa90/0xa90 [ 2313.302100] ? getname_flags.part.0+0x1dd/0x4f0 [ 2313.302111] ? _copy_from_user+0xfb/0x1b0 [ 2313.302126] __x64_sys_mount+0x282/0x300 [ 2313.302135] ? copy_mnt_ns+0xa00/0xa00 [ 2313.302148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2313.302160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2313.302172] do_syscall_64+0x33/0x40 [ 2313.302183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2313.302190] RIP: 0033:0x7fbbb2ce3b19 [ 2313.302200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2313.302206] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2313.302218] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2313.302224] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2313.302230] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2313.302236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2313.302242] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2313.326492] 9pnet: Insufficient options for proto=fd 18:40:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x8000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:40:11 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x27, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x9000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2313.383031] FAULT_INJECTION: forcing a failure. [ 2313.383031] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.384358] CPU: 1 PID: 12758 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2313.385152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2313.386103] Call Trace: [ 2313.386408] dump_stack+0x107/0x167 [ 2313.386824] should_fail.cold+0x5/0xa [ 2313.387260] ? create_object.isra.0+0x3a/0xa30 [ 2313.387778] should_failslab+0x5/0x20 [ 2313.388211] kmem_cache_alloc+0x5b/0x310 [ 2313.388680] ? vsnprintf+0x4ba/0x1600 [ 2313.389112] create_object.isra.0+0x3a/0xa30 [ 2313.389617] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2313.390203] __kmalloc_track_caller+0x177/0x370 [ 2313.390729] ? kasprintf+0xbb/0xf0 [ 2313.391133] kvasprintf+0xb5/0x150 [ 2313.391531] ? bust_spinlocks+0xe0/0xe0 [ 2313.391987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2313.392586] kasprintf+0xbb/0xf0 [ 2313.392972] ? kvasprintf_const+0x1a0/0x1a0 [ 2313.393467] ? kmem_cache_free+0x249/0x2d0 [ 2313.393955] ? p9_client_create+0xbfa/0x1230 [ 2313.394454] p9_client_create+0xc1b/0x1230 [ 2313.394938] ? p9_client_flush+0x430/0x430 [ 2313.395421] ? trace_hardirqs_on+0x5b/0x180 [ 2313.395915] ? lockdep_init_map_type+0x2c7/0x780 [ 2313.396450] ? __raw_spin_lock_init+0x36/0x110 [ 2313.396978] v9fs_session_init+0x1dd/0x1680 [ 2313.397466] ? lock_release+0x680/0x680 [ 2313.397930] ? kmem_cache_alloc_trace+0x151/0x320 [ 2313.398473] ? v9fs_show_options+0x690/0x690 [ 2313.398977] ? trace_hardirqs_on+0x5b/0x180 [ 2313.399463] ? kasan_unpoison_shadow+0x33/0x50 [ 2313.399985] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2313.400569] v9fs_mount+0x79/0x8f0 [ 2313.400973] ? v9fs_write_inode+0x60/0x60 [ 2313.401442] legacy_get_tree+0x105/0x220 [ 2313.401913] vfs_get_tree+0x8e/0x300 [ 2313.402335] path_mount+0x1490/0x21e0 [ 2313.402775] ? strncpy_from_user+0x9e/0x470 [ 2313.403265] ? finish_automount+0xa90/0xa90 [ 2313.403754] ? getname_flags.part.0+0x1dd/0x4f0 [ 2313.404285] ? _copy_from_user+0xfb/0x1b0 [ 2313.404762] __x64_sys_mount+0x282/0x300 [ 2313.405225] ? copy_mnt_ns+0xa00/0xa00 [ 2313.405672] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2313.406285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2313.406873] do_syscall_64+0x33/0x40 [ 2313.407295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2313.407876] RIP: 0033:0x7fbbb2ce3b19 [ 2313.408297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2313.410380] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2313.411245] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2313.412054] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2313.412866] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2313.413672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2313.414482] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:40:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xa000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:40:11 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000090000000c00018008000100", @ANYRES32=r0, @ANYBLOB], 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r2, 0x1, 0x70bd25, 0x0, {0x9}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001400), 0xc, &(0x7f0000001600)={&(0x7f0000000180)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:40:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 50) [ 2313.530658] FAULT_INJECTION: forcing a failure. [ 2313.530658] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.533995] CPU: 0 PID: 12774 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2313.535581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2313.537462] Call Trace: [ 2313.538086] dump_stack+0x107/0x167 18:40:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xb000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2313.538921] should_fail.cold+0x5/0xa [ 2313.539951] should_failslab+0x5/0x20 [ 2313.540839] __kmalloc_track_caller+0x79/0x370 [ 2313.541892] ? kstrdup_const+0x53/0x80 [ 2313.542772] ? kasprintf+0xbb/0xf0 [ 2313.543588] kstrdup+0x36/0x70 [ 2313.544321] kstrdup_const+0x53/0x80 [ 2313.545171] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2313.546315] p9_client_create+0xc6a/0x1230 [ 2313.547285] ? p9_client_flush+0x430/0x430 [ 2313.548253] ? trace_hardirqs_on+0x5b/0x180 [ 2313.549236] ? lockdep_init_map_type+0x2c7/0x780 [ 2313.550345] ? __raw_spin_lock_init+0x36/0x110 [ 2313.551387] v9fs_session_init+0x1dd/0x1680 [ 2313.552372] ? lock_release+0x680/0x680 [ 2313.553300] ? kmem_cache_alloc_trace+0x151/0x320 [ 2313.554402] ? v9fs_show_options+0x690/0x690 [ 2313.555417] ? trace_hardirqs_on+0x5b/0x180 [ 2313.556400] ? kasan_unpoison_shadow+0x33/0x50 [ 2313.557432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2313.558599] v9fs_mount+0x79/0x8f0 [ 2313.559416] ? v9fs_write_inode+0x60/0x60 [ 2313.560368] legacy_get_tree+0x105/0x220 [ 2313.561302] vfs_get_tree+0x8e/0x300 [ 2313.562154] path_mount+0x1490/0x21e0 [ 2313.563023] ? strncpy_from_user+0x9e/0x470 [ 2313.563999] ? finish_automount+0xa90/0xa90 [ 2313.564975] ? getname_flags.part.0+0x1dd/0x4f0 [ 2313.566057] ? _copy_from_user+0xfb/0x1b0 [ 2313.567017] __x64_sys_mount+0x282/0x300 [ 2313.567949] ? copy_mnt_ns+0xa00/0xa00 [ 2313.568863] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2313.570081] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2313.571260] do_syscall_64+0x33/0x40 [ 2313.572108] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2313.573294] RIP: 0033:0x7fbbb2ce3b19 [ 2313.574164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2313.578463] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2313.580230] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2313.581917] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2313.583590] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2313.585224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2313.586860] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2313.590312] kmem_cache_create(9p-fcall-cache-91) failed with error -12 [ 2313.592342] CPU: 0 PID: 12774 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2313.593933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2313.595855] Call Trace: [ 2313.596467] dump_stack+0x107/0x167 [ 2313.597318] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2313.598548] p9_client_create+0xc6a/0x1230 [ 2313.599531] ? p9_client_flush+0x430/0x430 [ 2313.600491] ? trace_hardirqs_on+0x5b/0x180 [ 2313.601469] ? lockdep_init_map_type+0x2c7/0x780 [ 2313.602556] ? __raw_spin_lock_init+0x36/0x110 [ 2313.603607] v9fs_session_init+0x1dd/0x1680 [ 2313.604585] ? lock_release+0x680/0x680 [ 2313.605497] ? kmem_cache_alloc_trace+0x151/0x320 [ 2313.606622] ? v9fs_show_options+0x690/0x690 [ 2313.607627] ? trace_hardirqs_on+0x5b/0x180 [ 2313.608603] ? kasan_unpoison_shadow+0x33/0x50 [ 2313.609658] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2313.610814] v9fs_mount+0x79/0x8f0 [ 2313.611627] ? v9fs_write_inode+0x60/0x60 [ 2313.612592] legacy_get_tree+0x105/0x220 [ 2313.613543] vfs_get_tree+0x8e/0x300 [ 2313.614424] path_mount+0x1490/0x21e0 [ 2313.615319] ? strncpy_from_user+0x9e/0x470 [ 2313.616320] ? finish_automount+0xa90/0xa90 [ 2313.617308] ? getname_flags.part.0+0x1dd/0x4f0 [ 2313.618375] ? _copy_from_user+0xfb/0x1b0 [ 2313.619339] __x64_sys_mount+0x282/0x300 [ 2313.620263] ? copy_mnt_ns+0xa00/0xa00 [ 2313.621158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2313.622367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2313.623542] do_syscall_64+0x33/0x40 [ 2313.624391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2313.625553] RIP: 0033:0x7fbbb2ce3b19 [ 2313.626422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2313.630615] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2313.632342] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2313.633967] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2313.635591] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2313.637234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2313.638867] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:40:25 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x27, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x74, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:25 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000f00002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:40:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x10000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:40:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x3f, 0x3}, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:40:25 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x27, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 51) 18:40:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2327.437458] FAULT_INJECTION: forcing a failure. [ 2327.437458] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.440581] CPU: 0 PID: 12799 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2327.442464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2327.444688] Call Trace: [ 2327.445415] dump_stack+0x107/0x167 [ 2327.446419] should_fail.cold+0x5/0xa [ 2327.447424] ? create_object.isra.0+0x3a/0xa30 [ 2327.448627] should_failslab+0x5/0x20 [ 2327.449627] kmem_cache_alloc+0x5b/0x310 [ 2327.450704] ? lock_acquire+0x197/0x470 [ 2327.451754] create_object.isra.0+0x3a/0xa30 [ 2327.452904] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2327.454281] __kmalloc_track_caller+0x177/0x370 [ 2327.455424] ? kstrdup_const+0x53/0x80 [ 2327.456328] ? kasprintf+0xbb/0xf0 [ 2327.457170] kstrdup+0x36/0x70 [ 2327.457919] kstrdup_const+0x53/0x80 [ 2327.458844] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2327.460018] p9_client_create+0xc6a/0x1230 [ 2327.461025] ? p9_client_flush+0x430/0x430 [ 2327.462029] ? trace_hardirqs_on+0x5b/0x180 [ 2327.463026] ? lockdep_init_map_type+0x2c7/0x780 [ 2327.464124] ? __raw_spin_lock_init+0x36/0x110 [ 2327.465190] v9fs_session_init+0x1dd/0x1680 [ 2327.466204] ? lock_release+0x680/0x680 [ 2327.467151] ? kmem_cache_alloc_trace+0x151/0x320 [ 2327.468266] ? v9fs_show_options+0x690/0x690 [ 2327.469297] ? trace_hardirqs_on+0x5b/0x180 [ 2327.470307] ? kasan_unpoison_shadow+0x33/0x50 [ 2327.471366] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2327.472543] v9fs_mount+0x79/0x8f0 [ 2327.473371] ? v9fs_write_inode+0x60/0x60 [ 2327.474339] legacy_get_tree+0x105/0x220 [ 2327.475393] vfs_get_tree+0x8e/0x300 [ 2327.475450] path_mount+0x1490/0x21e0 [ 2327.475480] ? strncpy_from_user+0x9e/0x470 18:40:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x20000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:40:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0xa092, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x5, 0x6, 0x8, 0x9, 0x14, "4c3e9112e203c74b07ed4d168059b7206c9c76"}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2327.475503] ? finish_automount+0xa90/0xa90 [ 2327.475526] ? getname_flags.part.0+0x1dd/0x4f0 [ 2327.475547] ? _copy_from_user+0xfb/0x1b0 [ 2327.475582] __x64_sys_mount+0x282/0x300 [ 2327.475603] ? copy_mnt_ns+0xa00/0xa00 18:40:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x20100000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2327.475631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2327.475655] ? syscall_enter_from_user_mode+0x1d/0x50 18:40:25 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x27, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2327.475682] do_syscall_64+0x33/0x40 [ 2327.475704] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2327.475718] RIP: 0033:0x7fbbb2ce3b19 [ 2327.475739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2327.475752] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2327.475775] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2327.475788] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2327.475801] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2327.475813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2327.475826] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:40:39 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x48, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:39 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:40:39 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000003000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:40:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 52) 18:40:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x8cffffff, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:40:39 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:39 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = fork() r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat(r1, &(0x7f0000000140)='./file1\x00', 0x4700, 0x8) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r3) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x39, 0xc4, 0x1, 0x9, 0x0, 0x7, 0x1c0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fe00000, 0x2, @perf_bp={&(0x7f0000000040), 0xd}, 0x8, 0x8, 0x11bc, 0x8, 0x3ff, 0x4, 0x9, 0x0, 0x4, 0x0, 0x80000001}, r2, 0x8, r3, 0x3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) dup2(r1, r0) [ 2341.411687] FAULT_INJECTION: forcing a failure. [ 2341.411687] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.413327] CPU: 1 PID: 12825 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2341.414275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.415408] Call Trace: [ 2341.415769] dump_stack+0x107/0x167 [ 2341.416274] should_fail.cold+0x5/0xa [ 2341.416788] ? create_object.isra.0+0x3a/0xa30 [ 2341.417405] should_failslab+0x5/0x20 [ 2341.417934] kmem_cache_alloc+0x5b/0x310 [ 2341.417952] create_object.isra.0+0x3a/0xa30 [ 2341.417963] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2341.417980] kmem_cache_alloc+0x159/0x310 [ 2341.417999] kmem_cache_create_usercopy+0x190/0x2f0 [ 2341.418016] p9_client_create+0xc6a/0x1230 [ 2341.418034] ? p9_client_flush+0x430/0x430 [ 2341.418049] ? trace_hardirqs_on+0x5b/0x180 [ 2341.418064] ? lockdep_init_map_type+0x2c7/0x780 [ 2341.418079] ? __raw_spin_lock_init+0x36/0x110 [ 2341.418098] v9fs_session_init+0x1dd/0x1680 18:40:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xc0ed0000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2341.418112] ? lock_release+0x680/0x680 [ 2341.418131] ? kmem_cache_alloc_trace+0x151/0x320 [ 2341.418152] ? v9fs_show_options+0x690/0x690 [ 2341.418172] ? trace_hardirqs_on+0x5b/0x180 [ 2341.418185] ? kasan_unpoison_shadow+0x33/0x50 [ 2341.418197] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2341.418212] v9fs_mount+0x79/0x8f0 [ 2341.418225] ? v9fs_write_inode+0x60/0x60 [ 2341.418236] legacy_get_tree+0x105/0x220 [ 2341.418251] vfs_get_tree+0x8e/0x300 [ 2341.418263] path_mount+0x1490/0x21e0 [ 2341.418281] ? strncpy_from_user+0x9e/0x470 [ 2341.418294] ? finish_automount+0xa90/0xa90 [ 2341.418307] ? getname_flags.part.0+0x1dd/0x4f0 [ 2341.418320] ? _copy_from_user+0xfb/0x1b0 [ 2341.418339] __x64_sys_mount+0x282/0x300 [ 2341.418351] ? copy_mnt_ns+0xa00/0xa00 [ 2341.418367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 18:40:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xf6ffffff, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2341.418381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2341.418396] do_syscall_64+0x33/0x40 [ 2341.418409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2341.418418] RIP: 0033:0x7fbbb2ce3b19 [ 2341.418430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.418437] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2341.418451] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 18:40:39 executing program 5: r0 = creat(0x0, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) fallocate(r2, 0x0, 0x0, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000040)={0x7, 'netdevsim0\x00', {0x61d22f08}, 0x7fff}) 18:40:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 53) [ 2341.418459] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2341.418466] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2341.418473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.418480] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:40:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xffffff8c, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2341.605358] FAULT_INJECTION: forcing a failure. [ 2341.605358] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.606902] CPU: 1 PID: 12855 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2341.607774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.608807] Call Trace: [ 2341.609140] dump_stack+0x107/0x167 [ 2341.609596] should_fail.cold+0x5/0xa [ 2341.610077] ? create_object.isra.0+0x3a/0xa30 [ 2341.610652] should_failslab+0x5/0x20 [ 2341.611123] kmem_cache_alloc+0x5b/0x310 [ 2341.611640] create_object.isra.0+0x3a/0xa30 [ 2341.612181] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2341.612814] kmem_cache_alloc+0x159/0x310 [ 2341.613333] kmem_cache_create_usercopy+0x190/0x2f0 [ 2341.613976] p9_client_create+0xc6a/0x1230 [ 2341.614515] ? p9_client_flush+0x430/0x430 [ 2341.615042] ? trace_hardirqs_on+0x5b/0x180 [ 2341.615584] ? lockdep_init_map_type+0x2c7/0x780 [ 2341.616173] ? __raw_spin_lock_init+0x36/0x110 [ 2341.616765] v9fs_session_init+0x1dd/0x1680 [ 2341.617298] ? lock_release+0x680/0x680 [ 2341.617799] ? kmem_cache_alloc_trace+0x151/0x320 [ 2341.618404] ? v9fs_show_options+0x690/0x690 [ 2341.618966] ? trace_hardirqs_on+0x5b/0x180 [ 2341.619507] ? kasan_unpoison_shadow+0x33/0x50 [ 2341.620070] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2341.620699] v9fs_mount+0x79/0x8f0 [ 2341.621141] ? v9fs_write_inode+0x60/0x60 [ 2341.621657] legacy_get_tree+0x105/0x220 [ 2341.622167] vfs_get_tree+0x8e/0x300 [ 2341.622625] path_mount+0x1490/0x21e0 [ 2341.623102] ? strncpy_from_user+0x9e/0x470 [ 2341.623643] ? finish_automount+0xa90/0xa90 [ 2341.624173] ? getname_flags.part.0+0x1dd/0x4f0 [ 2341.624744] ? _copy_from_user+0xfb/0x1b0 [ 2341.625261] __x64_sys_mount+0x282/0x300 [ 2341.625764] ? copy_mnt_ns+0xa00/0xa00 [ 2341.626341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2341.627006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2341.627640] do_syscall_64+0x33/0x40 [ 2341.628100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2341.628739] RIP: 0033:0x7fbbb2ce3b19 [ 2341.629199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.631466] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2341.632408] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2341.633282] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2341.634201] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2341.635089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.635969] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:40:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x4e22f309, 0x5) 18:40:40 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000004000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:40:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x3}}, 0xcf5) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:40:40 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x4c, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xfffffff6, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:40:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 54) 18:40:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x4e22f309, 0x5) 18:40:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="cec25dd291e54f5a93acb17bc993197fdc0db3abe74feb87cc1e6d34abfae354bb1e3d4a3a1b9789920ec3abd7d177588f7cf64a74d33e04741967265c73cf641b4c60351c2073a1867cc8df5083682bd57f78e1d07f05dd1e5f66e7cd1f24f70000000000000000"], 0xd7) close(r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x110, r2, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x40}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2341.808111] FAULT_INJECTION: forcing a failure. [ 2341.808111] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.809480] CPU: 1 PID: 12873 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2341.810277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.811219] Call Trace: [ 2341.811528] dump_stack+0x107/0x167 [ 2341.811947] should_fail.cold+0x5/0xa [ 2341.812384] ? __kmem_cache_create+0x10e/0x520 [ 2341.812906] should_failslab+0x5/0x20 [ 2341.813337] kmem_cache_alloc_node+0x55/0x330 [ 2341.813848] __kmem_cache_create+0x10e/0x520 [ 2341.814366] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2341.814942] p9_client_create+0xc6a/0x1230 [ 2341.815432] ? p9_client_flush+0x430/0x430 [ 2341.815925] ? trace_hardirqs_on+0x5b/0x180 [ 2341.816421] ? lockdep_init_map_type+0x2c7/0x780 [ 2341.816964] ? __raw_spin_lock_init+0x36/0x110 [ 2341.817494] v9fs_session_init+0x1dd/0x1680 [ 2341.817990] ? lock_release+0x680/0x680 [ 2341.818457] ? kmem_cache_alloc_trace+0x151/0x320 [ 2341.819008] ? v9fs_show_options+0x690/0x690 [ 2341.819514] ? trace_hardirqs_on+0x5b/0x180 [ 2341.820010] ? kasan_unpoison_shadow+0x33/0x50 [ 2341.820534] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2341.821116] v9fs_mount+0x79/0x8f0 [ 2341.821525] ? v9fs_write_inode+0x60/0x60 [ 2341.822000] legacy_get_tree+0x105/0x220 [ 2341.822476] vfs_get_tree+0x8e/0x300 [ 2341.822903] path_mount+0x1490/0x21e0 [ 2341.823347] ? strncpy_from_user+0x9e/0x470 [ 2341.823843] ? finish_automount+0xa90/0xa90 [ 2341.824340] ? getname_flags.part.0+0x1dd/0x4f0 [ 2341.824873] ? _copy_from_user+0xfb/0x1b0 [ 2341.825359] __x64_sys_mount+0x282/0x300 [ 2341.825823] ? copy_mnt_ns+0xa00/0xa00 [ 2341.826281] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2341.826883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2341.827477] do_syscall_64+0x33/0x40 [ 2341.827907] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2341.828495] RIP: 0033:0x7fbbb2ce3b19 [ 2341.828920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.831015] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2341.831882] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2341.832690] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2341.833508] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2341.833514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.833521] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2341.833621] kmem_cache_create(9p-fcall-cache-95) failed with error -22 [ 2341.833632] CPU: 1 PID: 12873 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2341.833637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.833640] Call Trace: [ 2341.833651] dump_stack+0x107/0x167 [ 2341.833665] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2341.833679] p9_client_create+0xc6a/0x1230 [ 2341.833695] ? p9_client_flush+0x430/0x430 [ 2341.833710] ? trace_hardirqs_on+0x5b/0x180 [ 2341.833721] ? lockdep_init_map_type+0x2c7/0x780 [ 2341.833734] ? __raw_spin_lock_init+0x36/0x110 [ 2341.833759] v9fs_session_init+0x1dd/0x1680 [ 2341.843746] ? lock_release+0x680/0x680 [ 2341.844208] ? kmem_cache_alloc_trace+0x151/0x320 [ 2341.844759] ? v9fs_show_options+0x690/0x690 [ 2341.845270] ? trace_hardirqs_on+0x5b/0x180 [ 2341.845766] ? kasan_unpoison_shadow+0x33/0x50 [ 2341.846292] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2341.846877] v9fs_mount+0x79/0x8f0 [ 2341.847285] ? v9fs_write_inode+0x60/0x60 [ 2341.847759] legacy_get_tree+0x105/0x220 [ 2341.848224] vfs_get_tree+0x8e/0x300 [ 2341.848652] path_mount+0x1490/0x21e0 [ 2341.849088] ? strncpy_from_user+0x9e/0x470 [ 2341.849583] ? finish_automount+0xa90/0xa90 [ 2341.850075] ? getname_flags.part.0+0x1dd/0x4f0 [ 2341.850617] ? _copy_from_user+0xfb/0x1b0 [ 2341.851096] __x64_sys_mount+0x282/0x300 [ 2341.851564] ? copy_mnt_ns+0xa00/0xa00 [ 2341.852012] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2341.852612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2341.853204] do_syscall_64+0x33/0x40 [ 2341.853630] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2341.854226] RIP: 0033:0x7fbbb2ce3b19 [ 2341.854652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.856745] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2341.857611] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2341.858428] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2341.859237] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2341.860046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.860859] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:40:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x4e22f309, 0x5) 18:40:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xedc000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:40:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 55) 18:40:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/239) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:40:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x8000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2341.973228] FAULT_INJECTION: forcing a failure. [ 2341.973228] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.974554] CPU: 1 PID: 12893 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2341.975339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.976281] Call Trace: [ 2341.976587] dump_stack+0x107/0x167 [ 2341.977007] should_fail.cold+0x5/0xa [ 2341.977449] ? create_object.isra.0+0x3a/0xa30 [ 2341.977970] should_failslab+0x5/0x20 [ 2341.978421] kmem_cache_alloc+0x5b/0x310 [ 2341.978890] create_object.isra.0+0x3a/0xa30 [ 2341.979392] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2341.980009] kmem_cache_alloc+0x159/0x310 [ 2341.980537] kmem_cache_create_usercopy+0x190/0x2f0 [ 2341.981208] p9_client_create+0xc6a/0x1230 [ 2341.981699] ? p9_client_flush+0x430/0x430 [ 2341.982195] ? trace_hardirqs_on+0x5b/0x180 [ 2341.982691] ? lockdep_init_map_type+0x2c7/0x780 [ 2341.983235] ? __raw_spin_lock_init+0x36/0x110 [ 2341.983764] v9fs_session_init+0x1dd/0x1680 [ 2341.984262] ? lock_release+0x680/0x680 [ 2341.984725] ? kmem_cache_alloc_trace+0x151/0x320 [ 2341.985272] ? v9fs_show_options+0x690/0x690 [ 2341.985783] ? trace_hardirqs_on+0x5b/0x180 [ 2341.986285] ? kasan_unpoison_shadow+0x33/0x50 [ 2341.986807] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2341.987390] v9fs_mount+0x79/0x8f0 [ 2341.987804] ? v9fs_write_inode+0x60/0x60 [ 2341.988278] legacy_get_tree+0x105/0x220 [ 2341.988749] vfs_get_tree+0x8e/0x300 [ 2341.989174] path_mount+0x1490/0x21e0 [ 2341.989620] ? strncpy_from_user+0x9e/0x470 [ 2341.990112] ? finish_automount+0xa90/0xa90 [ 2341.990650] ? getname_flags.part.0+0x1dd/0x4f0 [ 2341.991184] ? _copy_from_user+0xfb/0x1b0 [ 2341.991667] __x64_sys_mount+0x282/0x300 [ 2341.992130] ? copy_mnt_ns+0xa00/0xa00 [ 2341.992579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2341.993184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2341.993775] do_syscall_64+0x33/0x40 [ 2341.994207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2341.994798] RIP: 0033:0x7fbbb2ce3b19 [ 2341.995221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.997317] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2341.998195] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2341.999007] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2341.999819] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2342.000631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2342.001441] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:40:55 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x68, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:55 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000006000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:40:55 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:40:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 56) 18:40:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x4e22f309, 0x5) 18:40:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x100000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2357.279660] FAULT_INJECTION: forcing a failure. [ 2357.279660] name failslab, interval 1, probability 0, space 0, times 0 18:40:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:40:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0xff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2357.282357] CPU: 0 PID: 12910 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2357.284051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2357.286031] Call Trace: [ 2357.286681] dump_stack+0x107/0x167 [ 2357.287555] should_fail.cold+0x5/0xa [ 2357.288471] ? create_object.isra.0+0x3a/0xa30 [ 2357.289553] should_failslab+0x5/0x20 [ 2357.290474] kmem_cache_alloc+0x5b/0x310 [ 2357.291445] ? mark_held_locks+0x9e/0xe0 [ 2357.292425] create_object.isra.0+0x3a/0xa30 [ 2357.293474] kmemleak_alloc_percpu+0xa0/0x100 [ 2357.294560] pcpu_alloc+0x4e2/0x1240 [ 2357.295479] __kmem_cache_create+0x35a/0x520 [ 2357.296548] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2357.297758] p9_client_create+0xc6a/0x1230 [ 2357.298810] ? p9_client_flush+0x430/0x430 [ 2357.299820] ? trace_hardirqs_on+0x5b/0x180 [ 2357.300856] ? lockdep_init_map_type+0x2c7/0x780 [ 2357.301976] ? __raw_spin_lock_init+0x36/0x110 [ 2357.303105] v9fs_session_init+0x1dd/0x1680 [ 2357.304133] ? lock_release+0x680/0x680 [ 2357.305096] ? kmem_cache_alloc_trace+0x151/0x320 [ 2357.306251] ? v9fs_show_options+0x690/0x690 [ 2357.307325] ? trace_hardirqs_on+0x5b/0x180 [ 2357.308359] ? kasan_unpoison_shadow+0x33/0x50 [ 2357.309446] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2357.310670] v9fs_mount+0x79/0x8f0 [ 2357.311528] ? v9fs_write_inode+0x60/0x60 [ 2357.312499] legacy_get_tree+0x105/0x220 [ 2357.313463] vfs_get_tree+0x8e/0x300 [ 2357.314350] path_mount+0x1490/0x21e0 [ 2357.315271] ? strncpy_from_user+0x9e/0x470 [ 2357.316304] ? finish_automount+0xa90/0xa90 [ 2357.317341] ? getname_flags.part.0+0x1dd/0x4f0 [ 2357.318454] ? _copy_from_user+0xfb/0x1b0 [ 2357.319444] __x64_sys_mount+0x282/0x300 [ 2357.320400] ? copy_mnt_ns+0xa00/0xa00 [ 2357.321339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2357.322601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2357.323846] do_syscall_64+0x33/0x40 [ 2357.324744] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2357.325957] RIP: 0033:0x7fbbb2ce3b19 [ 2357.326841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2357.331183] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2357.332989] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2357.334656] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2357.336299] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2357.337981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2357.339672] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:40:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x200000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:40:55 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1000000a}) r1 = socket$netlink(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb7da}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 18:40:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0xfc000000, 0x7ff, 0x1, 0x2, 0x3, "f24591659df1b7c405ae2720789f149fa3ba0a"}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="440400003500100028bdcda91c4aa22e193a0286e2224e1bb02a7000fcdf250c0000000006dc3ed951b60587e71046e5d53e27d757a282dbe26423e72868a3750fdbfd549f0d854047b96d4e9c81000000ec0ffbce5e2f37cd88dbbfead163c3a1655adfc8b5dea7e275024d347749715dd02f3f00", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="17024c805a293118563e2128c1f17eb9f3d4dcdd8ca0108788b16a43e97a3924046ac5a57e6de05fa5af61c6942f9107bba8fd6fa98e6a4fdcfb6fbca2cb53072916c672aef77c8c4b3667bfb61f1552a440133cfcc23d224026339066f2abc83259fd5676d1b6e8e4277609667db836863e806554b46dc20fac2b4c1124ca437de3783b7e7f1abb69ff706ff38c65afe8b8395715f109e920be56e8663340a7a553da97e4f11e3fc573faa176e9c6fa199a920666d769a43b4794bc62d7f22909072998f33c8ae095d50506a3a020d386c63638f06de04eb4d52869fe74ba6d0f90e47a0ab46754c28ade1d161a59f6add6bce2acb6cc679b8429a9cdda9b23f16ac0dd2435d9a4a438f3e56e88f7dbacf3c75edc123a933cb9d58b5e6feb504ce758ff0af9bfdfc4aef7426e3abfe6933cd374147c93f465ae282f63d78ecc2aa6ea7e82eb85811bd66f55eb46eb90c7fc912854c6269dec34769c41488c7e6eab0dbfdd9c23f978a681d0bb15b0cf1a1e31f5f6fb4ee8ea302d5a119c4f2280c7397d15643623661e476c920bd61a00c703dbd6623b95aefca73a88b2b99c4a40649c875b06de73b570a0a707d48da8e7fe4bb633eeb7b3d1fe78f8124753c1b7b03a279f51ab92472910e3687244f290687ce54beb78de47abde69b913d25b583cbad1248f0104665313c8f250d79ee750509f65afdd017f9c6c83fe7f3944bd6ca19eca5f268f03aca65002984c35e0726a51ee16007f008300ca0149e8790282c2e6984dcf81c9b1bcd2b3cb07d8d116a96a95f848dea2ee1236e153cfe9b07786ec7139e96feacbb3a9c1250cba272b4f2a45701ca81d3ab35116b7a457e0095279cde99c05f65d7803c6165d1d7c1146763a82902fbfce933c8a2be0f0a6d82bc9bb2bb9725cc3a83ab72f892a8f340edf4002008c8151e7523dba778474f7bf8a66982ded4eb1a6a50e6df61ed88b768d0f75541db0a6ed390f7fde4cc7b515d064dc8739c41bef0f2ba24b62e78c005c90d8ecd8d85028c600e4367faa1dbc7b1692a23757cfa9a9ba2dabace36f17635b4af2154f75d71a192e73e9d5e8de8004005d01a2524f990ad63f433e232dcab57770f48e37684bdbe4d481db962613d8f8baa02ab2e6eebdefd2767d14008a80080001006401010108002b00640101017a002b80f66772c3a6da0b15bf8080352016cd0334e20fcf7e908e18d53b035788565f5ddb4594c0384b609ae41f55cad0ca4f38755231c0359fff351ac91b3dca7fac22be2a15792a6e855eef7f030303e3a3cd4a443451e7c7582775c983a6edf3aaa7820571a3059ad61b93211c2d6f4709003a002f2f26400000000004008d0008008200ac14143f000000"], 0x444}, 0x1, 0x0, 0x0, 0x880}, 0x40000) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:40:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x700000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:40:55 executing program 5: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r0, 0x11, 0x0, 0x8800002) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 18:40:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 57) 18:40:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x800000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:40:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x3b, 0xbb, 0xe1, 0x0, 0x3, 0x200, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3ff, 0x2, @perf_config_ext={0x8, 0xa3}, 0x0, 0xfff, 0x1, 0x3, 0x1442, 0xfff, 0x5, 0x0, 0x40, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r4) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x4d4, 0x1a, 0x300, 0x70bd25, 0x25dfdbff, {0x9}, [@generic="561881ada1ff882f3478d245b618aa20e2207f94fc3e08a8aeb92fb198635cd6c2abf98268adaa89d5c0996100e3df4c5000c82fa5acaf7b6ed13bd1434bb2f1f1696f953f603146122e06f8d565d0c090b6ee7a59c8c5c607156eefcc9b6881a4de487ad7c9e0833b2ad727e29aab6c82ea8e659d1e2e96318a680035bf2c4b1b73bee31979c255141055dc0815fbb6f56d3aa93b1688de4d1c8320b3d01f", @nested={0x17a, 0x4f, 0x0, 0x1, [@generic="5507b4c6094dd0c9e2d12839a94a028e5469407c13b2ec6f2088e03161d8a978e5f80c4fffabb5241cc5197f9a23f4f431518484c473aad4bd2db4987dcf706825541abb57b93c5ce9e4e68955987c5382b55e4f7e9184e156b39afe96758357edca9be1e6b5c544bcb80351a550168f0f7386bd2353c8d127258100ff9a6b67accb71268846590f23f7c295bb3e6bda897d1ef26dea1bd448eb304dc6c1", @generic="5b9f9272e4822e89e5849ad834919c77178ca7e75235f944a63ecb20b759d8c60fd2ea0562350fd291284d4e232e8bc6ce48a44acde84657908e27e930f0f1eb2fe7098d1fe000f1e7943696efbbeb2a493d24c3ab2b3ee5329620c6db3684f45105bbf7fed4668d31533803714a585c9e89a71114f95a80c25e6ebb34ffc425159358b1e2c1060676d883bbfaacc5f679ee3f3531d3b4f8aa013b46291483d6c35ecdeb57389f90a97af1038aec5ff4206a0a764d196c753c6180968107bfa6e60a06ae0793a5ce4c05f1a4bf17fad62ebd4efee448075c"]}, @typed={0x8, 0x1d, 0x0, 0x0, @fd=r4}, @nested={0x280, 0x41, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @fd=r1}, @generic="48ee3b16616a699c8765218a19f81a1e4ed21b5fe1b448157599872438cc35c6e51cadf2980243dac571425f9427b3f8a5e7bd2c65906ce5ab92b2866a3593dddc0a73226b182810df92243068c6c45d82fd1106f2777a73d3f1ec80bc33bfa3c33feb6685634c92afabd5ec426b6ddacea96c3772eb821a753a9ea6f5d0af8fe273277d72fec25d1974b55318942448520628f3a1275dc2b93ecb5a32e97a417ebc26b395539ab0b8360e39589b22996a93a52c69f6cb8628648c7dda343a19fac6e5371e0b9601af18307308c16cffcf0c0dedeff727cec91771fbc4bc0272da90df3903474a040f5e462e381109ca16ed808044e3ecfd3c7fc78b", @generic="ed55483cb5c40fa3720da27f97470793ca7bae098a3ba7576f273937d9f147dd31b0338bc412de3b", @generic="5ba7396be69e5f02fdeb4dd5559c3d775b5dec17e49873c305f705bb2bf2377366212be4368ea297fc41b756dae462e5b5cb975a84ad5378b4d360caf3053266c4c4aff1b305f48fc32e8fbdc3974ba3cf399efff11d9ce3", @generic="fc6e74d34c329cf20f0ca1a817225c1b7aaee9b8d8222a5aafda9e3e96effde55eedf23661cac1b6e7e215e8b5a3f4e5578d6589446544ab3fa95a4dee339cf6a05173e9c6ddf44df77bdf42715a700498ee1fce911e36d2d456b7c1879ff7cb8d376c03317bae3b7419860836ebb8e437f46f7a596a32f63e4e27801145f974a4599d789856091416b43b79bd64c267e4b99510bdc660eb3bb6397c3a03dfd38b828a5e4eaa4be3c62370816fb4d69fee30d1ce10f8bfa05e08f4144e976acbafbc1c857a2d77cdbd49d82f8eb0d2290a0a18b9a3d34e4263e17e7ddead5dac20f361498470cfc3b178d2806fd79687a9df699fb98afc91"]}, @typed={0x8, 0x39, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}]}, 0x4d4}}, 0x40044000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2357.568892] FAULT_INJECTION: forcing a failure. [ 2357.568892] name failslab, interval 1, probability 0, space 0, times 0 [ 2357.571813] CPU: 0 PID: 12955 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2357.573478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2357.575485] Call Trace: [ 2357.576127] dump_stack+0x107/0x167 [ 2357.577012] should_fail.cold+0x5/0xa [ 2357.577914] should_failslab+0x5/0x20 [ 2357.578849] __kmalloc_track_caller+0x79/0x370 [ 2357.579945] ? kstrdup_const+0x53/0x80 [ 2357.580877] kstrdup+0x36/0x70 [ 2357.581656] kstrdup_const+0x53/0x80 [ 2357.582557] kvasprintf_const+0x10c/0x1a0 [ 2357.583540] kobject_set_name_vargs+0x56/0x150 [ 2357.584623] kobject_init_and_add+0xc9/0x160 [ 2357.585682] ? kobject_create_and_add+0xb0/0xb0 [ 2357.586796] ? wait_for_completion_io+0x270/0x270 [ 2357.587922] ? kernfs_name_hash+0xe7/0x110 [ 2357.588939] ? kernfs_find_ns+0x256/0x380 [ 2357.589952] sysfs_slab_add+0x172/0x200 [ 2357.590917] __kmem_cache_create+0x3db/0x520 [ 2357.591972] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2357.593150] p9_client_create+0xc6a/0x1230 [ 2357.594177] ? p9_client_flush+0x430/0x430 [ 2357.595194] ? trace_hardirqs_on+0x5b/0x180 [ 2357.596228] ? lockdep_init_map_type+0x2c7/0x780 [ 2357.597348] ? __raw_spin_lock_init+0x36/0x110 [ 2357.598454] v9fs_session_init+0x1dd/0x1680 [ 2357.599485] ? lock_release+0x680/0x680 [ 2357.600422] ? kmem_cache_alloc_trace+0x151/0x320 [ 2357.601569] ? v9fs_show_options+0x690/0x690 [ 2357.602614] ? trace_hardirqs_on+0x5b/0x180 [ 2357.603616] ? kasan_unpoison_shadow+0x33/0x50 [ 2357.604702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2357.605916] v9fs_mount+0x79/0x8f0 [ 2357.606748] ? v9fs_write_inode+0x60/0x60 [ 2357.607707] legacy_get_tree+0x105/0x220 [ 2357.608674] vfs_get_tree+0x8e/0x300 [ 2357.609559] path_mount+0x1490/0x21e0 [ 2357.610475] ? strncpy_from_user+0x9e/0x470 [ 2357.611493] ? finish_automount+0xa90/0xa90 [ 2357.612516] ? getname_flags.part.0+0x1dd/0x4f0 [ 2357.613611] ? _copy_from_user+0xfb/0x1b0 [ 2357.614611] __x64_sys_mount+0x282/0x300 [ 2357.615557] ? copy_mnt_ns+0xa00/0xa00 [ 2357.616457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2357.617692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2357.618892] do_syscall_64+0x33/0x40 [ 2357.619759] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2357.620968] RIP: 0033:0x7fbbb2ce3b19 [ 2357.621825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2357.626051] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2357.627823] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2357.629435] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2357.631112] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2357.632737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2357.634375] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2357.638107] kobject: can not set name properly! [ 2357.639549] kmem_cache_create(9p-fcall-cache-98) failed with error -12 [ 2357.641135] CPU: 0 PID: 12955 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2357.642705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2357.644590] Call Trace: [ 2357.645199] dump_stack+0x107/0x167 [ 2357.646044] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2357.647268] p9_client_create+0xc6a/0x1230 [ 2357.648242] ? p9_client_flush+0x430/0x430 [ 2357.649201] ? trace_hardirqs_on+0x5b/0x180 [ 2357.650197] ? lockdep_init_map_type+0x2c7/0x780 [ 2357.651294] ? __raw_spin_lock_init+0x36/0x110 [ 2357.652342] v9fs_session_init+0x1dd/0x1680 [ 2357.653325] ? lock_release+0x680/0x680 [ 2357.654240] ? kmem_cache_alloc_trace+0x151/0x320 [ 2357.655341] ? v9fs_show_options+0x690/0x690 [ 2357.656342] ? trace_hardirqs_on+0x5b/0x180 [ 2357.657307] ? kasan_unpoison_shadow+0x33/0x50 [ 2357.658351] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2357.659503] v9fs_mount+0x79/0x8f0 [ 2357.660316] ? v9fs_write_inode+0x60/0x60 [ 2357.661235] legacy_get_tree+0x105/0x220 [ 2357.662168] vfs_get_tree+0x8e/0x300 [ 2357.663025] path_mount+0x1490/0x21e0 [ 2357.663881] ? strncpy_from_user+0x9e/0x470 [ 2357.664824] ? finish_automount+0xa90/0xa90 [ 2357.665766] ? getname_flags.part.0+0x1dd/0x4f0 [ 2357.666792] ? _copy_from_user+0xfb/0x1b0 [ 2357.667727] __x64_sys_mount+0x282/0x300 [ 2357.668644] ? copy_mnt_ns+0xa00/0xa00 [ 2357.669527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2357.670696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2357.671831] do_syscall_64+0x33/0x40 [ 2357.672664] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2357.673795] RIP: 0033:0x7fbbb2ce3b19 [ 2357.674642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2357.678704] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2357.680356] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2357.681943] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2357.683531] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2357.685073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2357.686649] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:41:09 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x13, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:41:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 58) 18:41:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:41:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) ioctl$VT_DISALLOCATE(r2, 0x5608) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:41:09 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000007000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:41:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x900000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:41:09 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4c0721, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget(0x1, 0x4000, 0xf97d709ca5b5f77e, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/105) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/218) shmctl$SHM_UNLOCK(r1, 0xc) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r2 = shmget(0x1, 0x4000, 0xf97d709ca5b5f77e, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/41) ptrace(0xffffffffffffffff, 0x0) 18:41:09 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:41:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xa00000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2371.315427] FAULT_INJECTION: forcing a failure. [ 2371.315427] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.317388] CPU: 0 PID: 12973 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2371.318525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.319865] Call Trace: [ 2371.320303] dump_stack+0x107/0x167 [ 2371.320901] should_fail.cold+0x5/0xa [ 2371.321522] should_failslab+0x5/0x20 [ 2371.322145] __kmalloc_track_caller+0x79/0x370 [ 2371.322912] ? kstrdup_const+0x53/0x80 18:41:09 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000020002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2371.323541] kstrdup+0x36/0x70 [ 2371.324159] kstrdup_const+0x53/0x80 [ 2371.324770] kvasprintf_const+0x10c/0x1a0 [ 2371.325447] kobject_set_name_vargs+0x56/0x150 [ 2371.326187] kobject_init_and_add+0xc9/0x160 [ 2371.326914] ? kobject_create_and_add+0xb0/0xb0 [ 2371.327673] ? wait_for_completion_io+0x270/0x270 [ 2371.328452] ? kernfs_name_hash+0xe7/0x110 [ 2371.329137] ? kernfs_find_ns+0x256/0x380 [ 2371.329821] sysfs_slab_add+0x172/0x200 [ 2371.330480] __kmem_cache_create+0x3db/0x520 [ 2371.331192] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2371.332004] p9_client_create+0xc6a/0x1230 [ 2371.332697] ? p9_client_flush+0x430/0x430 [ 2371.333385] ? trace_hardirqs_on+0x5b/0x180 [ 2371.334093] ? lockdep_init_map_type+0x2c7/0x780 [ 2371.334886] ? __raw_spin_lock_init+0x36/0x110 [ 2371.335636] v9fs_session_init+0x1dd/0x1680 [ 2371.336336] ? lock_release+0x680/0x680 [ 2371.336992] ? kmem_cache_alloc_trace+0x151/0x320 [ 2371.337780] ? v9fs_show_options+0x690/0x690 [ 2371.338512] ? trace_hardirqs_on+0x5b/0x180 [ 2371.339225] ? kasan_unpoison_shadow+0x33/0x50 [ 2371.339976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2371.340798] v9fs_mount+0x79/0x8f0 [ 2371.341376] ? v9fs_write_inode+0x60/0x60 [ 2371.342041] legacy_get_tree+0x105/0x220 [ 2371.342713] vfs_get_tree+0x8e/0x300 [ 2371.343323] path_mount+0x1490/0x21e0 [ 2371.343955] ? strncpy_from_user+0x9e/0x470 [ 2371.344656] ? finish_automount+0xa90/0xa90 [ 2371.345358] ? getname_flags.part.0+0x1dd/0x4f0 [ 2371.346128] ? _copy_from_user+0xfb/0x1b0 [ 2371.346820] __x64_sys_mount+0x282/0x300 [ 2371.347471] ? copy_mnt_ns+0xa00/0xa00 [ 2371.348109] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.348958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.349814] do_syscall_64+0x33/0x40 [ 2371.350426] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2371.351270] RIP: 0033:0x7fbbb2ce3b19 [ 2371.351879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.354916] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2371.356171] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2371.357346] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2371.358537] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2371.359703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.360885] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2371.362245] kobject: can not set name properly! [ 2371.363142] kmem_cache_create(9p-fcall-cache-99) failed with error -12 [ 2371.364266] CPU: 0 PID: 12973 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2371.365411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.366783] Call Trace: [ 2371.367220] dump_stack+0x107/0x167 [ 2371.367822] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2371.368690] p9_client_create+0xc6a/0x1230 [ 2371.369388] ? p9_client_flush+0x430/0x430 [ 2371.370097] ? trace_hardirqs_on+0x5b/0x180 [ 2371.370812] ? lockdep_init_map_type+0x2c7/0x780 [ 2371.371593] ? __raw_spin_lock_init+0x36/0x110 [ 2371.372353] v9fs_session_init+0x1dd/0x1680 [ 2371.373057] ? lock_release+0x680/0x680 [ 2371.373722] ? kmem_cache_alloc_trace+0x151/0x320 [ 2371.374522] ? v9fs_show_options+0x690/0x690 [ 2371.375252] ? trace_hardirqs_on+0x5b/0x180 [ 2371.375967] ? kasan_unpoison_shadow+0x33/0x50 [ 2371.376725] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2371.377563] v9fs_mount+0x79/0x8f0 [ 2371.378146] ? v9fs_write_inode+0x60/0x60 [ 2371.378834] legacy_get_tree+0x105/0x220 [ 2371.379515] vfs_get_tree+0x8e/0x300 [ 2371.380135] path_mount+0x1490/0x21e0 [ 2371.380769] ? strncpy_from_user+0x9e/0x470 [ 2371.381473] ? finish_automount+0xa90/0xa90 [ 2371.382183] ? getname_flags.part.0+0x1dd/0x4f0 [ 2371.382964] ? _copy_from_user+0xfb/0x1b0 [ 2371.383651] __x64_sys_mount+0x282/0x300 [ 2371.384318] ? copy_mnt_ns+0xa00/0xa00 [ 2371.384966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.385834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.386700] do_syscall_64+0x33/0x40 [ 2371.387309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2371.388149] RIP: 0033:0x7fbbb2ce3b19 [ 2371.388762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.391781] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2371.393029] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2371.394199] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2371.395388] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2371.396558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.397738] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:41:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xb00000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:41:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:41:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1000000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:41:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x2000000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:41:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, r1, 0x2) 18:41:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x2010000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:41:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x22, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:41:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x23, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:41:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:41:25 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x74, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:41:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x8cffffff00000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:41:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x1080, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:41:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 59) 18:41:25 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000030002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:41:25 executing program 5: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/143, 0x8f}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x41) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) truncate(&(0x7f0000000400)='./file0\x00', 0x3ff) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000427a870060000000000000000000000000141d0a37da909b372994e9b04154e35acd600000018001700703a73797a3200"/62], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4048000) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x72}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000080}, 0x8004) inotify_add_watch(r2, &(0x7f0000000740)='./file0\x00', 0x20) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xfddb}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 2386.618491] FAULT_INJECTION: forcing a failure. [ 2386.618491] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.621089] CPU: 1 PID: 13024 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2386.622552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.624309] Call Trace: [ 2386.624878] dump_stack+0x107/0x167 [ 2386.625644] should_fail.cold+0x5/0xa [ 2386.626446] should_failslab+0x5/0x20 [ 2386.627258] __kmalloc_track_caller+0x79/0x370 [ 2386.628221] ? kstrdup_const+0x53/0x80 [ 2386.629052] kstrdup+0x36/0x70 [ 2386.629731] kstrdup_const+0x53/0x80 [ 2386.630511] kvasprintf_const+0x10c/0x1a0 [ 2386.631390] kobject_set_name_vargs+0x56/0x150 [ 2386.632350] kobject_init_and_add+0xc9/0x160 [ 2386.633282] ? kobject_create_and_add+0xb0/0xb0 [ 2386.634265] ? wait_for_completion_io+0x270/0x270 [ 2386.635278] ? kernfs_name_hash+0xe7/0x110 [ 2386.636172] ? kernfs_find_ns+0x256/0x380 [ 2386.637058] sysfs_slab_add+0x172/0x200 [ 2386.637896] __kmem_cache_create+0x3db/0x520 [ 2386.638838] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2386.638864] p9_client_create+0xc6a/0x1230 [ 2386.638894] ? p9_client_flush+0x430/0x430 [ 2386.641762] ? trace_hardirqs_on+0x5b/0x180 [ 2386.641786] ? lockdep_init_map_type+0x2c7/0x780 [ 2386.641809] ? __raw_spin_lock_init+0x36/0x110 [ 2386.641837] v9fs_session_init+0x1dd/0x1680 [ 2386.641858] ? lock_release+0x680/0x680 [ 2386.641889] ? kmem_cache_alloc_trace+0x151/0x320 [ 2386.641909] ? v9fs_show_options+0x690/0x690 [ 2386.641939] ? trace_hardirqs_on+0x5b/0x180 [ 2386.641961] ? kasan_unpoison_shadow+0x33/0x50 [ 2386.641980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2386.642008] v9fs_mount+0x79/0x8f0 [ 2386.652101] ? v9fs_write_inode+0x60/0x60 [ 2386.652119] legacy_get_tree+0x105/0x220 [ 2386.652144] vfs_get_tree+0x8e/0x300 [ 2386.654673] path_mount+0x1490/0x21e0 [ 2386.655473] ? strncpy_from_user+0x9e/0x470 [ 2386.656403] ? finish_automount+0xa90/0xa90 [ 2386.657309] ? getname_flags.part.0+0x1dd/0x4f0 [ 2386.658286] ? _copy_from_user+0xfb/0x1b0 [ 2386.659175] __x64_sys_mount+0x282/0x300 [ 2386.660053] ? copy_mnt_ns+0xa00/0xa00 [ 2386.660880] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.662005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.663126] do_syscall_64+0x33/0x40 [ 2386.663931] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2386.665032] RIP: 0033:0x7fbbb2ce3b19 [ 2386.665830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.669703] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2386.671348] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2386.672876] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2386.674406] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2386.675953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.675966] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2386.676083] kobject: can not set name properly! [ 2386.680290] kmem_cache_create(9p-fcall-cache-100) failed with error -12 [ 2386.681745] CPU: 1 PID: 13024 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2386.683243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.685035] Call Trace: [ 2386.685607] dump_stack+0x107/0x167 [ 2386.686401] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2386.687522] p9_client_create+0xc6a/0x1230 [ 2386.688421] ? p9_client_flush+0x430/0x430 [ 2386.689323] ? trace_hardirqs_on+0x5b/0x180 [ 2386.690247] ? lockdep_init_map_type+0x2c7/0x780 [ 2386.691275] ? __raw_spin_lock_init+0x36/0x110 [ 2386.692270] v9fs_session_init+0x1dd/0x1680 [ 2386.693199] ? lock_release+0x680/0x680 [ 2386.694062] ? kmem_cache_alloc_trace+0x151/0x320 [ 2386.695092] ? v9fs_show_options+0x690/0x690 [ 2386.696027] ? trace_hardirqs_on+0x5b/0x180 [ 2386.696960] ? kasan_unpoison_shadow+0x33/0x50 [ 2386.697935] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2386.699035] v9fs_mount+0x79/0x8f0 [ 2386.699800] ? v9fs_write_inode+0x60/0x60 [ 2386.700687] legacy_get_tree+0x105/0x220 [ 2386.701560] vfs_get_tree+0x8e/0x300 [ 2386.702360] path_mount+0x1490/0x21e0 [ 2386.703193] ? strncpy_from_user+0x9e/0x470 [ 2386.704118] ? finish_automount+0xa90/0xa90 [ 2386.705046] ? getname_flags.part.0+0x1dd/0x4f0 [ 2386.706044] ? _copy_from_user+0xfb/0x1b0 [ 2386.706940] __x64_sys_mount+0x282/0x300 [ 2386.707812] ? copy_mnt_ns+0xa00/0xa00 [ 2386.708655] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.709784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.710892] do_syscall_64+0x33/0x40 [ 2386.711698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2386.712776] RIP: 0033:0x7fbbb2ce3b19 [ 2386.713558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.717483] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2386.719130] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2386.720681] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2386.722198] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2386.723733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.725277] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:41:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x10281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x8002, 0x0, 0x0, 0x4, 0x8000000}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd, 0x400, 0x0, 0x5}, 0x4) close(r3) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x634, 0xfff, 0x80000001, 0x6, 0x8, "4bb9a52ef650dec10bb2d1db2ff6d93e9656b8"}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x786, 0x694b, 0x0, 0x0, 0x0) 18:41:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xf6ffffff00000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:41:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 60) 18:41:25 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000040002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:41:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:41:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x2) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x442, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000640)=ANY=[@ANYBLOB="07000000c0000000beccdcf9ed8206e832a8fe23c94b053fa693a0ff7a4600046f52cf2bea59d40000000000009df81291f04c1f2644035c2a6c05eec234ea1a856ec5678c376054dec235220bbe8ca5ef5d646e0a8d0200dc52ae9e0c4ef166ae1908002b73c8cba3931e17f8174472d8604ae7055c03f78b08f5db921a3873a78c0655554f1769b02ece43f81ca50cfe2a222bc13e5abebcbc0a8a397cd359bd1be46e326320b01061c5ecab331e0fd0319152a4b85fbe0ad616ee8ef070d1da9c9d88fd2201d66620084c617c725bce70e3a79301ca92bfa98118a879d8510858e2cd25a56cb42f8eda19920748c9"]) writev(r4, 0x0, 0x0) r5 = signalfd(r3, &(0x7f0000000300)={[0x4]}, 0x8) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0x2, r5, &(0x7f0000000340)=0x3, 0x100, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYRES32=r5, @ANYBLOB="00800000f900002e2f66696c65320000f46f295f2bb2ff266cca67ad4741b1fea3960e96bbd96ced0da49173b323c328ea2e2c5b1087203194b0ba02b71808196b50deb5e1d54127b242166a2618e680d8571fbe533451eb11bd5caa7a0948a403c2a07f50af05195d9608e66715b6cf3f1d3298fbcea2c6a85446ec2c"]) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x6000, 0xe0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r6, 0x0, r2, 0x0, 0x200f5ef, 0x0) [ 2386.871133] FAULT_INJECTION: forcing a failure. [ 2386.871133] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.873702] CPU: 1 PID: 13041 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2386.875192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.876970] Call Trace: [ 2386.877540] dump_stack+0x107/0x167 [ 2386.878322] should_fail.cold+0x5/0xa [ 2386.879154] should_failslab+0x5/0x20 [ 2386.879962] __kmalloc_track_caller+0x79/0x370 [ 2386.880930] ? kstrdup_const+0x53/0x80 [ 2386.881761] kstrdup+0x36/0x70 [ 2386.882432] kstrdup_const+0x53/0x80 [ 2386.883223] kvasprintf_const+0x10c/0x1a0 [ 2386.884106] kobject_set_name_vargs+0x56/0x150 [ 2386.885068] kobject_init_and_add+0xc9/0x160 [ 2386.886002] ? kobject_create_and_add+0xb0/0xb0 [ 2386.886994] ? wait_for_completion_io+0x270/0x270 [ 2386.888006] ? kernfs_name_hash+0xe7/0x110 [ 2386.888910] ? kernfs_find_ns+0x256/0x380 [ 2386.889805] sysfs_slab_add+0x172/0x200 [ 2386.890646] __kmem_cache_create+0x3db/0x520 [ 2386.891601] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2386.892677] p9_client_create+0xc6a/0x1230 [ 2386.893575] ? p9_client_flush+0x430/0x430 [ 2386.894464] ? trace_hardirqs_on+0x5b/0x180 [ 2386.895387] ? lockdep_init_map_type+0x2c7/0x780 [ 2386.896391] ? __raw_spin_lock_init+0x36/0x110 [ 2386.897381] v9fs_session_init+0x1dd/0x1680 [ 2386.898307] ? lock_release+0x680/0x680 [ 2386.899177] ? kmem_cache_alloc_trace+0x151/0x320 [ 2386.900205] ? v9fs_show_options+0x690/0x690 [ 2386.901161] ? trace_hardirqs_on+0x5b/0x180 [ 2386.902084] ? kasan_unpoison_shadow+0x33/0x50 [ 2386.903070] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2386.904160] v9fs_mount+0x79/0x8f0 [ 2386.904933] ? v9fs_write_inode+0x60/0x60 [ 2386.904952] legacy_get_tree+0x105/0x220 [ 2386.904976] vfs_get_tree+0x8e/0x300 [ 2386.904997] path_mount+0x1490/0x21e0 [ 2386.905024] ? strncpy_from_user+0x9e/0x470 [ 2386.905044] ? finish_automount+0xa90/0xa90 [ 2386.905066] ? getname_flags.part.0+0x1dd/0x4f0 [ 2386.905086] ? _copy_from_user+0xfb/0x1b0 [ 2386.905117] __x64_sys_mount+0x282/0x300 [ 2386.905137] ? copy_mnt_ns+0xa00/0xa00 [ 2386.905163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.905185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.905211] do_syscall_64+0x33/0x40 [ 2386.905232] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2386.905245] RIP: 0033:0x7fbbb2ce3b19 [ 2386.905264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.905276] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2386.905298] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2386.905310] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2386.905322] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2386.905334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.905346] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2386.905436] kobject: can not set name properly! [ 2386.905518] kmem_cache_create(9p-fcall-cache-101) failed with error -12 [ 2386.905537] CPU: 1 PID: 13041 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2386.905546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.905552] Call Trace: [ 2386.905571] dump_stack+0x107/0x167 [ 2386.905598] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2386.905622] p9_client_create+0xc6a/0x1230 [ 2386.905651] ? p9_client_flush+0x430/0x430 [ 2386.905671] ? trace_hardirqs_on+0x5b/0x180 [ 2386.905694] ? lockdep_init_map_type+0x2c7/0x780 [ 2386.905723] ? __raw_spin_lock_init+0x36/0x110 [ 2386.905749] v9fs_session_init+0x1dd/0x1680 [ 2386.905770] ? lock_release+0x680/0x680 [ 2386.905800] ? kmem_cache_alloc_trace+0x151/0x320 [ 2386.905820] ? v9fs_show_options+0x690/0x690 [ 2386.905850] ? trace_hardirqs_on+0x5b/0x180 [ 2386.905871] ? kasan_unpoison_shadow+0x33/0x50 [ 2386.905890] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2386.905911] v9fs_mount+0x79/0x8f0 [ 2386.905932] ? v9fs_write_inode+0x60/0x60 [ 2386.905949] legacy_get_tree+0x105/0x220 [ 2386.905970] vfs_get_tree+0x8e/0x300 [ 2386.905989] path_mount+0x1490/0x21e0 [ 2386.906014] ? strncpy_from_user+0x9e/0x470 [ 2386.906038] ? finish_automount+0xa90/0xa90 [ 2386.957223] ? getname_flags.part.0+0x1dd/0x4f0 [ 2386.957250] ? _copy_from_user+0xfb/0x1b0 [ 2386.959201] __x64_sys_mount+0x282/0x300 [ 2386.960077] ? copy_mnt_ns+0xa00/0xa00 [ 2386.960930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.960951] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.960975] do_syscall_64+0x33/0x40 [ 2386.961007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2386.965102] RIP: 0033:0x7fbbb2ce3b19 18:41:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2386.965121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.965132] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2386.965151] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2386.965162] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2386.965174] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2386.965185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:41:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2386.965197] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2387.019595] 9pnet: Insufficient options for proto=fd [ 2387.121595] 9pnet: Insufficient options for proto=fd 18:41:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x5baa, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:41:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 61) 18:41:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x880000b) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2403.827749] 9pnet: Insufficient options for proto=fd 18:41:42 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000050002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:41:42 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:41:42 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x27, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:41:42 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:41:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}}) [ 2403.840675] FAULT_INJECTION: forcing a failure. [ 2403.840675] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.843370] CPU: 0 PID: 13069 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2403.845011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2403.846978] Call Trace: [ 2403.847607] dump_stack+0x107/0x167 [ 2403.848459] should_fail.cold+0x5/0xa [ 2403.849362] should_failslab+0x5/0x20 [ 2403.850256] __kmalloc_track_caller+0x79/0x370 [ 2403.851333] ? kstrdup_const+0x53/0x80 [ 2403.852244] kstrdup+0x36/0x70 [ 2403.853004] kstrdup_const+0x53/0x80 [ 2403.853875] __kernfs_new_node+0x9d/0x860 [ 2403.854863] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2403.855988] ? lock_acquire+0x197/0x470 [ 2403.856924] ? perf_trace_lock+0xac/0x490 [ 2403.857905] ? __lockdep_reset_lock+0x180/0x180 [ 2403.859018] kernfs_new_node+0x18d/0x250 [ 2403.859974] kernfs_create_dir_ns+0x49/0x160 [ 2403.861025] sysfs_create_dir_ns+0x127/0x290 [ 2403.862059] ? sysfs_create_mount_point+0xb0/0xb0 [ 2403.863194] ? rwlock_bug.part.0+0x90/0x90 [ 2403.864179] ? do_raw_spin_unlock+0x4f/0x220 [ 2403.865200] kobject_add_internal+0x25e/0xa30 [ 2403.866262] kobject_init_and_add+0x101/0x160 [ 2403.867325] ? kobject_create_and_add+0xb0/0xb0 [ 2403.868402] ? wait_for_completion_io+0x270/0x270 [ 2403.869517] ? kernfs_name_hash+0xe7/0x110 [ 2403.870498] ? kernfs_find_ns+0x256/0x380 [ 2403.871526] sysfs_slab_add+0x172/0x200 [ 2403.872452] __kmem_cache_create+0x3db/0x520 [ 2403.873472] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2403.874625] p9_client_create+0xc6a/0x1230 [ 2403.875608] ? p9_client_flush+0x430/0x430 [ 2403.876588] ? trace_hardirqs_on+0x5b/0x180 [ 2403.877585] ? lockdep_init_map_type+0x2c7/0x780 [ 2403.878725] ? __raw_spin_lock_init+0x36/0x110 [ 2403.879805] v9fs_session_init+0x1dd/0x1680 [ 2403.880820] ? kmem_cache_alloc_trace+0x151/0x320 [ 2403.881943] ? v9fs_show_options+0x690/0x690 [ 2403.882985] ? trace_hardirqs_on+0x5b/0x180 [ 2403.883990] ? kasan_unpoison_shadow+0x33/0x50 [ 2403.885042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2403.886239] v9fs_mount+0x79/0x8f0 [ 2403.887079] ? v9fs_write_inode+0x60/0x60 [ 2403.888047] legacy_get_tree+0x105/0x220 [ 2403.888982] vfs_get_tree+0x8e/0x300 [ 2403.889837] path_mount+0x1490/0x21e0 [ 2403.890721] ? strncpy_from_user+0x9e/0x470 [ 2403.891717] ? finish_automount+0xa90/0xa90 [ 2403.892706] ? getname_flags.part.0+0x1dd/0x4f0 [ 2403.893777] ? _copy_from_user+0xfb/0x1b0 [ 2403.894756] __x64_sys_mount+0x282/0x300 [ 2403.895698] ? copy_mnt_ns+0xa00/0xa00 [ 2403.896600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2403.897807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2403.899031] do_syscall_64+0x33/0x40 [ 2403.899886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2403.901062] RIP: 0033:0x7fbbb2ce3b19 [ 2403.901913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2403.906145] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2403.907905] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2403.909529] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2403.911172] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2403.912792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2403.914411] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2403.918024] kobject_add_internal failed for 9p-fcall-cache-102 (error: -12 parent: slab) [ 2403.920292] kmem_cache_create(9p-fcall-cache-102) failed with error -12 [ 2403.921850] CPU: 0 PID: 13069 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2403.923439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2403.925325] Call Trace: [ 2403.925929] dump_stack+0x107/0x167 [ 2403.926768] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2403.927978] p9_client_create+0xc6a/0x1230 [ 2403.928958] ? p9_client_flush+0x430/0x430 [ 2403.929931] ? trace_hardirqs_on+0x5b/0x180 [ 2403.930922] ? lockdep_init_map_type+0x2c7/0x780 [ 2403.932010] ? __raw_spin_lock_init+0x36/0x110 [ 2403.933056] v9fs_session_init+0x1dd/0x1680 [ 2403.934053] ? kmem_cache_alloc_trace+0x151/0x320 [ 2403.935147] ? v9fs_show_options+0x690/0x690 [ 2403.936150] ? trace_hardirqs_on+0x5b/0x180 [ 2403.937123] ? kasan_unpoison_shadow+0x33/0x50 [ 2403.938149] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2403.939296] v9fs_mount+0x79/0x8f0 [ 2403.940099] ? v9fs_write_inode+0x60/0x60 [ 2403.941032] legacy_get_tree+0x105/0x220 [ 2403.941969] vfs_get_tree+0x8e/0x300 [ 2403.942806] path_mount+0x1490/0x21e0 [ 2403.943690] ? strncpy_from_user+0x9e/0x470 [ 2403.944669] ? finish_automount+0xa90/0xa90 [ 2403.945624] ? getname_flags.part.0+0x1dd/0x4f0 [ 2403.946674] ? _copy_from_user+0xfb/0x1b0 [ 2403.947629] __x64_sys_mount+0x282/0x300 [ 2403.948564] ? copy_mnt_ns+0xa00/0xa00 [ 2403.949452] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2403.950662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2403.951863] do_syscall_64+0x33/0x40 [ 2403.952725] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2403.953845] RIP: 0033:0x7fbbb2ce3b19 [ 2403.954703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2403.958949] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2403.960690] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2403.962330] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2403.964002] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2403.965652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2403.967345] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:41:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}}) 18:41:42 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) mknodat$loop(r1, &(0x7f00000001c0)='.\x00', 0x8000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000200)='./file2\x00', 0x2000, 0xd0) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(r1, r2, 0x0, 0x100000001) [ 2404.068478] 9pnet: Insufficient options for proto=fd 18:41:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}}) 18:41:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xeb88, 0x2, 0x4, 0x8, 0x11, "bb0ad3817adbf008b70c9aaf5855c394d2c032"}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2404.133073] 9pnet: Insufficient options for proto=fd [ 2421.454212] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 18:42:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 62) 18:42:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x6, 0x9, 0xffffff00, 0xdaf3, 0x1b, "0560e8b615d2f263e39860802b18fa69748f7d"}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x3, 0x6}}, './file1\x00'}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)={'U-', 0x1}, 0x16, 0x1) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/70, 0x46}], 0x1) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:42:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22}) 18:42:10 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000060002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:42:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:42:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x48, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:42:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:42:10 executing program 5: keyctl$update(0x2, 0x0, &(0x7f0000000000), 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000680)={0x0, 0x50}, 0x0, &(0x7f00000006c0)="14e991739ad010cec901472bd0ee80cb1d8d736c189c4daed48f2c3e98cad869c030d459de6673b15331c6e739899493e5407cf6c73098cb7d754d3685d100227c419e545d6365c9ba18bd8b1f84fc67", &(0x7f00000007c0)) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/43, 0x2b) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000580)=0xc) timer_gettime(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x42}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) r0 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b71, &(0x7f0000000100)) keyctl$read(0xb, r0, &(0x7f0000000740)=""/4096, 0x1000) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2431.598650] 9pnet: Insufficient options for proto=fd [ 2431.631198] FAULT_INJECTION: forcing a failure. [ 2431.631198] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.634003] CPU: 1 PID: 13120 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2431.634016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2431.634024] Call Trace: [ 2431.634052] dump_stack+0x107/0x167 [ 2431.634078] should_fail.cold+0x5/0xa [ 2431.634104] ? create_object.isra.0+0x3a/0xa30 [ 2431.634125] should_failslab+0x5/0x20 [ 2431.634147] kmem_cache_alloc+0x5b/0x310 [ 2431.634177] create_object.isra.0+0x3a/0xa30 [ 2431.634195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2431.634225] kmem_cache_alloc+0x159/0x310 [ 2431.634253] __kernfs_new_node+0xd4/0x860 18:42:10 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000070002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2431.634280] ? kernfs_dop_revalidate+0x3a0/0x3a0 18:42:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2431.634314] ? lock_acquire+0x197/0x470 [ 2431.634337] ? perf_trace_lock+0xac/0x490 [ 2431.634366] ? __lockdep_reset_lock+0x180/0x180 [ 2431.634392] kernfs_new_node+0x18d/0x250 [ 2431.634421] kernfs_create_dir_ns+0x49/0x160 [ 2431.634447] sysfs_create_dir_ns+0x127/0x290 [ 2431.634470] ? sysfs_create_mount_point+0xb0/0xb0 [ 2431.634490] ? rwlock_bug.part.0+0x90/0x90 [ 2431.634517] ? do_raw_spin_unlock+0x4f/0x220 [ 2431.634545] kobject_add_internal+0x25e/0xa30 [ 2431.634580] kobject_init_and_add+0x101/0x160 [ 2431.634604] ? kobject_create_and_add+0xb0/0xb0 [ 2431.634629] ? wait_for_completion_io+0x270/0x270 [ 2431.634646] ? kernfs_name_hash+0xe7/0x110 [ 2431.634669] ? kernfs_find_ns+0x256/0x380 [ 2431.634709] sysfs_slab_add+0x172/0x200 [ 2431.634732] __kmem_cache_create+0x3db/0x520 [ 2431.634762] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2431.634790] p9_client_create+0xc6a/0x1230 [ 2431.634822] ? p9_client_flush+0x430/0x430 [ 2431.634846] ? trace_hardirqs_on+0x5b/0x180 [ 2431.634871] ? lockdep_init_map_type+0x2c7/0x780 [ 2431.634896] ? __raw_spin_lock_init+0x36/0x110 [ 2431.634927] v9fs_session_init+0x1dd/0x1680 [ 2431.634950] ? lock_release+0x680/0x680 [ 2431.634984] ? kmem_cache_alloc_trace+0x151/0x320 [ 2431.635006] ? v9fs_show_options+0x690/0x690 [ 2431.635040] ? trace_hardirqs_on+0x5b/0x180 [ 2431.635063] ? kasan_unpoison_shadow+0x33/0x50 18:42:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 63) 18:42:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2}}) [ 2431.635084] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2431.635109] v9fs_mount+0x79/0x8f0 [ 2431.635142] ? v9fs_write_inode+0x60/0x60 [ 2431.635162] legacy_get_tree+0x105/0x220 [ 2431.635188] vfs_get_tree+0x8e/0x300 [ 2431.635209] path_mount+0x1490/0x21e0 [ 2431.635238] ? strncpy_from_user+0x9e/0x470 [ 2431.635261] ? finish_automount+0xa90/0xa90 [ 2431.635284] ? getname_flags.part.0+0x1dd/0x4f0 [ 2431.635306] ? _copy_from_user+0xfb/0x1b0 [ 2431.635339] __x64_sys_mount+0x282/0x300 [ 2431.635360] ? copy_mnt_ns+0xa00/0xa00 [ 2431.635387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2431.635411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.635437] do_syscall_64+0x33/0x40 [ 2431.635460] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2431.635475] RIP: 0033:0x7fbbb2ce3b19 [ 2431.635495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:42:10 executing program 5: r0 = fork() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) process_vm_readv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/220, 0xdc}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000040)=""/20, 0x14}], 0x4, &(0x7f0000000700)=[{&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000580)=""/8, 0x8}, {&(0x7f00000005c0)=""/203, 0xcb}], 0x3, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000740)={0xa, 0x4e22, 0xd3, @local, 0x5}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000000780)="4608cc80a69448d04f9b0a78a0e1c14f08524b2ad27c7c68fab1dab6a3e24559f6b6307edbea1b2e823c50b0f75a2060fbd37e585a51d36c1d158e4fcaea3f216c6734454b694fbe806aecb8cbfbd0391c18810772b4f086535bb3cd39d78fbd504eec64d1997671b2ea767319a3ef9b18be4b29ef9fe6950339b1987e4ededb074adba55e5d6c7e742515e55057ce82ad27600d71dfba672b1e8f1e46ccd2f547831a7c52dca97c308fee77b545fc9cb8eac6e1510b60e6a6f6a573f9dc01c8b41dd8ec8aef76631f", 0xc9}, {&(0x7f0000000880)="0496a9430560", 0x6}, {&(0x7f00000008c0)="6473cbd44214968fb837d0297ff2a777787f65d9ecf1ec3042e77a3cf9a08d4103317e4a02ce282c4a0f011ed5cefefcdc11c29af31ab82d641ac4c9a21d603e276c2fe45d6ac3d6f1ab375f851960b54f70575398dcc2c8a6b6293ffc3b30cfbb3875c4de20454d1f1438e41253aac28ef7867d1e78c21fbd0d0cdf74e059f5882ab934cb52d17892e36cebff65080ed67ba0187d90cb7d6ea443603250e7921446b9fc0782bf0e61e34bc8f59f4240c403967cb03bc6591b80", 0xba}, {&(0x7f0000000980)="982c7333884dd6818ca6230657ea4967c407483acf192884c35854035c683c76ab4bd5cf4c86913298f2f091270a18a0427b5b30074bef29b9203ee1227c7e23aceac12a8350c96d09b4b7d19b9f7961ef845e9a1480ca1e56be96ce68d9d5624a071b87f4c9eee7c3907f3f6662faa36dc2de0806d47992a1e904465dd0e699d0c57e104c9f6fdbab9ae036682b90a2792009c3806bb62420cb5fb66953751025c4640f2c553437aa4285cba4f03a01a20ab5d32ae71ee537a1bc60e6dda019f91c13698377717117a6e85f875414abf486ed3e5879543f44f2b23ae1ebbe362937848a3f7552f23334aec3", 0xec}, {&(0x7f0000000a80)="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", 0xfa}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)}], 0x7}, 0x40080) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000000c0), 0x4, 0x5) [ 2431.635508] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2431.635532] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2431.635545] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2431.635558] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2431.635571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2431.635584] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2431.917477] FAULT_INJECTION: forcing a failure. [ 2431.917477] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.917503] CPU: 1 PID: 13146 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2431.917514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2431.917521] Call Trace: [ 2431.917548] dump_stack+0x107/0x167 [ 2431.917575] should_fail.cold+0x5/0xa [ 2431.917598] ? __kernfs_new_node+0xd4/0x860 [ 2431.917619] should_failslab+0x5/0x20 [ 2431.917640] kmem_cache_alloc+0x5b/0x310 [ 2431.917669] __kernfs_new_node+0xd4/0x860 [ 2431.917690] ? lock_acquire+0x197/0x470 [ 2431.917722] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2431.917744] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2431.917773] ? kernfs_add_one+0x124/0x4d0 [ 2431.917801] ? kernfs_create_dir_ns+0x10b/0x160 [ 2431.917826] kernfs_new_node+0x18d/0x250 [ 2431.917854] __kernfs_create_file+0x51/0x350 [ 2431.917881] sysfs_add_file_mode_ns+0x221/0x560 [ 2431.917915] internal_create_group+0x324/0xb30 [ 2431.917948] ? sysfs_remove_group+0x170/0x170 [ 2431.917963] ? kernfs_name_hash+0xe7/0x110 [ 2431.917986] ? kernfs_find_ns+0x256/0x380 [ 2431.918020] sysfs_slab_add+0x188/0x200 [ 2431.918044] __kmem_cache_create+0x3db/0x520 [ 2431.918073] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2431.918102] p9_client_create+0xc6a/0x1230 [ 2431.918135] ? p9_client_flush+0x430/0x430 [ 2431.918160] ? trace_hardirqs_on+0x5b/0x180 [ 2431.918185] ? lockdep_init_map_type+0x2c7/0x780 [ 2431.918212] ? __raw_spin_lock_init+0x36/0x110 [ 2431.918243] v9fs_session_init+0x1dd/0x1680 [ 2431.918266] ? lock_release+0x680/0x680 [ 2431.918299] ? kmem_cache_alloc_trace+0x151/0x320 [ 2431.918322] ? v9fs_show_options+0x690/0x690 [ 2431.918357] ? trace_hardirqs_on+0x5b/0x180 [ 2431.918384] ? kasan_unpoison_shadow+0x33/0x50 [ 2431.918404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2431.918430] v9fs_mount+0x79/0x8f0 [ 2431.918454] ? v9fs_write_inode+0x60/0x60 [ 2431.918473] legacy_get_tree+0x105/0x220 [ 2431.918501] vfs_get_tree+0x8e/0x300 [ 2431.918523] path_mount+0x1490/0x21e0 [ 2431.918554] ? strncpy_from_user+0x9e/0x470 [ 2431.918576] ? finish_automount+0xa90/0xa90 [ 2431.918602] ? getname_flags.part.0+0x1dd/0x4f0 [ 2431.918624] ? _copy_from_user+0xfb/0x1b0 [ 2431.918659] __x64_sys_mount+0x282/0x300 [ 2431.918681] ? copy_mnt_ns+0xa00/0xa00 [ 2431.918711] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2431.918735] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.918762] do_syscall_64+0x33/0x40 [ 2431.918785] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2431.918798] RIP: 0033:0x7fbbb2ce3b19 [ 2431.918820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.918832] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2431.918857] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2431.918869] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2431.918881] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2431.918894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2431.918910] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2431.939509] kmem_cache_create(9p-fcall-cache-104) failed with error -12 [ 2431.939535] CPU: 1 PID: 13146 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2431.939549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2431.939555] Call Trace: [ 2431.939584] dump_stack+0x107/0x167 [ 2431.939615] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2431.939642] p9_client_create+0xc6a/0x1230 [ 2431.939680] ? p9_client_flush+0x430/0x430 [ 2431.939707] ? trace_hardirqs_on+0x5b/0x180 [ 2431.939733] ? lockdep_init_map_type+0x2c7/0x780 [ 2431.939759] ? __raw_spin_lock_init+0x36/0x110 [ 2431.939792] v9fs_session_init+0x1dd/0x1680 [ 2431.939816] ? lock_release+0x680/0x680 [ 2431.939851] ? kmem_cache_alloc_trace+0x151/0x320 [ 2431.939874] ? v9fs_show_options+0x690/0x690 [ 2431.939910] ? trace_hardirqs_on+0x5b/0x180 [ 2431.939934] ? kasan_unpoison_shadow+0x33/0x50 [ 2431.939955] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2431.939981] v9fs_mount+0x79/0x8f0 [ 2431.940004] ? v9fs_write_inode+0x60/0x60 [ 2431.940023] legacy_get_tree+0x105/0x220 [ 2431.940046] vfs_get_tree+0x8e/0x300 [ 2431.940066] path_mount+0x1490/0x21e0 [ 2431.940094] ? strncpy_from_user+0x9e/0x470 [ 2431.940117] ? finish_automount+0xa90/0xa90 [ 2431.940140] ? getname_flags.part.0+0x1dd/0x4f0 [ 2431.940161] ? _copy_from_user+0xfb/0x1b0 [ 2431.940194] __x64_sys_mount+0x282/0x300 [ 2431.940214] ? copy_mnt_ns+0xa00/0xa00 [ 2431.940241] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2431.940265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.940290] do_syscall_64+0x33/0x40 [ 2431.940312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2431.940325] RIP: 0033:0x7fbbb2ce3b19 [ 2431.940345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.940357] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2431.940380] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2431.940393] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2431.940408] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2431.940420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2431.940433] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2447.030973] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 18:42:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x7}}) [ 2455.868205] FAULT_INJECTION: forcing a failure. [ 2455.868205] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.870653] CPU: 0 PID: 13162 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2455.872116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2455.873872] Call Trace: [ 2455.874432] dump_stack+0x107/0x167 [ 2455.875207] should_fail.cold+0x5/0xa [ 2455.876022] ? create_object.isra.0+0x3a/0xa30 [ 2455.877230] should_failslab+0x5/0x20 [ 2455.878053] kmem_cache_alloc+0x5b/0x310 [ 2455.878917] create_object.isra.0+0x3a/0xa30 [ 2455.879857] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2455.880943] kmem_cache_alloc+0x159/0x310 [ 2455.881832] __kernfs_new_node+0xd4/0x860 [ 2455.882719] ? lock_acquire+0x197/0x470 [ 2455.883574] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2455.884573] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2455.885685] ? kernfs_add_one+0x124/0x4d0 [ 2455.886570] ? kernfs_create_dir_ns+0x10b/0x160 [ 2455.887569] kernfs_new_node+0x18d/0x250 [ 2455.888440] __kernfs_create_file+0x51/0x350 [ 2455.889377] sysfs_add_file_mode_ns+0x221/0x560 [ 2455.890382] internal_create_group+0x324/0xb30 [ 2455.891364] ? sysfs_remove_group+0x170/0x170 [ 2455.892319] ? kernfs_name_hash+0xe7/0x110 [ 2455.893221] ? kernfs_find_ns+0x256/0x380 [ 2455.894109] sysfs_slab_add+0x188/0x200 [ 2455.894959] __kmem_cache_create+0x3db/0x520 [ 2455.895905] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2455.896986] p9_client_create+0xc6a/0x1230 [ 2455.897016] ? p9_client_flush+0x430/0x430 [ 2455.897039] ? trace_hardirqs_on+0x5b/0x180 [ 2455.897061] ? lockdep_init_map_type+0x2c7/0x780 [ 2455.897085] ? __raw_spin_lock_init+0x36/0x110 [ 2455.901712] v9fs_session_init+0x1dd/0x1680 [ 2455.902633] ? lock_release+0x680/0x680 [ 2455.903500] ? kmem_cache_alloc_trace+0x151/0x320 [ 2455.904528] ? v9fs_show_options+0x690/0x690 [ 2455.905483] ? trace_hardirqs_on+0x5b/0x180 [ 2455.906407] ? kasan_unpoison_shadow+0x33/0x50 [ 2455.907373] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2455.908462] v9fs_mount+0x79/0x8f0 [ 2455.909227] ? v9fs_write_inode+0x60/0x60 [ 2455.910102] legacy_get_tree+0x105/0x220 [ 2455.910963] vfs_get_tree+0x8e/0x300 [ 2455.911761] path_mount+0x1490/0x21e0 [ 2455.912577] ? strncpy_from_user+0x9e/0x470 [ 2455.913499] ? finish_automount+0xa90/0xa90 [ 2455.914414] ? getname_flags.part.0+0x1dd/0x4f0 [ 2455.915409] ? _copy_from_user+0xfb/0x1b0 [ 2455.916306] __x64_sys_mount+0x282/0x300 [ 2455.917170] ? copy_mnt_ns+0xa00/0xa00 [ 2455.918001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2455.919128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2455.920245] do_syscall_64+0x33/0x40 [ 2455.920265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 18:42:34 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x4c, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:42:34 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = eventfd(0x100) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000080)={{'\x00', 0x3}, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000180)="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", 0x140, 0x0, &(0x7f0000000340)={0x2, 0x13a, {0x0, 0xc, 0x9b, "5955b7a1c62ef9c4b9be14fd12e07bc4699b9f6bd46eef46f2c490ca7b2592d3523d712012d3a6da14ef64cf954ab62c60189f56c599a144a4bfb66975e315f9e1d0407f68ce6c3f50d34d5e404ff771441a89f01e2067aa049f693b719b74999bae53bfe04e95763caead659ae4eebbc31af9ce1a79b5258927baf922057e99c6effd58757e5e9dc1eba843f0d3c83189801cc093a72f900fed6e", 0x92, "b0034371fbf2bc79c352e780b95037b8a25709c9d22305c31bd642d232f0cbbe12bf2f909d75394a7646e024ea859862ab8749cca63da29911e92513bd95e286743c043a9b0ae0b6c6500f7136d63030a7ce25efc1457fafb8baee8a4be73383f6fc96eb30b1b062f0b05e634c9c3ab7f44b06ff9f4b07f92c3a41a673304c656912ff387261a9b6ce274a438b1179ed2f68"}, 0x92, "4b41cab519aca7293c2a022ec349ff0d7d6dd05d0c8268301974839143d4ebc531cb5f97b628237e92a9793af28310a2a6f4895d3e68582f35e114689ced9732a188362ef9b8de81bad0dae7d19e2dd4bd8a6b7362c75b50f7349f93f93e9baa046cc50f35075cba5012d120a7dd11b09da279cac4e94baab7ce6bc67ba393501a56939c353ef4dc56e145ebafe5956220f9"}, 0x1d8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x8010, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r1, 0x21da9000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:42:34 executing program 5: lseek(0xffffffffffffffff, 0x6, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 18:42:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 64) 18:42:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:42:34 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:42:34 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000080002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2455.920278] RIP: 0033:0x7fbbb2ce3b19 [ 2455.920297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2455.920307] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:42:34 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8051}, 0x200080d2) [ 2455.920328] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2455.920339] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2455.920350] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 18:42:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8}}) [ 2455.920361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2455.920372] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:42:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xff, 0x3, 0x4, 0x5, 0x0, 0x7e9, 0x2000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffff94b7, 0xfffffffffffeffff}, 0x4280, 0x20, 0x68383408, 0x2, 0x401, 0x3e, 0x6e0, 0x0, 0x770d, 0x0, 0x6}, 0x0, 0xf, r0, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:42:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 65) 18:42:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc8f02, 0x61) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) ioctl$FIBMAP(r0, 0x40086602, &(0x7f0000000080)) 18:42:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x9}}) 18:42:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:42:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:42:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0xfffffffffffffc00}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0xd7) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x2010, r3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x7ff, 0x0, 0x0, {0x0, r4}}, 0x4) 18:42:51 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000180002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:42:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x68, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2472.995512] FAULT_INJECTION: forcing a failure. [ 2472.995512] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.997980] CPU: 0 PID: 13197 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2472.999388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2473.001160] Call Trace: [ 2473.001732] dump_stack+0x107/0x167 [ 2473.002512] should_fail.cold+0x5/0xa [ 2473.003315] ? __kernfs_new_node+0xd4/0x860 [ 2473.004241] should_failslab+0x5/0x20 [ 2473.005044] kmem_cache_alloc+0x5b/0x310 [ 2473.005901] __kernfs_new_node+0xd4/0x860 [ 2473.006766] ? lock_acquire+0x197/0x470 [ 2473.007599] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2473.008593] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2473.009702] ? kernfs_add_one+0x124/0x4d0 [ 2473.010574] ? kernfs_create_dir_ns+0x10b/0x160 [ 2473.011541] kernfs_new_node+0x18d/0x250 [ 2473.012400] __kernfs_create_file+0x51/0x350 [ 2473.013319] sysfs_add_file_mode_ns+0x221/0x560 [ 2473.014326] internal_create_group+0x324/0xb30 [ 2473.014357] ? sysfs_remove_group+0x170/0x170 [ 2473.014371] ? kernfs_name_hash+0xe7/0x110 [ 2473.014392] ? kernfs_find_ns+0x256/0x380 [ 2473.014423] sysfs_slab_add+0x188/0x200 [ 2473.014444] __kmem_cache_create+0x3db/0x520 [ 2473.014470] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2473.014496] p9_client_create+0xc6a/0x1230 [ 2473.014525] ? p9_client_flush+0x430/0x430 [ 2473.014547] ? trace_hardirqs_on+0x5b/0x180 [ 2473.014569] ? lockdep_init_map_type+0x2c7/0x780 [ 2473.014592] ? __raw_spin_lock_init+0x36/0x110 [ 2473.014620] v9fs_session_init+0x1dd/0x1680 [ 2473.014641] ? lock_release+0x680/0x680 [ 2473.014671] ? kmem_cache_alloc_trace+0x151/0x320 [ 2473.014691] ? v9fs_show_options+0x690/0x690 [ 2473.014722] ? trace_hardirqs_on+0x5b/0x180 [ 2473.014744] ? kasan_unpoison_shadow+0x33/0x50 [ 2473.014762] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2473.014786] v9fs_mount+0x79/0x8f0 [ 2473.014807] ? v9fs_write_inode+0x60/0x60 [ 2473.014834] legacy_get_tree+0x105/0x220 [ 2473.034787] vfs_get_tree+0x8e/0x300 [ 2473.034807] path_mount+0x1490/0x21e0 [ 2473.034834] ? strncpy_from_user+0x9e/0x470 [ 2473.034854] ? finish_automount+0xa90/0xa90 [ 2473.034874] ? getname_flags.part.0+0x1dd/0x4f0 18:42:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x7e21, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000080), 0x4) syz_io_uring_setup(0x4e61, &(0x7f00000001c0)={0x0, 0x88, 0xfe5ccaab43baec6f, 0x0, 0x1df, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x3f) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) [ 2473.034894] ? _copy_from_user+0xfb/0x1b0 [ 2473.034924] __x64_sys_mount+0x282/0x300 [ 2473.034943] ? copy_mnt_ns+0xa00/0xa00 [ 2473.034967] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2473.034989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2473.035013] do_syscall_64+0x33/0x40 [ 2473.035033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2473.035046] RIP: 0033:0x7fbbb2ce3b19 [ 2473.035064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2473.035075] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2473.035096] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2473.035107] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2473.035119] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2473.035130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:42:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xa}}) [ 2473.035141] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2473.050705] kmem_cache_create(9p-fcall-cache-106) failed with error -12 [ 2473.050778] CPU: 0 PID: 13197 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2473.050788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2473.050794] Call Trace: [ 2473.050816] dump_stack+0x107/0x167 [ 2473.050847] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2473.050871] p9_client_create+0xc6a/0x1230 [ 2473.050898] ? p9_client_flush+0x430/0x430 18:42:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 66) [ 2473.050918] ? trace_hardirqs_on+0x5b/0x180 [ 2473.050939] ? lockdep_init_map_type+0x2c7/0x780 [ 2473.050961] ? __raw_spin_lock_init+0x36/0x110 [ 2473.050987] v9fs_session_init+0x1dd/0x1680 [ 2473.051007] ? lock_release+0x680/0x680 [ 2473.051036] ? kmem_cache_alloc_trace+0x151/0x320 [ 2473.051055] ? v9fs_show_options+0x690/0x690 [ 2473.051084] ? trace_hardirqs_on+0x5b/0x180 [ 2473.051104] ? kasan_unpoison_shadow+0x33/0x50 [ 2473.051121] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2473.051142] v9fs_mount+0x79/0x8f0 [ 2473.051162] ? v9fs_write_inode+0x60/0x60 [ 2473.051178] legacy_get_tree+0x105/0x220 [ 2473.051199] vfs_get_tree+0x8e/0x300 [ 2473.051217] path_mount+0x1490/0x21e0 [ 2473.051241] ? strncpy_from_user+0x9e/0x470 [ 2473.051260] ? finish_automount+0xa90/0xa90 [ 2473.051279] ? getname_flags.part.0+0x1dd/0x4f0 [ 2473.051297] ? _copy_from_user+0xfb/0x1b0 [ 2473.051325] __x64_sys_mount+0x282/0x300 [ 2473.051342] ? copy_mnt_ns+0xa00/0xa00 [ 2473.051366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2473.051385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2473.051408] do_syscall_64+0x33/0x40 [ 2473.051427] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2473.051439] RIP: 0033:0x7fbbb2ce3b19 [ 2473.051456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2473.051466] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2473.051491] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2473.051502] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2473.051513] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2473.051523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2473.051535] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2473.207827] FAULT_INJECTION: forcing a failure. [ 2473.207827] name failslab, interval 1, probability 0, space 0, times 0 [ 2473.207851] CPU: 0 PID: 13221 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2473.207862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 18:42:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xb}}) [ 2473.207869] Call Trace: [ 2473.207894] dump_stack+0x107/0x167 18:42:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 67) [ 2473.207918] should_fail.cold+0x5/0xa [ 2473.207940] ? create_object.isra.0+0x3a/0xa30 [ 2473.207959] should_failslab+0x5/0x20 [ 2473.207979] kmem_cache_alloc+0x5b/0x310 [ 2473.208006] create_object.isra.0+0x3a/0xa30 [ 2473.208022] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2473.208048] kmem_cache_alloc+0x159/0x310 [ 2473.208074] __kernfs_new_node+0xd4/0x860 [ 2473.208093] ? lock_acquire+0x197/0x470 [ 2473.208123] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2473.208141] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2473.208167] ? kernfs_add_one+0x124/0x4d0 [ 2473.208193] ? kernfs_create_dir_ns+0x10b/0x160 [ 2473.208216] kernfs_new_node+0x18d/0x250 [ 2473.208242] __kernfs_create_file+0x51/0x350 [ 2473.208267] sysfs_add_file_mode_ns+0x221/0x560 [ 2473.208299] internal_create_group+0x324/0xb30 [ 2473.208329] ? sysfs_remove_group+0x170/0x170 18:42:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2473.208343] ? kernfs_name_hash+0xe7/0x110 18:42:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:42:51 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000001c0002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2473.208364] ? kernfs_find_ns+0x256/0x380 [ 2473.208401] sysfs_slab_add+0x188/0x200 [ 2473.208422] __kmem_cache_create+0x3db/0x520 [ 2473.208448] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2473.208473] p9_client_create+0xc6a/0x1230 [ 2473.208502] ? p9_client_flush+0x430/0x430 18:42:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}}) [ 2473.208524] ? trace_hardirqs_on+0x5b/0x180 [ 2473.208546] ? lockdep_init_map_type+0x2c7/0x780 [ 2473.208569] ? __raw_spin_lock_init+0x36/0x110 [ 2473.208597] v9fs_session_init+0x1dd/0x1680 [ 2473.208617] ? lock_release+0x680/0x680 [ 2473.208648] ? kmem_cache_alloc_trace+0x151/0x320 [ 2473.208667] ? v9fs_show_options+0x690/0x690 [ 2473.208698] ? trace_hardirqs_on+0x5b/0x180 [ 2473.208719] ? kasan_unpoison_shadow+0x33/0x50 [ 2473.208737] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2473.208765] v9fs_mount+0x79/0x8f0 [ 2473.208785] ? v9fs_write_inode+0x60/0x60 [ 2473.208803] legacy_get_tree+0x105/0x220 18:42:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x6c, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2473.208825] vfs_get_tree+0x8e/0x300 [ 2473.208844] path_mount+0x1490/0x21e0 [ 2473.208871] ? strncpy_from_user+0x9e/0x470 [ 2473.208890] ? finish_automount+0xa90/0xa90 [ 2473.208911] ? getname_flags.part.0+0x1dd/0x4f0 [ 2473.208930] ? _copy_from_user+0xfb/0x1b0 [ 2473.208960] __x64_sys_mount+0x282/0x300 [ 2473.208979] ? copy_mnt_ns+0xa00/0xa00 [ 2473.209003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2473.209025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2473.209049] do_syscall_64+0x33/0x40 [ 2473.209069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2473.209082] RIP: 0033:0x7fbbb2ce3b19 [ 2473.209101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:42:52 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000680002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2473.209112] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2473.209133] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2473.209145] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 18:42:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@dont_appraise}, {@smackfshat}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) [ 2473.209156] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2473.209167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2473.209179] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2473.444243] FAULT_INJECTION: forcing a failure. [ 2473.444243] name failslab, interval 1, probability 0, space 0, times 0 [ 2473.444268] CPU: 1 PID: 13227 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2473.444280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2473.444288] Call Trace: [ 2473.444317] dump_stack+0x107/0x167 [ 2473.444342] should_fail.cold+0x5/0xa [ 2473.444366] ? create_object.isra.0+0x3a/0xa30 [ 2473.444387] should_failslab+0x5/0x20 [ 2473.444408] kmem_cache_alloc+0x5b/0x310 [ 2473.444439] create_object.isra.0+0x3a/0xa30 18:42:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 68) [ 2473.444459] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2473.444488] kmem_cache_alloc+0x159/0x310 [ 2473.444517] __kernfs_new_node+0xd4/0x860 [ 2473.444544] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2473.444566] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2473.444594] ? kernfs_add_one+0x124/0x4d0 [ 2473.444623] ? kernfs_create_dir_ns+0x10b/0x160 [ 2473.444650] kernfs_new_node+0x18d/0x250 [ 2473.444683] __kernfs_create_file+0x51/0x350 [ 2473.444721] sysfs_add_file_mode_ns+0x221/0x560 [ 2473.444758] internal_create_group+0x324/0xb30 [ 2473.444792] ? sysfs_remove_group+0x170/0x170 [ 2473.444812] ? kernfs_name_hash+0xe7/0x110 [ 2473.444848] ? kernfs_find_ns+0x256/0x380 [ 2473.444883] sysfs_slab_add+0x188/0x200 [ 2473.444908] __kmem_cache_create+0x3db/0x520 [ 2473.444938] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2473.444967] p9_client_create+0xc6a/0x1230 [ 2473.444999] ? p9_client_flush+0x430/0x430 [ 2473.445026] ? trace_hardirqs_on+0x5b/0x180 [ 2473.445054] ? lockdep_init_map_type+0x2c7/0x780 [ 2473.445081] ? __raw_spin_lock_init+0x36/0x110 [ 2473.445115] v9fs_session_init+0x1dd/0x1680 [ 2473.445154] ? kmem_cache_alloc_trace+0x151/0x320 [ 2473.445177] ? v9fs_show_options+0x690/0x690 [ 2473.445216] ? trace_hardirqs_on+0x5b/0x180 [ 2473.445241] ? kasan_unpoison_shadow+0x33/0x50 [ 2473.445263] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2473.445291] v9fs_mount+0x79/0x8f0 [ 2473.445315] ? v9fs_write_inode+0x60/0x60 [ 2473.445338] legacy_get_tree+0x105/0x220 [ 2473.445366] vfs_get_tree+0x8e/0x300 [ 2473.445389] path_mount+0x1490/0x21e0 [ 2473.445420] ? strncpy_from_user+0x9e/0x470 [ 2473.445444] ? finish_automount+0xa90/0xa90 [ 2473.445470] ? getname_flags.part.0+0x1dd/0x4f0 [ 2473.445493] ? _copy_from_user+0xfb/0x1b0 [ 2473.445531] __x64_sys_mount+0x282/0x300 [ 2473.445553] ? copy_mnt_ns+0xa00/0xa00 [ 2473.445584] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2473.445610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2473.445640] do_syscall_64+0x33/0x40 [ 2473.445664] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2473.445680] RIP: 0033:0x7fbbb2ce3b19 [ 2473.445704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2473.445716] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2473.445742] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2473.445756] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2473.445770] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2473.445785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2473.445802] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2473.701145] 9pnet: Insufficient options for proto=fd [ 2473.718262] FAULT_INJECTION: forcing a failure. [ 2473.718262] name failslab, interval 1, probability 0, space 0, times 0 [ 2473.753792] CPU: 0 PID: 13246 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2473.755200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2473.756913] Call Trace: [ 2473.757457] dump_stack+0x107/0x167 [ 2473.758217] should_fail.cold+0x5/0xa [ 2473.759005] ? create_object.isra.0+0x3a/0xa30 [ 2473.759958] should_failslab+0x5/0x20 [ 2473.760751] kmem_cache_alloc+0x5b/0x310 [ 2473.761603] create_object.isra.0+0x3a/0xa30 [ 2473.762493] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2473.763527] kmem_cache_alloc+0x159/0x310 [ 2473.764403] __kernfs_new_node+0xd4/0x860 [ 2473.765249] ? lock_acquire+0x197/0x470 [ 2473.766064] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2473.767027] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2473.768115] ? kernfs_add_one+0x124/0x4d0 [ 2473.768962] ? kernfs_create_dir_ns+0x10b/0x160 [ 2473.769913] kernfs_new_node+0x18d/0x250 [ 2473.770750] __kernfs_create_file+0x51/0x350 [ 2473.771649] sysfs_add_file_mode_ns+0x221/0x560 [ 2473.772618] internal_create_group+0x324/0xb30 [ 2473.773555] ? sysfs_remove_group+0x170/0x170 [ 2473.774461] ? kernfs_name_hash+0xe7/0x110 [ 2473.775316] ? kernfs_find_ns+0x256/0x380 [ 2473.776190] sysfs_slab_add+0x188/0x200 [ 2473.776993] __kmem_cache_create+0x3db/0x520 [ 2473.777896] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2473.778924] p9_client_create+0xc6a/0x1230 [ 2473.779794] ? p9_client_flush+0x430/0x430 [ 2473.780659] ? trace_hardirqs_on+0x5b/0x180 [ 2473.781530] ? lockdep_init_map_type+0x2c7/0x780 [ 2473.782495] ? __raw_spin_lock_init+0x36/0x110 [ 2473.783430] v9fs_session_init+0x1dd/0x1680 [ 2473.784321] ? lock_release+0x680/0x680 [ 2473.785141] ? kmem_cache_alloc_trace+0x151/0x320 [ 2473.786127] ? v9fs_show_options+0x690/0x690 [ 2473.787016] ? trace_hardirqs_on+0x5b/0x180 [ 2473.787894] ? kasan_unpoison_shadow+0x33/0x50 [ 2473.788809] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2473.789840] v9fs_mount+0x79/0x8f0 [ 2473.790553] ? v9fs_write_inode+0x60/0x60 [ 2473.791379] legacy_get_tree+0x105/0x220 [ 2473.792201] vfs_get_tree+0x8e/0x300 [ 2473.792957] path_mount+0x1490/0x21e0 [ 2473.793724] ? strncpy_from_user+0x9e/0x470 [ 2473.794597] ? finish_automount+0xa90/0xa90 [ 2473.795461] ? getname_flags.part.0+0x1dd/0x4f0 [ 2473.796401] ? _copy_from_user+0xfb/0x1b0 [ 2473.797252] __x64_sys_mount+0x282/0x300 [ 2473.798078] ? copy_mnt_ns+0xa00/0xa00 [ 2473.798856] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2473.799926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2473.800963] do_syscall_64+0x33/0x40 [ 2473.801705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2473.802734] RIP: 0033:0x7fbbb2ce3b19 [ 2473.803475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2473.807121] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2473.808635] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2473.810037] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2473.811439] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2473.812840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2473.814236] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:42:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0xf, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:42:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) socket$inet(0x2, 0x80000, 0xffffffff) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:42:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5000000, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x4) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x8003a75, &(0x7f0000000080)={0x0, 0xa91f, 0x10, 0x0, 0x3ba}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x23, r6}}, 0x7ff) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x0, {0x3, r6}}, 0x5) [ 2489.553655] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 18:43:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x74, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:43:15 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:43:15 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:43:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x22, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:43:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x8, 0x80, 0x401, 0x7}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffffff14}}, './file0\x00'}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:43:15 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000f00002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:43:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 69) 18:43:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2497.202389] FAULT_INJECTION: forcing a failure. [ 2497.202389] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.204773] CPU: 0 PID: 13281 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2497.206203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.207926] Call Trace: [ 2497.208478] dump_stack+0x107/0x167 [ 2497.209235] should_fail.cold+0x5/0xa [ 2497.210025] ? __kernfs_new_node+0xd4/0x860 [ 2497.210917] should_failslab+0x5/0x20 [ 2497.211705] kmem_cache_alloc+0x5b/0x310 [ 2497.212551] __kernfs_new_node+0xd4/0x860 [ 2497.213414] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2497.214400] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2497.215402] ? wait_for_completion_io+0x270/0x270 [ 2497.216391] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2497.217484] kernfs_new_node+0x18d/0x250 [ 2497.218316] __kernfs_create_file+0x51/0x350 [ 2497.219230] sysfs_add_file_mode_ns+0x221/0x560 [ 2497.220216] internal_create_group+0x324/0xb30 [ 2497.221169] ? sysfs_remove_group+0x170/0x170 [ 2497.222083] ? kernfs_name_hash+0xe7/0x110 [ 2497.222957] ? kernfs_find_ns+0x256/0x380 [ 2497.223818] sysfs_slab_add+0x188/0x200 [ 2497.224665] __kmem_cache_create+0x3db/0x520 [ 2497.225587] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2497.226607] p9_client_create+0xc6a/0x1230 [ 2497.227493] ? p9_client_flush+0x430/0x430 [ 2497.228367] ? trace_hardirqs_on+0x5b/0x180 [ 2497.229266] ? lockdep_init_map_type+0x2c7/0x780 [ 2497.230237] ? __raw_spin_lock_init+0x36/0x110 [ 2497.231197] v9fs_session_init+0x1dd/0x1680 [ 2497.232080] ? lock_release+0x680/0x680 [ 2497.232914] ? kmem_cache_alloc_trace+0x151/0x320 [ 2497.233902] ? v9fs_show_options+0x690/0x690 [ 2497.234834] ? trace_hardirqs_on+0x5b/0x180 [ 2497.235712] ? kasan_unpoison_shadow+0x33/0x50 [ 2497.236681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2497.237731] v9fs_mount+0x79/0x8f0 [ 2497.238455] ? v9fs_write_inode+0x60/0x60 [ 2497.239310] legacy_get_tree+0x105/0x220 [ 2497.240152] vfs_get_tree+0x8e/0x300 [ 2497.240922] path_mount+0x1490/0x21e0 [ 2497.241704] ? strncpy_from_user+0x9e/0x470 [ 2497.242603] ? finish_automount+0xa90/0xa90 [ 2497.243493] ? getname_flags.part.0+0x1dd/0x4f0 [ 2497.244477] ? _copy_from_user+0xfb/0x1b0 [ 2497.245353] __x64_sys_mount+0x282/0x300 [ 2497.246192] ? copy_mnt_ns+0xa00/0xa00 [ 2497.247010] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2497.248105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.249173] do_syscall_64+0x33/0x40 [ 2497.249934] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.250989] RIP: 0033:0x7fbbb2ce3b19 [ 2497.251753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.255561] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2497.257145] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2497.258618] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2497.260100] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2497.261566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2497.263039] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:43:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) sched_getparam(r2, &(0x7f00000000c0)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000000240)=0x0, &(0x7f0000001140)) r5 = semget(0x2, 0x0, 0x8) stat(&(0x7f0000000700)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r6, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)={{0x0, r6, r4, r6, 0x0, 0x3, 0xfffc}, 0x2, 0x1}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) r8 = accept(r0, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000280)=0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="b55949b1e89656b3484798b294226739fea42d91fa73a654454251ca227d87a4a5c628e5034c69b717f4443ba3e9cc5ba3da0e2f29b2cebeb7c57faa6692859c53f5e217d4a29c63c3334942fa5b3e3010f5b091959a164eff3d1904d6908da39d01b1c10d1e42d2f9928fa6b09ca1f3fc722cd75ee295d484ee314e3ff86be47722cd4c3856925658dd41a45e67355129c9fad4", 0x94}, {&(0x7f0000000080)="ee522181f47e4a7f29b15ea5c17187e272ef97744d792d9657de144a2e25b8353d953a1649342f7f4cf82744746f95aed35f19007e5cb536", 0x38}, {&(0x7f0000000380)="0f35fba206863c494748ccf4a36a35b0efc75715a7684d467acc30d73f5abfc05b38e3a725a0b8dc4e7a14c76f1419f60c254042e238a13c60e51572ae6d814dda172e75e8b6ed34b47dbef4cc898661d5d99e75818d3f5d389e8de9e7ae2e5c77e4ec1d8a1777f43dfc67301e79d01c81d5302953e4f2c7aed5e00fb8fc02102915a375e2bdec77bc8edce83be3e8d4ee96993a72877a430fdabf9bca5820a18ab90777b0b2671a06e91e53b133c1a365a5408ef9eda1c3360d9d950b1f524b91cfb5d0fcf263640576eec4953ddbe2e255c92ca95096f5d309", 0xda}, {&(0x7f0000000480)="dc0f44916b6e38d3dc665f1278310deace64142c6420a3ba159afc30b1663811b2ce11e9bf6618ab357c51544388f132f9213bb55eb5b37aef24fad97c42975b3d3e0ad3f65299d745cda269f9ad4ea6f451ec70a97d289be56d52a3bb3d05a5c6b6e9de86be7b", 0x67}], 0x4, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r8, r0]}}], 0xc8}, 0x20004000) close(r0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) [ 2497.299373] kmem_cache_create(9p-fcall-cache-110) failed with error -12 [ 2497.300787] CPU: 1 PID: 13281 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2497.302172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 18:43:15 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2497.302179] Call Trace: [ 2497.302205] dump_stack+0x107/0x167 [ 2497.302233] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2497.302258] p9_client_create+0xc6a/0x1230 [ 2497.302286] ? p9_client_flush+0x430/0x430 [ 2497.302307] ? trace_hardirqs_on+0x5b/0x180 [ 2497.302329] ? lockdep_init_map_type+0x2c7/0x780 [ 2497.302352] ? __raw_spin_lock_init+0x36/0x110 [ 2497.302378] v9fs_session_init+0x1dd/0x1680 [ 2497.302398] ? lock_release+0x680/0x680 [ 2497.302428] ? kmem_cache_alloc_trace+0x151/0x320 [ 2497.302447] ? v9fs_show_options+0x690/0x690 [ 2497.302476] ? trace_hardirqs_on+0x5b/0x180 [ 2497.302496] ? kasan_unpoison_shadow+0x33/0x50 [ 2497.302514] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2497.302535] v9fs_mount+0x79/0x8f0 [ 2497.302555] ? v9fs_write_inode+0x60/0x60 [ 2497.302572] legacy_get_tree+0x105/0x220 [ 2497.302594] vfs_get_tree+0x8e/0x300 [ 2497.302612] path_mount+0x1490/0x21e0 [ 2497.302638] ? strncpy_from_user+0x9e/0x470 [ 2497.302657] ? finish_automount+0xa90/0xa90 [ 2497.302677] ? getname_flags.part.0+0x1dd/0x4f0 [ 2497.302697] ? _copy_from_user+0xfb/0x1b0 [ 2497.302724] __x64_sys_mount+0x282/0x300 [ 2497.302742] ? copy_mnt_ns+0xa00/0xa00 [ 2497.302766] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2497.302787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.302810] do_syscall_64+0x33/0x40 [ 2497.302830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.302842] RIP: 0033:0x7fbbb2ce3b19 [ 2497.302861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.302871] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2497.302892] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2497.302904] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2497.302916] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2497.302926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2497.302938] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2511.562370] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 18:43:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x7a, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:43:37 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000302000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:43:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:43:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100616efd79a30000000000000002", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 18:43:37 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 70) 18:43:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x23, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:43:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:43:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xfffe, 0x4, 0x8, 0x5, 0x1b, "05b9db7c1fe02fa1"}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c4, r3, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c38}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf42}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x809}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc476}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb773}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1186}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @remote, 0x283}}, {0x20, 0x2, @in6={0xa, 0x8, 0x200, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x40}, 0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2519.585605] FAULT_INJECTION: forcing a failure. [ 2519.585605] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.588549] CPU: 0 PID: 13297 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2519.590336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2519.592495] Call Trace: [ 2519.593180] dump_stack+0x107/0x167 [ 2519.594147] should_fail.cold+0x5/0xa [ 2519.595144] ? create_object.isra.0+0x3a/0xa30 [ 2519.596344] should_failslab+0x5/0x20 [ 2519.597333] kmem_cache_alloc+0x5b/0x310 [ 2519.598387] ? __lockdep_reset_lock+0x180/0x180 [ 2519.599607] create_object.isra.0+0x3a/0xa30 [ 2519.600772] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2519.602109] kmem_cache_alloc+0x159/0x310 [ 2519.603196] __kernfs_new_node+0xd4/0x860 [ 2519.604058] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2519.605344] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2519.606586] ? wait_for_completion_io+0x270/0x270 [ 2519.607846] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2519.609234] kernfs_new_node+0x18d/0x250 [ 2519.610301] __kernfs_create_file+0x51/0x350 [ 2519.611435] sysfs_add_file_mode_ns+0x221/0x560 [ 2519.612673] internal_create_group+0x324/0xb30 [ 2519.613874] ? sysfs_remove_group+0x170/0x170 [ 2519.615027] ? kernfs_name_hash+0xe7/0x110 [ 2519.615916] ? kernfs_find_ns+0x256/0x380 [ 2519.617015] sysfs_slab_add+0x188/0x200 [ 2519.618053] __kmem_cache_create+0x3db/0x520 [ 2519.619201] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2519.620508] p9_client_create+0xc6a/0x1230 [ 2519.621622] ? p9_client_flush+0x430/0x430 [ 2519.622739] ? trace_hardirqs_on+0x5b/0x180 [ 2519.623854] ? lockdep_init_map_type+0x2c7/0x780 [ 2519.625097] ? __raw_spin_lock_init+0x36/0x110 [ 2519.626072] v9fs_session_init+0x1dd/0x1680 [ 2519.627179] ? lock_release+0x680/0x680 [ 2519.628225] ? kmem_cache_alloc_trace+0x151/0x320 [ 2519.629470] ? v9fs_show_options+0x690/0x690 [ 2519.630650] ? trace_hardirqs_on+0x5b/0x180 [ 2519.630673] ? kasan_unpoison_shadow+0x33/0x50 [ 2519.630692] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2519.630715] v9fs_mount+0x79/0x8f0 [ 2519.630737] ? v9fs_write_inode+0x60/0x60 [ 2519.630755] legacy_get_tree+0x105/0x220 [ 2519.630778] vfs_get_tree+0x8e/0x300 [ 2519.630797] path_mount+0x1490/0x21e0 [ 2519.630824] ? strncpy_from_user+0x9e/0x470 [ 2519.630844] ? finish_automount+0xa90/0xa90 [ 2519.630865] ? getname_flags.part.0+0x1dd/0x4f0 [ 2519.630885] ? _copy_from_user+0xfb/0x1b0 [ 2519.630915] __x64_sys_mount+0x282/0x300 [ 2519.630934] ? copy_mnt_ns+0xa00/0xa00 [ 2519.630959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.630979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2519.631002] do_syscall_64+0x33/0x40 [ 2519.631022] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2519.631045] RIP: 0033:0x7fbbb2ce3b19 [ 2519.651477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2519.656273] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2519.658260] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2519.660130] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2519.661994] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2519.663843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2519.665695] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2519.697226] loop7: detected capacity change from 0 to 135266304 18:43:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x8000, 0x10) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x9, 0x7, &(0x7f0000001780)=[{&(0x7f0000000300)="a52b3d908a5e16808bfaf8691afb9b921446d5bca6e89933826125b057c3b40099c12a8ff0b745c8bb2d90e2be100b74a3ce8a4da5dce65a28f25c307156e6ffa24483d3fea0176968fbecf8beafb3852a04c670b63ad0dbf5969c19dfed6f40d0f480e48469e4139050f5f3805d7cc716e6cc9d3a11e275811602245fa79c57548827be3dde60ae151fd79919da035f8726bb50b488f0e27b596286f25d26ebda91297ea15f73aedd10ec2b4f40396c150398a92f4db5d361243901692d486a5fa57639f57b1617679889efe580e498799389d550cef459b21cd870b35dea7f62dbc5c59d900fc4", 0xe8, 0x8000}, {&(0x7f0000000400)="671d4f93452919e88e9cca35f27caecdfa6ff63ef1be18e76505676d4a810844e2cb7cbb7849f361317a2c912e06118665140d1336cf4d11fec44488b4a42ecaab0165655337b6ff8aa39a5a5b768fefda7eb6e20f4e6f8a56de42b2149481cac0e3788ab02874ecdedd49d7316a0bf2b8a753d2f5c5c1f08de0c07e021f39e23324401ac664c60d0465feb81381cf69a84cf3c0835314cb301d678340331ca4b04234ca358d6eb2e28ebe73d21f5e71ffee8ebb347a91a2f95fef0aaf9a0c895353", 0xc2, 0x1}, {&(0x7f0000000500)="e7686d929f1cf3eaa44a9ad89531a448f9336a73f5b0b5cc98e1178ab024ca74cacc8f73e6fa410df8120c51aee3965ae0b7cd5a212590ccc7dd776a9fb7a467e64de1971c1133351dda5473f066bf71fdd3db83a9f6a09784dcc76e75b6ba9787d73498b3144dae94a8304e7033e90e75cb100ed7704393011823f85519cc936af891b19f146cabb86c1b6866efaca49d9510cddce39659cc0d03e0b45138f4b3724f8dfd3aac08516ed7a130b36fe447f74573c47f51c8744d3c6c294823163e38833202b9fb0cc2", 0xc9, 0xb2}, {&(0x7f0000000280)="0fc488249ef4f5f2cfa6de7c0627608ebd6940d561278340d4e29ef56a9edb4d6e2658", 0x23, 0x8}, {&(0x7f0000000600)="0f6f283e123fdd79ef6a010938d7ce1091d371bdbc68c5e959b602c088df5b7d4e1747a76c59da06cb4a39dc8bd6c07739c643a10de3a693d26e21fd5dac9afc33293cf9e1d214f445fbb7b94a693deb197dc89193368d1b043114ccdf4c270947528bf973660024ee089c16d17957dd85dd4f44866d5719302ca7d683e47625a82250c17f2828fa8e3a4b08", 0x8c, 0x1f}, {&(0x7f00000006c0)="1160e6b1627b89fa4cb145814f7d496fd2888c7ca9de064f0bfec1f89cb73e5c20bdd196411c78840de6209492e4e911d9254b844ae466d588830bb93a46e75bc7ec2861cd64fd7228682f168fab9837417f865478ff1cabd8021e1668d2e56a12a352eb0b9644a00ef1fd578ad347e7b27fd9314b030a8b429b8e4e00fd09fe9041fcb3d29e254a529d33d79ed8d7bc", 0x90, 0x100000001}, {&(0x7f0000000780)="62af911947650ef09a0d226ffa7b10560b4de5eba8d26080b6c6f2436e0f8c19e0158ed5239be8eb82af00cf4f0b1f77e7810ce146aff900c82d37f71cb9167925bd3bec9a852cdddaf6d4a3d534f8e804080250511a1016e03e13723aa0e98f3525083e7c30784c834a201e0613e6d00a49eb625ff5c972a97cf7e49898634fbfa1ac41c17a1c4a5631831c4162e217797478b3333e1591b870e6e3efb121b55b56547da05ab522e8fdbbc8dee67ff981d92586cdb1dfec788c3ccd791d698e91cf1ec233482e480e5c6aead1cb2aaeb9b76f4f5c8658baa0a08d9813e8b277af21b0c76f1b3e2c26435983137858c7afc4d671173b4182c344b5aedf613a42b22d53cc3cbefbcc3a046b57b8544283ef402b9741a8f3cc5adae384967ebce539aa434f8a831fcfa70e10557cdeb455a5f085b71435dbc565711a01d987e2ed8879547e9f0318bfea22e33ab7a59971f673d4829407de07e3a5400d7f600ab85f3dcf46f25efdb6a9b2ad3470974c848c684f45385d038d40c945d8d8517c23bc23c6b3f3f32b568dadae0cb177e58b5907f3383a34e11d6e443a1f3312db3af5ff51c8f7baab6daae99d8dba739598db0378a43f1f83de1d763707d03786282d3fd134015dc340d229eeb85774691ad4121e9b0ca31bb6d58b0548f121d62870b253268db9a7158b36e2aa1197f5989844b495b081f46478aa8e3eeae901dcd368fe1d5972032eaa24111aab528aa371c9bcff6473007b528e7c6a74632d44a205a9fe7dabbb961f45e67ac9378cade29035179672369ea8d95a1460072150e4f4f182c113c61dc21844b82724da80205f182d555b789405a3e6428a6bedfc20888d1be7a2f7781506143b8990b716064429771852deb47c9cf61b44fcb02d991b3e72e02049853c419894e3f7c864a5c8040c62ecf3f484c5a4cbc5c7f00a4894f38ebd6711bc1343e70f542bfae042f84fa2e207d18cabbe5cd72ea402cabee442f5d5b76c06283e953e1ab608907218a1312acad06cbdca0e8650bbc328bc8053df1628ee71e859a746aad339509de8658765a34a6085711ad15b334d50efecc154f066a3dc6133736d256ae382b5f8eecccf395f7bbae7f28b3714e01b728f8cf04793bc0fd7bc794e369e11e6fc11540684d5655b37acdef9627bae3ccf9358a432d59f5ce2025c6e8cb9cfd014ba6508be0396896178c6231962668dad742b54ec5127b29871fa9e96cceedc3d4c20cec3db6f5153f98aabb94575f0c04994b3fb372185c38df172faf952561e1fd352a8bce6aef75642711cc6e550def946a3107babde1768ff5c705f39e77e1c1787969c6ef562535166705fe45a1d113e4101e0be7b3e59f3cd6f7b288f320d297a52d945adcf6e176d8f97dac4b438cb942456215d1a6bd6bffd36461c30b0b98e13f8465cb52279db59860d2e4feeb05d421010f54a23ffd545f0cb2854679100747344c053983a43a4ab9310c2872df02a927932a4a89f49ffa02fb42e902b98946349929adc046a6f0dc781995038e2bf2ceaf1921957f090581446808329092627391707714047578e95a23913d8bf7bc13140ae73927275a405d8566a7390c8eccc794115dc6e01c41190e2e64a9d7a7f728f97397354e246f35881f5602b2532d6ca5f1da2527a1b49364b10a194666ed9a9c63b0f6995f74606b0f6279cff890fb181fdaa89c75e5b5a6f0c38ff2a8e1484fb778fdaf62775ea9e46895694e0943b17357537c920a9c2aa717f0a9b9c5e82ee6802fa6558fb7f8db9452e81184aa623bf379c87ee418eb0243e76f625b5599f9d32cd07536750269f919365139cbcb3a7fb2d7948ba890d965c66b8e1796dffe8d655faad3c052863b857bbfaff36fcb32ff004c2c9eb35827042c182d532eb4223af3ea95d646afed79d850a8d7063acebb223dea9033242d8196fc9049a4b7ade65b13a104b9b28dfa7f8db3cec27a0feca8756bf7768e25bbb2384fba336ba63120c13ab0da236eccf72e0daa93b7632d6cf9183c2ecd99a9300c48fb8ccbb8b2e0b49ec5ef1b1196098fcf83b228d5f29ccfc85f37adc4a13ed273ca8237b9c4156b63b98a68fdbfcda9ae0687d862348206c17353433fa858eb66657c809a86f311c77c7e17ec428c6824a56d831da1fc14aa9da79d35c55a92df6610e231ba8fbc0d5c0abc8abd513651a17adf104a32cebad846165e19273238edb15a7746aa9a2d7ed973610af3ffd8e49db165666ecd572f03df3f8dcaddd5819a2d3732d264adef99bee10843b07de8b55641d7c364bd8ad521b5c1aad9500d794638230a2ef06fd6bc4434c8cb38a583385be8210444ad3d2c8180939720ee195c7eafd6ab70bed08937bef1e6d1796803a24d31fd395445dda19acfb5dd16cc39267c32ee4d7044515e2c0bb3adc96290d03e2bca0ec2571c9709522ca3da7aeb400d5cdd1d4db5eed6d12ffb9a17dbdffe99e0567461d7ef12c567b4d2978a2f0da068f13c4982b955e1fb76481c5756b5b228b7a52c2d783132a97a02b1092e89b701707505ad0a0705cdfb8df775fb8ace206561b45cce3c7d66328e9168e3cccfbcaa2d54ccbebbb7573085fa5118ade3e8a5264825e1741ab4b9e807db1de11bbbfe855ffa983217af5f7837bd8d96ffa1b68d98f1dda6507aaf0607e28883224d09d9cff4ce3aec12d4a51b47e8f90fb785d791494c82afb2d0620894009dab8304c4973368a1fd40439a80a95c4b7eec033a2407079d63c71f3a002d8a4ea627c7d37ff4335779eb689cd3519ae458aa1d7e80a461d2e518ac0d427110872b51dcdeb874d517168705fb66548ad7f872b8d483cbeb9a89197fb5cd7372012f5b1b075e9546bc09f3656f665eed4c6aa9713d6b072c5285ee4471d4d81009a666c77d94473f0e3ab2790db4d9ef211676c9cfbcb371ab45d831b6002f2fbf9039841eec2d5a8dfa2714390669db285ec67e2d80a80c570492cd95f28afbafa105a01194600223f082d96f558af8bfdd20668c2cfd306d8cba8ec59929ef4826bbbf1288457c9b0786cc5070e702c2b5e107e21fe642e7622e5bc26675bf3f93a9e504b104ba4776af9bc4ffca09770c78ea23d87662f67ccb15c524bdd08f1de399e2c3e2f81fd1144507ef566f62020ae552a8a1b9f4f2533b76061989bdfe87aa8d453ce896abb05151808adcf8a83f968a1be50665aaada7e414b2c32aae93e367b51d03aa9c7feae92dd125cf431c946f5d2c36d17bcfc08c3baf85698f58f6e171bc65486e499c0dd475b84e35707599d4a0de3850675643789029ec7df38417859b8a42db31724981e02dc99ff6adf5f6db302fe5bef9bbb325778b815002c7b039fdee528aead9ed4930adc858aadc4f1c9134dd6a859a787414afb14d957c3926f4362b8838763b94a4bd688c1d637f5671ea013a155db964a3c28f601e6cbede91fa4e92a456237f23a31848c02d2aa278c50c309793a01dab1532fafe3a2e60a88aa5dc435d82b254d030d46122e4a199588a701a4cfa77d991bf1bd4a54766eca617d6f856bdff129975746f3bd681bf98598c2269f59128888bbd043dbd8486f3a5fe38389d60fe4206a1ce177ebcaa7761abb9eb06b81fcbe71ae004638073b0cce45ca3ddc683de13acc77795d39f5a510a46ee8ef4fcd390025f3e0ea9b7f4cf6652bca7f378126f36c817e36136135c4af74fcd03f14d24bb0e0c9b4d873a235b1e600aa071e224f28d6ddedc9c83dca6fccfb1fd52d7149fc64f137e2adbe746783a7457952b268b1d422faad24a0e6d3e48a56b4444f6fcab0980c9d47c1115731bc7948d02890d8d9f04bb35a69d0c28a6d11f1ec4a8b86a649d2cc67947e59fed2ea8cd783599871b275ece35452491ec7771fa7b8befe6e968513c90ef46d09b33fd3a9f82b70df48b9a5e4ec473995edc6d2ea6335a79103080d93647f5512223ff0824f175e0dca4207b03cecbb36ce67df01c25a094920a76cc8b8ba6b39941761a21d6cc6d98b62d857603f85a62cd57847265be3a1cb47e7a4b1ab25bd7695bfda513369c6b13151f6292774a676f7b2e16b652ae7d34e70bc29347241510e2c33469b92a5b28c21ef309f3d74a0f801a013b2be3ff2a4424facd68b4d1456a4b88478a299aeff1b68b334d99e0da9e44132eba9292eda9fdad7b70b6c028d324e43b94f2a1e4b0e9ca2b0ac136413f100e528bc54dd8f2a9883187d615e001bce71d5394a9812e51a3d3cd70085143488ec5db05c0422b84f9bd7daacd712c2f6307a943564fea4b3ddaf4948a0fe7cfc9ff9113bcd32d849ce178c9bcddf00036fef38793b2b945e576df99013fcf043b2fffa00f3d4cab10d01229461f3b4e20e086c37933a3cf470ba5f3be012b07d93dab71b4ff92c3ad4d0c5f0851dfe109f6c4ea00ae7416d3c73d1c416881e47962177449efaa08b550daafe7d86dbd34c8846a1d39df5e7d7e4d323acd20beaa5f59cd9ddbac82dbd76697b510936e2dadf29379d2c99e8605144733d6423deb9a96b83844a7e675f185fa31e442b0a349e6c2760413cd49f872b073c41a20599f39a18def6bfb0d15496adbe6c3214500dff9a42a6576763f3e47881342e8d186e392b827ac0a48ea4c07e46ff67e7f09d31d256b14659356ebc65038c561166fa2b2d42024565c535e006c2e8cea48c78d30287808c421991a1faacbfcb4b8ff596814c089229dcb16bcb7aa0d4739d4b70ad76e0b71e04561fea0b819a6da00c7702bda7034ae9ddc4137bb4bba8a904ba00d4f4dd19810d65b3b75808624547fd52a8177ba5ec9285f403070b6d5ef42f4186a5aadd78114478655c889d2d56d167493f65aea2431d673b0e7428576bce273bb611286d431c9650c9505c3dbe81f57f84d04a93850eba09fc3e7512226f1db4d540a88ed4bfd69ad126966f5e863f76d1fe650811c97d166875e9a02c994ca500e6ef4f0fc837a6bf0c45c60e4df13e84f6033eee41f8cf25ecb205ba08e72b9de373d86843cd282a4099d299c760adf58c1e1141dabff236db9acbb5244979509ee8157148451ab3e9b4cd48ccb091b119105a97f200fac88e3d20c93f2e943222d066b3b2f1dfae28c0d04ea775cf2e2f53f6de03f7fcce77cae83542db00615ae1f933266411f7b05aa2bb3f8732ad3eac300ea83392b85c77517ec1397e3d75d212e52298f0f44bbd6c59f523165157b7de9ba5a66c1a3e96a6998e65a18534d568027efe79ec8c08020f871e2067f0e6f83333a2b44fd9f0c88c5e8bdcc0f10dbd654a25432743d59789670e17556196b639d23c5d75a4731fb60059dd6bb8d54adb35764f21531ade3c0577076d2ea465b98a1a40dca1e725f046ea1dd76c565483627e5cf304a65c713e8c32a905428c380c6212543575373ec127a2eaca2ba53d481701953b758e65ce02403801703cac1f07b14cc83ac2cde30f56e8197c043f1073342955a6ab59f4c1a954d6b1752632f8f14796195e0221fe26168865c1b344068453dfddc5136384dd46c62016da39e84ddf9c3cd275bdc707bff0573dd10855f25e03ec6ce7ff0d41106752847eb19c39c567e908dd066b03ce705c0dfe85b0270787dfa31d9c4b0ca5cf1db32d15f9b33595350cbd0f5c13fe8071f35ee6ebfabcb11f38c6de07a35765dd9f435a4e2c4e95a2c9c6cbedb3c133daa7fab23798e513d1c9f01e4a98431a5b1868437084c449ab86ad64402d19969ce78250dae49139dea5a6e5c56eee2200dc633e6b7a9b6816c9cc8ff36272", 0x1000, 0x3}], 0x104020, &(0x7f0000001840)={[{@dots}, {@dots}, {@fat=@errors_remount}, {@dots}, {@nodots}, {@fat=@usefree}, {@dots}, {@dots}], [{@subj_user={'subj_user', 0x3d, '9p\x00'}}]}) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x8869, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x5}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x8}}, {@mmap}, {@aname={'aname', 0x3d, ','}}]}}) [ 2519.711994] loop7: detected capacity change from 0 to 135266304 18:43:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'ip_vti0\x00'}) futimesat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c3d00df9921dc5b61c7af1ab99c72373d5fedab93ea5ddcd57c2fdc915f1f6ced651f6a8503000000000000002fd2031e819b23b5ac16934064e1cd0536", @ANYRESHEX=r3, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) setresuid(r4, r5, r1) 18:43:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000340)={0x0, 0x4}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x8001, 0xffff, 0x9, 0x7fffffff, 0x1a, "18e9d3b6ed570d75c36766d979c96dd23b20aa"}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:43:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 71) [ 2519.870513] 9pnet: Insufficient options for proto=fd 18:43:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x6, &(0x7f0000000480)=[{&(0x7f0000000080)="f5dc5c2c92fe7a", 0x7, 0x6}, {&(0x7f0000000140)="fc2676287771dcb03e79c88da4", 0xd, 0x258}, {&(0x7f0000000180)="893bef1cf1b7cc7d66fb47b78a0c81926ec6373270129759baffcb996658270a49a36c72f148f6523b852c91fe718a62ed93f36f33a69df51b54302b10f41cfdad48cabc5537286cafb4ffb1257edc98d21a5b335ea565e8ca4b1b101a6945d7a9672e4d4b25be6ef67333309a5e0c0a0ed4b4083eb1ab42b4a4629edcee53265704cb101ebf4a53bee482201a1345342e93552cbf5644ac10b0216faec2cb1c092e3d4f7e9f070e380ea27dfce160d38a0da1d75fec645e", 0xb8}, {&(0x7f0000000380)="6c8404fbd0cc520b16ca7585bf034342f8b1e86ba28fb28d061d5fb641e94e7e3548399c7709b6cd3c6b1885d70a1921b357e87d18df3045757a73a513e31c858ba8e0980a5b558cf57a57e3d41383d2704354b4408ad9ac6edf1257592edc909748ee8a", 0x64, 0x5}, {&(0x7f0000000400)="0d0eb52e6a49065b7abe901672c893933ee713f6779a2cbb0951ab544f910e5ccdfebdb31e0dfb0c2dc6dee9f04108257b33daf9af520f84ba84abb383cd4de6903fbd1357af70774256fbf5bb7df2026e24fbecd4742309644aa9552406d92c36deb94669c6fb14e1543cef168e5f14592333937e", 0x75, 0x101}, {&(0x7f0000000280)="2cbf3c5146dbec", 0x7, 0x18}], 0x40, &(0x7f0000000540)={[{@auto_da_alloc}, {@barrier_val}], [{@uid_lt={'uid<', 0xee00}}, {@subj_role={'subj_role', 0x3d, 'rfdno'}}, {@uid_lt}, {@euid_gt={'euid>', 0xee00}}]}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000300)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:43:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x45, 0x0, 0x0, 0x0) [ 2519.910237] FAULT_INJECTION: forcing a failure. [ 2519.910237] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.912818] CPU: 1 PID: 13337 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2519.914277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2519.916001] Call Trace: [ 2519.916588] dump_stack+0x107/0x167 [ 2519.916613] should_fail.cold+0x5/0xa [ 2519.916635] ? __kernfs_new_node+0xd4/0x860 [ 2519.916654] should_failslab+0x5/0x20 [ 2519.916674] kmem_cache_alloc+0x5b/0x310 [ 2519.916700] __kernfs_new_node+0xd4/0x860 [ 2519.916725] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2519.916753] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2519.916777] ? wait_for_completion_io+0x270/0x270 [ 2519.916799] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2519.916826] kernfs_new_node+0x18d/0x250 [ 2519.916854] __kernfs_create_file+0x51/0x350 [ 2519.916880] sysfs_add_file_mode_ns+0x221/0x560 [ 2519.916914] internal_create_group+0x324/0xb30 [ 2519.916945] ? sysfs_remove_group+0x170/0x170 [ 2519.916960] ? kernfs_name_hash+0xe7/0x110 [ 2519.916982] ? kernfs_find_ns+0x256/0x380 [ 2519.917014] sysfs_slab_add+0x188/0x200 [ 2519.917036] __kmem_cache_create+0x3db/0x520 [ 2519.917064] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2519.917090] p9_client_create+0xc6a/0x1230 [ 2519.917122] ? p9_client_flush+0x430/0x430 [ 2519.917145] ? trace_hardirqs_on+0x5b/0x180 [ 2519.917170] ? lockdep_init_map_type+0x2c7/0x780 [ 2519.917194] ? __raw_spin_lock_init+0x36/0x110 [ 2519.917224] v9fs_session_init+0x1dd/0x1680 [ 2519.917245] ? lock_release+0x680/0x680 [ 2519.917277] ? kmem_cache_alloc_trace+0x151/0x320 [ 2519.917298] ? v9fs_show_options+0x690/0x690 [ 2519.917331] ? trace_hardirqs_on+0x5b/0x180 [ 2519.917353] ? kasan_unpoison_shadow+0x33/0x50 [ 2519.917372] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2519.917396] v9fs_mount+0x79/0x8f0 [ 2519.917417] ? v9fs_write_inode+0x60/0x60 [ 2519.917435] legacy_get_tree+0x105/0x220 [ 2519.917459] vfs_get_tree+0x8e/0x300 [ 2519.917478] path_mount+0x1490/0x21e0 [ 2519.917507] ? strncpy_from_user+0x9e/0x470 [ 2519.917527] ? finish_automount+0xa90/0xa90 [ 2519.917549] ? getname_flags.part.0+0x1dd/0x4f0 [ 2519.917569] ? _copy_from_user+0xfb/0x1b0 [ 2519.917601] __x64_sys_mount+0x282/0x300 [ 2519.917620] ? copy_mnt_ns+0xa00/0xa00 [ 2519.917646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.917666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2519.917692] do_syscall_64+0x33/0x40 [ 2519.917712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2519.917725] RIP: 0033:0x7fbbb2ce3b19 [ 2519.917744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2519.917755] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2519.917777] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2519.917788] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2519.917799] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2519.917810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2519.917822] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2519.941962] kmem_cache_create(9p-fcall-cache-112) failed with error -12 [ 2519.997802] CPU: 1 PID: 13337 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2519.997813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2519.997820] Call Trace: [ 2519.997847] dump_stack+0x107/0x167 [ 2520.002315] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2520.003427] p9_client_create+0xc6a/0x1230 [ 2520.004331] ? p9_client_flush+0x430/0x430 [ 2520.005219] ? trace_hardirqs_on+0x5b/0x180 [ 2520.006099] ? lockdep_init_map_type+0x2c7/0x780 [ 2520.007102] ? __raw_spin_lock_init+0x36/0x110 [ 2520.008079] v9fs_session_init+0x1dd/0x1680 [ 2520.009001] ? lock_release+0x680/0x680 [ 2520.009862] ? kmem_cache_alloc_trace+0x151/0x320 [ 2520.010879] ? v9fs_show_options+0x690/0x690 [ 2520.011827] ? trace_hardirqs_on+0x5b/0x180 [ 2520.012736] ? kasan_unpoison_shadow+0x33/0x50 [ 2520.013694] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2520.014770] v9fs_mount+0x79/0x8f0 [ 2520.015532] ? v9fs_write_inode+0x60/0x60 [ 2520.016417] legacy_get_tree+0x105/0x220 [ 2520.017282] vfs_get_tree+0x8e/0x300 [ 2520.018077] path_mount+0x1490/0x21e0 [ 2520.018887] ? strncpy_from_user+0x9e/0x470 [ 2520.019822] ? finish_automount+0xa90/0xa90 [ 2520.020742] ? getname_flags.part.0+0x1dd/0x4f0 [ 2520.021730] ? _copy_from_user+0xfb/0x1b0 [ 2520.022627] __x64_sys_mount+0x282/0x300 [ 2520.023483] ? copy_mnt_ns+0xa00/0xa00 [ 2520.024335] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2520.025438] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2520.026523] do_syscall_64+0x33/0x40 [ 2520.027312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2520.028393] RIP: 0033:0x7fbbb2ce3b19 [ 2520.029178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2520.033052] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2520.034664] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2520.036167] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2520.037663] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2520.039149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2520.040652] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:43:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) read(r2, &(0x7f0000000000)=""/231, 0xe7) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2520.076454] loop7: detected capacity change from 0 to 1024 [ 2520.096637] EXT4-fs (loop7): unable to read superblock [ 2536.043236] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 18:44:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 72) 18:44:04 executing program 5: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000080)={0x0, 0x0, 0x4}) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000005c0), 0x0, &(0x7f0000000440)=ANY=[@ANYRES32]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xd7) close(r1) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x202880, 0x44) openat(r0, &(0x7f0000000040)='./file0\x00', 0x244801, 0x44) 18:44:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:04 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000800402000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:44:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) fcntl$setpipe(r2, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:44:04 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x27, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:44:04 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0xd1, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2546.123705] FAULT_INJECTION: forcing a failure. [ 2546.123705] name failslab, interval 1, probability 0, space 0, times 0 [ 2546.126504] CPU: 0 PID: 13356 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2546.128117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2546.130055] Call Trace: [ 2546.130676] dump_stack+0x107/0x167 [ 2546.131530] should_fail.cold+0x5/0xa [ 2546.132432] ? create_object.isra.0+0x3a/0xa30 [ 2546.133499] should_failslab+0x5/0x20 [ 2546.134388] kmem_cache_alloc+0x5b/0x310 [ 2546.135340] ? __lockdep_reset_lock+0x180/0x180 [ 2546.136440] create_object.isra.0+0x3a/0xa30 [ 2546.137465] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2546.138655] kmem_cache_alloc+0x159/0x310 [ 2546.139634] __kernfs_new_node+0xd4/0x860 [ 2546.140612] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2546.141724] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2546.142854] ? wait_for_completion_io+0x270/0x270 [ 2546.143986] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2546.144017] kernfs_new_node+0x18d/0x250 [ 2546.144049] __kernfs_create_file+0x51/0x350 [ 2546.144077] sysfs_add_file_mode_ns+0x221/0x560 [ 2546.144114] internal_create_group+0x324/0xb30 [ 2546.144148] ? sysfs_remove_group+0x170/0x170 [ 2546.144164] ? kernfs_name_hash+0xe7/0x110 [ 2546.144188] ? kernfs_find_ns+0x256/0x380 [ 2546.144223] sysfs_slab_add+0x188/0x200 [ 2546.144247] __kmem_cache_create+0x3db/0x520 [ 2546.144277] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2546.144306] p9_client_create+0xc6a/0x1230 [ 2546.144340] ? p9_client_flush+0x430/0x430 [ 2546.144364] ? trace_hardirqs_on+0x5b/0x180 [ 2546.144388] ? lockdep_init_map_type+0x2c7/0x780 [ 2546.144425] ? __raw_spin_lock_init+0x36/0x110 [ 2546.144457] v9fs_session_init+0x1dd/0x1680 [ 2546.144480] ? lock_release+0x680/0x680 [ 2546.144515] ? kmem_cache_alloc_trace+0x151/0x320 [ 2546.144536] ? v9fs_show_options+0x690/0x690 [ 2546.144572] ? trace_hardirqs_on+0x5b/0x180 [ 2546.144596] ? kasan_unpoison_shadow+0x33/0x50 [ 2546.144616] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2546.144642] v9fs_mount+0x79/0x8f0 [ 2546.144665] ? v9fs_write_inode+0x60/0x60 [ 2546.144685] legacy_get_tree+0x105/0x220 [ 2546.144710] vfs_get_tree+0x8e/0x300 [ 2546.144731] path_mount+0x1490/0x21e0 [ 2546.144761] ? strncpy_from_user+0x9e/0x470 [ 2546.144783] ? finish_automount+0xa90/0xa90 [ 2546.144806] ? getname_flags.part.0+0x1dd/0x4f0 [ 2546.144827] ? _copy_from_user+0xfb/0x1b0 [ 2546.144862] __x64_sys_mount+0x282/0x300 [ 2546.144882] ? copy_mnt_ns+0xa00/0xa00 [ 2546.144910] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2546.144933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2546.144960] do_syscall_64+0x33/0x40 [ 2546.144982] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2546.145004] RIP: 0033:0x7fbbb2ce3b19 [ 2546.183696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2546.183709] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2546.183733] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2546.183746] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2546.183769] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2546.194771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2546.196442] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:44:04 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)) 18:44:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0xaf0, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xac0, 0x3, 0x0, 0x1, [{0x438, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "665e84d328d8a68396"}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x98, 0x1, "aa0be2d0f4d40da2e81ad8a4c4e0b2d9273525032e24fccd9b7a4a11b9db8a4106a7630d207c7c116724ec3fd8599d280814faf0e23f233c8caf217ca664ebbe92a07850623bd6cf485b5c10615540e3888d6a123b230dbf40070ba2d3a87a2959507b88f064e2ba805ed1b28733dcfae364555ac9100e06e4170c58911fc456805fa25496a3fcb9b61387616d9a131791ae3713"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x160, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x12, 0x1, "96f0d6cb49f97a5b5271a41cf2e2"}, @NFTA_DATA_VALUE={0x9d, 0x1, "71d8d7df3d707c681fd47e8ad5216fcea5ab68ac6244a78fbbc0e3e36e4c3aeaa9f8e8dc9793a13f50c7046b6b94e362ef72185e7c04c02d3fc54457c0b16cf2baf037a9f78a03144626011cd4617effe5a51daa49086d3fbb27d8beff4f9a90d7739d182a0873e423a142391a998a6472042a12667d979c28e325785fa5c1490a96a23a0c68c55ae9ac741b040745b8c2b279d88e94e1a39a"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2000}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x41c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x2f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "8de36112040eadab08ddf7cf4bb0d9874e91b266cd412d7f0a6169a92a9e5000ddf6af7e0edaa8348c3d6b0169b19552a2eb445ac00a8ec1186560249bbdb2adb6a6210c0e78838cde04f33146b9a6e8b8859d9d195f7a81a511664b5f1f2c55984f30217f288367753e754415fff645627dc951222332deb84da0b85614"}, @NFTA_DATA_VALUE={0x6b, 0x1, "c12a17f60064ae3238756d5bf7e6f9ad6466bdcf9bc23d649ac4c25614392f3a9cb9e16f944dca84661d9b463a5b32d4b7b5e29f2df6cb2aa986aaa7465187d94288698b5e44cff9629875b19147b9e94fc86530b643c87909192839ec7d1ee572583ca4481d13"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x92, 0x1, "c520330eb6757aaae1e4626db5980f96a58d3fc969070e08a75c18392faba4947ac821140da41bd0933bc85ed81e9a10a6d8395c4b66c2002925061c01991abad5a014d90e805a556ddb012da3f6d146cda7f594b8e690d2f3f967c30088a1201d83368bd584c414e3d8bce160090d33783514c4e4076d0a5397f925ddfba1533be65b5137eb5d054f66927bc30b"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x3e, 0x1, "4234c4afd12eac9143537f9e122b1c139d50943442a79f43eaad206ff3bb38668544f4c49c474a9774195a46d750c7541e8018d9f8fa5c8e2a1e"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9c5a}]}, {0x258, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xac, 0x1, "bbcd9a97cae4d759507e3037e39d884f2c031c5672d08ffe60451eb5e6808f3d698af6e882e88f5aa4d54dd6280b6540b37b7b66ffc94a84bd76183eba4a525ca8f2a237b74dca3d4be110663a1ea586391a4f48903158c37dc5546704625ec949e1df93f44ef87368f87a0e6334756d25ee99b2ee977bb90979365bda7e4ff0e979f886bd8fdbe0712def26e348c7da97ab442c7c547fd941391c6b1099ebe6c045924a19b46baf"}, @NFTA_DATA_VALUE={0x13, 0x1, "a99593467f437663609129af2991c3"}]}, @NFTA_SET_ELEM_KEY_END={0x17c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x44, 0x1, "9ea8383069835e8adc9a4219e9401793f0ee37641518b77cd6756c20c2ba6a006fe44cc6f1530fd7e0128764b6042db3c624c95365aab75794735d53b24521f0"}, @NFTA_DATA_VALUE={0xe6, 0x1, "ade8785615df3fdb8b125f6d8d5d2d944dc6d79979f1924fa4ada2f238e7823f2f21973a804cbdd7f333f2df588b2b0fb39cebc598fcd6473c6c4c2e2d4cfaeab88548cb468dc48f7830232927437d956e8e6bec44c21a64b270031d0365f83c9a4bbd06e3229a68ef60153f4fb39914f20efe9c14faa22e0a0d0d061967605db7ca6a4b0bc86c25db0affbaeebf64d6ea87fd55a652cdaf9691733edb5c08ea4d73cf822066603ecad5ed1e87601180011c6b61f7481c1eb0b4eabb03a2ade25b849d6e1935783090e33bfb37624f7a244105f7689a140f9e53f62fdf3ce4d41b56"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0xaf0}, 0x1, 0x0, 0x0, 0x418d0}, 0x804) 18:44:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') close_range(r0, r2, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0xd7) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x0) dup2(r4, r5) sendmsg$nl_generic(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x1684, 0x20, 0x8, 0x70bd2c, 0x25dfdbff, {0x14}, [@nested={0x242, 0xf, 0x0, 0x1, [@generic="266a4883a4443cdb399f591cfb50a7238756593d864699705789465cd83b85fa44802a373f313298986b187486874f1d6bcfca3870096ec238cf57b86a547cd6392e6fcc215bd3eb070ca9b7a67b6204f26a8adc0ae300b540f14bd9346f1e1871afa10fd0cb20857208783391cd3e7fcb0267768a3e0ff758007d37d1d7e12ee40d64d73f7aa2e71b65d575006fd8fe0be75b18f7e8d2655cb710aa345da4220a5624c0", @typed={0x4, 0x1b}, @generic="dfbadbe174097b4a971f159cd8e226cf0b609d706f29b15c4c18bd7d73297f2be88dadbd2df7a827542779c464f1a02e8ba1aa71954853e29f67c97e8cd8ad638e58b5dce95a9d24c511d569539cafe89f19070fb8cb145694777ec6e26d7dfe39adf49f5ca7a84ea6613cc887a4e8896c91d602aaeadec8c2af585d30c8fe82a0682764a4ed500d6def6e7602bd1a369f8ed285e12ff256", @generic="6df9ddfb51697c93518a9f15312a64a6e0a7227cfa96d615161390c322f2cbf28687b05359ab8775230b2417e634e7e548a25d9ffe577c2a1bdac720fe7133bce94cc496da71a27d259a5a7acf3c8c5439fd7ad9f654b90c6de13a578e473f81db7d957c1845299c05b213ded35b9dee9902fe69b6162923426e76bf8351e362f64dbea3d6d5c9da7ceb08a24e3488e7032c0c6f18dc88fcd39582c4ca6789cb4a66ff217416a89cbe6241d034eefa81124a45d7d2836658bb1f587ae0a854ecd6532a26262597996a5cc22dfe0d9d6313a64330f5388d900aebeda7a5c2fcb549fbf0bfbc9dc7f93e613f274208", @typed={0x8, 0x4b, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="a9d4179baa8678e3f8ae266b8b67eaed7917790640f2ae519b0ed5434d2a0b23b81f49be72200dfc73288fe7b06c57efb665", @generic="0fe77e97b0004f6e3e5518bc38cba3832949f9879e4ce45a1997383ab2bbca422eed7b8cfaac0730560f4cfc0307859078ba694332dfe13ad2282da8f9576a334efafb249c5acde82922dc9835d909ab4bca4955e9", @generic="4d7fd0d59168262887bc5a78b78c1bee289a49e11a0fc18e1e7b56f9c5c4a67c616826d52ddeb68c5f48ccc49ba31200bdf1c4b979fa3286c20709940e1f7a17ca1ad73c256f1982e64bbe029414fccc3cc01a3a9c1e4b5e47398e87b522c7a9d10ebbb160ca7a55a00251c169fa9641d6a54c584e24c147b3255b1bc4ddead31db0cea027d351489e25d48aa1fccdcdc830729162a0e59717f5593b7ad697f2a5883becb6a2e9269a", @typed={0x7, 0x72, 0x0, 0x0, @str='^#\x00'}, @nested={0x178, 0x70, 0x0, 0x1, [@generic="d0764801f93e5ab6ac51a05744010c4f1d9fd223dd97fc4f5db30d059cc58e5a1814c91f1acb8b47f8aee65d69d4c2459bcc00a5126fa02f0f4bac287064a3cfb95017fe867c4aaf88bddf35f49e95cf46d35a700318de5e3254ea2b232e6ad89820436bfb6a243ee4f4dfb0a1b743841ff4f562b43e835c50d0fb613ff212375c5303fecd47e3ac3d4ba17fbae041c75f7b869787271a5c1035f3fa", @generic="57ea11c12be4580188324de1ae5b22a93b49a2ea2eacf9777e744958e11d811d48c3ea8736305611d01d0cded9a911c13246bfc983122b63511e3dad9155569863bcde26227e3ba2d8b48d0f8e005188baf33739cfda8296cdfe484aa178454f03e6a74f838f55220d5334bc97fb7282bf085cde33ee7255d4bded444fa8e00fe1926acade4695b6450dcfd41a0210ee1e41c980210fd13021b74ebecddc0185c394090a56bdcfa86cd29274f521f803f0b41469ae36c02f0579caebcdb0809841d6772a6abcff1ce6e3c2cda5946761", @typed={0x8, 0x7e, 0x0, 0x0, @fd=r0}]}, @nested={0x107, 0x2e, 0x0, 0x1, [@generic="82cea3d84bd366d25dd93297cde24ea421e16842291d9f536f50006195fd66722a51b986df3fbeac2a7a20bd4d4e4a60dcf3667371b0fb0c5feab28f3cc3dab5a20d6d7b81ea9ff22997aba6d52f12fb8a9d4cc8819c7c85e720dd0cbb2a66b034de2f9b6c53092e12dfc1ba8351340ddf1c32d0ba8e46fb6ffc93092dedbac400512f7cf55e9cd3e26c86137f8dd5240ea680d5f5ba550439a8e45be678850f", @generic="4c582f336959cdecd3241c18e8647bbba1cd56b57654978a8b8d2a2b66b6a4b38832a1f2aaeecaba95d466fd1563ed9177dc56", @generic="cebccfb5e1a99a0702b94f799af0c86a6b23c2795e83f30d3624eb5c2a8f75acaf6e0bef6a52ac3088e07c83a812248c"]}, @generic="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", @generic="db227ed8e4c46aea55563cdb11120dd3aeb0c823a3aa5ce99517a915a96a55000b31e8b0b0591a8f9bf7e8e0c695d80e4b10e83f59e87fea4a1b3ae71465844b32a0f0de7e954f1d0cd5f60374c30923d1dd2ebd82463975d847ed5ff26c429e05a939a6d516381b9d3bfb576ca85706872f692d"]}, 0x1684}, 0x1, 0x0, 0x0, 0x4080}, 0x80) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:44:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) syz_open_pts(r1, 0x4000) ioctl$TIOCSPTLCK(r0, 0x5420, &(0x7f0000000040)=0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x420400, 0x0) execveat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000001c0)='/dev/ptmx\x00', &(0x7f0000000200)='-\x00'], &(0x7f0000000540)=[&(0x7f0000000280)='/dev/ptmx\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\\\x00', &(0x7f00000003c0)='{*\x00', &(0x7f0000000400)='[\x00', &(0x7f0000000440)='^}-\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\'#*$%\x00', &(0x7f0000000500)='/dev/ptmx\x00'], 0x1000) ioctl$TCSETS(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "697ebf739d3b342cb5e6d8149e51d3aaeb489d"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x7fffffff, 0x8, 0x1f, 0x10001, 0x2, "bce37545bd46c1f2d48a5582ac98e4667deca3"}) 18:44:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x5}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:44:04 executing program 5: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/43, 0x2b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000580)=0xc) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000100)="d20aac399f1cddfa356e3bd293db801abb1b67b90e00d2ef9042cb5fee30fb5037a582e80b74a56b1f97385f104ea0435c13fe577cea2a6341f3dbd7dd9f510afa9cc81930bdab5aa0b4eb9b0117192ba835aa89079d297b5a8bbd0beeeb1239088f0260ac1b1ada75a1b3baaa", &(0x7f0000000080)="045d3edfad2632ea4e1be55313b10b130fde72374224ffe61a13dce94b201525047f13cb31a6b5b64059f5"}}, &(0x7f00000004c0)=0x0) timer_gettime(r1, &(0x7f0000000500)) timer_delete(r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) timer_gettime(r0, &(0x7f0000000400)) timer_delete(0x0) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000300)={0x800, 0x3, 0x7, 0xd7, 0x8000, 0x6}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:44:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 73) 18:44:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x9, 0x9, 0x80, 0x5, 0x0, 0xae, 0x1008, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x54186, 0x1, 0x7, 0xf, 0x5, 0x20, 0x200, 0x0, 0x4, 0x0, 0x80000000}, 0xffffffffffffffff, 0x8, r2, 0x7) [ 2546.505538] FAULT_INJECTION: forcing a failure. [ 2546.505538] name failslab, interval 1, probability 0, space 0, times 0 [ 2546.508084] CPU: 0 PID: 13398 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2546.508096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2546.508103] Call Trace: [ 2546.508130] dump_stack+0x107/0x167 [ 2546.508154] should_fail.cold+0x5/0xa [ 2546.508178] ? create_object.isra.0+0x3a/0xa30 [ 2546.508198] should_failslab+0x5/0x20 [ 2546.508218] kmem_cache_alloc+0x5b/0x310 [ 2546.508237] ? __lockdep_reset_lock+0x180/0x180 [ 2546.508264] create_object.isra.0+0x3a/0xa30 [ 2546.508288] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2546.519416] kmem_cache_alloc+0x159/0x310 [ 2546.519444] __kernfs_new_node+0xd4/0x860 [ 2546.521246] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2546.522289] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2546.523348] ? wait_for_completion_io+0x270/0x270 [ 2546.524402] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2546.525563] kernfs_new_node+0x18d/0x250 [ 2546.526459] __kernfs_create_file+0x51/0x350 [ 2546.527426] sysfs_add_file_mode_ns+0x221/0x560 [ 2546.528462] internal_create_group+0x324/0xb30 [ 2546.529469] ? sysfs_remove_group+0x170/0x170 [ 2546.530441] ? kernfs_name_hash+0xe7/0x110 [ 2546.531365] ? kernfs_find_ns+0x256/0x380 [ 2546.532280] sysfs_slab_add+0x188/0x200 [ 2546.533159] __kmem_cache_create+0x3db/0x520 [ 2546.534123] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2546.535206] p9_client_create+0xc6a/0x1230 [ 2546.536124] ? p9_client_flush+0x430/0x430 [ 2546.537046] ? trace_hardirqs_on+0x5b/0x180 [ 2546.537974] ? lockdep_init_map_type+0x2c7/0x780 [ 2546.538995] ? __raw_spin_lock_init+0x36/0x110 [ 2546.539991] v9fs_session_init+0x1dd/0x1680 [ 2546.540926] ? lock_release+0x680/0x680 [ 2546.541792] ? kmem_cache_alloc_trace+0x151/0x320 [ 2546.542825] ? v9fs_show_options+0x690/0x690 [ 2546.543782] ? trace_hardirqs_on+0x5b/0x180 [ 2546.544719] ? kasan_unpoison_shadow+0x33/0x50 [ 2546.545697] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2546.546787] v9fs_mount+0x79/0x8f0 [ 2546.547551] ? v9fs_write_inode+0x60/0x60 [ 2546.548446] legacy_get_tree+0x105/0x220 [ 2546.549323] vfs_get_tree+0x8e/0x300 [ 2546.550122] path_mount+0x1490/0x21e0 [ 2546.550954] ? strncpy_from_user+0x9e/0x470 [ 2546.551880] ? finish_automount+0xa90/0xa90 [ 2546.552816] ? getname_flags.part.0+0x1dd/0x4f0 [ 2546.553818] ? _copy_from_user+0xfb/0x1b0 [ 2546.554718] __x64_sys_mount+0x282/0x300 [ 2546.555587] ? copy_mnt_ns+0xa00/0xa00 [ 2546.556436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2546.557562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2546.558673] do_syscall_64+0x33/0x40 [ 2546.559475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2546.560583] RIP: 0033:0x7fbbb2ce3b19 [ 2546.561381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2546.565381] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2546.565403] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2546.565415] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2546.565426] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2546.565438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2546.565450] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:44:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 74) 18:44:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x19040, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x10000}}, {@mmap}], [{@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trans=fd,'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'wfdno'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}]}}) 18:44:17 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x48, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:17 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000502000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:44:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={r7, r8+60000000}, 0x1, 0x1}, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:44:18 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x27, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2559.601488] FAULT_INJECTION: forcing a failure. [ 2559.601488] name failslab, interval 1, probability 0, space 0, times 0 [ 2559.604371] CPU: 1 PID: 13413 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2559.606046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2559.608042] Call Trace: [ 2559.608703] dump_stack+0x107/0x167 [ 2559.609579] should_fail.cold+0x5/0xa [ 2559.610502] ? create_object.isra.0+0x3a/0xa30 [ 2559.611595] should_failslab+0x5/0x20 [ 2559.612506] kmem_cache_alloc+0x5b/0x310 [ 2559.613492] create_object.isra.0+0x3a/0xa30 [ 2559.614549] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2559.615769] kmem_cache_alloc+0x159/0x310 [ 2559.616793] __kernfs_new_node+0xd4/0x860 [ 2559.617799] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2559.618929] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2559.620085] ? wait_for_completion_io+0x270/0x270 [ 2559.621254] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2559.622507] kernfs_new_node+0x18d/0x250 [ 2559.623475] __kernfs_create_file+0x51/0x350 [ 2559.624522] sysfs_add_file_mode_ns+0x221/0x560 [ 2559.625646] internal_create_group+0x324/0xb30 [ 2559.626747] ? sysfs_remove_group+0x170/0x170 [ 2559.627808] ? kernfs_name_hash+0xe7/0x110 [ 2559.628816] ? kernfs_find_ns+0x256/0x380 [ 2559.629814] sysfs_slab_add+0x188/0x200 [ 2559.630756] __kmem_cache_create+0x3db/0x520 [ 2559.631814] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2559.633021] p9_client_create+0xc6a/0x1230 [ 2559.634052] ? p9_client_flush+0x430/0x430 [ 2559.635062] ? trace_hardirqs_on+0x5b/0x180 [ 2559.636109] ? lockdep_init_map_type+0x2c7/0x780 [ 2559.637244] ? __raw_spin_lock_init+0x36/0x110 [ 2559.638346] v9fs_session_init+0x1dd/0x1680 [ 2559.639362] ? lock_release+0x680/0x680 [ 2559.640319] ? kmem_cache_alloc_trace+0x151/0x320 [ 2559.641471] ? v9fs_show_options+0x690/0x690 [ 2559.642523] ? trace_hardirqs_on+0x5b/0x180 [ 2559.643541] ? kasan_unpoison_shadow+0x33/0x50 [ 2559.644619] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2559.645813] v9fs_mount+0x79/0x8f0 [ 2559.646649] ? v9fs_write_inode+0x60/0x60 [ 2559.647618] legacy_get_tree+0x105/0x220 [ 2559.648587] vfs_get_tree+0x8e/0x300 [ 2559.649460] path_mount+0x1490/0x21e0 [ 2559.650364] ? strncpy_from_user+0x9e/0x470 [ 2559.651382] ? finish_automount+0xa90/0xa90 [ 2559.652396] ? getname_flags.part.0+0x1dd/0x4f0 [ 2559.653501] ? _copy_from_user+0xfb/0x1b0 [ 2559.654486] __x64_sys_mount+0x282/0x300 [ 2559.655451] ? copy_mnt_ns+0xa00/0xa00 [ 2559.656367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2559.657612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2559.658850] do_syscall_64+0x33/0x40 [ 2559.659732] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2559.660953] RIP: 0033:0x7fbbb2ce3b19 [ 2559.661832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.666191] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2559.667990] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2559.669685] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2559.671375] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2559.673071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2559.674740] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:44:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:44:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000540)={{0x0, 0x3, 0x6, 0x9, 0x9, 0x20, 0x3, 0x2, 0x5, 0x800, 0x4, 0xee99, 0x9, 0x8080000000000000, 0x80}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000600)={{r1, 0x7f800000000, 0x20, 0x6, 0x2, 0x8, 0x2, 0x7f, 0x6, 0x3ff, 0x10001, 0x4, 0x85, 0x3, 0x3f}}) clone3(&(0x7f0000000480)={0x80101000, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x37}, &(0x7f0000000300)=""/155, 0x9b, &(0x7f00000003c0)=""/136, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r0}}, 0x58) splice(r0, &(0x7f0000000080)=0x3b8, r2, &(0x7f0000000280), 0x2, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0aea2b7c27c1fcc38d5f5109348035a17ec03689872547c948529afb7512611f41875301d946d7243abcd3555ec903cda90ed805c1079cf49094b4a6e9dac81ad2259553845ebb30fb91ae6059b65679a3d98f2db6e78af562cf1e727d22fed0e48c7d6a"], 0xd7) close(r3) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000000c0)={@empty, 0x6b}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYBLOB="f31af95c4b467ae0180c1ff4df7355025f10ba1913589447148d7e3c846fd526496b93c9189ccda3c1c0", @ANYRESHEX=r4, @ANYBLOB="2c00585db901a1c07929832f966770f48df92fe5c3c91937c6f1024a1a221ac430e8ae6608bb835b4a1615dd6f82664102000000c5a790"]) 18:44:18 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000602000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2559.804132] 9pnet: Insufficient options for proto=fd 18:44:18 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x27, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x13, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:44:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 75) [ 2559.873570] FAULT_INJECTION: forcing a failure. [ 2559.873570] name failslab, interval 1, probability 0, space 0, times 0 [ 2559.874961] CPU: 0 PID: 13449 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2559.875746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2559.876691] Call Trace: [ 2559.876994] dump_stack+0x107/0x167 [ 2559.877412] should_fail.cold+0x5/0xa [ 2559.877849] ? create_object.isra.0+0x3a/0xa30 [ 2559.878365] should_failslab+0x5/0x20 [ 2559.878795] kmem_cache_alloc+0x5b/0x310 [ 2559.879253] ? __lockdep_reset_lock+0x180/0x180 [ 2559.879778] create_object.isra.0+0x3a/0xa30 [ 2559.880287] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2559.880867] kmem_cache_alloc+0x159/0x310 [ 2559.881338] __kernfs_new_node+0xd4/0x860 [ 2559.881808] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2559.882346] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2559.882890] ? wait_for_completion_io+0x270/0x270 [ 2559.883433] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2559.884024] kernfs_new_node+0x18d/0x250 [ 2559.884485] __kernfs_create_file+0x51/0x350 [ 2559.884989] sysfs_add_file_mode_ns+0x221/0x560 [ 2559.885518] internal_create_group+0x324/0xb30 [ 2559.886046] ? sysfs_remove_group+0x170/0x170 [ 2559.886552] ? kernfs_name_hash+0xe7/0x110 [ 2559.887036] ? kernfs_find_ns+0x256/0x380 [ 2559.887511] sysfs_slab_add+0x188/0x200 [ 2559.887967] __kmem_cache_create+0x3db/0x520 [ 2559.888472] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2559.889047] p9_client_create+0xc6a/0x1230 [ 2559.889528] ? p9_client_flush+0x430/0x430 [ 2559.890011] ? trace_hardirqs_on+0x5b/0x180 [ 2559.890501] ? lockdep_init_map_type+0x2c7/0x780 [ 2559.891040] ? __raw_spin_lock_init+0x36/0x110 [ 2559.891563] v9fs_session_init+0x1dd/0x1680 [ 2559.892053] ? lock_release+0x680/0x680 [ 2559.892508] ? kmem_cache_alloc_trace+0x151/0x320 [ 2559.893059] ? v9fs_show_options+0x690/0x690 [ 2559.893563] ? trace_hardirqs_on+0x5b/0x180 [ 2559.894052] ? kasan_unpoison_shadow+0x33/0x50 [ 2559.894567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2559.895149] v9fs_mount+0x79/0x8f0 [ 2559.895551] ? v9fs_write_inode+0x60/0x60 [ 2559.896018] legacy_get_tree+0x105/0x220 [ 2559.896476] vfs_get_tree+0x8e/0x300 [ 2559.896909] path_mount+0x1490/0x21e0 [ 2559.897345] ? strncpy_from_user+0x9e/0x470 [ 2559.897830] ? finish_automount+0xa90/0xa90 [ 2559.898323] ? getname_flags.part.0+0x1dd/0x4f0 [ 2559.898846] ? _copy_from_user+0xfb/0x1b0 [ 2559.899320] __x64_sys_mount+0x282/0x300 [ 2559.899776] ? copy_mnt_ns+0xa00/0xa00 [ 2559.900217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2559.900816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2559.901407] do_syscall_64+0x33/0x40 [ 2559.901829] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2559.902405] RIP: 0033:0x7fbbb2ce3b19 [ 2559.902822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.904901] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2559.905755] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2559.906557] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2559.907357] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2559.908169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2559.908977] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:44:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x12, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010005000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) io_uring_enter(r3, 0x7537, 0x62c2, 0x2, &(0x7f0000000040)={[0x5]}, 0x8) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:44:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x4c, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x1012, r0, 0x0) r2 = syz_io_uring_setup(0x20f9, &(0x7f0000000000)={0x0, 0x7de4, 0x10, 0x3, 0x1a4, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x600002, 0x40) faccessat(r5, &(0x7f0000000280)='./file1\x00', 0x0) close(r0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c84"]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="7e1c"], 0xd7) close(r7) fcntl$dupfd(r2, 0x0, r7) 18:44:18 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:18 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x27, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 76) 18:44:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40020, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0a54e8a5c74d4305bb1338148b13e40ed87e701aadccbdc5e8141af5b7009f11e60689b4c211c35b9962848382a3c8438a70a247"], 0xd7) close(r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r4) splice(r0, &(0x7f0000000040)=0x80, r4, &(0x7f0000000080)=0x33b7, 0x2, 0x0) 18:44:18 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000702000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2560.085436] FAULT_INJECTION: forcing a failure. [ 2560.085436] name failslab, interval 1, probability 0, space 0, times 0 [ 2560.086815] CPU: 0 PID: 13467 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2560.087605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2560.087610] Call Trace: [ 2560.087628] dump_stack+0x107/0x167 [ 2560.087641] should_fail.cold+0x5/0xa [ 2560.087655] ? create_object.isra.0+0x3a/0xa30 18:44:18 executing program 7: close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) [ 2560.087666] should_failslab+0x5/0x20 [ 2560.087677] kmem_cache_alloc+0x5b/0x310 [ 2560.087693] ? __lockdep_reset_lock+0x180/0x180 [ 2560.087707] create_object.isra.0+0x3a/0xa30 [ 2560.087716] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2560.087730] kmem_cache_alloc+0x159/0x310 [ 2560.087745] __kernfs_new_node+0xd4/0x860 [ 2560.087758] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2560.087773] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2560.087785] ? wait_for_completion_io+0x270/0x270 [ 2560.087796] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2560.087810] kernfs_new_node+0x18d/0x250 [ 2560.087825] __kernfs_create_file+0x51/0x350 [ 2560.087838] sysfs_add_file_mode_ns+0x221/0x560 [ 2560.087855] internal_create_group+0x324/0xb30 [ 2560.087871] ? sysfs_remove_group+0x170/0x170 [ 2560.087879] ? kernfs_name_hash+0xe7/0x110 [ 2560.087890] ? kernfs_find_ns+0x256/0x380 [ 2560.087907] sysfs_slab_add+0x188/0x200 [ 2560.087918] __kmem_cache_create+0x3db/0x520 [ 2560.087933] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2560.087947] p9_client_create+0xc6a/0x1230 [ 2560.087963] ? p9_client_flush+0x430/0x430 [ 2560.087976] ? trace_hardirqs_on+0x5b/0x180 [ 2560.087988] ? lockdep_init_map_type+0x2c7/0x780 [ 2560.088000] ? __raw_spin_lock_init+0x36/0x110 [ 2560.088017] v9fs_session_init+0x1dd/0x1680 [ 2560.088028] ? lock_release+0x680/0x680 [ 2560.088044] ? kmem_cache_alloc_trace+0x151/0x320 [ 2560.088055] ? v9fs_show_options+0x690/0x690 [ 2560.088071] ? trace_hardirqs_on+0x5b/0x180 [ 2560.088082] ? kasan_unpoison_shadow+0x33/0x50 [ 2560.088092] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2560.088105] v9fs_mount+0x79/0x8f0 [ 2560.088116] ? v9fs_write_inode+0x60/0x60 [ 2560.088126] legacy_get_tree+0x105/0x220 [ 2560.088139] vfs_get_tree+0x8e/0x300 [ 2560.088151] path_mount+0x1490/0x21e0 [ 2560.088166] ? strncpy_from_user+0x9e/0x470 [ 2560.088177] ? finish_automount+0xa90/0xa90 [ 2560.088188] ? getname_flags.part.0+0x1dd/0x4f0 [ 2560.088199] ? _copy_from_user+0xfb/0x1b0 [ 2560.088215] __x64_sys_mount+0x282/0x300 [ 2560.088225] ? copy_mnt_ns+0xa00/0xa00 [ 2560.088239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2560.088253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2560.088269] do_syscall_64+0x33/0x40 [ 2560.088280] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2560.088287] RIP: 0033:0x7fbbb2ce3b19 [ 2560.088297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2560.088303] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2560.088315] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2560.088321] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2560.088327] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2560.088333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2560.088339] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:44:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\n'], 0xd7) close(r0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='[\x00', 0x0, r0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x42, 0x0, 0x0, 0x229020, 0x0) chroot(&(0x7f0000000040)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x208180a, 0x0) mknod$loop(&(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0) 18:44:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x7, 0x3, 0x81, 0xfff, 0xe, "f7996525a5208875237faf1e4a83f2dd24ab94"}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:44:36 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x22, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:36 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:36 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001802000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:44:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 77) 18:44:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x68, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:44:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000040)=""/43, 0x2b}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x100, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x5, 0x4, 0x0, {0x0, 0x0, r1}}, 0xfff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2577.890357] FAULT_INJECTION: forcing a failure. [ 2577.890357] name failslab, interval 1, probability 0, space 0, times 0 [ 2577.892044] CPU: 1 PID: 13499 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2577.892990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2577.894116] Call Trace: [ 2577.894477] dump_stack+0x107/0x167 [ 2577.894977] should_fail.cold+0x5/0xa [ 2577.895501] ? __kernfs_new_node+0xd4/0x860 [ 2577.896088] should_failslab+0x5/0x20 [ 2577.896611] kmem_cache_alloc+0x5b/0x310 [ 2577.897183] __kernfs_new_node+0xd4/0x860 [ 2577.897757] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2577.898415] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2577.899080] ? wait_for_completion_io+0x270/0x270 [ 2577.899750] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2577.900479] kernfs_new_node+0x18d/0x250 [ 2577.901057] __kernfs_create_file+0x51/0x350 [ 2577.901676] sysfs_add_file_mode_ns+0x221/0x560 [ 2577.902339] internal_create_group+0x324/0xb30 [ 2577.902972] ? sysfs_remove_group+0x170/0x170 [ 2577.903592] ? kernfs_name_hash+0xe7/0x110 [ 2577.904168] ? kernfs_find_ns+0x256/0x380 [ 2577.904749] sysfs_slab_add+0x188/0x200 [ 2577.905316] __kmem_cache_create+0x3db/0x520 [ 2577.905926] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2577.906628] p9_client_create+0xc6a/0x1230 [ 2577.907226] ? p9_client_flush+0x430/0x430 [ 2577.907810] ? trace_hardirqs_on+0x5b/0x180 [ 2577.908399] ? lockdep_init_map_type+0x2c7/0x780 [ 2577.909043] ? __raw_spin_lock_init+0x36/0x110 [ 2577.909688] v9fs_session_init+0x1dd/0x1680 [ 2577.910289] ? lock_release+0x680/0x680 [ 2577.910844] ? kmem_cache_alloc_trace+0x151/0x320 [ 2577.911522] ? v9fs_show_options+0x690/0x690 [ 2577.912135] ? trace_hardirqs_on+0x5b/0x180 [ 2577.912720] ? kasan_unpoison_shadow+0x33/0x50 [ 2577.913355] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2577.914048] v9fs_mount+0x79/0x8f0 [ 2577.914538] ? v9fs_write_inode+0x60/0x60 [ 2577.915100] legacy_get_tree+0x105/0x220 [ 2577.915668] vfs_get_tree+0x8e/0x300 [ 2577.916189] path_mount+0x1490/0x21e0 [ 2577.916723] ? strncpy_from_user+0x9e/0x470 [ 2577.917325] ? finish_automount+0xa90/0xa90 [ 2577.917933] ? getname_flags.part.0+0x1dd/0x4f0 [ 2577.918569] ? _copy_from_user+0xfb/0x1b0 [ 2577.919145] __x64_sys_mount+0x282/0x300 [ 2577.919704] ? copy_mnt_ns+0xa00/0xa00 [ 2577.920238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2577.920972] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2577.921676] do_syscall_64+0x33/0x40 [ 2577.922189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2577.922894] RIP: 0033:0x7fbbb2ce3b19 [ 2577.923409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2577.925934] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2577.926999] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2577.928001] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2577.928987] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2577.929956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2577.930927] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2577.935422] kmem_cache_create(9p-fcall-cache-118) failed with error -12 [ 2577.937108] CPU: 0 PID: 13499 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2577.938735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2577.940701] Call Trace: [ 2577.941337] dump_stack+0x107/0x167 [ 2577.942210] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2577.943447] p9_client_create+0xc6a/0x1230 [ 2577.944451] ? p9_client_flush+0x430/0x430 [ 2577.945469] ? trace_hardirqs_on+0x5b/0x180 [ 2577.946487] ? lockdep_init_map_type+0x2c7/0x780 [ 2577.947612] ? __raw_spin_lock_init+0x36/0x110 [ 2577.948699] v9fs_session_init+0x1dd/0x1680 [ 2577.949726] ? lock_release+0x680/0x680 [ 2577.950674] ? kmem_cache_alloc_trace+0x151/0x320 18:44:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') ioctl$TCSBRKP(r0, 0x5425, 0xc6354f9) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) pread64(r0, &(0x7f0000000040)=""/4097, 0x1001, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) dup2(r1, r0) [ 2577.951802] ? v9fs_show_options+0x690/0x690 18:44:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646ecf69fe075730878cf98f025bd9dd20eec0059da2857fb00623e0d2592d8f36000000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="3b357f4e372e1005b7"], 0xd7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) quotactl(0x0, &(0x7f0000000700)='./file1\x00', r4, &(0x7f0000000740)="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") dup(r2) close(r3) execveat(r3, &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000540)=[&(0x7f0000000200)='9p\x00', &(0x7f0000000280)='\x00', &(0x7f0000000340)='9p\x00', &(0x7f0000000380)='9p\x00', &(0x7f00000003c0)='/dev/net/tun\x00', &(0x7f0000000400)='}!\x00', &(0x7f0000000440)='$\x00', &(0x7f0000000480)='9p\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/net/tun\x00'], &(0x7f0000000680)=[&(0x7f00000005c0)='\x00', &(0x7f0000000600)='\\/.%@\x1d\x00', &(0x7f0000000640)=':!\x00'], 0x1000) close(r2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) fcntl$lock(r2, 0x20, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x0, r5}) [ 2577.953021] ? trace_hardirqs_on+0x5b/0x180 [ 2577.954084] ? kasan_unpoison_shadow+0x33/0x50 [ 2577.955165] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2577.956348] v9fs_mount+0x79/0x8f0 [ 2577.957205] ? v9fs_write_inode+0x60/0x60 [ 2577.958187] legacy_get_tree+0x105/0x220 [ 2577.959161] vfs_get_tree+0x8e/0x300 [ 2577.960042] path_mount+0x1490/0x21e0 [ 2577.960965] ? strncpy_from_user+0x9e/0x470 [ 2577.961893] 9pnet: Insufficient options for proto=fd [ 2577.961998] ? finish_automount+0xa90/0xa90 [ 2577.963700] ? getname_flags.part.0+0x1dd/0x4f0 [ 2577.964818] ? _copy_from_user+0xfb/0x1b0 [ 2577.965815] __x64_sys_mount+0x282/0x300 [ 2577.966772] ? copy_mnt_ns+0xa00/0xa00 [ 2577.967705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2577.968962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2577.970183] do_syscall_64+0x33/0x40 [ 2577.971072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2577.972277] RIP: 0033:0x7fbbb2ce3b19 [ 2577.973167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2577.977524] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2577.979315] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2577.981022] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2577.982721] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2577.984423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2577.986098] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:44:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xc0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0xfff, [0x1, 0x100], 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2578.008413] 9pnet: Insufficient options for proto=fd 18:44:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3db146af8a68ae197b16c28169dc47d94ed5bd970b259ad9146d4cdd55d31bf7ef4f254cb05c4564ddf5944ce9fcfbbacb460cdde855a9e9f0f23645017387f6aeef45043363e28b8e32e56a10a23d77be5a4a4968d8c633714d0b7c93cdaee1e194927050483bb016bbb9bd7858d92b57f82a1625b5d56bf3098ad8a417ae1e8c3a2f30b6efab309037b0d9b492", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 18:44:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 78) 18:44:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000001640)) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540), 0x604580, 0x0) renameat2(r0, &(0x7f0000001500)='./file1\x00', r1, &(0x7f0000001600)='./file1\x00', 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x1, 0x0, 0x3}}, 0xe8) sendmmsg$inet(r2, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000001580)=ANY=[@ANYBLOB="09d74483e7754e470197e1dfd00aa0d9c2cb3dc0f22c2c538dd862b3c006ab6208e557a88b6ceab0010030a2c2670db318a328593e40dc845fc4f5b6a2290fb4bb569c8318dd330da3c9d969d82549032c704d400ef37496894fc492ecf656ad3e7a603bcf387a36002aa31c102c3dd5aa75ec1ac8bc1c4cf2822382d027"], 0xd7) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000013c0)={'team0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000014c0)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000180)="5a3d922fcf71b4d44ce5ac04798f7317e867006cceadfe010baa7bead26b78cfd1285c8f6b8f0a9e03bb552cb315da4c453d6e612bab2a4115e8cef5720098c1d666ec7c8cef470e46d592352228739b622849305d34a5894fbd665768df49f6e87903b479b1c4b23148f727ace6a4440a4974618645710e", 0x78}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="5a787f37673a19ff597948f03fc9758e80c2318eb03011db60539219fd58ff870324fb9b54668499d26bae5659fc7f7483b3e028dd989b26f02d6e3fb8006d7b6b2c6bc1aa4ed2f339f4c55a1fb30a229118c2fbf4cf55b907dd34bc9b58d56abf331b839b6a5ab369b368db41b65154ded776f60ff44e9a02c57711f365fb477a06428b070050da9aefe83534ae44c748373efea03630d1ea795ca3b242ef2e8f89706ed8783d507958a810336917ddb11851aee4d942bbeb3a103923a4041692c18dc93d4f8e956d83a8027318816c4258e281a08644f48dc3d6e18f46c5ac0538b9e7c2e6bd6b90", 0xe9}, {&(0x7f0000001300)="cacfec8db566b1ef7e6495a9ac209bb49bfb7ac91cb1ec32f33589d3b22bb5904d8defd16412f4f4e6f2ee85a3ab449abcd22aac9405362eaec315967e4e369ce1fa9e5b88e917a81555f87074fd18", 0x4f}], 0x4, &(0x7f0000001400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc8c}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xa0}}], 0x1, 0x4004894) [ 2578.095101] FAULT_INJECTION: forcing a failure. [ 2578.095101] name failslab, interval 1, probability 0, space 0, times 0 [ 2578.096667] CPU: 1 PID: 13516 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2578.097576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2578.098656] Call Trace: [ 2578.099011] dump_stack+0x107/0x167 [ 2578.099487] should_fail.cold+0x5/0xa [ 2578.099976] ? __kernfs_new_node+0xd4/0x860 [ 2578.100538] should_failslab+0x5/0x20 [ 2578.101050] kmem_cache_alloc+0x5b/0x310 [ 2578.101581] __kernfs_new_node+0xd4/0x860 [ 2578.102122] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2578.102761] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2578.102776] ? wait_for_completion_io+0x270/0x270 [ 2578.102789] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2578.102805] kernfs_new_node+0x18d/0x250 [ 2578.102822] __kernfs_create_file+0x51/0x350 [ 2578.102843] sysfs_add_file_mode_ns+0x221/0x560 [ 2578.106862] internal_create_group+0x324/0xb30 [ 2578.107454] ? sysfs_remove_group+0x170/0x170 [ 2578.108027] ? kernfs_name_hash+0xe7/0x110 [ 2578.108569] ? kernfs_find_ns+0x256/0x380 [ 2578.109116] sysfs_slab_add+0x188/0x200 [ 2578.109632] __kmem_cache_create+0x3db/0x520 [ 2578.110199] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2578.110860] p9_client_create+0xc6a/0x1230 [ 2578.111363] 9pnet: Insufficient options for proto=fd [ 2578.111413] ? p9_client_flush+0x430/0x430 [ 2578.113114] ? trace_hardirqs_on+0x5b/0x180 [ 2578.113132] ? lockdep_init_map_type+0x2c7/0x780 [ 2578.113148] ? __raw_spin_lock_init+0x36/0x110 [ 2578.113166] v9fs_session_init+0x1dd/0x1680 [ 2578.113182] ? lock_release+0x680/0x680 [ 2578.113201] ? kmem_cache_alloc_trace+0x151/0x320 [ 2578.113216] ? v9fs_show_options+0x690/0x690 [ 2578.113241] ? trace_hardirqs_on+0x5b/0x180 [ 2578.113257] ? kasan_unpoison_shadow+0x33/0x50 [ 2578.113273] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2578.113288] v9fs_mount+0x79/0x8f0 [ 2578.113303] ? v9fs_write_inode+0x60/0x60 [ 2578.113319] legacy_get_tree+0x105/0x220 [ 2578.113334] vfs_get_tree+0x8e/0x300 [ 2578.113350] path_mount+0x1490/0x21e0 [ 2578.113368] ? strncpy_from_user+0x9e/0x470 18:44:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 79) [ 2578.113383] ? finish_automount+0xa90/0xa90 18:44:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c72663f950ab15417fa0d4e20be81411512a1b2d6c034405c50e3f8af898fd42d87bb23f3bf7d7b9d29001938c634621a820b593b1b7f83770ae20aa445af5f017a2d720769e52f5dcc3b368b31a3654ea989931a63c2dbfdc64c2d3e768eef03c6fdd6494a7fa210c9f3cf6efbb309256e818b5cf08d5e2fff19dc07005c5da34cbdf3398310c8d9674d61431af626ad9fbc61885f8ed75a10ca00397a1ad7f757bff99a4d2289c8080cb7c0bff93680fc2950fdf98c765089216c7fce3a2384d4d45fb574fcfbd8df503a8cea76adf2d925e10cc3e6b3ebaa75dff2cded31fa1e2dbba5ce38d9e1cb4afb75f7d34c442b9fba332c35ffba6b3008830712f88a6089838d5b30876a2495f7daa73a1988a0a2d184d2868dd1be", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 2578.113400] ? getname_flags.part.0+0x1dd/0x4f0 [ 2578.113418] ? _copy_from_user+0xfb/0x1b0 [ 2578.113443] __x64_sys_mount+0x282/0x300 [ 2578.113457] ? copy_mnt_ns+0xa00/0xa00 [ 2578.113475] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2578.113493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2578.113509] do_syscall_64+0x33/0x40 [ 2578.113526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2578.113539] RIP: 0033:0x7fbbb2ce3b19 [ 2578.113556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2578.113570] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2578.113583] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2578.113591] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2578.113598] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2578.113605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2578.113612] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2578.137962] kmem_cache_create(9p-fcall-cache-119) failed with error -12 [ 2578.137974] CPU: 1 PID: 13516 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2578.137980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2578.137984] Call Trace: [ 2578.137997] dump_stack+0x107/0x167 [ 2578.138014] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2578.138029] p9_client_create+0xc6a/0x1230 [ 2578.138045] ? p9_client_flush+0x430/0x430 [ 2578.138057] ? trace_hardirqs_on+0x5b/0x180 [ 2578.138071] ? lockdep_init_map_type+0x2c7/0x780 [ 2578.138084] ? __raw_spin_lock_init+0x36/0x110 [ 2578.138099] v9fs_session_init+0x1dd/0x1680 [ 2578.138111] ? lock_release+0x680/0x680 [ 2578.138128] ? kmem_cache_alloc_trace+0x151/0x320 [ 2578.138139] ? v9fs_show_options+0x690/0x690 [ 2578.138162] ? trace_hardirqs_on+0x5b/0x180 [ 2578.138174] ? kasan_unpoison_shadow+0x33/0x50 [ 2578.138185] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2578.138197] v9fs_mount+0x79/0x8f0 [ 2578.138209] ? v9fs_write_inode+0x60/0x60 [ 2578.138219] legacy_get_tree+0x105/0x220 [ 2578.138232] vfs_get_tree+0x8e/0x300 [ 2578.138242] path_mount+0x1490/0x21e0 [ 2578.138257] ? strncpy_from_user+0x9e/0x470 [ 2578.138269] ? finish_automount+0xa90/0xa90 [ 2578.138281] ? getname_flags.part.0+0x1dd/0x4f0 [ 2578.138292] ? _copy_from_user+0xfb/0x1b0 [ 2578.138309] __x64_sys_mount+0x282/0x300 [ 2578.138319] ? copy_mnt_ns+0xa00/0xa00 [ 2578.138333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2578.138345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2578.138359] do_syscall_64+0x33/0x40 [ 2578.138371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2578.138378] RIP: 0033:0x7fbbb2ce3b19 [ 2578.138389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2578.138396] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2578.138408] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2578.138415] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2578.138421] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2578.138428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2578.138435] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2578.237961] 9pnet: Insufficient options for proto=fd [ 2578.240378] FAULT_INJECTION: forcing a failure. [ 2578.240378] name failslab, interval 1, probability 0, space 0, times 0 [ 2578.240400] CPU: 0 PID: 13530 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2578.240411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2578.240425] Call Trace: [ 2578.240450] dump_stack+0x107/0x167 [ 2578.240474] should_fail.cold+0x5/0xa [ 2578.240496] ? __kernfs_new_node+0xd4/0x860 [ 2578.240516] should_failslab+0x5/0x20 [ 2578.240536] kmem_cache_alloc+0x5b/0x310 [ 2578.240562] __kernfs_new_node+0xd4/0x860 [ 2578.240585] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2578.240613] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2578.240636] ? wait_for_completion_io+0x270/0x270 [ 2578.240658] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2578.240688] kernfs_new_node+0x18d/0x250 [ 2578.240715] __kernfs_create_file+0x51/0x350 [ 2578.240741] sysfs_add_file_mode_ns+0x221/0x560 [ 2578.240783] internal_create_group+0x324/0xb30 [ 2578.240814] ? sysfs_remove_group+0x170/0x170 [ 2578.240829] ? kernfs_name_hash+0xe7/0x110 [ 2578.240851] ? kernfs_find_ns+0x256/0x380 [ 2578.240883] sysfs_slab_add+0x188/0x200 [ 2578.240904] __kmem_cache_create+0x3db/0x520 [ 2578.240932] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2578.240958] p9_client_create+0xc6a/0x1230 [ 2578.240988] ? p9_client_flush+0x430/0x430 [ 2578.241011] ? trace_hardirqs_on+0x5b/0x180 [ 2578.241041] ? lockdep_init_map_type+0x2c7/0x780 [ 2578.241066] ? __raw_spin_lock_init+0x36/0x110 [ 2578.241094] v9fs_session_init+0x1dd/0x1680 [ 2578.241116] ? lock_release+0x680/0x680 [ 2578.241148] ? kmem_cache_alloc_trace+0x151/0x320 [ 2578.241168] ? v9fs_show_options+0x690/0x690 [ 2578.241202] ? trace_hardirqs_on+0x5b/0x180 [ 2578.241224] ? kasan_unpoison_shadow+0x33/0x50 [ 2578.241244] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2578.241267] v9fs_mount+0x79/0x8f0 [ 2578.241289] ? v9fs_write_inode+0x60/0x60 [ 2578.241307] legacy_get_tree+0x105/0x220 [ 2578.241329] vfs_get_tree+0x8e/0x300 [ 2578.241349] path_mount+0x1490/0x21e0 [ 2578.241376] ? strncpy_from_user+0x9e/0x470 [ 2578.241397] ? finish_automount+0xa90/0xa90 [ 2578.241418] ? getname_flags.part.0+0x1dd/0x4f0 [ 2578.241439] ? _copy_from_user+0xfb/0x1b0 [ 2578.241469] __x64_sys_mount+0x282/0x300 [ 2578.241488] ? copy_mnt_ns+0xa00/0xa00 [ 2578.241514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2578.241536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2578.241560] do_syscall_64+0x33/0x40 [ 2578.241581] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2578.241594] RIP: 0033:0x7fbbb2ce3b19 [ 2578.241612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2578.241623] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2578.241645] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2578.241656] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2578.241668] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2578.241679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2578.241691] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2578.262389] kmem_cache_create(9p-fcall-cache-120) failed with error -12 [ 2578.262411] CPU: 0 PID: 13530 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2578.262423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2578.262429] Call Trace: [ 2578.262455] dump_stack+0x107/0x167 [ 2578.262483] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2578.262511] p9_client_create+0xc6a/0x1230 [ 2578.262541] ? p9_client_flush+0x430/0x430 [ 2578.262564] ? trace_hardirqs_on+0x5b/0x180 [ 2578.262588] ? lockdep_init_map_type+0x2c7/0x780 [ 2578.262613] ? __raw_spin_lock_init+0x36/0x110 [ 2578.262642] v9fs_session_init+0x1dd/0x1680 [ 2578.262665] ? lock_release+0x680/0x680 [ 2578.262706] ? kmem_cache_alloc_trace+0x151/0x320 [ 2578.262727] ? v9fs_show_options+0x690/0x690 [ 2578.262759] ? trace_hardirqs_on+0x5b/0x180 [ 2578.262781] ? kasan_unpoison_shadow+0x33/0x50 [ 2578.262801] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2578.262825] v9fs_mount+0x79/0x8f0 [ 2578.262847] ? v9fs_write_inode+0x60/0x60 [ 2578.262865] legacy_get_tree+0x105/0x220 [ 2578.262888] vfs_get_tree+0x8e/0x300 [ 2578.262908] path_mount+0x1490/0x21e0 [ 2578.262935] ? strncpy_from_user+0x9e/0x470 [ 2578.262957] ? finish_automount+0xa90/0xa90 [ 2578.262978] ? getname_flags.part.0+0x1dd/0x4f0 [ 2578.262999] ? _copy_from_user+0xfb/0x1b0 [ 2578.263030] __x64_sys_mount+0x282/0x300 [ 2578.263050] ? copy_mnt_ns+0xa00/0xa00 [ 2578.263076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2578.263098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2578.263124] do_syscall_64+0x33/0x40 [ 2578.263145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2578.263159] RIP: 0033:0x7fbbb2ce3b19 [ 2578.263179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2578.263191] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2578.263214] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2578.263227] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2578.263239] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2578.263252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2578.263265] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 [ 2594.131251] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 18:45:01 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, @out_args}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="722407a4021934c17fab4dde4fc66f91d73b8e60d770c12c66ced24ce52c0c00d7d8ac9afd"], 0xd7) close(r4) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000000)={0x2, 0x4b, 0x100, 0x20, 0x4, "44bdfab1add91de1"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) mknodat$null(r3, &(0x7f0000000180)='./file1\x00', 0x50a5, 0x103) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:45:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x6c, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:45:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:45:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:45:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000002100)={0x1430, 0x25, 0x100, 0x70bd26, 0x25dfdbfe, {0x15}, [@typed={0x4, 0x49}, @generic="4c3f4b752ee605720f8b9a4a43d8e438b97b3df978e36a8e2fc60799ac4e8650fe6903c8d8b5a88a739b864ab1937da2f9b189481b2adf4826cd8ecd9bd4091164bd661c85b2960ee6636a2ce2b83223659bcd8942271aca27655206c72bdbe821310bc1f40b8332e72e693354d060cf671f00bb25f024940324d22bcbba67d650773faf3b65752f13a07077b2cca3d297e01585fcc2790dcdf5a99a65cca7ceab0e815530676692f51a3ff64a414a8aa7977ca854dee39ef484e30f", @nested={0xa0, 0x7b, 0x0, 0x1, [@generic="e54c830b4d9606a2e3a4d9d67e7dfaf79e11d28a1267485d7b0c7d619901c079561f396ae136396fdef33cb88e86977bcfac91e0686222aaa2b43db689d2f1c199a2e892c2d5fc9ec712e28dc5fb8729307ec92d6b36b565a22882fde10b54e7c23968a175b8dd4bdcb4a4fcf002073bafa89d44afe161d3b7f7cc0c73fcb871464d5db2f719fd243e7eb035847624ce5a75f74fe03746d85826b3b8"]}, @typed={0x8, 0x81, 0x0, 0x0, @ipv4=@empty}, @nested={0x1103, 0x81, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xe, 0x8b, 0x0, 0x0, @str='%@\'*&{[!,\x00'}, @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="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", @generic="d2bc632ebd4902bbfe34224cb1fb8328ce158eb9b1182679a8f74dd1022f53f19baceea9901d0b391fffb9cc3ffdc6ad954da189569f4b6c5a4fde591ad41369", @typed={0xc, 0x41, 0x0, 0x0, @str='cgroup2\x00'}, @generic="d75e9b5cbfaee1b522d6d2e51fd490b910d3aa9ba80085875d782c16df33c7a27dc0b56fffd9f708ae88e937196d52c5c9e9d5df449ff0eb53daa27d0c150e16f170e3778e80a644eb47636442277555bf14b67b03f315f1be8c76a6fe8ea83349698582786a58ba6119ed3abb49dde48dd9100e5e1a07bb65e2ec95174627a166e5f2a75db17a"]}, @nested={0x1ae, 0x70, 0x0, 0x1, [@generic="7ce98139945c771dfb61b6c6c32783c756eb54533920d23141fddb729c10627b1d96f041e907253dd6b023793f45a788732be3169a4ef81fc0ab1ed24d35a8b632f64615a6a30b09f1f017197888af7a2de9f2621a2fdf61ae6b62aa05a27a65442ac934d57fa0996e1bca491829dda9b522c8426ec47012e56601898b143877df4744279439442b002762803d62be33ae7cfd744ec68df37546f53a964c8dbfb30877d50d2d37fe360b1352b98a6cf2aba27e775d2606417f83b672f170fad27369c88debe1c207762616753cd7d823e8fa02f994998dc5786d17c8551203a7c50a4378f3bf565b0c9ebf209b8955f01cbd5fed9f0a", @generic, @generic="7820df409f383d25eb0fb9fc30d6b7bfb2c09856eca620218dc65c76f08e6e61ceabbac7660634539df508452ade6ae84a9b964add698b0349feef5555437fc3ce1ee22f95b0d8641b5a24df61934e9a0b7d592f523f9b4753a5ba3d8e5684232b55f199490299994a9647c8901cc7c2ea48097f8468b5197343e0e06b2b7ef907612c99a8e94514f3694799e0faf4ba3ba43bb120d795152ac38c35c6ad150c105b6ef852ae35c9b44b8d3a", @typed={0x8, 0x6d, 0x0, 0x0, @fd}]}]}, 0x1430}, 0x1, 0x0, 0x0, 0x4008051}, 0x40000) r1 = signalfd4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x80) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) ftruncate(0xffffffffffffffff, 0x40) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r2) connect$bt_l2cap(r2, &(0x7f0000000640)={0x1f, 0x3f, @none, 0x5, 0x2}, 0xe) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/19, 0x13}, {&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/201, 0xc9}], 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x0) 18:45:01 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001c02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:45:01 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x23, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:45:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 80) [ 2603.082284] FAULT_INJECTION: forcing a failure. [ 2603.082284] name failslab, interval 1, probability 0, space 0, times 0 [ 2603.084799] CPU: 1 PID: 13559 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2603.086312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2603.088117] Call Trace: [ 2603.088699] dump_stack+0x107/0x167 [ 2603.089511] should_fail.cold+0x5/0xa [ 2603.089534] ? create_object.isra.0+0x3a/0xa30 [ 2603.089554] should_failslab+0x5/0x20 [ 2603.089573] kmem_cache_alloc+0x5b/0x310 [ 2603.089593] ? __lockdep_reset_lock+0x180/0x180 [ 2603.089619] create_object.isra.0+0x3a/0xa30 [ 2603.089635] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2603.089661] kmem_cache_alloc+0x159/0x310 [ 2603.089687] __kernfs_new_node+0xd4/0x860 [ 2603.089710] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2603.089736] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2603.089758] ? wait_for_completion_io+0x270/0x270 [ 2603.089779] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2603.089805] kernfs_new_node+0x18d/0x250 [ 2603.089832] __kernfs_create_file+0x51/0x350 [ 2603.089857] sysfs_add_file_mode_ns+0x221/0x560 [ 2603.089889] internal_create_group+0x324/0xb30 [ 2603.089918] ? sysfs_remove_group+0x170/0x170 [ 2603.089933] ? kernfs_name_hash+0xe7/0x110 [ 2603.089954] ? kernfs_find_ns+0x256/0x380 [ 2603.089984] sysfs_slab_add+0x188/0x200 [ 2603.090005] __kmem_cache_create+0x3db/0x520 [ 2603.090032] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2603.090058] p9_client_create+0xc6a/0x1230 [ 2603.090087] ? p9_client_flush+0x430/0x430 [ 2603.090109] ? trace_hardirqs_on+0x5b/0x180 [ 2603.090135] ? lockdep_init_map_type+0x2c7/0x780 [ 2603.090159] ? __raw_spin_lock_init+0x36/0x110 [ 2603.090188] v9fs_session_init+0x1dd/0x1680 [ 2603.090208] ? lock_release+0x680/0x680 [ 2603.090239] ? kmem_cache_alloc_trace+0x151/0x320 [ 2603.090259] ? v9fs_show_options+0x690/0x690 [ 2603.090290] ? trace_hardirqs_on+0x5b/0x180 [ 2603.090311] ? kasan_unpoison_shadow+0x33/0x50 [ 2603.090329] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2603.090352] v9fs_mount+0x79/0x8f0 [ 2603.090373] ? v9fs_write_inode+0x60/0x60 [ 2603.090390] legacy_get_tree+0x105/0x220 [ 2603.090413] vfs_get_tree+0x8e/0x300 [ 2603.090432] path_mount+0x1490/0x21e0 [ 2603.090459] ? strncpy_from_user+0x9e/0x470 [ 2603.090479] ? finish_automount+0xa90/0xa90 [ 2603.090500] ? getname_flags.part.0+0x1dd/0x4f0 [ 2603.090519] ? _copy_from_user+0xfb/0x1b0 [ 2603.090549] __x64_sys_mount+0x282/0x300 [ 2603.090567] ? copy_mnt_ns+0xa00/0xa00 [ 2603.090592] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2603.090612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2603.090636] do_syscall_64+0x33/0x40 [ 2603.090656] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2603.090669] RIP: 0033:0x7fbbb2ce3b19 [ 2603.090687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2603.090697] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2603.090719] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2603.090730] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2603.090741] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2603.090753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2603.090764] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:45:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x74, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:45:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x27, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:45:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x204100c, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:45:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:45:16 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r1) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x20, 0x1, 0x8, 0xff, 0x0, 0x9, 0x11010, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x9, 0x8}, 0x0, 0x2, 0x6, 0x1, 0x4, 0xb66, 0x100, 0x0, 0x4, 0x0, 0x180000}, r1, 0xe, r0, 0x5) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000740)=ANY=[]) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) 18:45:16 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 81) 18:45:16 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:45:16 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 2617.990242] FAULT_INJECTION: forcing a failure. [ 2617.990242] name failslab, interval 1, probability 0, space 0, times 0 [ 2617.992735] CPU: 1 PID: 13584 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2617.994206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2617.995971] Call Trace: [ 2617.996533] dump_stack+0x107/0x167 [ 2617.997317] should_fail.cold+0x5/0xa [ 2617.998126] ? __kernfs_new_node+0xd4/0x860 [ 2617.999039] should_failslab+0x5/0x20 [ 2617.999853] kmem_cache_alloc+0x5b/0x310 [ 2618.000716] __kernfs_new_node+0xd4/0x860 [ 2618.001604] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2618.002612] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2618.003637] ? wait_for_completion_io+0x270/0x270 [ 2618.004656] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2618.005774] kernfs_new_node+0x18d/0x250 [ 2618.006646] __kernfs_create_file+0x51/0x350 [ 2618.007578] sysfs_add_file_mode_ns+0x221/0x560 [ 2618.008570] internal_create_group+0x324/0xb30 [ 2618.009551] ? sysfs_remove_group+0x170/0x170 [ 2618.010495] ? kernfs_name_hash+0xe7/0x110 [ 2618.011386] ? kernfs_find_ns+0x256/0x380 [ 2618.012275] sysfs_slab_add+0x188/0x200 [ 2618.013119] __kmem_cache_create+0x3db/0x520 [ 2618.014065] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2618.015128] p9_client_create+0xc6a/0x1230 [ 2618.016028] ? p9_client_flush+0x430/0x430 [ 2618.016924] ? trace_hardirqs_on+0x5b/0x180 [ 2618.017853] ? lockdep_init_map_type+0x2c7/0x780 [ 2618.018854] ? __raw_spin_lock_init+0x36/0x110 [ 2618.019829] v9fs_session_init+0x1dd/0x1680 [ 2618.020739] ? lock_release+0x680/0x680 [ 2618.021607] ? kmem_cache_alloc_trace+0x151/0x320 [ 2618.022624] ? v9fs_show_options+0x690/0x690 [ 2618.023563] ? trace_hardirqs_on+0x5b/0x180 [ 2618.024473] ? kasan_unpoison_shadow+0x33/0x50 [ 2618.025447] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2618.026523] v9fs_mount+0x79/0x8f0 [ 2618.027272] ? v9fs_write_inode+0x60/0x60 [ 2618.028152] legacy_get_tree+0x105/0x220 [ 2618.029012] vfs_get_tree+0x8e/0x300 [ 2618.029805] path_mount+0x1490/0x21e0 [ 2618.030616] ? strncpy_from_user+0x9e/0x470 [ 2618.031526] ? finish_automount+0xa90/0xa90 [ 2618.032435] ? getname_flags.part.0+0x1dd/0x4f0 [ 2618.033430] ? _copy_from_user+0xfb/0x1b0 [ 2618.034318] __x64_sys_mount+0x282/0x300 [ 2618.035170] ? copy_mnt_ns+0xa00/0xa00 [ 2618.035996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2618.037102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2618.038200] do_syscall_64+0x33/0x40 [ 2618.038990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2618.040071] RIP: 0033:0x7fbbb2ce3b19 [ 2618.040860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2618.044741] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2618.046348] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2618.047849] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2618.049360] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2618.050860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2618.052369] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:45:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x20000, 0x118) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2618.093500] kmem_cache_create(9p-fcall-cache-122) failed with error -12 [ 2618.095033] CPU: 1 PID: 13584 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2618.096494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2618.098248] Call Trace: [ 2618.098803] dump_stack+0x107/0x167 [ 2618.099579] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2618.100688] p9_client_create+0xc6a/0x1230 [ 2618.101601] ? p9_client_flush+0x430/0x430 [ 2618.102497] ? trace_hardirqs_on+0x5b/0x180 [ 2618.103415] ? lockdep_init_map_type+0x2c7/0x780 [ 2618.104424] ? __raw_spin_lock_init+0x36/0x110 [ 2618.105400] v9fs_session_init+0x1dd/0x1680 [ 2618.106316] ? lock_release+0x680/0x680 [ 2618.107163] ? kmem_cache_alloc_trace+0x151/0x320 [ 2618.108178] ? v9fs_show_options+0x690/0x690 [ 2618.109114] ? trace_hardirqs_on+0x5b/0x180 [ 2618.110030] ? kasan_unpoison_shadow+0x33/0x50 [ 2618.110991] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2618.112065] v9fs_mount+0x79/0x8f0 [ 2618.112821] ? v9fs_write_inode+0x60/0x60 [ 2618.113703] legacy_get_tree+0x105/0x220 [ 2618.114559] vfs_get_tree+0x8e/0x300 [ 2618.115341] path_mount+0x1490/0x21e0 [ 2618.116148] ? strncpy_from_user+0x9e/0x470 [ 2618.117060] ? finish_automount+0xa90/0xa90 [ 2618.117978] ? getname_flags.part.0+0x1dd/0x4f0 [ 2618.118963] ? _copy_from_user+0xfb/0x1b0 [ 2618.119846] __x64_sys_mount+0x282/0x300 [ 2618.120699] ? copy_mnt_ns+0xa00/0xa00 [ 2618.121534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2618.122637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2618.123726] do_syscall_64+0x33/0x40 [ 2618.124509] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2618.125610] RIP: 0033:0x7fbbb2ce3b19 [ 2618.126392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2618.130313] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2618.131920] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2618.133427] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2618.134940] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2618.136439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2618.137945] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:45:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0xd7) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000a, 0x13, r3, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r0, 0x5, &(0x7f0000000000)="f4776cdbc5baff8da95307cf87c5860e9a9f3c983a7d3e177b927d8a144e57dd6af274c62ee4771fd327dbdfe681136595dec99b7e8f9cbef1d81a47637633a9cdf416fd3d10d585fdee63cdc00c56a2a4293c4e00c9e3cd911e2b6b81c6798e93c04569e51b53baecfb49989b908edbc16edd3be0039bfdbc3def10f8b35242cc9bb76f9c4daffb0906e2b439cdbc6f82527ea45720cf6a490ab85777903a199a6eb68780f528ebb16ba9cdabfce2cb5ed1c8c8e5a883752a5300cb6de6052989e7b04c8c05425f9cb7276a3538d62bcd02be89920457ca21e92034", 0xdc, 0x2, 0x1}, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:45:16 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 18:45:16 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, "390f9890006600000000000000ca84f400"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8b}}, './file1\x00'}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x6, 0x1, 0x1, 0xb3, 0x0, "85bcfad8d9f16c2b393687a5a2fef6d1e25399", 0x0, 0x1ff}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 18:45:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0xac, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:45:16 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,aname=v']) (fail_nth: 82) [ 2618.376776] FAULT_INJECTION: forcing a failure. [ 2618.376776] name failslab, interval 1, probability 0, space 0, times 0 [ 2618.379368] CPU: 1 PID: 13613 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2618.379380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2618.379397] Call Trace: [ 2618.383291] dump_stack+0x107/0x167 [ 2618.383315] should_fail.cold+0x5/0xa [ 2618.383338] ? create_object.isra.0+0x3a/0xa30 [ 2618.383357] should_failslab+0x5/0x20 [ 2618.383377] kmem_cache_alloc+0x5b/0x310 [ 2618.383407] ? __lockdep_reset_lock+0x180/0x180 [ 2618.388496] create_object.isra.0+0x3a/0xa30 [ 2618.389420] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2618.390485] kmem_cache_alloc+0x159/0x310 [ 2618.391358] __kernfs_new_node+0xd4/0x860 [ 2618.392238] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2618.393240] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2618.394253] ? wait_for_completion_io+0x270/0x270 [ 2618.395260] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2618.396370] kernfs_new_node+0x18d/0x250 [ 2618.397243] __kernfs_create_file+0x51/0x350 [ 2618.398181] sysfs_add_file_mode_ns+0x221/0x560 [ 2618.399164] internal_create_group+0x324/0xb30 [ 2618.400140] ? sysfs_remove_group+0x170/0x170 [ 2618.401071] ? kernfs_name_hash+0xe7/0x110 [ 2618.401981] ? kernfs_find_ns+0x256/0x380 [ 2618.402874] sysfs_slab_add+0x188/0x200 [ 2618.403728] __kmem_cache_create+0x3db/0x520 [ 2618.404671] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2618.405745] p9_client_create+0xc6a/0x1230 [ 2618.406659] ? p9_client_flush+0x430/0x430 [ 2618.407560] ? trace_hardirqs_on+0x5b/0x180 [ 2618.408483] ? lockdep_init_map_type+0x2c7/0x780 [ 2618.409507] ? __raw_spin_lock_init+0x36/0x110 [ 2618.410492] v9fs_session_init+0x1dd/0x1680 [ 2618.411413] ? lock_release+0x680/0x680 [ 2618.412269] ? kmem_cache_alloc_trace+0x151/0x320 [ 2618.413300] ? v9fs_show_options+0x690/0x690 [ 2618.414247] ? trace_hardirqs_on+0x5b/0x180 [ 2618.415164] ? kasan_unpoison_shadow+0x33/0x50 [ 2618.416135] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2618.417224] v9fs_mount+0x79/0x8f0 [ 2618.417985] ? v9fs_write_inode+0x60/0x60 [ 2618.418864] legacy_get_tree+0x105/0x220 [ 2618.419741] vfs_get_tree+0x8e/0x300 [ 2618.420533] path_mount+0x1490/0x21e0 [ 2618.421363] ? strncpy_from_user+0x9e/0x470 [ 2618.422290] ? finish_automount+0xa90/0xa90 [ 2618.423209] ? getname_flags.part.0+0x1dd/0x4f0 [ 2618.424199] ? _copy_from_user+0xfb/0x1b0 [ 2618.425091] __x64_sys_mount+0x282/0x300 [ 2618.425972] ? copy_mnt_ns+0xa00/0xa00 [ 2618.426804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2618.427921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2618.429024] do_syscall_64+0x33/0x40 [ 2618.429827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2618.430921] RIP: 0033:0x7fbbb2ce3b19 [ 2618.431715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2618.435610] RSP: 002b:00007fbbb0259188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2618.437255] RAX: ffffffffffffffda RBX: 00007fbbb2df6f60 RCX: 00007fbbb2ce3b19 [ 2618.438772] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 2618.440289] RBP: 00007fbbb02591d0 R08: 0000000020000440 R09: 0000000000000000 [ 2618.441817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2618.443326] R13: 00007ffc58dd241f R14: 00007fbbb0259300 R15: 0000000000022000 18:45:16 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003f02000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040", 0x1f, 0x4e0}], 0x41, &(0x7f0000012e00)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 18:45:16 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) VM DIAGNOSIS: 18:50:25 Registers: info registers vcpu 0 RAX=ffffffff83e9c9b0 RBX=0000000000000000 RCX=ffffffff83e8461c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9d178 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8567ac88 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9c9be RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb9bde90010 CR3=0000000019eae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004152bc5400000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e9c9b0 RBX=0000000000000001 RCX=ffffffff83e8461c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9d178 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff8567ac88 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9c9be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556506a2b678 CR3=0000000019eae000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2790453f351b4022a1e8b46d868991b6 XMM02=d6e101dfefa8ce6fc8e0fbfedd09b9de XMM03=51e0aeb2a2e3c3fe3a229c874aae0e9e XMM04=000000c0041790200000000000ea89c0 XMM05=000000c0041790a00000000000ea89c0 XMM06=000000c0041790e00000000000ea89c0 XMM07=000000c0041791200000000000ea89c0 XMM08=000000c0000001800000000000000000 XMM09=0000000000b127a8000000c000f81fae XMM10=00000000004643c10000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=76407b202c7d7b7b202c307830202c30 XMM14=7d64696f7640202c7d3878307b3d6c61 XMM15=29307830202c7d7d63317830202c7d7d