0180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:15:32 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 42) [ 1425.288405] cgroup: Invalid name [ 1425.323589] FAULT_INJECTION: forcing a failure. [ 1425.323589] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.326093] CPU: 1 PID: 10136 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1425.327524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1425.329208] Call Trace: [ 1425.329753] dump_stack+0x107/0x167 [ 1425.330512] should_fail.cold+0x5/0xa [ 1425.331287] ? create_object.isra.0+0x3a/0xa20 [ 1425.332211] should_failslab+0x5/0x20 [ 1425.332988] kmem_cache_alloc+0x5b/0x310 [ 1425.333808] create_object.isra.0+0x3a/0xa20 [ 1425.334717] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1425.335737] kmem_cache_alloc_trace+0x151/0x320 [ 1425.336675] ? lockdep_init_map_type+0x2c7/0x780 [ 1425.337629] ? shmem_create+0x30/0x30 [ 1425.338411] shmem_init_fs_context+0x41/0x280 [ 1425.339311] ? shmem_create+0x30/0x30 [ 1425.340081] alloc_fs_context+0x4fd/0x840 [ 1425.340925] path_mount+0xa72/0x20b0 [ 1425.341681] ? strncpy_from_user+0x9e/0x470 [ 1425.342564] ? finish_automount+0xa90/0xa90 [ 1425.343436] ? getname_flags.part.0+0x1dd/0x4f0 [ 1425.344388] __x64_sys_mount+0x282/0x300 [ 1425.345209] ? copy_mnt_ns+0xa00/0xa00 [ 1425.345999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1425.347067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1425.348104] do_syscall_64+0x33/0x40 [ 1425.348860] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1425.349890] RIP: 0033:0x7fcb00d4104a [ 1425.350645] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1425.354323] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1425.355876] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1425.357304] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1425.358764] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1425.360210] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1425.361653] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:15:45 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 43) 08:15:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0xc5}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:15:45 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:15:45 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:15:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(r0, 0x3, 0x0, 0x30000000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xb, 0x20, 0x0, 0x1, 0x3ff, 0x2, 0x3, 0x0, 0x12c, 0x40, 0xac, 0xc609, 0xf7, 0x38, 0x2, 0xfff8, 0x3, 0x7}, [{0x0, 0x5, 0x7, 0x7ff, 0xfffffffffffff801, 0x1f, 0x9, 0x2}, {0x6, 0x40, 0x3, 0x3, 0x7, 0x1f, 0x8001, 0x800}], "9d45171eee742c2368c2e8ce0074cb5303ad3dabd7e92de83e921b14b8911804a616563851e0221e7748b1ccb3098590a7168821626f9a72d2c567a157119b0e74c90c9330b78afbad3cb27fc30af78a245f66af65b4da369c2d11362172a05be8b70db04a3d1e2a46e0407b770b125e1124f30b72ade19c287bf220a8041e039db5b435f8e78d09685824e455345ade61fa4791b35afe28e8c771020bac2914f4c28afab873bdd83e05b416e4ba3b53158701cc8bf8c287dc336d4dd74006929e97884f2750543164991be336fb96cc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x780) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x1c) dup2(r2, r3) 08:15:45 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:15:45 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xf97, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="7b9936215b6a0fdfa6d1d5e36a3abac87e1489972242a72abc3f77ce4b533638769c07f3a8ec4584d0ea38d3ad4a11142b62bd697cd308a21e6dd8fe11e8e06d308eaebca3bcfc61364ec99677154d0e7e4ac86effcb2def21f4e44181990a485b2ea486c6205f880a0f14ea01d2373ba9fca2d2dd49e95693d8eed45a911f10294cabe3d04166745608f1704e6f402cedddf783ccc0188933a11d1a8725bffc5714f0c7eb517ca35cfe3ba1491cc754f12d0b66449019d9ab02dedb", 0xbc, 0x8}], 0x10, &(0x7f0000000200)={[{@huge_advise}, {@huge_within_size}, {@mode={'mode', 0x3d, 0xb6f9}}, {@size={'size', 0x3d, [0x78]}}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x37, 0x67, 0x37, 0xfd8d756baf86dd4a, 0x288f2651c75157ed, 0x38, 0x6d]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x35, 0x25]}}, {@huge_within_size}], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\\'}}, {@permit_directio}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsroot}, {@subj_user={'subj_user', 0x3d, '[+.$'}}, {@pcr={'pcr', 0x3d, 0x19}}, {@subj_type={'subj_type', 0x3d, ']})#)[$'}}, {@pcr={'pcr', 0x3d, 0x29}}]}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) setresuid(0xee00, r0, 0x0) setuid(r0) 08:15:45 executing program 5: statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r0, r1, 0x1000) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, 0x90}}, {@resgid={'resgid', 0x3d, r1}}, {@bsdgroups}, {@jqfmt_vfsold}], [{@uid_lt={'uid<', r0}}]}) 08:15:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1438.786008] FAULT_INJECTION: forcing a failure. [ 1438.786008] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.788365] CPU: 0 PID: 10156 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1438.789777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1438.791495] Call Trace: [ 1438.792039] dump_stack+0x107/0x167 [ 1438.792779] should_fail.cold+0x5/0xa [ 1438.793565] should_failslab+0x5/0x20 [ 1438.794334] __kmalloc_track_caller+0x79/0x370 [ 1438.794359] ? vfs_parse_fs_string+0xc0/0x150 [ 1438.795816] kmemdup_nul+0x2d/0xa0 [ 1438.796549] vfs_parse_fs_string+0xc0/0x150 [ 1438.797437] ? vfs_parse_fs_param+0x560/0x560 [ 1438.798374] shmem_parse_options+0x160/0x250 [ 1438.799295] path_mount+0x1376/0x20b0 [ 1438.800085] ? strncpy_from_user+0x9e/0x470 08:15:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(r0, 0x3, 0x0, 0x30000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1c) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x1c) sendfile(r1, r2, &(0x7f0000000040)=0x100000000, 0x1a51) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x1c) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1c) sendfile(0xffffffffffffffff, r0, 0x0, 0x9) [ 1438.800975] ? finish_automount+0xa90/0xa90 [ 1438.801944] ? getname_flags.part.0+0x1dd/0x4f0 [ 1438.802918] __x64_sys_mount+0x282/0x300 [ 1438.803747] ? copy_mnt_ns+0xa00/0xa00 [ 1438.804558] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1438.804576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1438.804600] do_syscall_64+0x33/0x40 [ 1438.804621] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1438.804633] RIP: 0033:0x7fcb00d4104a [ 1438.804651] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1438.804661] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 08:15:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x8d, @dev={0xfe, 0x80, '\x00', 0x13}, 0xffff02f2}}, 0x0, 0x0, 0x4f, 0x0, "c3b4808c1817f9e3af661c12180118e5c6619c99dc8768491e0134eb39f742b4d7f06a000d102da51d9be241c9f2acc9f173d03072e4a9ffeef6d006fe0e1200ab51a6c88f953f99c92bda16cfe064b4"}, 0xd8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000800006900e6653b", @ANYRES32=r0, @ANYBLOB]) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) lseek(0xffffffffffffffff, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r5 = getpgrp(0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0xde, 0x0, 0x1, 0x0, r5}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000002c0)) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback, 0x7f}, 0x1c) sendfile(r0, r4, 0x0, 0xb5) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x800) [ 1438.804680] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1438.804691] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1438.804701] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1438.804711] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1438.804721] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:15:45 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) fsmount(r2, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:15:45 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:15:45 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) setuid(r0) [ 1438.902645] cgroup: Invalid name 08:16:01 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x7, 0xd302, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000100), 0xb}, 0x8, 0x1dcf328e, 0x0, 0x0, 0x6, 0x8, 0xfff, 0x0, 0xbd, 0x0, 0x9}, 0x0, 0x6, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x301800, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0xfffffffffffffffe) ioctl$VT_DISALLOCATE(r2, 0x5608) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x800) ioctl$VT_DISALLOCATE(r1, 0x5608) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x1c) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000003c0)={0x0, 0x9}) 08:16:01 executing program 6: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 08:16:01 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:16:01 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x11, "a88c418a0efc02fd69e4ce"}, 0xd, 0x2) 08:16:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x2}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:16:01 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) fsmount(r2, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:01 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:01 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 44) 08:16:01 executing program 4: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) ioprio_set$uid(0x0, r1, 0x4004) 08:16:01 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xd4, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xb8, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7565}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x405}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x81}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x24, 0x1, @random="b590c4b719a208723db46e55704d4e9aec6c1e917eebcfcc64219103dae791c2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000001}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:iptables_unit_file_t:s0\x00', 0x2a, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x4e21, 0xd44, @loopback, 0x6}, {0xa, 0x4e21, 0xff, @private0, 0xd49}, 0x2, [0x540f, 0xb869, 0x6, 0x8, 0xa63, 0x4, 0x7, 0x93]}, 0x5c) 08:16:01 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 45) 08:16:01 executing program 4: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x8) [ 1454.472224] FAULT_INJECTION: forcing a failure. [ 1454.472224] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.472246] CPU: 0 PID: 10195 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1454.472255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1454.472261] Call Trace: [ 1454.472283] dump_stack+0x107/0x167 [ 1454.472306] should_fail.cold+0x5/0xa 08:16:01 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, 0x0, 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1454.472325] ? create_object.isra.0+0x3a/0xa20 [ 1454.472346] should_failslab+0x5/0x20 [ 1454.472363] kmem_cache_alloc+0x5b/0x310 [ 1454.472385] create_object.isra.0+0x3a/0xa20 [ 1454.472403] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1454.472426] kmem_cache_alloc_trace+0x151/0x320 [ 1454.472445] ? do_raw_spin_lock+0x121/0x260 [ 1454.472465] alloc_super+0x52/0xa90 [ 1454.472485] sget_fc+0x13e/0x750 [ 1454.472501] ? set_anon_super+0xc0/0xc0 [ 1454.472522] ? shmem_put_link+0x120/0x120 [ 1454.472537] get_tree_nodev+0x24/0x1d0 [ 1454.472554] vfs_get_tree+0x8e/0x300 [ 1454.472574] path_mount+0x13be/0x20b0 [ 1454.472597] ? strncpy_from_user+0x9e/0x470 [ 1454.472617] ? finish_automount+0xa90/0xa90 [ 1454.472635] ? getname_flags.part.0+0x1dd/0x4f0 [ 1454.472665] __x64_sys_mount+0x282/0x300 [ 1454.472684] ? copy_mnt_ns+0xa00/0xa00 [ 1454.472706] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1454.472724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1454.472747] do_syscall_64+0x33/0x40 [ 1454.472767] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1454.472779] RIP: 0033:0x7fcb00d4104a [ 1454.472797] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1454.472807] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1454.472826] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1454.472843] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1454.472853] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1454.472863] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1454.472873] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1454.569661] cgroup: Invalid name [ 1454.629476] FAULT_INJECTION: forcing a failure. [ 1454.629476] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.629490] CPU: 1 PID: 10214 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1454.629496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1454.629499] Call Trace: [ 1454.629514] dump_stack+0x107/0x167 [ 1454.629530] should_fail.cold+0x5/0xa [ 1454.629542] ? alloc_super+0x52/0xa90 [ 1454.629554] should_failslab+0x5/0x20 [ 1454.629566] kmem_cache_alloc_trace+0x55/0x320 [ 1454.629578] ? do_raw_spin_lock+0x121/0x260 [ 1454.629589] alloc_super+0x52/0xa90 [ 1454.629601] sget_fc+0x13e/0x750 [ 1454.629610] ? set_anon_super+0xc0/0xc0 [ 1454.629624] ? shmem_put_link+0x120/0x120 [ 1454.629633] get_tree_nodev+0x24/0x1d0 [ 1454.629644] vfs_get_tree+0x8e/0x300 [ 1454.629662] path_mount+0x13be/0x20b0 [ 1454.629679] ? strncpy_from_user+0x9e/0x470 [ 1454.629697] ? finish_automount+0xa90/0xa90 [ 1454.629707] ? getname_flags.part.0+0x1dd/0x4f0 [ 1454.629726] __x64_sys_mount+0x282/0x300 [ 1454.629738] ? copy_mnt_ns+0xa00/0xa00 [ 1454.629754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1454.629767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1454.629783] do_syscall_64+0x33/0x40 [ 1454.629797] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1454.629804] RIP: 0033:0x7fcb00d4104a [ 1454.629815] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1454.629821] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1454.629838] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1454.629845] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1454.629852] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1454.629858] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1454.629864] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:16:14 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) fsmount(r2, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:14 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r3, r4, 0x1000) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r5, r6, 0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@fscache}], [{@fowner_gt={'fowner>', r2}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x26}}, {@fowner_lt={'fowner<', r3}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_gt={'fowner>', r5}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) setuid(r0) 08:16:14 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'lo\x00', 0x0}) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e21, 0x3f, @local}, 0x1c) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000000180)="7107cca2e5d5c8b2d7474f99c416499256c3607027c7a1") connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @empty, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000001c0), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/220, 0xdc}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000700086693b64d25764904000098e5fcff7010000e589567fb998dbb366612feadc292d64691fbaae08e28e25b378db6e8be8258b0ee5056dc13fdfd3eef23d74723f56bd97d1aa9f2460b312071905e1b101e53ae0860", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}, 0x23) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) dup2(0xffffffffffffffff, r1) pipe(0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000300)={0x3b, @multicast2, 0x4e21, 0x4, 'wlc\x00', 0x5, 0x200, 0x59}, 0x2c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240)={0x1}, 0x8) 08:16:14 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x7, 0xd302, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000100), 0xb}, 0x8, 0x1dcf328e, 0x0, 0x0, 0x6, 0x8, 0xfff, 0x0, 0xbd, 0x0, 0x9}, 0x0, 0x6, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x301800, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0xfffffffffffffffe) ioctl$VT_DISALLOCATE(r2, 0x5608) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x800) ioctl$VT_DISALLOCATE(r1, 0x5608) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x1c) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000003c0)={0x0, 0x9}) 08:16:14 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 46) 08:16:14 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, 0x0, 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x7}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:16:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1467.930050] FAULT_INJECTION: forcing a failure. [ 1467.930050] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.932089] CPU: 1 PID: 10240 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1467.933133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1467.934377] Call Trace: [ 1467.934793] dump_stack+0x107/0x167 [ 1467.935477] should_fail.cold+0x5/0xa [ 1467.936137] ? create_object.isra.0+0x3a/0xa20 [ 1467.936969] should_failslab+0x5/0x20 [ 1467.937663] kmem_cache_alloc+0x5b/0x310 08:16:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x8}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:16:15 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000700)={{}, "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"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x54) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000240)) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0xffffff8a) setgid(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x90010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x268f, 0x0, @perf_config_ext={0x0, 0x71}, 0x8408, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xfffdfffffffffffb, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x430b, &(0x7f0000000280)={0x0, 0xe634, 0x4, 0x1, 0x92, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x700000000, &(0x7f0000000440), 0x0, 0x0, 0x1}, 0x7fff) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 08:16:15 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 47) [ 1467.938481] create_object.isra.0+0x3a/0xa20 [ 1467.938509] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1467.938526] kmem_cache_alloc_trace+0x151/0x320 [ 1467.938539] ? down_write_nested+0xe4/0x160 [ 1467.938559] selinux_sb_alloc_security+0x41/0x220 [ 1467.938573] security_sb_alloc+0x46/0xa0 [ 1467.938586] alloc_super+0x1ed/0xa90 08:16:15 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 48) 08:16:15 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) r2 = semget$private(0x0, 0x7, 0x0) semtimedop(r2, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x10) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)='./file1\x00', 0x2, 0x4000, 0x1}, 0x1) r8 = semget$private(0x0, 0x7, 0x0) semtimedop(r8, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1, 0x0) semctl$IPC_RMID(r8, 0x0, 0x10) semctl$IPC_RMID(r8, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r10, r11, 0x1000) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000340)={{0x0, r7, r9, r10, r1, 0x8, 0x9}, 0x100000001, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 1467.938602] sget_fc+0x13e/0x750 [ 1467.938614] ? set_anon_super+0xc0/0xc0 [ 1467.938635] ? shmem_put_link+0x120/0x120 [ 1467.938646] get_tree_nodev+0x24/0x1d0 [ 1467.938659] vfs_get_tree+0x8e/0x300 08:16:15 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1467.938674] path_mount+0x13be/0x20b0 [ 1467.938691] ? strncpy_from_user+0x9e/0x470 [ 1467.938707] ? finish_automount+0xa90/0xa90 08:16:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, 0x0, 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1467.938720] ? getname_flags.part.0+0x1dd/0x4f0 08:16:15 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, 0x0, &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1467.938743] __x64_sys_mount+0x282/0x300 [ 1467.938757] ? copy_mnt_ns+0xa00/0xa00 [ 1467.938773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1467.938787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1467.938805] do_syscall_64+0x33/0x40 [ 1467.938820] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1467.938829] RIP: 0033:0x7fcb00d4104a [ 1467.938843] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1467.938850] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1467.938865] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1467.938872] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1467.938889] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1467.938897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1467.938904] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1468.046483] cgroup: Invalid name [ 1468.076735] FAULT_INJECTION: forcing a failure. [ 1468.076735] name failslab, interval 1, probability 0, space 0, times 0 08:16:15 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) lchown(&(0x7f0000000040)='./file0\x00', r0, r1) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r2, r3, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r1}}, './file0\x00'}) setuid(r0) [ 1468.076751] CPU: 1 PID: 10252 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1468.076764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 08:16:15 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 49) [ 1468.076769] Call Trace: [ 1468.076787] dump_stack+0x107/0x167 [ 1468.076806] should_fail.cold+0x5/0xa [ 1468.076824] ? selinux_sb_alloc_security+0x41/0x220 [ 1468.076841] should_failslab+0x5/0x20 [ 1468.076855] kmem_cache_alloc_trace+0x55/0x320 [ 1468.076871] ? down_write_nested+0xe4/0x160 [ 1468.076890] selinux_sb_alloc_security+0x41/0x220 [ 1468.076907] security_sb_alloc+0x46/0xa0 [ 1468.076924] alloc_super+0x1ed/0xa90 [ 1468.076944] sget_fc+0x13e/0x750 [ 1468.076960] ? set_anon_super+0xc0/0xc0 [ 1468.076983] ? shmem_put_link+0x120/0x120 08:16:15 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, 0x0, &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1468.076999] get_tree_nodev+0x24/0x1d0 [ 1468.077019] vfs_get_tree+0x8e/0x300 [ 1468.077042] path_mount+0x13be/0x20b0 [ 1468.077067] ? strncpy_from_user+0x9e/0x470 [ 1468.077089] ? finish_automount+0xa90/0xa90 [ 1468.077108] ? getname_flags.part.0+0x1dd/0x4f0 [ 1468.077142] __x64_sys_mount+0x282/0x300 [ 1468.077164] ? copy_mnt_ns+0xa00/0xa00 [ 1468.077188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.077207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.077230] do_syscall_64+0x33/0x40 [ 1468.077251] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1468.077263] RIP: 0033:0x7fcb00d4104a [ 1468.077285] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.077296] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1468.077316] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1468.077328] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1468.077339] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1468.077352] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1468.077364] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1468.191673] FAULT_INJECTION: forcing a failure. [ 1468.191673] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.191696] CPU: 1 PID: 10262 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1468.191707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.191713] Call Trace: [ 1468.191736] dump_stack+0x107/0x167 [ 1468.191761] should_fail.cold+0x5/0xa [ 1468.191786] ? create_object.isra.0+0x3a/0xa20 [ 1468.191816] should_failslab+0x5/0x20 [ 1468.191846] kmem_cache_alloc+0x5b/0x310 [ 1468.191866] ? mark_held_locks+0x9e/0xe0 [ 1468.191890] create_object.isra.0+0x3a/0xa20 [ 1468.191917] kmemleak_alloc_percpu+0xa0/0x100 [ 1468.191942] pcpu_alloc+0x4e2/0x1240 [ 1468.191980] __percpu_init_rwsem+0x22/0x150 [ 1468.192001] alloc_super+0x232/0xa90 [ 1468.192024] sget_fc+0x13e/0x750 [ 1468.192043] ? set_anon_super+0xc0/0xc0 [ 1468.192067] ? shmem_put_link+0x120/0x120 [ 1468.192083] get_tree_nodev+0x24/0x1d0 [ 1468.192103] vfs_get_tree+0x8e/0x300 [ 1468.192126] path_mount+0x13be/0x20b0 [ 1468.192151] ? strncpy_from_user+0x9e/0x470 [ 1468.192175] ? finish_automount+0xa90/0xa90 [ 1468.192195] ? getname_flags.part.0+0x1dd/0x4f0 [ 1468.192230] __x64_sys_mount+0x282/0x300 [ 1468.192252] ? copy_mnt_ns+0xa00/0xa00 [ 1468.192277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.192296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.192322] do_syscall_64+0x33/0x40 [ 1468.192345] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1468.192358] RIP: 0033:0x7fcb00d4104a [ 1468.192379] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.192389] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1468.192411] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1468.192423] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1468.192434] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1468.192445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1468.192457] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1468.271448] cgroup: Invalid name [ 1468.409437] FAULT_INJECTION: forcing a failure. [ 1468.409437] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.409459] CPU: 1 PID: 10272 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1468.409469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.409474] Call Trace: [ 1468.409496] dump_stack+0x107/0x167 [ 1468.409520] should_fail.cold+0x5/0xa [ 1468.409540] ? create_object.isra.0+0x3a/0xa20 [ 1468.409562] should_failslab+0x5/0x20 [ 1468.409587] kmem_cache_alloc+0x5b/0x310 [ 1468.409610] create_object.isra.0+0x3a/0xa20 [ 1468.409635] kmemleak_alloc_percpu+0xa0/0x100 [ 1468.409657] pcpu_alloc+0x4e2/0x1240 [ 1468.409693] __percpu_init_rwsem+0x22/0x150 [ 1468.409711] alloc_super+0x232/0xa90 [ 1468.409733] sget_fc+0x13e/0x750 [ 1468.409749] ? set_anon_super+0xc0/0xc0 [ 1468.409770] ? shmem_put_link+0x120/0x120 [ 1468.409785] get_tree_nodev+0x24/0x1d0 [ 1468.409803] vfs_get_tree+0x8e/0x300 [ 1468.409825] path_mount+0x13be/0x20b0 [ 1468.409848] ? strncpy_from_user+0x9e/0x470 [ 1468.409870] ? finish_automount+0xa90/0xa90 [ 1468.409888] ? getname_flags.part.0+0x1dd/0x4f0 [ 1468.409919] __x64_sys_mount+0x282/0x300 [ 1468.409939] ? copy_mnt_ns+0xa00/0xa00 [ 1468.409962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.409985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.410016] do_syscall_64+0x33/0x40 [ 1468.410036] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1468.410048] RIP: 0033:0x7fcb00d4104a [ 1468.410066] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.410076] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1468.410095] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1468.410106] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1468.410116] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1468.410126] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1468.410137] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:16:32 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:16:32 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:32 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="0300000000000000f8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000040)={[{@shortname_mixed}]}) stat(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000140)) 08:16:32 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000003c0)={'team_slave_1\x00', 0xff00}) restart_syscall() r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) fallocate(r2, 0x0, 0x3, 0x6d) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_setup(0x7c19, &(0x7f0000000340)={0x0, 0x9f03, 0x20, 0x4, 0x331, 0x0, r3}) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x52002, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)={0x7}) write$P9_RREADLINK(r1, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r1, 0x3, 0x900500, 0x30000000000) recvmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000000), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/185, 0xb9}, {&(0x7f0000000140)=""/124, 0x7c}], 0x2}, 0x32020) io_uring_setup(0x6d79, &(0x7f0000000400)={0x0, 0x0, 0x10}) r5 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x10100) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) 08:16:32 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, 0x0, &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:32 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000080)=""/142, 0x8e) setresuid(0xee00, r0, 0x0) setuid(r0) 08:16:32 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 50) 08:16:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x9}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1485.740503] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1485.747406] FAULT_INJECTION: forcing a failure. [ 1485.747406] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.749733] CPU: 1 PID: 10291 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1485.749743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.749748] Call Trace: [ 1485.749769] dump_stack+0x107/0x167 [ 1485.749792] should_fail.cold+0x5/0xa [ 1485.749812] ? create_object.isra.0+0x3a/0xa20 [ 1485.749838] should_failslab+0x5/0x20 [ 1485.749855] kmem_cache_alloc+0x5b/0x310 [ 1485.749874] ? mark_held_locks+0x9e/0xe0 [ 1485.749895] create_object.isra.0+0x3a/0xa20 [ 1485.749920] kmemleak_alloc_percpu+0xa0/0x100 [ 1485.749942] pcpu_alloc+0x4e2/0x1240 [ 1485.749976] __percpu_init_rwsem+0x22/0x150 [ 1485.749995] alloc_super+0x232/0xa90 [ 1485.750016] sget_fc+0x13e/0x750 [ 1485.750032] ? set_anon_super+0xc0/0xc0 [ 1485.750053] ? shmem_put_link+0x120/0x120 [ 1485.750068] get_tree_nodev+0x24/0x1d0 [ 1485.750086] vfs_get_tree+0x8e/0x300 [ 1485.750107] path_mount+0x13be/0x20b0 [ 1485.750130] ? strncpy_from_user+0x9e/0x470 [ 1485.750151] ? finish_automount+0xa90/0xa90 [ 1485.750169] ? getname_flags.part.0+0x1dd/0x4f0 [ 1485.750201] __x64_sys_mount+0x282/0x300 [ 1485.750221] ? copy_mnt_ns+0xa00/0xa00 [ 1485.750243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1485.750260] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1485.750284] do_syscall_64+0x33/0x40 [ 1485.750305] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1485.750316] RIP: 0033:0x7fcb00d4104a [ 1485.750336] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.750347] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1485.750367] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1485.750378] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1485.750389] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1485.750400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1485.750410] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1485.791468] cgroup: Invalid name 08:16:32 executing program 6: r0 = getpgid(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f6, 0x100, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000814}, 0x2004c880) write$cgroup_pid(r1, &(0x7f0000001780)=r0, 0x12) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/ipc\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000100)=""/79, 0x4f}, {0x0}, {&(0x7f00000002c0)=""/147, 0x93}], 0x3, 0xfffffffe, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:16:32 executing program 4: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x8, 0x3, &(0x7f0000000480)=[{&(0x7f0000000340)="df59cb1f40f49fda75d9f3e1b9eae3094fbbcfbffbb958be49193c3aaef580afe9e5830effb2a2ac07ad6b6970ff65f9033837", 0x33, 0x3ff}, {&(0x7f0000000380)="dac39d828b8e766a0671569d211cf795fca98ba7963cdf99ff5bfc62fd13f89f1b29", 0x22, 0x41}, {&(0x7f00000003c0)="46eabdc57aef4bb8465a7c0b9bc2b1f8b24269d697260b4ca4dc54c7750bbd24b8c5bde96a7f3734c9bfe990981e2ca1f7fad27e493fedff777ba6cbba347da592e4df61e6081ed4e423c5258b5172a2ddd07544c2a7806675cc40b9bec719b8bc3a5eb47a2ba647f67d0495f87d27ee006ee5c642b32619adfa26b68b57ba6063", 0x81, 0x80000000}], 0x24, &(0x7f0000000500)={[{'\x16.[\'-'}, {']^\'{]'}, {}, {'!\\'}, {}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, ')('}}]}) open(&(0x7f0000000280)='./file0\x00', 0x121000, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, 0x3d, 0x2, 0x70bd2a, 0x25dfdbff, {0x1e}, [@generic="bdadc0a02d1e96c11677272db418199d2f15d76b748bd128a5f60a5f110415ce73a094afef7231b9f8c0767387c6b7fef018513b7e514bc4f4b76d728745e583d78a84dcdd614ff512c79d1a72d0838a1e489631c544b38a9b902a18384ad9201da7269b691754b2fecb4d3cf45701b7fbb78c5538c8474fd90b6f5a8a5448f864b9b0240801f337013e188cde3a62e50fd2fb59e7d8cdcd5ee9005692046fcd7d7917549d34f8b7", @typed={0x8, 0x30, 0x0, 0x0, @fd}, @typed={0x8, 0x4a, 0x0, 0x0, @uid=r0}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x2004081d) setuid(r0) 08:16:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xa}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:16:32 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:16:32 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 51) [ 1485.997278] FAULT_INJECTION: forcing a failure. [ 1485.997278] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.999683] CPU: 0 PID: 10314 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1486.001105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.002789] Call Trace: [ 1486.003343] dump_stack+0x107/0x167 [ 1486.004082] should_fail.cold+0x5/0xa [ 1486.004858] ? create_object.isra.0+0x3a/0xa20 [ 1486.005803] should_failslab+0x5/0x20 [ 1486.006572] kmem_cache_alloc+0x5b/0x310 [ 1486.007416] create_object.isra.0+0x3a/0xa20 [ 1486.008315] kmemleak_alloc_percpu+0xa0/0x100 [ 1486.009214] pcpu_alloc+0x4e2/0x1240 [ 1486.009984] __percpu_init_rwsem+0x22/0x150 [ 1486.010847] alloc_super+0x232/0xa90 [ 1486.011615] sget_fc+0x13e/0x750 [ 1486.012297] ? set_anon_super+0xc0/0xc0 [ 1486.013110] ? shmem_put_link+0x120/0x120 [ 1486.013953] get_tree_nodev+0x24/0x1d0 [ 1486.014744] vfs_get_tree+0x8e/0x300 [ 1486.015519] path_mount+0x13be/0x20b0 [ 1486.016305] ? strncpy_from_user+0x9e/0x470 [ 1486.017176] ? finish_automount+0xa90/0xa90 [ 1486.018039] ? getname_flags.part.0+0x1dd/0x4f0 [ 1486.018998] __x64_sys_mount+0x282/0x300 [ 1486.019833] ? copy_mnt_ns+0xa00/0xa00 [ 1486.020639] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.021688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.022745] do_syscall_64+0x33/0x40 [ 1486.023508] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1486.024542] RIP: 0033:0x7fcb00d4104a [ 1486.025313] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.029058] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1486.030603] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1486.032045] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1486.033506] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1486.034957] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1486.036397] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1486.057177] cgroup: Invalid name 08:16:33 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:33 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:33 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000003c0)={'team_slave_1\x00', 0xff00}) restart_syscall() r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) fallocate(r2, 0x0, 0x3, 0x6d) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_setup(0x7c19, &(0x7f0000000340)={0x0, 0x9f03, 0x20, 0x4, 0x331, 0x0, r3}) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x52002, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)={0x7}) write$P9_RREADLINK(r1, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r1, 0x3, 0x900500, 0x30000000000) recvmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000000), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/185, 0xb9}, {&(0x7f0000000140)=""/124, 0x7c}], 0x2}, 0x32020) io_uring_setup(0x6d79, &(0x7f0000000400)={0x0, 0x0, 0x10}) r5 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x10100) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) 08:16:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xc}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:16:33 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) fstat(0xffffffffffffffff, &(0x7f0000000000)) 08:16:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xd}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:16:46 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:46 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:16:46 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="013820230000000012dbe60700000000000000f38585c16ef75824ef17873f0000000000000000"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) r1 = add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x48, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) socket$packet(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$search(0xa, r1, &(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x2}, r2) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:16:46 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 52) 08:16:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r2, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r2, 0x3, 0x900500, 0x30000000000) write$hidraw(r2, &(0x7f0000000140)="5398bd2115bbde2e94c8785cc014783c0e4d6b8d5c10b37b7ed1d90ce2c638d5cbab63a32f045c01d063dff7331e573d0a353e09af57f07ac26337bce5057949f599610760d176273fb29f40275461825fe862dc107937603813886196d68ead4bd7de2ca9cc89f70ebb6f3f8855774a2b29548eaed54122d23874643956099de6b8f603402953d3fe88e5ab7c619a4eb35ee95997db4939075893aafffea10aac991727bc2c4ac7c3603d57049b138aac728636eb5d96", 0xb7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/241) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001800210c00000000000000008020"], 0x28}}, 0xc004) 08:16:46 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r0, r1) setuid(r0) [ 1499.812086] FAULT_INJECTION: forcing a failure. [ 1499.812086] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.813349] CPU: 0 PID: 10348 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1499.814238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1499.815124] Call Trace: [ 1499.815487] dump_stack+0x107/0x167 [ 1499.815957] should_fail.cold+0x5/0xa [ 1499.816450] ? create_object.isra.0+0x3a/0xa20 [ 1499.817037] should_failslab+0x5/0x20 [ 1499.817525] kmem_cache_alloc+0x5b/0x310 [ 1499.818048] ? mark_held_locks+0x9e/0xe0 [ 1499.818575] create_object.isra.0+0x3a/0xa20 [ 1499.819156] kmemleak_alloc_percpu+0xa0/0x100 [ 1499.819741] pcpu_alloc+0x4e2/0x1240 [ 1499.820232] __percpu_init_rwsem+0x22/0x150 [ 1499.820786] alloc_super+0x232/0xa90 [ 1499.821250] sget_fc+0x13e/0x750 [ 1499.821592] ? set_anon_super+0xc0/0xc0 [ 1499.821995] ? shmem_put_link+0x120/0x120 [ 1499.822404] get_tree_nodev+0x24/0x1d0 [ 1499.822799] vfs_get_tree+0x8e/0x300 [ 1499.823196] path_mount+0x13be/0x20b0 [ 1499.823597] ? strncpy_from_user+0x9e/0x470 [ 1499.824026] ? finish_automount+0xa90/0xa90 [ 1499.824499] ? getname_flags.part.0+0x1dd/0x4f0 [ 1499.824965] __x64_sys_mount+0x282/0x300 [ 1499.825369] ? copy_mnt_ns+0xa00/0xa00 [ 1499.825789] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1499.826311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1499.826828] do_syscall_64+0x33/0x40 [ 1499.827227] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1499.827749] RIP: 0033:0x7fcb00d4104a [ 1499.828149] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1499.829960] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1499.830741] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1499.831478] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1499.832218] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1499.832981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1499.833714] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1499.852874] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1499.859389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 08:16:46 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:46 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 53) 08:16:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xe}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:16:46 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x20, 0x7fff}) setresuid(0xee00, r0, 0x0) setuid(r0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r3, r0) [ 1499.909311] cgroup: Invalid name 08:16:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xf794}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)) [ 1499.949615] FAULT_INJECTION: forcing a failure. [ 1499.949615] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.950825] CPU: 0 PID: 10364 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1499.951526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1499.952396] Call Trace: [ 1499.952678] dump_stack+0x107/0x167 [ 1499.953071] should_fail.cold+0x5/0xa [ 1499.953496] ? prealloc_shrinker+0xb0/0x2f0 [ 1499.953979] should_failslab+0x5/0x20 [ 1499.954393] __kmalloc+0x72/0x390 [ 1499.954777] prealloc_shrinker+0xb0/0x2f0 [ 1499.955234] ? __init_rwsem+0x129/0x1b0 [ 1499.955675] alloc_super+0x863/0xa90 [ 1499.956093] sget_fc+0x13e/0x750 [ 1499.956458] ? set_anon_super+0xc0/0xc0 [ 1499.956882] ? shmem_put_link+0x120/0x120 [ 1499.957315] get_tree_nodev+0x24/0x1d0 [ 1499.957727] vfs_get_tree+0x8e/0x300 [ 1499.958133] path_mount+0x13be/0x20b0 [ 1499.958548] ? strncpy_from_user+0x9e/0x470 [ 1499.959014] ? finish_automount+0xa90/0xa90 [ 1499.959489] ? getname_flags.part.0+0x1dd/0x4f0 [ 1499.959993] __x64_sys_mount+0x282/0x300 [ 1499.960422] ? copy_mnt_ns+0xa00/0xa00 [ 1499.960858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1499.961428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1499.961999] do_syscall_64+0x33/0x40 [ 1499.962417] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1499.962984] RIP: 0033:0x7fcb00d4104a [ 1499.963416] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1499.965477] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1499.966306] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1499.967103] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1499.967911] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1499.968684] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1499.969487] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:16:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xf}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:16:47 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:47 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:16:47 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r5 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:47 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4f4f, &(0x7f00000005c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x24004804}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="fc81c1c1a68707178d458528f03351dd12ce1383963983b1e1ef1d0b667d14186bfaf2c1cc5d3f2a602250dd3b767df09a62174ef2509c38751ad6c142f624ba61a7cc98bc5ad6830c1c35d2f75286139e87c9af487d", 0x56}, {&(0x7f0000000200)="4e23bfccbd9fb4812931d7a5d44ae1cd1f1c6d53b2cadefdb18075f4f5bf4b449b7ae1133c67b9af7074d7e499cbfe36a79f8e1bc0775fb7809d4ee7dfe60db505688090d763ace3e5ac330a42c183bff8aaf2b98d76d2a3dde5debb988793581e1d5b3b9d2009cf85d6a91efaace808dcb073067c474b32c73d089ce5ac82d85b7969064befc3434d448e4f09e4bc93bcf0ab657c7f98a6dff9c7d50539ac79610d4c0ad0", 0xa5}, {&(0x7f0000000300)="c612b54e722ec21ee9b79a1a389e6b02160f51f15b9f8613fb18e3da", 0x1c}], 0x3, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11}}], 0x30}}], 0x1, 0x4f68d50643cd0583) openat(r5, &(0x7f0000000080)='./file0\x00', 0x0, 0x104) creat(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000300), 0x1}, 0x8001) 08:16:47 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) setuid(r1) setuid(r0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080), 0x30448, &(0x7f0000000400)={'trans=unix,', {[{@mmap}, {@aname={'aname', 0x3d, '\\*@'}}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@cache_loose}, {@msize={'msize', 0x3d, 0x3}}, {@access_client}, {@afid={'afid', 0x3d, 0x9}}, {@loose}, {@cache_loose}], [{@fowner_gt={'fowner>', r3}}, {@appraise_type}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfsroot={'smackfsroot', 0x3d, '/,-'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@pcr={'pcr', 0x3d, 0x1}}]}}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r3, r4, 0x1000) setuid(r3) [ 1500.127209] cgroup: Invalid name 08:16:59 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 54) 08:16:59 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) setfsuid(r0) 08:16:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x18}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:16:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, 0x0, &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:16:59 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1512.845153] FAULT_INJECTION: forcing a failure. [ 1512.845153] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.847941] CPU: 1 PID: 10406 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1512.849525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1512.851632] Call Trace: [ 1512.852329] dump_stack+0x107/0x167 08:16:59 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r5 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:16:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xb, 0x7) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x262242, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) shutdown(r0, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x80) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x5, 0x400}]}, 0xc, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CDROMRESET(r2, 0x5329) unshare(0x48020200) 08:16:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x2, 0x5, 0x4, 0x1}) r4 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x10001, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000280)="31afb1962042c45629d3b69ded94bce06cc475e18671ecbe41831fe2532ced12bef6a314909877543645b2575965069b28571335970acc8ed9c32d3abdbb9660d9ea4ce076cde73739cf612114c9405394f79d8a8909b337cbe93b45f674eb2b13243b21d1d5b85fdddf6a00ebc812e10d75aadb7df14ddde8145e212dbad3d8a6a3152fbc15b515f4c59c7453545165a9e5f1ea6af19267f0f9dda97e706e4b7bd9a9ed069eef3a741fee6b5a51c376afca40322422a073a96f2d7e6d35bc0b650e370f21f71259e610aff71c5495cbe60c77803318dcfb3a6cd739ea78ae8d59d24b8a2a678a071b582162f7517b42f99dbb71cd", 0xf5, 0xffffffff80000001}, {&(0x7f0000000380)="abf0b7bc9e28e7c494b7440df3", 0xd, 0x4}], 0x20000, &(0x7f0000000500)=ANY=[@ANYBLOB='nnonumtail=1,nnonumtail=1,uid=', @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d0425282c7b2e9ac067f48c6a3087dd651a626a5f74f868e846b5ce5c3f776e65583e", @ANYRESDEC, @ANYBLOB="2c646f060000000000000072652c7375626a5f757365723d2c5b6f6ec15f6d6500737572652c646566636f6e746578743d726f6f742c6f626a5f757365723d29235d2c00"]) open_tree(r4, &(0x7f00000004c0)='./file1\x00', 0x8c4ed4a75a06c6e) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da58b2", 0x29) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f000005eb40)={{0x0, 0x6912, 0x4, 0x3, 0x400, 0x100, 0x2, 0x9, 0x1, 0x0, 0x3, 0x6, 0xfffffffffffffff9, 0xff, 0x9}}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 1512.853432] should_fail.cold+0x5/0xa [ 1512.854454] ? create_object.isra.0+0x3a/0xa20 [ 1512.855519] should_failslab+0x5/0x20 [ 1512.856379] kmem_cache_alloc+0x5b/0x310 [ 1512.857258] create_object.isra.0+0x3a/0xa20 [ 1512.858157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1512.859194] __kmalloc+0x16e/0x390 [ 1512.859952] prealloc_shrinker+0xb0/0x2f0 [ 1512.860798] ? __init_rwsem+0x129/0x1b0 [ 1512.861610] alloc_super+0x863/0xa90 [ 1512.862382] sget_fc+0x13e/0x750 [ 1512.863080] ? set_anon_super+0xc0/0xc0 [ 1512.864166] ? shmem_put_link+0x120/0x120 [ 1512.865232] get_tree_nodev+0x24/0x1d0 [ 1512.866231] vfs_get_tree+0x8e/0x300 [ 1512.867185] path_mount+0x13be/0x20b0 [ 1512.868208] ? strncpy_from_user+0x9e/0x470 [ 1512.869315] ? finish_automount+0xa90/0xa90 [ 1512.870420] ? getname_flags.part.0+0x1dd/0x4f0 [ 1512.871643] __x64_sys_mount+0x282/0x300 [ 1512.872687] ? copy_mnt_ns+0xa00/0xa00 [ 1512.873697] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1512.875045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1512.876382] do_syscall_64+0x33/0x40 [ 1512.877353] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1512.878674] RIP: 0033:0x7fcb00d4104a [ 1512.879664] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1512.882909] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1512.884153] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1512.885383] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1512.886592] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1512.887897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1512.889133] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:16:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x19}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:16:59 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$CDROM_GET_CAPABILITY(r0, 0x5331) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'}) setresuid(r3, r1, 0x0) setuid(r1) 08:16:59 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x1a}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:17:00 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x202100, 0x0) statx(r1, &(0x7f0000000180)='./file1\x00', 0x100, 0x400, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005400)={0x28, r5, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xd8, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x53}, @NL80211_ATTR_IE={0xa2, 0x2a, [@tim={0x5, 0x91, {0x3f, 0x33, 0x9, "9b3cd67464591550969d651536d0a025b7401cda8e1142003f69a6b7c8ca373f21468e9a8d72a9c5a71dcdcaa539e29ea130e1b58811054d32a75b45276230128048c916ed774c75cedd69b2fff3cf109539403ba6dbb50636fea04f7dab99f2506c31064fb629a0db26d7780a2b81c3c0a3841d1b3d67096c6138ad3805475938a607973fd6e4a4568c8ebdc845"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @dsss={0x3, 0x1, 0xb5}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x27}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x400c050) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005400)={0x28, r8, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x1c}}, 0x40000) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r2, r3, 0x1000) r11 = geteuid() setresuid(r2, r0, r11) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x220000, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d756e69782c6d6561737572652c009ed47cc5cb0449959b75bdc1a37a1efc9e610acfc35e3b99de2118fdb1e8dee94281551298130c2d2452a5cc1816542b440b261f897f937f1c2c9accb73923a79ee566d4fb673a71f6b155bab1ccdc4db326f6e031f1d73aa3cbb91052811697009b756fb5651f89e361d9a672ef36e12d40bde7"]) setuid(r0) 08:17:00 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:00 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 55) 08:17:00 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, 0x0, &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1513.126206] FAULT_INJECTION: forcing a failure. [ 1513.126206] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.128551] CPU: 1 PID: 10432 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1513.129681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1513.130998] Call Trace: [ 1513.131433] dump_stack+0x107/0x167 [ 1513.132042] should_fail.cold+0x5/0xa [ 1513.132655] ? __list_lru_init+0xcd/0x890 [ 1513.133312] should_failslab+0x5/0x20 [ 1513.133920] __kmalloc+0x72/0x390 [ 1513.134482] __list_lru_init+0xcd/0x890 [ 1513.135124] alloc_super+0x8b8/0xa90 [ 1513.135749] sget_fc+0x13e/0x750 [ 1513.136303] ? set_anon_super+0xc0/0xc0 [ 1513.136958] ? shmem_put_link+0x120/0x120 [ 1513.137630] get_tree_nodev+0x24/0x1d0 [ 1513.138263] vfs_get_tree+0x8e/0x300 [ 1513.138860] path_mount+0x13be/0x20b0 [ 1513.139481] ? strncpy_from_user+0x9e/0x470 [ 1513.140172] ? finish_automount+0xa90/0xa90 [ 1513.140862] ? getname_flags.part.0+0x1dd/0x4f0 [ 1513.141620] __x64_sys_mount+0x282/0x300 [ 1513.142296] ? copy_mnt_ns+0xa00/0xa00 [ 1513.142925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1513.143830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1513.144672] do_syscall_64+0x33/0x40 [ 1513.145278] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1513.146111] RIP: 0033:0x7fcb00d4104a [ 1513.146711] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1513.149744] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1513.150958] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1513.152114] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1513.153319] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1513.154533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1513.155762] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:17:14 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r5 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, 0x0, &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:17:14 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 56) 08:17:14 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setresuid(0xee00, r0, 0x0) sync_file_range(r1, 0x6, 0x6, 0x1) setuid(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000400)=""/139, 0x8b}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000005c0)=""/76, 0x4c}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/133, 0x85}, {&(0x7f0000000780)=""/152, 0x98}], 0x8, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}, 0x142) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r3, r4, 0x1000) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r1, {r3, r5}}, './file0\x00'}) 08:17:14 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000340)='./file1\x00', 0x10000, 0x54) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0x0, 0x4) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r5, r4, "66811f68e0c440bba4bcf609493241b2512dbb6769ef1fdb21219441b9d2937255c56ea8b443729c72bc47cf6386f73b7ce88432ac6f99b63a93b89e7443b46a773671dded77dc24ba79debef1df5ffcd9e2222930e25f8b7e1873aae1853d7d55b7b3b64a43657809e8ea816519bc0c7323593b9e24a473e537db27b2a3ba9b30d958d7ff8d4867d47df99ca9958a196ce0c3c2c20e2a72af42aafe94c107a043d58527121953dfabf2d3ba6f3e7b2f09c47a4a55c3f5a3e68724037035d781567270a828be9bbe626a85ac9fe77bfa461f8903fcd4986a3dcc6fa6ec88fc174630b23dd02e3cf61e2117f78c9d99aa7daf6f8a7d6c4a01ad17f50051be2848", "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"}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000040)) flistxattr(r1, &(0x7f0000000300)=""/60, 0x3c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r6, r3, 0x0, 0x9bbb) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) [ 1527.933773] FAULT_INJECTION: forcing a failure. [ 1527.933773] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.935131] CPU: 0 PID: 10445 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1527.935933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1527.936893] Call Trace: [ 1527.937205] dump_stack+0x107/0x167 [ 1527.937627] should_fail.cold+0x5/0xa [ 1527.938073] ? create_object.isra.0+0x3a/0xa20 [ 1527.938605] should_failslab+0x5/0x20 [ 1527.939048] kmem_cache_alloc+0x5b/0x310 [ 1527.939521] create_object.isra.0+0x3a/0xa20 [ 1527.940030] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1527.940627] __kmalloc+0x16e/0x390 [ 1527.941059] __list_lru_init+0xcd/0x890 [ 1527.941541] alloc_super+0x8b8/0xa90 [ 1527.941987] sget_fc+0x13e/0x750 [ 1527.942392] ? set_anon_super+0xc0/0xc0 [ 1527.942868] ? shmem_put_link+0x120/0x120 [ 1527.943360] get_tree_nodev+0x24/0x1d0 [ 1527.943828] vfs_get_tree+0x8e/0x300 [ 1527.944263] path_mount+0x13be/0x20b0 [ 1527.944703] ? strncpy_from_user+0x9e/0x470 [ 1527.945217] ? finish_automount+0xa90/0xa90 [ 1527.945731] ? getname_flags.part.0+0x1dd/0x4f0 [ 1527.946295] __x64_sys_mount+0x282/0x300 [ 1527.946760] ? copy_mnt_ns+0xa00/0xa00 [ 1527.947218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1527.947833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1527.948435] do_syscall_64+0x33/0x40 [ 1527.948883] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1527.949493] RIP: 0033:0x7fcb00d4104a [ 1527.949935] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1527.952116] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1527.953010] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1527.953838] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1527.954685] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1527.955532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1527.956380] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:17:14 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:14 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, 0x0, &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:17:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x1b}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:17:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x4f}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:17:15 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 57) 08:17:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x9b}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1528.051381] FAULT_INJECTION: forcing a failure. [ 1528.051381] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.052695] CPU: 0 PID: 10462 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1528.053454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1528.054366] Call Trace: [ 1528.054664] dump_stack+0x107/0x167 [ 1528.055078] should_fail.cold+0x5/0xa [ 1528.055510] ? create_object.isra.0+0x3a/0xa20 [ 1528.056047] should_failslab+0x5/0x20 [ 1528.056485] kmem_cache_alloc+0x5b/0x310 [ 1528.056950] create_object.isra.0+0x3a/0xa20 [ 1528.057456] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1528.058018] __kmalloc+0x16e/0x390 [ 1528.058415] __list_lru_init+0xcd/0x890 [ 1528.058857] alloc_super+0x8b8/0xa90 [ 1528.059266] sget_fc+0x13e/0x750 [ 1528.059644] ? set_anon_super+0xc0/0xc0 [ 1528.060084] ? shmem_put_link+0x120/0x120 [ 1528.060541] get_tree_nodev+0x24/0x1d0 [ 1528.060983] vfs_get_tree+0x8e/0x300 [ 1528.061409] path_mount+0x13be/0x20b0 [ 1528.061832] ? strncpy_from_user+0x9e/0x470 [ 1528.062326] ? finish_automount+0xa90/0xa90 [ 1528.062811] ? getname_flags.part.0+0x1dd/0x4f0 [ 1528.063342] __x64_sys_mount+0x282/0x300 [ 1528.063830] ? copy_mnt_ns+0xa00/0xa00 [ 1528.064277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1528.064864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1528.065451] do_syscall_64+0x33/0x40 [ 1528.065877] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1528.066456] RIP: 0033:0x7fcb00d4104a [ 1528.066870] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1528.068910] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1528.069764] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1528.070566] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1528.071365] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1528.072157] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1528.072966] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:17:15 executing program 4: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) 08:17:15 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:17:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xc5}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:17:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r5 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xf0}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1528.193499] cgroup: Invalid name 08:17:28 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r5 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:28 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, 0x0, &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:17:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005400)={0x28, r1, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005400)={0x28, r5, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005400)={0x28, r9, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x148, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x1, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8001}, 0x810) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r12, 0x0) setuid(r12) 08:17:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x180}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:17:28 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:28 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 58) 08:17:28 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:17:28 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r5 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x700}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1541.213159] FAULT_INJECTION: forcing a failure. 08:17:28 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r5 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1541.213159] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.215624] CPU: 0 PID: 10494 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1541.217027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1541.218721] Call Trace: [ 1541.219266] dump_stack+0x107/0x167 [ 1541.220038] should_fail.cold+0x5/0xa [ 1541.220810] ? create_object.isra.0+0x3a/0xa20 [ 1541.221742] should_failslab+0x5/0x20 [ 1541.222775] kmem_cache_alloc+0x5b/0x310 [ 1541.222827] create_object.isra.0+0x3a/0xa20 [ 1541.222846] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1541.222870] __kmalloc_node+0x1ae/0x420 [ 1541.222890] ? lockdep_init_map_type+0x2c7/0x780 [ 1541.222917] kvmalloc_node+0x119/0x170 [ 1541.222936] __list_lru_init+0x511/0x890 [ 1541.222961] alloc_super+0x8b8/0xa90 [ 1541.222983] sget_fc+0x13e/0x750 [ 1541.223000] ? set_anon_super+0xc0/0xc0 [ 1541.223022] ? shmem_put_link+0x120/0x120 [ 1541.223037] get_tree_nodev+0x24/0x1d0 [ 1541.223055] vfs_get_tree+0x8e/0x300 [ 1541.223078] path_mount+0x13be/0x20b0 [ 1541.223104] ? strncpy_from_user+0x9e/0x470 [ 1541.223126] ? finish_automount+0xa90/0xa90 [ 1541.223145] ? getname_flags.part.0+0x1dd/0x4f0 [ 1541.223178] __x64_sys_mount+0x282/0x300 [ 1541.223198] ? copy_mnt_ns+0xa00/0xa00 [ 1541.223222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1541.223240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1541.223265] do_syscall_64+0x33/0x40 [ 1541.223286] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1541.223299] RIP: 0033:0x7fcb00d4104a [ 1541.223319] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 08:17:28 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1541.223329] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1541.223350] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1541.223361] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1541.223372] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1541.223383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1541.223394] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:17:28 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000001e00)={&(0x7f0000000ac0), 0xc, &(0x7f0000001dc0)={&(0x7f0000000c00)={0x28, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r5, r6, 0x1000) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x29, 0x8, &(0x7f0000000680)=[{&(0x7f00000001c0)="4c375e861c1fdf7a4ec98952c0ded4f79e583d9e89b543ce7749f3971557a5699e54da680d51a8b6a3984e17296e757d612a14f3003facaa50d86ae89a1ce9bbc9a148c355cb19594574fb5ba9d04e28ba3d544cfe0407c128199ed8cbec8e7632a255afd22fe5979e350276943ae28c2dc0667f6b47454d15b29100b0f8229652e675f86ee6164d4a87243f14cf814e12a8235f23192b9460b2fbc475cfef86392b24e701e8ecbaaa308656697934e51eebcd6dc366a13b2c12ca6e828a56ea23516e3ea8463225f6b2655edfb76b8e62187d157738c5183ffd8d895b82ebed7a0151a1eee9cd18d30da173373afbe868cdc6e1", 0xf4, 0x100}, {&(0x7f0000000080)="847aef136bb210e3f3e888aae15b716dbfd96d7db62a892095aedbce17523c00a2519e3f7d2b8a50b12b967be3d33895e345d6cb7a36112c26a70ab7d374f621598e88be1828e240606237dd95b8d5aa4d08fcbf1876f7fa64e0b300481b2b56a01823c1c0b9651dd15eeeb0f497035529e14ae14c673db9790631796724a7f46cb22961d799b83f865edcf9c34b6569a4970efe", 0x94, 0x401}, {&(0x7f00000002c0)="e26841f58ed30dfbe2204afaf70b988a926b00b718c33e02d91c8598951c00e7957532c2a926011399db53988ad6ad922d2d293c6467dcf9ed750fcf306fabedbd1c0cb366d84eb53bb949", 0x4b, 0xb7}, {&(0x7f0000000340)="2012cdee4817cab8a5eebc0975ca98", 0xf, 0x3}, {&(0x7f0000000380)="ccc2e28adf53074e12694c4e5d5ff5386406b2dab09fde8e1773d4fa19c01ab3e34a1e64e7d0c628535c2cdbaf509952866ef267915f17c191db430d95a6c7ebd37ea5a31b7ccde06b53597b396d20b0c3658695bb07d876a6034155341e9f9217dadf2e7c899adb092b97b67cff", 0x6e, 0x8001}, {&(0x7f0000000400)="ad5afa927f9fbbb4758e6230a9c9c87f4e1569ea145475cb9af7eb31aeb463ace681535f61b0475f26dc00e5d82261a78c398f1e49116248e02451bb1f2537635e588e2d4a6594b1ac4c6b2f3451025d2ab0144ed6e76792042399e59f883e93de254cd3b64d51f25c5c261d7af6cf2dd1ec8e02788072145fd37525f85cbae5b305bf96593ef2d549ffb672", 0x8c, 0x8}, {&(0x7f00000004c0)="3e1cab1e4ceed56efd0e9caac18ad8695370a0cc9d9d7e972ca98c16fdbe468302371296d692eba8635e61745a21ab3e4aa7dd01f1873b5387c67433d24ffc8cc4acdb5c87018e03609c939ad76165e6426de6eb7e03a4abee3176177845368071bf0b5ea7c027c6b5ad46cec69a7d5acad734a789b0f346f71ab80adc22909fd15efad5cde19c366ce87d3ebea0a8a3f1a82d7d580cfa5a220e436d3957338a4f1f79263f598bbdb3e5213d8cfe2c51b3df0acac865b2833f6c14bd3ab8883ad90f96cdd16a26529da89c76", 0xcc, 0x1}, {&(0x7f00000005c0)="801fd28b8275df63d4a3fc82bd5bd2521f63d9e7efd482c6d8376ec77a620f7463925f59ca81be83ef26e66b1d83d55c180e5be195d27336b4b892a0edf33f2f45faa0875f44aaa0c9d8ebc63dd12f6a8e41ad6dae07d7974a320a72ac5b51ed4e5020248352237f9faa2a31cb5018952518bb3fe14143cfe9fd6ba9fa4c148b07ca54c3718d40f09ae8eacab234a0cddc24e30a56869fd055a690b90a7a8a7f26118a0a462a9c7d0cf719f7aa36", 0xae, 0x1}], 0x20, &(0x7f0000000740)={[{@nojoliet}, {@map_normal}, {@cruft}], [{@euid_gt={'euid>', r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',-:'}}, {@smackfshat}, {@fowner_eq={'fowner', 0x3d, r5}}, {@obj_type={'obj_type', 0x3d, '\'#'}}]}) [ 1541.310715] cgroup: Invalid name 08:17:28 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:28 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 59) 08:17:28 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, 0x0, &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:17:28 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x110, 0x11, 0x400, 0x70bd2c, 0x25dfdbfb, {0xb}, [@typed={0x4, 0x5f}, @generic="d0a1cc55fb8c30d342a9d494c7ee3b4816b598ea85c485004ef5985e2971105bd4f7327d9acfaeec2d3a629e759b252027f447f0cb5b00413bc4d8125dad4f91a74e94b7", @generic="632d2e24b2c0f8f3efddea6323ce7cac423908ce32e82504977013f496228c5df0fd55cb3ea9c448a054c45702866261f4ad196f9faa44fa5dc7b1d549daf1fa7b4184eb805f9c6dfd6536d2bac9d97b6894ef7026ca449ad83242f09e28949f6fa9cc72267fe67d4620289a9be31f70e093f5992e7833bf2fc041e9f1d3017a8d10fb15b59c6ed68d6f716a8feab6bde21315a427468f14be0460a657105ea278", @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x80, 0x0, 0x0, @u32=0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x84}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xb}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fallocate(r3, 0x3, 0x900500, 0x30000000000) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x183000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x1, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x840) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000000000000142030405060708090a0b0c0d0e0f101112131415161718191a1b1c8f671d1e1f2021222324252627953c0f722c2d2e2f303132333415363738393a3b3c3d3e3f40bb50440603011771182ee4f89350427a3c638bf51cb3ec465a080cec1cfa722420edffdd4a095176d9183acb0c2f5ad6e5f1ac91644fbf34f1023e9b30dc40e66091b0a61f021bd5bbc7462e3d2e0d4a779accb262be2301a44729529dfbbb16b8a627abb45c20c2c08cbc7bc348ad1109f3aa47dc0f84c5d836e22086e239c374e4b0b3ddd9e53adb83f118a660ea94ec4581eae4923940b5da1c514bfb5e12709376517661655111e033d3496f0a56290ae08555429426499910f646871735d104e5fe61d2d4e2b76a0df3a324b4611715576d32a1f260fc33f725ee9827277821973d2d8dd5c5b6e6beaac77e6aa506464a39a4bc147974aecf778ffea8b71dd5"], 0x48, 0xfffffffffffffff9) sendfile(r0, r2, 0x0, 0xffe3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file1\x00'}) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)={0x1144, 0x0, 0x14, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x14}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xcd, 0x45, "98a94393a9978bea04c621f05d6cdd838e959db8065df4667737ccf72d572a0e82f72169f041b537a7db4fa73cc7ba46a130849a8aeaebe5915b7ba2b6e28e242804731c4eb3065590893a7e11a03b6862ef2149a4a3e7e6a8fc0daae7d00b5b1655de860ad1ab9bc80d7037a1d2ca849c943862df30b0ce0cef371a1f3d5a2af7a6136f07bea3c4d5addcbf598004887b0d088a41af7aab99a190ebf39137148660166feb242d6131349e2d3963dd4171adcdae8b2a5e2b3de1165585661dfc9a6e88bbe1b227c507"}, @NL80211_ATTR_TESTDATA={0x46, 0x45, "c40dec4ce718da2fe2869880a10a33a4b450103d607496bc38fb0e54be9d0557252225ddf9fe5e4b93d4bb611e62a5142212617c71adc048b236461a38be0d52ac94"}]}, 0x1144}, 0x1, 0x0, 0x0, 0x20000801}, 0x400dc) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) 08:17:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x72d}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1541.433057] FAULT_INJECTION: forcing a failure. [ 1541.433057] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.434308] CPU: 1 PID: 10518 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1541.435044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1541.435973] Call Trace: [ 1541.436264] dump_stack+0x107/0x167 [ 1541.436663] should_fail.cold+0x5/0xa [ 1541.437076] ? create_object.isra.0+0x3a/0xa20 [ 1541.437590] should_failslab+0x5/0x20 [ 1541.438012] kmem_cache_alloc+0x5b/0x310 [ 1541.438462] create_object.isra.0+0x3a/0xa20 [ 1541.438943] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1541.439503] __kmalloc_node+0x1ae/0x420 [ 1541.439956] ? lockdep_init_map_type+0x2c7/0x780 [ 1541.440479] kvmalloc_node+0x119/0x170 [ 1541.440912] __list_lru_init+0x511/0x890 [ 1541.441356] alloc_super+0x8b8/0xa90 [ 1541.441769] sget_fc+0x13e/0x750 [ 1541.442150] ? set_anon_super+0xc0/0xc0 [ 1541.442606] ? shmem_put_link+0x120/0x120 [ 1541.443066] get_tree_nodev+0x24/0x1d0 [ 1541.443488] vfs_get_tree+0x8e/0x300 [ 1541.443906] path_mount+0x13be/0x20b0 [ 1541.444349] ? strncpy_from_user+0x9e/0x470 [ 1541.444829] ? finish_automount+0xa90/0xa90 [ 1541.445324] ? getname_flags.part.0+0x1dd/0x4f0 [ 1541.445859] __x64_sys_mount+0x282/0x300 [ 1541.446310] ? copy_mnt_ns+0xa00/0xa00 [ 1541.446758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1541.447346] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1541.447939] do_syscall_64+0x33/0x40 [ 1541.448366] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1541.448929] RIP: 0033:0x7fcb00d4104a [ 1541.449353] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1541.451355] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1541.452189] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1541.452961] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1541.453722] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1541.454489] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1541.455252] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1541.588065] audit: type=1326 audit(1699345048.661:50): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10513 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3a042b19 code=0x7ffc0000 [ 1541.591746] audit: type=1326 audit(1699345048.664:51): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10513 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3a042b19 code=0x7ffc0000 [ 1541.599023] audit: type=1326 audit(1699345048.672:52): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10513 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b3a042b19 code=0x7ffc0000 [ 1541.604403] audit: type=1326 audit(1699345048.675:53): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10513 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3a042b19 code=0x7ffc0000 [ 1541.607278] audit: type=1326 audit(1699345048.675:54): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10513 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8b3a042b19 code=0x7ffc0000 [ 1541.611069] audit: type=1326 audit(1699345048.675:55): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10513 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3a042b19 code=0x7ffc0000 [ 1541.613328] audit: type=1326 audit(1699345048.676:56): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10513 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b3a042b19 code=0x7ffc0000 [ 1541.615579] audit: type=1326 audit(1699345048.676:57): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10513 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3a042b19 code=0x7ffc0000 [ 1541.618445] audit: type=1326 audit(1699345048.683:58): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10513 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3a042b19 code=0x7ffc0000 [ 1541.620751] audit: type=1326 audit(1699345048.683:59): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10513 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8b3a042b19 code=0x7ffc0000 [ 1554.720664] kauditd_printk_skb: 11 callbacks suppressed [ 1554.720678] audit: type=1326 audit(1699345061.792:71): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10526 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1554.744158] audit: type=1326 audit(1699345061.793:72): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10526 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1554.747618] audit: type=1326 audit(1699345061.793:73): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10526 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1554.747684] audit: type=1326 audit(1699345061.794:74): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10526 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1554.747753] audit: type=1326 audit(1699345061.794:75): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10526 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1554.747820] audit: type=1326 audit(1699345061.794:76): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10526 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 08:17:41 executing program 5: r0 = open(&(0x7f0000000140)='./file1/file0\x00', 0x100, 0x38) statx(0xffffffffffffffff, 0x0, 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) dup2(r2, r3) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r0, @ANYRES64=r3, @ANYBLOB="6c6f6f73652c76657273696f6e3d3970323030302e752c64666c746769643da43b65785a38893dbe75697bf8a80efac11fba43dec3229fea067d6f", @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRESDEC, @ANYRESOCT=r2]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:17:41 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:17:41 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:41 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 60) 08:17:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x900}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:17:41 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) getuid() setuid(r0) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) fchown(0xffffffffffffffff, r0, r1) 08:17:41 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:41 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502100, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xfff, 0x4, 0x5}) [ 1554.747919] audit: type=1326 audit(1699345061.798:77): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10526 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1554.748005] audit: type=1326 audit(1699345061.798:78): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10526 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1554.754535] FAULT_INJECTION: forcing a failure. [ 1554.754535] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.779182] CPU: 0 PID: 10535 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1554.780722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1554.782565] Call Trace: [ 1554.783155] dump_stack+0x107/0x167 [ 1554.783182] should_fail.cold+0x5/0xa [ 1554.784589] ? create_object.isra.0+0x3a/0xa20 [ 1554.785617] should_failslab+0x5/0x20 [ 1554.786467] kmem_cache_alloc+0x5b/0x310 [ 1554.787381] create_object.isra.0+0x3a/0xa20 [ 1554.788382] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1554.789522] __kmalloc_node+0x1ae/0x420 [ 1554.790414] ? lockdep_init_map_type+0x2c7/0x780 [ 1554.791479] kvmalloc_node+0x119/0x170 [ 1554.792368] __list_lru_init+0x511/0x890 [ 1554.792542] audit: type=1326 audit(1699345061.798:79): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10526 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1554.793278] alloc_super+0x8b8/0xa90 [ 1554.793303] sget_fc+0x13e/0x750 [ 1554.798083] ? set_anon_super+0xc0/0xc0 [ 1554.798975] ? shmem_put_link+0x120/0x120 [ 1554.799897] get_tree_nodev+0x24/0x1d0 [ 1554.800796] vfs_get_tree+0x8e/0x300 [ 1554.801636] path_mount+0x13be/0x20b0 [ 1554.802513] ? strncpy_from_user+0x9e/0x470 [ 1554.803493] ? finish_automount+0xa90/0xa90 [ 1554.804477] ? getname_flags.part.0+0x1dd/0x4f0 [ 1554.805540] __x64_sys_mount+0x282/0x300 [ 1554.806461] ? copy_mnt_ns+0xa00/0xa00 [ 1554.807340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1554.808524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1554.809290] audit: type=1326 audit(1699345061.799:80): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10526 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1554.809687] do_syscall_64+0x33/0x40 [ 1554.809717] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1554.814872] RIP: 0033:0x7fcb00d4104a [ 1554.815706] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1554.819852] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1554.821591] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1554.823199] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1554.824821] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1554.826240] cgroup: Invalid name [ 1554.826434] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1554.828551] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:17:41 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:17:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541b, &(0x7f0000000000)) [ 1554.988416] cgroup: Invalid name 08:17:57 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:57 executing program 5: fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0xf5) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe31, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x842}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000008c0)={r0, 0x7, 0x86, 0x5}) io_uring_enter(r2, 0x2f7f, 0xcdb0, 0x1, &(0x7f0000000900)={[0x3fd]}, 0x8) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r3 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r3, 0x0, r3) fchmod(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x1c, 0xd38865185e4463b1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) unshare(0x48020200) fallocate(0xffffffffffffffff, 0x74, 0x9, 0x7) signalfd(r3, &(0x7f0000000240)={[0x32e80]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x69}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc1}]}]}]}, 0x40}}, 0x0) r5 = socket(0xf, 0x80000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, r5, 0x7ff, 0x100000000, 0x1, 0xff}) 08:17:57 executing program 4: r0 = socket(0x2c, 0x800, 0xffffffe0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x1a0, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x73, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x79, @ipv4={'\x00', '\xff\xff', @loopback}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6eca}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff83}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000408a) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r2, 0x0) setuid(r2) 08:17:57 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:17:57 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xa00}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:17:57 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x4, [@remote, @broadcast]}]}}}], 0x20}}], 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) 08:17:57 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 61) [ 1570.285034] FAULT_INJECTION: forcing a failure. [ 1570.285034] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.287319] CPU: 0 PID: 10577 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1570.288647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1570.290257] Call Trace: [ 1570.290756] dump_stack+0x107/0x167 [ 1570.291460] should_fail.cold+0x5/0xa [ 1570.292214] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1570.293189] should_failslab+0x5/0x20 [ 1570.293922] kmem_cache_alloc_trace+0x55/0x320 [ 1570.294796] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1570.295747] __list_lru_init+0x44d/0x890 [ 1570.296542] alloc_super+0x8b8/0xa90 [ 1570.297264] sget_fc+0x13e/0x750 [ 1570.297915] ? set_anon_super+0xc0/0xc0 [ 1570.298691] ? shmem_put_link+0x120/0x120 [ 1570.299478] get_tree_nodev+0x24/0x1d0 [ 1570.300236] vfs_get_tree+0x8e/0x300 [ 1570.300956] path_mount+0x13be/0x20b0 [ 1570.301699] ? strncpy_from_user+0x9e/0x470 [ 1570.302527] ? finish_automount+0xa90/0xa90 [ 1570.303359] ? getname_flags.part.0+0x1dd/0x4f0 [ 1570.304282] __x64_sys_mount+0x282/0x300 [ 1570.305075] ? copy_mnt_ns+0xa00/0xa00 [ 1570.305824] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1570.306812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1570.307790] do_syscall_64+0x33/0x40 [ 1570.308516] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1570.309495] RIP: 0033:0x7fcb00d4104a [ 1570.310203] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1570.313735] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1570.313756] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1570.313767] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1570.313777] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1570.313788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1570.313798] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:17:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xc00}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1570.401505] cgroup: Invalid name 08:17:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xd00}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:17:57 executing program 4: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) setxattr$security_evm(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)=@v2={0x3, 0x0, 0xf, 0x3, 0x63, "cc936d06553ff769bf637e17106e4f177d1ff75d3e2a74ba5f6e61343b7675181bc5e23461a9987bc07e4b19106a157bfc519f0158169baf86231cbbd197b9d5f3169ddd34943ae3d75751aed7fcc8b974bf292e1bb727c5324420fed9ad06d8fcd3af"}, 0x6c, 0x1) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x49, 0x29, 0x1, {0x8, [{{0x1, 0x1, 0x2}, 0xff, 0x0, 0x7, './file0'}, {{0x2, 0x2}, 0x10001, 0x62, 0x7, './file0'}]}}, 0x49) setuid(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000002c0)=0xc) fchown(0xffffffffffffffff, r2, r1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'xfrm0\x00'}) 08:17:57 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:57 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:17:57 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x4, [@remote, @broadcast]}]}}}], 0x20}}], 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) 08:17:57 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:17:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xe00}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:17:57 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 62) [ 1570.752191] cgroup: Invalid name 08:17:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, r1, 0xd8499488957a772f, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048800}, 0x4800) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r4, 0x0) setuid(r4) 08:17:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xf00}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:17:57 executing program 5: ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x6020348133392b05) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xb2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_setup(0x5, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5f}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc890}, 0xc040) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}]}) [ 1570.818948] FAULT_INJECTION: forcing a failure. [ 1570.818948] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.821293] CPU: 0 PID: 10619 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1570.822669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1570.824327] Call Trace: [ 1570.824858] dump_stack+0x107/0x167 [ 1570.825595] should_fail.cold+0x5/0xa [ 1570.826360] ? create_object.isra.0+0x3a/0xa20 [ 1570.827287] should_failslab+0x5/0x20 [ 1570.828048] kmem_cache_alloc+0x5b/0x310 [ 1570.828888] create_object.isra.0+0x3a/0xa20 [ 1570.829769] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1570.830801] kmem_cache_alloc_trace+0x151/0x320 [ 1570.831736] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1570.832727] __list_lru_init+0x44d/0x890 [ 1570.833602] alloc_super+0x8b8/0xa90 [ 1570.834442] sget_fc+0x13e/0x750 [ 1570.835198] ? set_anon_super+0xc0/0xc0 [ 1570.836091] ? shmem_put_link+0x120/0x120 [ 1570.837038] get_tree_nodev+0x24/0x1d0 [ 1570.837910] vfs_get_tree+0x8e/0x300 [ 1570.838745] path_mount+0x13be/0x20b0 [ 1570.839604] ? strncpy_from_user+0x9e/0x470 [ 1570.840583] ? finish_automount+0xa90/0xa90 [ 1570.841545] ? getname_flags.part.0+0x1dd/0x4f0 [ 1570.842605] __x64_sys_mount+0x282/0x300 [ 1570.843516] ? copy_mnt_ns+0xa00/0xa00 [ 1570.844415] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1570.845587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1570.846749] do_syscall_64+0x33/0x40 [ 1570.847586] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1570.848741] RIP: 0033:0x7fcb00d4104a [ 1570.849573] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1570.853680] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1570.855394] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1570.857003] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1570.858593] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1570.860188] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1570.861776] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:17:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/21, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000006c0), 0x80200, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x828, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000180)=0x6, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) 08:17:58 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, 0x0) [ 1570.983649] audit: type=1326 audit(1699345078.056:81): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10628 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1570.988816] audit: type=1326 audit(1699345078.061:82): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10628 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1571.004137] audit: type=1326 audit(1699345078.072:83): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10628 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1571.020005] audit: type=1326 audit(1699345078.072:84): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10628 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1571.035468] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 1571.035468] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1571.035468] [ 1571.040554] audit: type=1326 audit(1699345078.073:85): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10628 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1571.050676] option changes via remount are deprecated (pid=10629 comm=syz-executor.2) [ 1571.070619] audit: type=1326 audit(1699345078.076:86): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10628 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6b5732fb19 code=0x7ffc0000 [ 1571.083684] audit: type=1326 audit(1699345078.076:87): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10628 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6b5732fad7 code=0x7ffc0000 [ 1571.091793] EXT4-fs (loop6): mounted filesystem without journal. Opts: noacl,,errors=continue [ 1571.113456] audit: type=1326 audit(1699345078.076:88): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10628 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f6b572e2ab7 code=0x7ffc0000 [ 1571.137270] audit: type=1326 audit(1699345078.076:89): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10628 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f6b572e2ab7 code=0x7ffc0000 [ 1571.152159] audit: type=1326 audit(1699345078.083:90): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10628 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f6b572e2ab7 code=0x7ffc0000 08:18:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x1800}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:18:12 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x80000, 0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_netdev_private(r2, 0x89f6, &(0x7f00000000c0)="a35b1ddd69d141f3aaac2b") 08:18:12 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, 0x0) 08:18:12 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r5, 0x4e8b, 0xfce9, 0x3, &(0x7f0000000080)={[0x1]}, 0x8) inotify_rm_watch(0xffffffffffffffff, r1) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x8) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x5, 0x40, 0x7f, 0x1f, 0x0, 0x4, 0x100, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x980, 0x9, 0x4, 0x2, 0x3ff, 0x3, 0x140, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x7, r7, 0x2) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000007c0)=ANY=[@ANYBLOB]) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 08:18:12 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 63) [ 1585.100469] FAULT_INJECTION: forcing a failure. [ 1585.100469] name failslab, interval 1, probability 0, space 0, times 0 08:18:12 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x800, 0x9) setuid(r0) r2 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd, 0x0, &(0x7f0000000480)=""/174, 0xae, 0x4, 0x1}, 0x80000001) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x1c) r8 = semget$private(0x0, 0x7, 0x0) semtimedop(r8, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1, 0x0) semctl$IPC_RMID(r8, 0x0, 0x10) getgroups(0x9, &(0x7f00000001c0)=[r1, r1, r1, r1, r1, r1, r1, r1, r1]) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000240)={{0x1, 0x0, r9, r10, r1, 0x41, 0x5}, 0xfffffffffffffff8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7f}) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) 08:18:12 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1585.103027] CPU: 0 PID: 10645 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1585.104699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1585.106547] Call Trace: [ 1585.107144] dump_stack+0x107/0x167 [ 1585.107969] should_fail.cold+0x5/0xa [ 1585.108858] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1585.110004] should_failslab+0x5/0x20 [ 1585.110864] kmem_cache_alloc_trace+0x55/0x320 [ 1585.111898] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1585.113054] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1585.114163] __list_lru_init+0x44d/0x890 [ 1585.115083] alloc_super+0x8b8/0xa90 [ 1585.115937] sget_fc+0x13e/0x750 [ 1585.116692] ? set_anon_super+0xc0/0xc0 [ 1585.117586] ? shmem_put_link+0x120/0x120 [ 1585.118498] get_tree_nodev+0x24/0x1d0 [ 1585.119355] vfs_get_tree+0x8e/0x300 [ 1585.120177] path_mount+0x13be/0x20b0 [ 1585.120206] ? strncpy_from_user+0x9e/0x470 [ 1585.121666] ? finish_automount+0xa90/0xa90 [ 1585.122613] ? getname_flags.part.0+0x1dd/0x4f0 [ 1585.123651] __x64_sys_mount+0x282/0x300 [ 1585.124558] ? copy_mnt_ns+0xa00/0xa00 [ 1585.125417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1585.126569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1585.127705] do_syscall_64+0x33/0x40 [ 1585.128543] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1585.129664] RIP: 0033:0x7fcb00d4104a [ 1585.130480] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.134478] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1585.136130] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1585.137683] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1585.139225] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1585.140788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1585.142337] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:18:12 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1585.213468] option changes via remount are deprecated (pid=10642 comm=syz-executor.2) 08:18:12 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:18:12 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 64) [ 1585.356819] FAULT_INJECTION: forcing a failure. [ 1585.356819] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.359321] CPU: 0 PID: 10664 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1585.360829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1585.362650] Call Trace: [ 1585.363220] dump_stack+0x107/0x167 [ 1585.363991] should_fail.cold+0x5/0xa [ 1585.364786] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1585.365805] should_failslab+0x5/0x20 [ 1585.366572] kmem_cache_alloc_trace+0x55/0x320 [ 1585.367490] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1585.368523] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1585.369512] __list_lru_init+0x44d/0x890 [ 1585.370337] alloc_super+0x8b8/0xa90 [ 1585.371091] sget_fc+0x13e/0x750 [ 1585.371768] ? set_anon_super+0xc0/0xc0 [ 1585.372590] ? shmem_put_link+0x120/0x120 [ 1585.373421] get_tree_nodev+0x24/0x1d0 [ 1585.374269] vfs_get_tree+0x8e/0x300 [ 1585.375085] path_mount+0x13be/0x20b0 [ 1585.375925] ? strncpy_from_user+0x9e/0x470 [ 1585.376878] ? finish_automount+0xa90/0xa90 [ 1585.377820] ? getname_flags.part.0+0x1dd/0x4f0 [ 1585.378853] __x64_sys_mount+0x282/0x300 [ 1585.379744] ? copy_mnt_ns+0xa00/0xa00 [ 1585.380616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1585.381730] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1585.382832] do_syscall_64+0x33/0x40 [ 1585.383629] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1585.384755] RIP: 0033:0x7fcb00d4104a [ 1585.385555] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.389606] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1585.391271] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1585.392794] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1585.394300] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1585.395810] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1585.397347] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:18:26 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, 0x0) 08:18:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x1900}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:18:26 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r1, 0x0) setuid(r1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000001d00)={0x23b0, 0x1, 0x2, 0x201, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x5}, [@typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@empty}, @nested={0x10cd, 0x9, 0x0, 0x1, [@generic="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", @generic="849419aeccc480f00c5c1d78f7fc03c584082da5a335764980cac68a7cfb711d33415bc38e25399dcd43a6af8bbf81dc888c527e8596ad8a3bbcbabf9431ea99aef10ce36bb80b391507bf9611a1c3c38b0471ee522120161d8ab636dd349190549e2716c3ad228bf165f7057ac4dd56c80b84a50bacb4c50811588f0eb4db5030cd49245c1d08e8cb6810e67c1fb83adfa1eaaee5a4108a2ec7725d96210fdd828a1d4df3460da1a036dd806dd9d3a932aa790705a7a92bc0be1e01c295a82ee97673c3eca9e4c92a"]}, @nested={0x10dc, 0x3a, 0x0, 0x1, [@generic="7924fe21189936abc8fcaf84344e57ef53d108f9cb4769dfa7b06053b5cf1ea91cbd83114af2d07ef903a90648a18d482b45cf5aff431fddd6be3981632a59aa6cad52cd27fe3312", @generic="33959e9fd7614700ca4a6ecafd9d3342057a8917dd3407751adb6c688f26d499fb514aaf035a1c439d38f70df0111be83702ad19afea3011efe4d849e8d68ed269afb2", @typed={0x4, 0x2e}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@remote}, @generic="a7ad0438aa0a05eb3295fcbd79fe1188215fe895000e1b599edb1c4d442aec3b55e73f49b6", @typed={0x8, 0x8d, 0x0, 0x0, @u32=0xfffffff7}, @typed={0x8, 0x34, 0x0, 0x0, @fd=r2}, @generic="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"]}, @nested={0x1e7, 0x7d, 0x0, 0x1, [@generic="f354e585e15b962b5d1368466f048f17402e1f1bdb01e4e876950208b17befb075867927844bfe057bc5164b7aa3fcd0c900b76b46bba0a14f0f9b51444622a09513d2b508cc12d44708b7b6b097176245b0eef116f569a0db675e5ddf5ada68b2c4d5451d19f9131a81687445f92ffb9fc199239d120e362a9e9c2099127d9198340b803ed260141fb167de323d21357dbd965b1a2c9126cc4ad9c4f804a11130a74983faa473ea1904d796950674194fb5030d7ace59e97a0902f1087eab7f9ee906361ecc7e3888745f3630206c71708ce9a9d5bbc114dd1c97fe51", @typed={0xc, 0x66, 0x0, 0x0, @u64=0x906}, @generic="54a7e30bea5e1176e771bfd917993d78a5a8aaa0a6c333db9161ebc1aa79e7ddf7feb0ebfc778f0f974b01d35702ad85b55296b88bd133729cc06749e79922beb1cb8337007130c2e9cc8fa6c6ac51023c83a2b9f6646ba4eee3b138b555ebb9798a26a1afc86b5ca2d27795325bc81484ec2347856339dc48a1b3eea54f30ab43f6ae6642f640236627fb4815c611109a8eef76194b1990bbeb61110704c5e5f0c1ac2058756f", @generic="ff40398574b8bf07c7c993719539e5817cbe3eb638153983f61c9c0d788a453ed88560bff23029767ab60fa6089507628b7671e6b19980128ea697f6398718d6b8539663fad88719aab43365a10ebc4c49a814"]}]}, 0x23b0}, 0x1, 0x0, 0x0, 0x40090}, 0x80) r3 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x9b93, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe0, 0x2e, 0x20, 0x70bd2c, 0x25dfdbfb, {0x1}, [@nested={0x6b, 0x4d, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @pid=r4}, @generic="9c6e2b9d81986e476f88cd242fdf10d73b0e063a30b3dd0fccfa0a0d0bb3082cb45823436e053acee20c70b922cb1d26a89903263443499b06283485f969562433a4bb8ec412ebb16a8a35d88cf3bffb17ba44c133fbfe7bbb920e366c3805"]}, @generic="2ef18aac0de992536c5d541869d48c7d038d4eeb0b7d47ea3dc43b5ca5d231f6a3d3d8e489146307ca2aca3971e281ba2e6fc42ebe4d48d8d9a6564ab35edf9e10ae06398aeeab23e15ba7a1e0038eee293e97f8da86e4ff0d81c99c4030"]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x890) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x1c) r6 = getpid() recvmmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, &(0x7f0000001580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}], 0x1, 0x2020, &(0x7f0000001700)={0x0, 0x3938700}) sendmsg$netlink(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000001740)=[@rights={{0x20, 0x1, 0x1, [r3, r5, r2, r3]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, r1, r7}}}], 0x58, 0x10010}, 0x40000) 08:18:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:18:26 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:18:26 executing program 6: syz_emit_ethernet(0x41, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x8864, @igmp={{0x0, 0x4, 0x2, 0x9, 0x0, 0x65, 0x0, 0x6, 0x2, 0x0, @rand_addr=0x64010102, @remote, {[@generic={0x44, 0x0, "8bfcce5b7e77b549"}, @noop, @noop, @noop, @ra, @timestamp_addr={0x44, 0x0, 0xdd, 0x1, 0x2, [{@multicast2, 0xffff7fff}, {@broadcast, 0x7ff}, {@loopback, 0x3}, {@loopback, 0x3}]}, @rr={0x7, 0x0, 0xbb, [@multicast1, @local, @broadcast, @empty, @multicast2, @local]}, @timestamp_prespec={0x44, 0x0, 0x95, 0x3, 0x8, [{@loopback, 0x7ff}, {@local, 0x1}, {@multicast1, 0x2c62}]}, @lsrr={0x83, 0x0, 0xff, [@dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {0x15, 0x6, 0x0, @local, "71373828256077eb257ff4001ed32121e94f14dff5db6599fa8c6bf8e7aeaa674d5a73cc43b73df232ef56a0c0697600b9d8e268c40666a61f1a220c3d63eb8f8cf60baa19b738f1972c6481127c29da2a422096fbe40417d147a9d0297edac233d7d6225eabd894baa20e4175a35d4a62ed9228988756a1aec83b8ef49b298a47ccb2d1f77d4f6e5118f09a1eb13a5d2d"}}}}}, 0x0) 08:18:26 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 65) 08:18:26 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(r0, 0xffff) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcd}}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) fsmount(0xffffffffffffffff, 0x0, 0x88) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4000, 0x8) lseek(r1, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000200)={{0x3, 0x2}, {0x0, 0x20}, 0x8, 0x2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/46) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0xa0, 0x0, 0x400, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x25}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)={0xf8, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d0d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x26, 0x3, "9b16a3ef0629c8631531c3a123b9357eba3d7f87e9e43eee2c68c38c2d41cc648da4"}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x4001855) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffb}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x4c080) sendfile(r1, r3, 0x0, 0x100000001) [ 1599.432597] FAULT_INJECTION: forcing a failure. [ 1599.432597] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.434778] CPU: 1 PID: 10685 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1599.436049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1599.437518] Call Trace: [ 1599.437988] dump_stack+0x107/0x167 [ 1599.438635] should_fail.cold+0x5/0xa [ 1599.439310] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1599.440207] should_failslab+0x5/0x20 [ 1599.440889] kmem_cache_alloc_trace+0x55/0x320 [ 1599.441701] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1599.442630] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1599.442651] __list_lru_init+0x44d/0x890 [ 1599.442672] alloc_super+0x8b8/0xa90 [ 1599.442695] sget_fc+0x13e/0x750 [ 1599.444490] ? set_anon_super+0xc0/0xc0 [ 1599.446631] ? shmem_put_link+0x120/0x120 [ 1599.447394] get_tree_nodev+0x24/0x1d0 [ 1599.448114] vfs_get_tree+0x8e/0x300 [ 1599.448807] path_mount+0x13be/0x20b0 [ 1599.449507] ? strncpy_from_user+0x9e/0x470 [ 1599.450298] ? finish_automount+0xa90/0xa90 [ 1599.451062] ? getname_flags.part.0+0x1dd/0x4f0 [ 1599.451899] __x64_sys_mount+0x282/0x300 [ 1599.452661] ? copy_mnt_ns+0xa00/0xa00 [ 1599.453357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1599.454279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1599.455196] do_syscall_64+0x33/0x40 [ 1599.455854] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1599.456775] RIP: 0033:0x7fcb00d4104a [ 1599.457432] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1599.460682] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1599.462006] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1599.463260] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1599.464512] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1599.465775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1599.467033] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:18:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x1a00}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:18:26 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e2fada82b66696c6530003fb4648171237658438135da9252e596828dcff28093cea2346b62faeb9f002b197bde1169c3897953d24fa52f2b86c46556f364ec7d1560a746dfe984e30e459a3e6f4522412aae33776e5e8bc9f0ed77e718572a56b6caf99277b40b3270099ae9534341b41c085d65c92560ec204ef0da479c568b8848a166"]) openat$zero(0xffffffffffffff9c, 0x0, 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) openat(0xffffffffffffffff, &(0x7f0000000f80)='./file1\x00', 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0110bd000100000018000000", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) r1 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000500)={0x1, 0x9, @start={0x0, 0x1, "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", "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"}, [0x100000000, 0x3ff, 0x6, 0x0, 0x0, 0x8001, 0x3ff, 0x3f, 0x7, 0x27a, 0x10001, 0x4, 0x8001, 0x7c1b, 0xfff, 0x3, 0x80, 0x1, 0x8, 0x101, 0x7fffffff, 0x8, 0x400, 0x7, 0x2, 0x9, 0x0, 0x0, 0x4, 0x2, 0x7fff, 0x8, 0x0, 0x117e, 0x7ff, 0xfffffffffffffffd, 0x7, 0x10001, 0xd56, 0x7, 0xa58f, 0x8, 0x400, 0x700000000, 0x7, 0xfffffffffffff801, 0x1, 0x87, 0xd6e3, 0x8, 0x6, 0x4, 0x6, 0xfffffffffffffff8, 0x6, 0x2, 0xffffffff, 0xffffffffffffff01, 0x9d36, 0x0, 0x1ff, 0xfdeb, 0x0, 0x7]}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) r2 = eventfd2(0x3, 0x401) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000300)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) quotactl(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) [ 1599.532479] option changes via remount are deprecated (pid=10670 comm=syz-executor.2) 08:18:26 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000680)) stat(&(0x7f0000000540)='./file2\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, r0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) fallocate(r5, 0x3, 0x900500, 0x30000000000) open_by_handle_at(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000510056c3e52994b5066fcc3471760000"], 0x24501) open(&(0x7f00000001c0)='./file2\x00', 0x20001, 0x140) r6 = openat(r5, &(0x7f0000000040)='./file0\x00', 0x0, 0x54) execveat(r5, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)='security.capability\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)=':\x00', &(0x7f0000000440)='security.capability\x00', &(0x7f0000000480)='.\x00'], 0x400) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRESOCT=r6, @ANYRES32=r1, @ANYBLOB="2e2f6669bab217b3f8ce04c99ba6ed596c653000"]) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5, {r2, r1}}, './file0\x00'}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000005c0)={{0x2, 0x0, r1, 0x0, r7, 0x20, 0x7}, 0x80000001, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0xdf, 0x4}]}, 0xc, 0x0) 08:18:26 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:18:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x1b00}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:18:26 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 66) 08:18:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:18:26 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x0, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1599.728450] FAULT_INJECTION: forcing a failure. [ 1599.728450] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.731179] CPU: 0 PID: 10707 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1599.732754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1599.734524] Call Trace: [ 1599.735088] dump_stack+0x107/0x167 [ 1599.735873] should_fail.cold+0x5/0xa [ 1599.736709] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1599.737799] should_failslab+0x5/0x20 [ 1599.738610] kmem_cache_alloc_trace+0x55/0x320 [ 1599.739591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1599.739616] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1599.739641] __list_lru_init+0x44d/0x890 [ 1599.739667] alloc_super+0x8b8/0xa90 [ 1599.739690] sget_fc+0x13e/0x750 [ 1599.739708] ? set_anon_super+0xc0/0xc0 [ 1599.739732] ? shmem_put_link+0x120/0x120 [ 1599.739748] get_tree_nodev+0x24/0x1d0 [ 1599.739768] vfs_get_tree+0x8e/0x300 [ 1599.739790] path_mount+0x13be/0x20b0 [ 1599.739816] ? strncpy_from_user+0x9e/0x470 [ 1599.739839] ? finish_automount+0xa90/0xa90 [ 1599.739859] ? getname_flags.part.0+0x1dd/0x4f0 [ 1599.739897] __x64_sys_mount+0x282/0x300 08:18:26 executing program 4: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1c) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) fchown(0xffffffffffffffff, 0xffffffffffffffff, r2) fchown(r1, r0, r2) [ 1599.751573] ? copy_mnt_ns+0xa00/0xa00 [ 1599.751598] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1599.751618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1599.751643] do_syscall_64+0x33/0x40 [ 1599.751665] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1599.751678] RIP: 0033:0x7fcb00d4104a [ 1599.751699] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1599.751709] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1599.751730] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1599.751741] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1599.751753] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1599.751764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1599.751775] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:18:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x2d07}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:18:26 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x40640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}], 0x0, &(0x7f0000000040)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x20}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = signalfd4(r0, &(0x7f00000001c0)={[0x5]}, 0x8, 0x80800) read(r2, &(0x7f00000002c0)=""/107, 0x6b) fallocate(r1, 0x3, 0x900500, 0x30000000000) openat(r1, &(0x7f0000000040)='./file0\x00', 0x183000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000140)='stripe', &(0x7f0000000180)='./file0\x00', r0) creat(&(0x7f0000000080)='./file0\x00', 0x104) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) fcntl$dupfd(r0, 0x0, r3) [ 1599.843800] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1599.861365] cgroup: Invalid name 08:18:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1599.904209] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1599.906202] EXT4-fs (loop6): get root inode failed [ 1599.906830] EXT4-fs (loop6): mount failed [ 1599.922064] kauditd_printk_skb: 21 callbacks suppressed [ 1599.922083] audit: type=1400 audit(1699345106.994:112): avc: denied { write } for pid=10716 comm="syz-executor.6" name="task" dev="proc" ino=33429 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 08:18:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x4f00}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:18:27 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 67) [ 1599.951484] audit: type=1400 audit(1699345106.994:113): avc: denied { add_name } for pid=10716 comm="syz-executor.6" name="10717" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 08:18:27 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() r2 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x7, &(0x7f0000000440)=[{&(0x7f0000000080)="eac71dd4c00777746de23e525b3167f1", 0x10, 0x3}, {&(0x7f00000000c0)="e6ae8b875a1be7fe43d9d8bfd1dc107513f0ccf648ecb4b567908b31b7fbb480d657e8f2c4df7d1ac84448c96c12b6499d96f3559b8bc86bbf62e07e2d26", 0x3e, 0xeed}, {&(0x7f0000000100), 0x0, 0x100}, {&(0x7f00000001c0)="9971df3ce11b9ab5fc3a99730e6a79f88898726422e22f596115151fc85054721a91a5f37cb11e3c63c16d58b6feda506b3dc1699ac578b3603a6dd5ff39b071a4f7e21edb9a5bd47b57b395e53c9a5453daa890b98e97f0ca2472aed98c7de69ad376454f2fd8f262f69f29c790f83e147ecafec819ed18bde956243d2eb62b42e0c89c9c25fc504ab86a1d6f9679be2cf04ef139bb6b9ae6b9ee3b020887b66da9c3a90496c137926f6e181006f6f70eb2d38ce30d2c7b6b9b9fae33f522cc83193b585756fe638c740060f367a901ab453f9c16b86ddd132b35518c22bd5d963810d617c28f", 0xe7, 0x4}, {&(0x7f00000002c0)="9b1f652caa3ac7ff4dd42a7f3d7919600b0bc9f21c7964f01a288c6064ef1ca8af70674bbc405b9c0a9f0f88882f2855d484bfe88cec44f56ec5514ab7ce0adffcb37c1a7492ec99036e45816b9d24b9ac65aeadf4371ed06cfe55671398c87924b3d936bade1c65eae2930341fc3b419ded4b9e90db4184e1d741e208106254f62ba75717eeba6be25aa28b3bb4b2ca399855", 0x93, 0x6}, {&(0x7f0000000380)="65dff38126f3b6d43dd07e5dfed7ef803bfc2f614e80", 0x16, 0x9}, {&(0x7f00000003c0)="0a314d55a7682aa7688dd12eeded968cf648df411b01a4941d5c2e43341ff5322dceacbb5572478670bfb5b3209d76dc72be4919ea471173e4bd7aa4e0d94c49ca0f93e58a438f7bb2424e0a5f078284c2d2792e6ac61f", 0x57, 0x2}], 0x40086, &(0x7f0000000500)={[{@fat=@nocase}, {@fat=@debug}, {@nodots}, {@fat=@check_normal}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfsdef={'smackfsdef', 0x3d, '(^'}}, {@smackfshat}, {@appraise}, {@seclabel}, {@euid_lt={'euid<', r0}}, {@measure}]}) setresuid(0xee00, r0, r1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = getpid() r5 = syz_io_uring_complete(0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x81, 0x7, 0x3d, 0x6, 0x0, 0x7fff, 0x180, 0x13, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0xdfe9, 0x3ff}, 0x400, 0x8001, 0x7, 0x8, 0x5, 0x1, 0x6, 0x0, 0x40000000, 0x0, 0x8}, r6, 0xffffffffffffffff, r5, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r8, r9, 0x1000) sendmsg$nl_generic(r3, &(0x7f0000000d80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000640)={0x6e4, 0x40, 0x100, 0x70bd27, 0x25dfdbff, {0x17}, [@nested={0x22c, 0x1b, 0x0, 0x1, [@typed={0x4, 0x76}, @typed={0x8, 0x1f, 0x0, 0x0, @u32=0x3}, @generic="9ee9d4f0354357addbeefafc72c75542b7254e27", @generic="3dc565e9aad6e045c9348c5c71ac0e32e70e1f458c95117ab0753d9b02957bbc399bd9c308028308b7a7eda2e96af3d11308b5", @typed={0xd2, 0x47, 0x0, 0x0, @binary="090c1846f965e99c83d725581816bbd530611398a95c6274cab9ece024cad3d2a9a48e5ec6c06801ac24a8a99367e57dfaaa6162ef16c66091cca6a106c2647c89c42ef8c60ba56c75605c2073e2bf510c7d00a92c83e68c3cc8f270f20eef18acbbb37d88c45dfb081697f08cc708e1face3804562a6fa55d9fa43b39f90e12a947a92c362f8ea4250daf5e6a432b31df372da447ecc688ad08ab5ef2c952cb4f739253f7c597646a7d6cdf893f9186fe0abee23c3f6e18ebce563bd6208ec61f9931bdc63cde7ad7b897ad50f5"}, @typed={0x5, 0x6, 0x0, 0x0, @str='\x00'}, @generic="a3dd35aa6c8993a1a42b11d9d213d8bb118b59fe0531e5573844483db15e40291d3903ba9db6fe6dae25d3979de564960361263a81ea4018f582875c4adbca628fe14465b2d5bb5129ab96d7eb704886174ca8dfaab0131f0965233747bfc9447470f5d4a10af00c7ee9ef11226cfe0d860172f4766c8bd780642976863d5779abf170029f6c83fb20382a89603c500c1ee77189108f3d08a75391ca259d8aefe03ca0826aae294048d167a5acba7e13a667df", @generic="6daa612cf11116e1313a8f850b96b0751a12eff05beefda98db1d3c9508fde9052ab99cd9daef90422f8c1d9c9596ce567528390615bde9179dd0a0f01b393e14a39705ebe0c"]}, @nested={0x27f, 0x17, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @pid=r4}, @generic="86ddf8c16dd015bcf5", @typed={0x8, 0x8, 0x0, 0x0, @pid=r6}, @generic="08838a002db969dac4001ca553e558e6de3adb88244a47783adc12d2f88613ce7470e327526722ce959b1d0e778a0ba233298b079d402157dd4722f62b7065287f1a57810c6518e7cfb72517f11544a7a258f3b2a3724660b83f1ea85b668a751bc0dd6205b521f19e0436193012a464b2a960d307a04fd389b8a3c248e40ff591c2dc9b2256e986dcf62bc027", @generic="502360df9c5022fde929294d61496df9d873", @generic="694537344960919a4bbdfab7f232a0552db9e67850211942262926df71977a284b0cc39a9531290e5f773a88b7c38e3202f95f9e41fdf72abb18f81f22a3f5ed6e197b759f819cd640f8eeb2c0e4c203d0d328cd184a61423df6ce75ccb666abfc7584a5b44c83ea92295a43ce33269d58fd7926937e1038c0dbbca49432472271bd678a047d0696ca7b9edf5bd0f1589417a2adc87d104f42e4b2f438313b498d3fc859de31f4a74cd5c2cb8a7f402296f5d336259e10f48e469fc48e178229853b", @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@private2}, @generic="f3c58d0fc2aff0ed3b4d09c3cb26ffa35132db5cd6ccd31afe032ca64c85fe4156d699046a3855dacc319f0bae06fd823f0ec68c676cdb0b5d1345967711955fab0781437d75a7c7a5c00c673fb301f64721c2cdd24d17fa93e9ddf3d2b0987b7eb4ffff94c8498a", @generic="2c861ac1c18b3a3b25e3d7df6591b6fe8447ec1c51bf1b2faabe603177fbc7789367f19dba9c9f9805f894dd7a837e2a942d7e1db0aa1dbca796aab7093643f08d5d96b50a007b1cb58f2b6d9f011912dbe2fb4a5f4b59ba9b99c5af4d61100d24c293de5f33666c257490c2c83c35726ddade46568bacf98c71b9d453cbf1f64d7424daa0"]}, @nested={0x20c, 0x34, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @uid=r7}, @generic="e367be6eec4a4056245e97f343a583f832ef", @typed={0x8, 0x4e, 0x0, 0x0, @uid=r8}, @generic="5a37b34292e89bbcdf345bf5ba04462f4ad538c053a7b3dd086d11ad9a1e23d3269b36c2513859f5bac9a14867c62934eda860f74f885e1218c9ba36715c37b2ede67abbdd", @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@empty}, @generic="20fcc192231245e49882bd4fb1bc8613dd0bc950d972de5612c0c69847989ed63e39e65a9b8ed6511bc7d4458b862877934676b499421ff6df2c5154b4e9105877e05db549eaddc754052d", @generic="7331e9642d21cebff94ff8cfe6a49c0216a4913077e687468e7673f5c9f98755079b2dabe32c339843d4cd7fb2ff7e938d616973293fbb6cd61b006c8702c49d3ff8f23c7fbe85726c08c39eac1d4d8661c0b24b15b2db38e5525143e53d9b7cf1bac06bba75f5d448a1880f0aabd4d0aca83bfe6ba2cca8ecd874e9b03b4d69ca9ba12b80e5a794d39d5ee48592579827a89e6569df08bb59a68dd34474508cb422e3a4e3adffaceb24ab7cc4f6cd35f93595db5bc25fdf6786c959e03ab635773a97800a3faf177b5e371278194621", @generic="2dc3ade31f3573735cc8503e6bb09b7fca9ce8a555036efebf287c36cc41244aeb302182473985f741b4f7faa407ad616b45eff1591d46e2c6e3e224c8d8fff5f02fff547e047b676d6bb333399502c47ab850e25d60d46e0a41461f0ccf94e241f43dd39f9500fda4535cb4a27a5398336a"]}, @typed={0x4, 0x40}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x16, 0x0, 0x0, @u64=0x9}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x80}, 0x200040c1) setuid(r0) [ 1599.963888] FAULT_INJECTION: forcing a failure. [ 1599.963888] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.965333] CPU: 1 PID: 10728 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1599.966173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1599.967085] Call Trace: [ 1599.967415] dump_stack+0x107/0x167 [ 1599.967870] should_fail.cold+0x5/0xa [ 1599.968342] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1599.968969] should_failslab+0x5/0x20 [ 1599.969431] kmem_cache_alloc_trace+0x55/0x320 [ 1599.969989] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1599.970609] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1599.971215] __list_lru_init+0x44d/0x890 [ 1599.971719] alloc_super+0x8b8/0xa90 [ 1599.972177] sget_fc+0x13e/0x750 [ 1599.972605] ? set_anon_super+0xc0/0xc0 [ 1599.973096] ? shmem_put_link+0x120/0x120 [ 1599.973603] get_tree_nodev+0x24/0x1d0 [ 1599.974077] vfs_get_tree+0x8e/0x300 [ 1599.974536] path_mount+0x13be/0x20b0 [ 1599.974706] audit: type=1400 audit(1699345106.997:114): avc: denied { create } for pid=10716 comm="syz-executor.6" name="10717" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 [ 1599.975004] ? strncpy_from_user+0x9e/0x470 [ 1599.975018] ? finish_automount+0xa90/0xa90 [ 1599.975037] ? getname_flags.part.0+0x1dd/0x4f0 [ 1599.980842] __x64_sys_mount+0x282/0x300 [ 1599.981336] ? copy_mnt_ns+0xa00/0xa00 [ 1599.981784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1599.982417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1599.983051] do_syscall_64+0x33/0x40 [ 1599.983506] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1599.984126] RIP: 0033:0x7fcb00d4104a [ 1599.984593] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1599.986803] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1599.987713] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1599.988574] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1599.989353] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1599.990204] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1599.991056] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1599.995292] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1600.009112] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1600.010756] EXT4-fs (loop6): get root inode failed [ 1600.011415] EXT4-fs (loop6): mount failed 08:18:42 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 68) 08:18:42 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x400) r2 = pidfd_getfd(r0, r1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x11a, @remote, 0xfe}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="19c4a4b4d4801246c15a1870e8f8fbf560890bd851d0ff466cba84e8f6085a17f14fc407c28564bc8612383c8fdb0438671acf2a5a20af3b9f515f36e827df0ffe5ec7ddf86b796cb0bb30a47477d010cd8b267e8b37fbf84a1bfbd29f6928fc8264d889971c5b82e93df8699388849599aeb86a3d1d232c377835dd80a989d233e03937ef9b460561d9", 0x8a}], 0x1, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x2, 0x6, 0x0, [@loopback, @loopback, @local, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0x84, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0xffffb057}, @enc_lim={0x4, 0x1, 0x6d}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x400}, @generic={0x1, 0x60, "c484c2151a64dc07eaa7110f9aff10577332259902cb25762bdf1ecfefccf4bf085cd8bc9b5d7651cd1d402915acce6da75cc19703d10da61dd45cfa0b7afcbea3fe59f382cbf93827787dd550b29c108b4679b80cf35b8b68bf3167f9de103d"}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast1}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xe62e}}], 0x228}}], 0x1, 0x90) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0xa, 0x4e23, 0x2, @mcast2, 0xb0}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000004c0)="347dcee7f923875702e797bd993a90bd05e93cd235e06d058dce80c0bd18a7a5e3f38ec5aa40250660b1aee2ae20225b8e2b39444e6f311d165bcc7e039698f50d2c85ea552c02e2e2caee7ecb11afd150e8b353312c87b1f936", 0x5a}, {&(0x7f0000000540)="c74c4069c95bb3985a5f87d95c7d7eab7662d4dd7c2888a147f3", 0x1a}], 0x2}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000600)) connect$inet6(r3, &(0x7f0000000640)={0xa, 0x4e21, 0x0, @remote, 0x3}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000700)={0x0, 0x0}) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x0, 0x40, 0x1, 0x3, 0x0, 0xfffffffffffffff8, 0x80008, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x4, @perf_config_ext={0x3, 0x4a}, 0x48002, 0x5, 0x80000001, 0x2, 0x800, 0x3, 0x4, 0x0, 0x8, 0x0, 0x7ff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) recvfrom$inet6(r5, &(0x7f0000000780)=""/188, 0xbc, 0x20, &(0x7f0000000840)={0xa, 0x4e20, 0xb9a, @loopback, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="2cfaa459ce8191617d48cedfc005557e2a86087bcee3c7545f1934a1768fffe4d3309b67ba4e236ab3def07c979e6f598af0e27bc509e4411003f917dcc7d651ab39ecabed4f6939afc65046504a3cb6db2897550a9ef74cd183fd5d242eea4711261e955823e288a4f5f7809341f8c4f3206b9fd6c46cdb367f9878bf6bb22b5f2095c0814c5693961f999ff8e484804c387f710311cb99f2b677a3c1176aa792a77e1118a5ef93ddada3c65806b3668cb3a5e92411ceefbaee524f85b19d02a769dcc51a9edcd4e37751037be7206be789afde25d18ad500c95e3acf089443d263cffe1f1d4541ba955de2422f87e18e0543b41c2371d7", 0xf8}], 0x1, &(0x7f00000009c0)=[{0x100, 0x119, 0x0, "86509fcd24a7b02a169bdbdbd322251f47621ff859c1f98214c0e9ce079bdd867402a0fd084408676103ddf34509aa8269e307c569acdce89455cef126dda4a1fdbe0a99c930fdd86bb85a2f6d3301268800086712b1273d7a90f8064723f9adde5168128598b19a55132c11569b6b5dedb68b3c6cfb1cae775c325c7d8b400749ed76b1c6045d68795a52dd7a50df407d29e8046f69560d2efeeffffb9d3a75c01ca4572ad445dc5b46e2a504a413c76805961b2c23ce63507bd03c93945d297a5df85a30cbdc37c292f286b818d834fbe1ca41fabf3c51d53b3e230c4d56e1640fa8f244039b48f91c8f4b80a7"}, {0x88, 0x109, 0x4, "3ed482db295987fe34442bbb29d9250f2634f85e5e8364db6b6ce5e38b2fe1c4ed7360f40e2de7b77206bd659c2995b08e27abe518c3c0ef28f6d1429b1ceed4786b61abcbf069230ee6ce62be5b8f1b928d55712a3c7cbaf090a3726d5864517063e454d4c60283b8ea7d5135f2712d92f9bb7e0fc3f2dc"}, {0x50, 0x113, 0x0, "e75cacbe55ba8158696a2de992ba1ed1e7223ef8514aeb8bfd7aabdee1243fca058bca253d2faab7d8af55b5b9a14ae5da189651a8d96d0cee"}, {0xd8, 0x0, 0x8, "99fc37a9f1aa8c12acb7105c156ef0a7326b2195569377f3a98b48e9eef2121b7899248b8e78e9db99b820d5558876a27e5167adfe015f6ae8c5b3b2a1ae37ca92c03c601e4efe405411952ca5603681137d98cd24fe190e785ed7ac28db613b239e02b83f4f5d358eaac8e4595aeaa3ed53b842470686c3d7f99d45d2fa0fb516e2dd346ab1669f7e5e1e5c59fa66ee800d8d95e538479b6f59b0089933d9f6552b020a905ec81a1e827aec4c3eb877f9e64ae6d8e3d7122f7586ee7cc7c219ec4a66"}, {0x40, 0x111, 0x101, "665740be9d891dd31609d12610edc20e00e29a4e09f625c7aba8b64cdc99fa73bfcc4cc62fb31eeb607cf33432"}], 0x2f0}}, {{&(0x7f0000000cc0)=@xdp={0x2c, 0xc, 0x0, 0x1d}, 0x80, &(0x7f0000003040)=[{&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="5cc12269efa696cfaf3f060b1f9f78894ca71ab450f87bf94f4c2b639070983083f6e1cf21ed7fbb6d1302238d863f06bdbe2cfbdbf3cb3281e385cfc7853169e7fd05329c06a3585b0f69ff084faf7c12d81bdf0764b1a35b461609e2e5b7ac5b1f3701fee142d9600f693a8d19bea34219c41002b0c073687c5b180ec8f245f334b94031009c57e5979a50974665acdcbe938ca5f5d6eb0612c1b212816f1491f08801c59f0d695dc21309118a08e429a12edd42c58ff2141dc5119273994bc5f946e36e40d48428b8dd6c5b9ee64fd44bed7ceb922c17cb7f625e8a7f1967da7205f1b41ba8f91a5351", 0xeb}, {&(0x7f0000001e40)="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", 0x1000}, {&(0x7f0000002e40)="10a0443357f1daa516445cdcc71e0f49783bf1c9d473cf45c2e06d38a0ede29d1f9bf9810add3e536b6d546ab35f772b4f1391e618aeac6fa1eefce9dbf671a5992b19b2612830d78c59aa55460a130e632adfc415c4a870ed", 0x59}, {&(0x7f0000002ec0)="9f2439d778f7932d7003b2a09f4afb1bddcfc4775b0d9c7dfe8d3863b67989a93779b65f0d98a894b5e62168eb28b466ab475cb3c8496a6641b4806f8c7a271eb9af0658e83864e4f5cef305b963d490615cf7b152c9f26666ebf5b2f3185d511dd018d5e9ca3608084ae5ef8071998cd2ee51f39c886297eea39e745cfb2798628290fd8e9e15e7b4067b830570ed41a7919b628aacbbcabe4f6220be89c5960371e2241a87ed9480f6887d10034276c180053c005658aeeea9b760c00b4d611d00c8c00579b64eca751afd3c575c77950a0bf0ee372aa2757c", 0xda}, {&(0x7f0000002fc0)="1cc9edcf8c1bfd0bad2da4f62fe8d72416a7a5c6ce174c00c05cde87611e08a732f88645a510dba5a29624e9b2d5a176564c051bcc0892459048682a5da58e44c295ee28aabb0cb0810f5729d304368e9d25491dfb38bd613c61f173de5ac12daa24a1e0bd02376d994acf9a199d304a7e8be9", 0x73}], 0x6}}, {{&(0x7f00000030c0)=@x25, 0x80, &(0x7f0000003540)=[{&(0x7f0000003140)="355a1972e1b0917792ff26a383fb55e7432b56e152d8262aa3ffedfc09cce181844ac88c004262d3d399919ad1cf66fc5c4cafdea9613245b618fb0d32b43d6d94c217743bff338e18c02f1d62a43c6e9c6bfbe402ea9c09b039b6c6981687e97c4d64d75923bf594b0e7956d917a00543b64189b185ece1c4b1093167b530a307813552de78760e844b89c61af8dd820daba5e17899fc0eed24c617ab3bb5198c41d0c85b4b1b2728ec45f3b3cf6206344c040ec0a455ee8816966b6b97b8f89782e48eecf3fd6a282e3e11524569b010fb982d494e9fd60a2041672705d543a5258b8701408ea1d1e97aeec31aa4b5e71bd8ff6aacf4", 0xf7}, {&(0x7f0000003240)="4c5d6094438a8a0928592a0d2de1feb017d8d599fd54967f56344fb07408d2a09ba3a21133b89ebdb40018cb8e86383ca881b1efed4a6dadff2e38479e169c1c04f7db8550d588d674cd9858688b2eee7ce00301a74326f797a7d598f6e5e0e2b2", 0x61}, {&(0x7f00000032c0)="9aef62b5c84c01d30372f37b70becee2fb776aeee6f0aa4875b2f5d37011447cb515623eded9ec3416e97063c6f0e66e31b3a8786e76fa6f14d89831065484695bfe4196703be5e97c20287411", 0x4d}, {&(0x7f0000003340)="c433298f834689db5058287e44f4e25d87c3c6409a662cc16d16f401cde436e0b2b634eede5b24f7feed585f58e187cf3d19242cc486fcd56a9de1b84de65e57eead68bccd314dcf58dba2914559762538ac5d19135f450fbcd07107f771461369e401e0552e74f616bf268ef87f03333e8b985815445dfa6c80b854aff2cd75156a473ce2fe1e14034be7749e99f5904aae7818d1a10ff549d5833567d491f522", 0xa1}, {&(0x7f0000003400)="625dc0a1de200f", 0x7}, {&(0x7f0000003440)="2bb6f8dc9e3f6a7858670f89e407863691d9", 0x12}, {&(0x7f0000003480)="b9961a2528fda671e177798bb06480c1337be6330c1b494b876d41", 0x1b}, {&(0x7f00000034c0)="1262111d883b1f7acc026b70f9a424dbc575c0eca9762dfe2d98c74e69f9c1d8f7693c7b732581f32d5adf3ba9701f8b41808e67dc6a48359b66a2d51e0b8363ca7a08ca4bec18a331c7fd33349a6683b9376941bcd49a058339e22573d964514bc5c90e3c1ff9e357c1a7d0f92114707aee3884287c69f780", 0x79}], 0x8, &(0x7f00000035c0)=[{0x110, 0x105, 0x401, "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"}, {0xb0, 0x114, 0x2, "f3ad93c9549570b1f247b4eca943bbb63fef4540933a1f60b99e4646261a0386087b4bb78234fd99b230efe01a2ee65021785d0411b4978857667abbda86ec46a34adeb05d4b0ad433b62f42d9dbd1b9818ee076d58381ada96bc9a6b35ceab4a3e77238d1b4964d2936d872789e5d30d90f7eced7c3e9ff96aa81b358b9b32774e9ff6171a977a7a7edcd24103eeab2a1084b33a057c0c4b9810e91"}, {0x40, 0x1, 0x1, "51f7f6e69681eeacec72ccf4424caea644cf66c7204429bbf1ec5829ab4db21e402946b2dc1994c514d4"}], 0x200}}, {{&(0x7f00000037c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003840)="88923f7e", 0x4}], 0x1, &(0x7f00000038c0)=[{0x10, 0x10b, 0x2}, {0x30, 0x114, 0xffffffff, "c974eb087d72882626c829714eea56396927c2d42be6ebba7a"}, {0x98, 0x107, 0x4, "10c775eea93002152e3fa3999bc4b9208b6c4e4bd28a88d77b18555b5900e8022f9e603f59fc86817aac17503eec74e3b3b359400672b2b4f8494fbb3a2a914bd9e7d22066fd239848e4c09b0d0a146b1f40393cd46dd1cbcd850dee23f3af6b1b5719c0acd3630d8478bf34f90ee367f1ffe4f1c5013baf756b26df7780958de5bf983dea69"}, {0x98, 0x112, 0xfffff21f, "fab5e1af8c9a33207690bec9b43dc00d9caef13362557ab3802a49ada1b6c21a198b5f7b8341f88f963025e0c64615bed1b7dbc1c180a38983ca7883dea7804d9c56e192c57c092557c2d661c31df1d8fe59daf05469ff713e891209de1f1d562fa88372ca5064d8fe76edc6a88480836fdd2f60b76e4b3607dd958c512bf3a7948a6c2efd"}], 0x170}}, {{&(0x7f0000003a40)=@in={0x2, 0x4e22, @private=0xa010101}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003ac0)="6883e876396ab0d90a8a4f3bcc165d1a53cb934fa607d3cfc74825a93c976f27d4d5079026c166a7915db8a89d5fe154312f6fa649b5888cf006c967373ddd040edd516c78911eb1e417a50dd026afb4e8695338a32fcf765e86ba", 0x5b}], 0x1, &(0x7f0000003b80)=[{0x50, 0xff, 0xfffffffc, "5b203c83085e87e5952855d76af833869645dac36af9e9095c27e517cf8c6a85b41c61ec243433820260c82aac1a7bfc09f32be9e65cbb4164cb78e71e0a05"}, {0xb8, 0x88, 0x5, "7607adc17522170ce4bc73efbbd9b1824d35eae51b4b08803524cfc79182b2cdfacb7746017d5aa2b3f39716b4170bb3da7c7f58a94ffb055b8672ca3a8f6fd40ae2bbe1c6e5e2d65913ad415b8302db4c81bacf8d2a03f3c83d09112aabcef1a90e3f62dcfec360c3b8638feb88003f860e66a17fb3843381c6222c1259ade49c7d7ed0f268bcbf9c5b4239239a74bd9bbdf11c3f10636b1e1ec3913dc5073d7cb2"}, {0x38, 0x10c, 0x7fff, "989b1cad78a9a2822a56d00a04d907a006345831bfa72441f8873fe0d7911373f305d6"}, {0x70, 0x114, 0x3f, "a95424b341a6c3a2ef780a2ddb96e532189b740245b9f0ae552a7275190a6167f248262363b6d188e2a3e50d1e1c1b56d053e1d6f98da77656d1a4a618ddea807aa365c00e4387930c7e6ad5afd74ff1db305484bde691d261f9dee4ac83"}], 0x1b0}}, {{&(0x7f0000003d40)=@llc={0x1a, 0x30e, 0x8, 0x97, 0x6, 0x3}, 0x80, &(0x7f0000004300)=[{&(0x7f0000003dc0)="0332e4c5f9", 0x5}, {&(0x7f0000003e00)="29671b575cc8ae489a3db5ad10c6656e0a60718db127916206d94fa8c30691d57fae133ca2ccfd2909a7e5ff0f9025135a5f97ba6179b31c0c9331c9ab9bed72f4bdbfd7014441f1eda649efb4b61d5bab992e829a8fd4bb2866ef2bebc3b44b7869ca4f000ca17401db750ec47ff3254fb59eb130dd3fb9e544a262ab1f171938c8cfc8bc5390a6ec6c87a6902cd3c47487061d18fd0146991b81efaca57489660ddce5bb14f6181bc263a7c5648ad432c73ec42290277aa3", 0xb9}, {&(0x7f0000003ec0)="36ae6385dafdec177e6a83d7d389d6ca4ad7decff219c19bccc2d40c8374dd901cae6a000ccf6aec09cd92dfe9883fc44ae00e445567b89344c124a80bd7548955294ca47a4eb55c63c653f5deb4b432fbe323750431e7507c2c8f40cb4d0baf79880d67eb65022481483d467a118c2925425e3b257ab46ec31497", 0x7b}, {&(0x7f0000003f40)="7cf0e1cb71ecf83c36f0ce0fbb0f9f0e6e7d4a666a7a9df8b187140a556b9dbb97f2fdf319fa5a6efaf13bfd1fbf4429a5753a516433fffd9c4b162238b3cdafc0128b434fe68e0b753b0c7217635359023e1f9c3c57299c34eee77fe4ce6bf3a903593cfe6269a7e6cadb760c146931b79e9c244e160b9063", 0x79}, {&(0x7f0000003fc0)="eefdb821f6bbd9850cae152b4f7ea4f9213aee96423bdec75a3c4fd952086a4651e18028ae8a0cf09b80be6a24ef7762a707241fe8dfd5d59e18563741df06142efad232ae622800b29727f94cc5b260dc7b795eb82b82e2d1c3fb4cf25b7441b0d46f811a75403e6bb782839bbd00537c811bfba28f6d5f19dfc8e543e7d10476852172e385195f936ec036383a6dd30a2ceacbc7f87b1123a99470e489540714bf4184d468bba41f94e2b84f0d4fc353f0a95268a8b96261235acbfcab19cc", 0xc0}, {&(0x7f0000004080)="93d2687bcb26e3e212393e18134b415bb3aed0a2b156aa4625c6d6b5bf8e24f68522add90d0f3115e97335322871d175b5e25dba7697aafb97298059af31357a585da2615170c77fd5df63b89135efd82e30bb3acdab5b64b4dc7f5be4b2067f90f9ee5bf6e193041fa10f5cfaec3e4d08cf3fb7dfb51008c5883cec79a84122a60f9585495e0525321cfdf3fc2d4abc35d973c7b2d5e45e", 0x98}, {&(0x7f0000004140)="55d9da80b7dfdaefdae668abc1e86370c6f718835e464c654c1e0e5dd0441e687fd46000f5f98cbe3ed76025af33d14db463e45f0d60372d6628a4e8d579ca7cfb917b15033f541d22c8b59ef749cc484fa8fcf374f5b7d04cde1a24c5c909cc3adf031f3eb402e130c6ca4d895df0", 0x6f}, {&(0x7f00000041c0)="12d93624bcf8aada074b5e9680fc53af4b04bbd8a4909b149d4fe67c1594e570cf2e3265036d134488ac29c670883f88930e8d0da7df51d371f219f689647d786e755e1fce98f4c6856fc41c20f686f044039e9840bc", 0x56}, {&(0x7f0000004240)="3967d9f0e8f27347065f81ce198b984d0a2f380d888e40c95831f70b287bb6411eb7ee8f63b2f88d1273d945acb9d3606a9589de0cbee1f9e66bb3f1b3f9d361eb10aee362687714c816fa1ab8b73422b78413f0cdb718d899ac0dd05856e79fccc7f53395ca26dc8520ded86194ddefb65df012d762e35eb691bbc25f2e18bfcbe2223f7cdcd80cf574bc6bd700f38bb0eaeaa54189ff7c6c758e6af70eb7959da761870a1fb7601e1ae0436f414aa69232cc44", 0xb4}], 0x9, &(0x7f00000043c0)=[{0xa8, 0x6, 0x3ff, "d1eed05edc36cf83d11fa1bebe32bfcb056a9cfa3010b207cdbe1233d86a6579d4c04b93783c60f5b56142b3f7cbbd15a1a231dd9d0608318749631baa6781fe5b3909d232a0b64c69e36d5534fa5e2dafa5a880973e8b822fa7269ac963f4a36d40b0ff123e0d1355c69f13603cb6e16ee913e32d076bd07ca7fd2a9ae03f75ed969df3d1d2149c6e2c81a42ec59fec2e3f461b7d9359"}, {0x38, 0x108, 0x1, "4dc8a35626a17b4c88370bf7a89250311f0f7367fe2b2f735dabf3e214e87aee06d4"}], 0xe0}}, {{&(0x7f00000044c0)=@isdn={0x22, 0x1, 0x7, 0x6, 0x9}, 0x80, &(0x7f0000004640)=[{&(0x7f0000004540)="4c984d5b6c38a283dab2c1f4b7161c1466e1c5c906de80b75617a69e8246a17055c5041af92567cae99483470ffffc261e414c13cd804c74e07524a0f3e8565cb67c8c13541299eda40669d71a9d2c579e346f450fa04fb2b6f062d7e6270c008029ae9496f944b7d42bc52932246a6709fe02fbaee954d6ed785add04f70aa41b7674c2951677afcaa48fef43ebae47f32a652badc9440e9f4cb5f3a69910", 0x9f}, {&(0x7f0000004600)="3f46ec6281598c273968716d83995ffc606b7387e2f66f6b54586db635dd969e90d520b28e21dd152829730ffca3f760e4af", 0x32}], 0x2, &(0x7f0000004680)=[{0x38, 0x10d, 0x1, "b4e4189c85dbd871db2d310c5d779dc786ace8cd7599cede1f285d72ef0ccd1402"}, {0x18, 0x0, 0x9, "637ae020246089"}, {0x100, 0x118, 0x7, "dc5c145b942dba05d835f008335f3657cd46d8dc7cdc831e5ca557e37628bfc8094080c9efa58c41e89de1fba1e7730747a022ce9c548e0562337061e6d133cafeffbb7965c6006ecd9634d21831ce9f334d6e701701d57803eed59b81706d32e9a0cff1cb0dc68ba6704a7a7ec2b53c64e67cde5e8f468861d1724d0176c419ad6cfe25774141816e950216355990dcc38fd4e277ca008861beae83cc8c18eb1b5e57997445b982adbcd438c5c2eb2f3bc34d367ea14acdad5f44d0500ed860979acd2560b1a0d0099a737444db9eb6e090050bc7c845a4f1ac5518d957ccec9ced8b5d23a0b9a08a"}, {0x28, 0x10a, 0xf81, "89fed980a766b6fb4207f74a82d6e3b5da38deab34"}, {0xd0, 0x113, 0xffffff81, "3107a84eb426424b404734deb00c0a9e0bc8d4e1f47a25def9a9d1151fa6fe5115374926b90986c0a095fb8e063fd769b72427287803e59aabc4c9c258e57e57867435b618b9a12465386768967ecbbe0c8736e59b7e978b7436b39c711881a701cb113d62d41f6bb9f0f9d1f1f77ceb8ecba98cea2ece624d1cb10dc5c6f3f872d16de93e425a100672236bdbbb81d4b427e8e0a737f321e91e5a0682c91ba7fb0799d82fd06606a6b086e24cf65014713c4f88bcff56cb8a"}, {0xa0, 0x116, 0x2, "190d55e018e820d7f26d4921d2cb2a14c6865cf12ce8fd58fee50696280bdf8daac1d5aa22d61fce1c05d736671301a91b75b29f3a67dcfa346475b262558c50fc49cb8047f59ee1724c078d7092a3e2d580c183bae907cee1c77d81a36ce9e7fd3f676932ab0dabcb218a276d0f053eada1992aaa202ab00e12187c07513b3f71c82eedc2f6c0205ef013eb56"}], 0x2e8}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000004980)="116f6a3d14e344199d2863636aac0d5a47a0cbf500a342fd596944e2c6b224d6dc660cdbbe962580fddf1eff2c8f5e1ef8cd62099617d4c634c18fa6a3851a0ce28d5d75e23a6cb03385c389c369", 0x4e}, {&(0x7f0000004a00)="ddc1b90f25144854c2184581179be50dcaec238fe472937eb2e6e48a51fe8018033888223dbc30252ed61fd4c3739e32a4a7bd024ebc6dd283907aaee1529e470d8a4096cd439f8843e5df17526cac05e6e623554dbd4fa4e4c658d2fa2a4e1236d435015ae50546bbfc", 0x6a}, {&(0x7f0000004a80)="d8e78160d7fba9a83a92ab7e1ce7bbbb2d4cad20a77465f281801e0cd8a9f488cacb9ff82ba760f4e0ab8800eeb76bf4a8e3a121f4a30094c4ed505ab3864691c75f8d69ef84f58b6686cd1d5d34c5318e589a52b79f1cc4f04fb8a9f038455f27323940499d0a204a404f6fa18e0980bcab977dfb0869c5d6fdeab5044527a59344b8a4922ccceffd521dba35c45dbc3fbc3147", 0x94}, {&(0x7f0000004b40)="78b9386e400cf96e5ee8e8a0df147556803e95f0568d2a83e4ecbb51c6bbe6f480dcef7e0c7d8f70757fcde26620ea96e803b02997ff43081306cdae3816cb28de0a3e4286aa785a561946c0302be44719975f46844b7eb84723d3b2ac966c06a2430e64162116e08ef9801a9d339bb1f0fea546637a8ae20de9b9006a81afed16f25c6477a931ad42181e79961eff724bf818a929eb6653b55e75ee7518fac366cb17129c0297d2e0a7481e09fdeed86509764fa6e603838f5d47a68207d0f64192f3f75fc1400a46f31212835a8581e34272f22492d83684c79164e4", 0xdd}], 0x4, &(0x7f0000004c80)=[{0xf8, 0x11ffc1aa6f7595e3, 0x200, "55b8a7ac167cde52053bf044b7efd38006ae64b28abd02e8a8aa31b22d740a512b9c85daa922925760d2a477a67bb92f886cd41418987e97ff343854dda8bbc9215ea17a7d1a01d9ce9d0baa1fcf93789a4470b7016bae3871b83ea2c92220e85b0cadf905958e3ec3050f6de2ac6b842382ea3a0a5c62eb225fc9cd96542c309e9fcf26517836c1c04afbab67df0e1284522656d86d2123d31c824f4e55ab1b5da72883fdaa83c4e0f5f1581300e05f2c03d7b4cdb5ea815b8e0902b9c062635cd4996d4780b570fbd9f4d492fc2eba7ff33fff48bd6b4f314c6fe7985b77dea87e7db07931d4"}, {0x108, 0x84, 0x0, "c0770264607ecbce8760014f668a8f8baeea49d732719c16dfd4e48ebb094a5ca840da692fadb8c236d57e4f61eaf532593df044cf0606dff7e4bccca5a4e33ca19e99714b00510ae9d6cdadf26fd209de3462d9cd06a0c341d4995352461d660b405317eb8ed3e2334fb3134b1c2c703da6febdccf2a67d9c5e09de513021d28a72bfcdfd7ed0ff7dcccb940b6338f740bb48f15241af8a4db1820f7ef65a85c4a62d67b5cd3ed96c20e6acf079a53cbc3edc1e4abbd2608a6254235a547373516107e8c64a8a6d4cae2d46a19057e81fce64153105a60dc249dc941510f241a0108a8e1a871cefd4628b7d4857b28ef0f04763b1b2ab"}, {0x10, 0x6, 0xfffffff9}, {0x68, 0x1, 0x3, "0c3751b9690b701a0e8a6932223dbe763edca2894e14b660e9ce7434e9bf7c2cacc50638340d4951b9d694bc45c633c6f5e3f2c6299bd0e43b2fc746ea3dd7cedf28fe68bd85e10b64709229406d9e5f11d6bdc8720adf"}, {0xe0, 0x10c, 0x6, "7d871fa61c277f179a22233319fa81dffbfaa9e766772459aa10695b0aedb5fb7bac05162dd02247a5f885fa1d77374d10d939e0f1877a0467f56c4c31dc98d503dea7073652d9e8f93bb45f4735e95c3d27ed149003f9752aad823d7f67016c79e6f045accb59f850f819b16a237a92f37b31503791cf73a416760c33b4df199219464c4f6482c856b3719e019a7d09675e116b36ce35fb25a8a19d712071ad2a154a2f6e2ea6745af5a07383100e06861ff5f1769d946cebe39f22d213760fd1cfc9275cc3c349c6"}, {0x18, 0xff, 0xa12, "457b54a03e11"}], 0x370}}], 0x8, 0x4000) [ 1615.095295] FAULT_INJECTION: forcing a failure. [ 1615.095295] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.098258] CPU: 0 PID: 10742 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1615.099915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1615.101922] Call Trace: [ 1615.102563] dump_stack+0x107/0x167 [ 1615.103315] should_fail.cold+0x5/0xa [ 1615.104080] ? create_object.isra.0+0x3a/0xa20 [ 1615.104999] should_failslab+0x5/0x20 [ 1615.105765] kmem_cache_alloc+0x5b/0x310 [ 1615.106603] ? mark_held_locks+0x9e/0xe0 [ 1615.107455] create_object.isra.0+0x3a/0xa20 [ 1615.108342] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1615.109396] kmem_cache_alloc_trace+0x151/0x320 [ 1615.110345] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1615.110367] __list_lru_init+0x44d/0x890 [ 1615.110390] alloc_super+0x8b8/0xa90 [ 1615.110411] sget_fc+0x13e/0x750 [ 1615.110427] ? set_anon_super+0xc0/0xc0 [ 1615.110449] ? shmem_put_link+0x120/0x120 [ 1615.110470] get_tree_nodev+0x24/0x1d0 [ 1615.112343] vfs_get_tree+0x8e/0x300 [ 1615.112364] path_mount+0x13be/0x20b0 [ 1615.112387] ? strncpy_from_user+0x9e/0x470 [ 1615.112408] ? finish_automount+0xa90/0xa90 [ 1615.112425] ? getname_flags.part.0+0x1dd/0x4f0 [ 1615.112468] __x64_sys_mount+0x282/0x300 [ 1615.113953] ? copy_mnt_ns+0xa00/0xa00 [ 1615.113975] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1615.113993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1615.114020] do_syscall_64+0x33/0x40 [ 1615.124960] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1615.125996] RIP: 0033:0x7fcb00d4104a [ 1615.126762] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.130499] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1615.132046] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1615.133501] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1615.134940] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1615.136381] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1615.138060] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000005200)={0x0, 0x40b, '\x00', [@generic={0x0, 0x41, "bd05e9a1626bb2bbe2124525425a55e27bab8af266950958f14e53d5e9b5ed1872841e0f2ddb1deb3e79ee6c561b3d66dd0fffed29579a141e50167eda0b1e73a6"}, @generic={0x3f, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x49fe202a}, @generic={0x4, 0x1000, "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"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x2068) r6 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r6, &(0x7f000000c700)=[{{&(0x7f0000007280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000073c0)=[{&(0x7f0000007300)=""/144, 0x90}], 0x1, &(0x7f0000007400)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000008400)=@nfc, 0x80, &(0x7f0000009480)=[{&(0x7f0000008480)=""/4096, 0x1000}], 0x1, &(0x7f00000094c0)=""/234, 0xea}, 0x2}, {{&(0x7f00000095c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000009740)=[{&(0x7f0000009640)=""/54, 0x36}, {&(0x7f0000009680)=""/46, 0x2e}, {&(0x7f00000096c0)=""/79, 0x4f}], 0x3, &(0x7f0000009780)=""/143, 0x8f}, 0x40000}, {{&(0x7f0000009840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000009b40)=[{&(0x7f00000098c0)=""/121, 0x79}, {&(0x7f0000009940)=""/176, 0xb0}, {&(0x7f0000009a00)=""/46, 0x2e}, {&(0x7f0000009a40)=""/166, 0xa6}, {&(0x7f0000009b00)=""/20, 0x14}], 0x5, &(0x7f0000009bc0)=""/87, 0x57}, 0xd9}, {{&(0x7f0000009c40)=@hci, 0x80, &(0x7f000000bf00)=[{&(0x7f0000009cc0)=""/103, 0x67}, {&(0x7f0000009d40)=""/4096, 0x1000}, {&(0x7f000000ad40)=""/4096, 0x1000}, {&(0x7f000000bd40)=""/149, 0x95}, {&(0x7f000000be00)}, {&(0x7f000000be40)=""/169, 0xa9}], 0x6}, 0x1000}, {{&(0x7f000000bf80)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000c540)=[{&(0x7f000000c000)=""/13, 0xd}, {&(0x7f000000c040)=""/120, 0x78}, {&(0x7f000000c0c0)=""/241, 0xf1}, {&(0x7f000000c1c0)=""/12, 0xc}, {&(0x7f000000c200)=""/54, 0x36}, {&(0x7f000000c240)=""/177, 0xb1}, {&(0x7f000000c300)=""/155, 0x9b}, {&(0x7f000000c3c0)=""/93, 0x5d}, {&(0x7f000000c440)=""/206, 0xce}], 0x9, &(0x7f000000c600)=""/195, 0xc3}}], 0x6, 0x100, &(0x7f000000c880)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f000000c8c0)={'IDLETIMER\x00'}, &(0x7f000000c900)=0x1e) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f000000c940)='/sys/module/drm_kms_helper', 0x200, 0x10) io_uring_enter(r7, 0x4513, 0x5cec, 0x1, &(0x7f000000c980)={[0x7]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f000000ca40)={'ip6tnl0\x00', &(0x7f000000c9c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x5, 0x39, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x20, 0x0, 0x9}}) recvfrom$inet6(0xffffffffffffffff, &(0x7f000000cac0)=""/78, 0x4e, 0x2, &(0x7f000000cb40)={0xa, 0x4e22, 0x7, @local, 0x3e00000}, 0x1c) 08:18:42 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:18:42 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x6}) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x1}, {0x5}, 0x10, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="b67376881fee748978515db299810a3814500972532b67e78d4f2b", 0x1b, 0x0, &(0x7f00000001c0)={0x2, 0x1a7, {0x1, 0xc, 0xb0, "36ba38fa91e366a2dcc65fa6b1ad0ff7f1a93016b627ac1b48a9d1526f5a706eb5f028aa23fe6802373db6c99f15959eaadbb60abe41087233d5173c2d05b34bd110d43cabd554deb8af7b9c424fcccd488363db58f58e7ff295742c4ff90746c4faf133f5e8b3e636ffd77cff4ad8a715616a567e6f19635a9a6e814c48b3385b96b63fc069ba5fd7567c522c951d00485e870ba0ccee682078f5d944cc2831782da47c509b2033f19462e547c9b1ae", 0xea, "f33d8b9792d3c1804f159a5d0cb954f9fc622ff77f183f138491594b0615fba601f94d2f8ddf9bbf2e46239cabcc56b704e03df488380a2c0d557d35f11f3d12294a6f5a310d24fa107d079d90ac78b110b89446ef48a8d214cfe21c99fd65589edcdd3fe2128e0072dc6aa77a44f0273f0c7179868b82ce732b33a910a5e6f087a9b562ae807d9674c842b95cb6b97c4de3cd6c2427a8a64873047e441efc6d8f9fd8937ba9e127ae3bc4bf86990e6dce4e0b7a78d5b8788db5e046f3ab4e725c5c79e5da0c047de19d5fe26ea08015575b867dc49867d601dbec007becce5d5a30f8104c17bfacc586"}, 0x73, "b529d0dc40c9ffdd9f8dfd21769a2ca080caabccc5d7e64df558b568666f431f6ce22fae3b41882ff9de4973e7f32cd0a2fddd63427f9447405f219b772127048cc86f5a63a1b31e0d3108f551fbf0c18777075fdf6044040f019a82edd5428eb1e4213e1e0257d0afa9999be8513b3b8fc8f6"}, 0x226}) setuid(r0) 08:18:42 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x0, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:18:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005e40)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="090600000000000000003000000005003500e7ffffff0500330000000000050036000000000008000200d15cdb22bdcf046f6969843e6410faa3944cc932d2038a112ed1c50a702e33b8dd2603cab650320e2be8492a331fd1fe73b50b10e1e37c71389203bea54343783b67d24693dd5e9c7f709df9616adad37e2968b97f71e209225ef55e2194f9acf444d13dd75d3dda1132a42a077bc4f94e4a249531547054aab925f862cd11cdbd30327a49ef548e04fe0348901fd111aa89404d3f113632e36535cbd587a4db40d2716dfbbee3b5925bd4d78d1d8abcb58d3eb8f5fcf05988e0f1c2", @ANYRES32=0x0, @ANYBLOB="3fc4fe3527207eac6e20ed1183113aa9e9d016f114a4b81b28e2b878026def64c3a3eb97b654e584271b7c46d26da1cd165fb86d8ef2c14bd13600bf878fa452cc53238885ac77d6d4b5b0423aa9ee35e45b60ba360f9e4221ab35751f8ae1900cbc73b5e498bddba44bc569174ef16125f8a7281a85c6dd5bf3dfb6918b3d191a2da6106aae7140d5be33b892b5532c798ef54bf90a81eca73f5df9d5a460102a1d9505366b5ab0ec38ab9c97f4ab2c4cca73d7a1e29779b3f85689c68d5f8b097627bbd0cf8763e98fd48c4137908232478c9018467db557b728603e0228b9ba5c217f80d2171d5d59c652ad3e0a3450c4da90b3a6a0b782f32b88abbc1606a4f490c7e00b45114e810c066402cc57e00757bc054d7a4ab4f4c535137fbf3390162cc6314f9f906dd7f006db776f894845104789b390"], 0x34}}, 0x0) prctl$PR_SET_MM_MAP(0x26, 0xe, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r4 = io_uring_setup(0x2b44, &(0x7f0000000640)={0x0, 0x69db, 0x20, 0x1, 0xb}) ioctl$int_out(r4, 0x4, &(0x7f00000006c0)) io_setup(0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) 08:18:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x7f00}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:18:42 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:18:42 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 69) 08:18:42 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000700)={{}, "f4ffa105ebc4e72fda5f090f5845d454762290d0aa917561c866c07fbd4292b1a775ed18b38bb7cbc7634b023583c3a6f9124a079b646880a8f7df9c7a21e33a3f8529621eff396dd1e7a1120d3902285928e6f176b726f9a3f5a95506e065985a6c8e9ea1c778569da649ad1130216338e6fda59d49941a9a365d850bc165ab9e6f27b2d2b708062374128d6493da0044031df8a464eb480f7427aa8f6e3357b8b5a7afa831a2626e216991a3861e3660c5d8a34591935731d31def7de8be939417f9acfbdd912cc7cdc79f98e08702ccd05d94a23788a53c6b742353ffaf04596aaa2b319a4fd781b836152419e3e843e2f292677ce6fee5a0d6196ac1d1a9c8e31126b4af8b76ed794f9dd72baa358b0496ebc316d19c29b87709972e2c935b9f4083a36e85aef04ef9e22ac52359f08c06f2370c9c3ee446de9b81a2b7f1479bcee79781884f1a8457c207138d73aba9658e9f45f626a703a7edb65028970bf5dbf2016a1cf014660c67fc69e5f0b770cc2e68cabe80241a046da59dcf8dc907e1ab6b4896ee672eba1145c1929630c14109efbcba5705f8c34ae3ad674c9f3d0b3930bbf8bff0cdb55a6b542aab408b1211de8cea4b8d458c9f603689a5e4b83031abbdb646e6862e24883c87ecade9f96d7bd28ec6bc4158d5da58f512c62fd50d430c70058373078011012dbad66189693ed21d1fbf60a7e977dfcfdc4e2d216542a6067a60aa41da28613e3a6c884736061611244691435fe33f3390414959f36fd74e2e184142b49b341bb0ee5e7ee68eaba8155f8670a4bfb432e9214a8e0ad2376fce4804dffbbf19484bda2352632ce8428503fbc801d0886881734caf51538774d086b01200338ba59fb99bc6858376cce556d5e6c9aa8e1a8c66a4887fb9209585e36f1d39f16944c8a0130e7c10d4c93ee647ca343228fbd11b59236008292a8c3ea70ad083e6d5c075862e82f056b59cb59923bb3bd1ec8417ce29b3d957e388f1d6f29ed08199c18be25ece7a40d8507c430b3ae6eee7265bd59bcb2483d9b13bcfcfbd69b5583915e4287a712f548079aa1d96ee4559e66f7e11319ae0358b4128f14a6f951530a226d067f7d6fe384e7d99bec3e7f4d351653443149742d8f20e30db3f6b4200609edefb2bf77d8b998d6495b44a38751a988aaf81dd8229ce959b94bea39d76cc14ddf586b836546f1f1d4abc91c2102eeb490612b75e2fff53999f2c7bbef3860938726725249d88fdbaaa2f5f1e013efa1e6af30924bd3350b7108fcde70a186c97bf8c555e7acbc20b9edca95b8b646ffba6fd9923e4c33d09d247c09ca77b81e8c3a5fe50d190e695c121ac7de0b6507830ed0d46ca03c1011f2420c2a4f4e3fc927d97d707a3f643983c9f0f62c86d8dca16112e3f7e375551fb788417e89dde8b88dfdbdfa9ff19b36ad001f877211e58366aee444e2f0589eb18f099728290efbe852bc2d1cdc85281f93afae9d2587c24ae1de4be7ca222fa4bd3a2bd4bd3af15a25efe1a4be40a34357e083035ab21089cfc01fea00d7696e2050fd7a302c8829efd418a757e12738e7feba3ed7a209c8c3396ffb0fa45abfbcb2f987622501d24dca5c042b37cdf600bff3cdffda74ab6533cdecab256de4a0f0d60bde1ac159c1e8443a3f477c5c1b70954a77669f7fc24a77eabbdcbb824f435aeb6d2278e3f1e27df8b3eda5aaf410ff42ad23c4a19ced682a3e7c84dc74b377c7dd5fca7b9f29da0e98babae3fac28487d63b6b2131dbb77c03035028068af76d7e99e9ee04f1487496b877af74a9f710bfde6b4b26c1a86b4d09d994091777ea5a40eaeeb06a3de71eb415bd89d07679b356946a20d1c99c36c98d31bbac6dc47a0d3bcfcfe9a28cab68810e2712f775916f833ef539acde9084dbf8d6f94ed58b01d515d1c76ac1c37fbbbefc8758ee8d59ca8b82a3e6a7bc0eea889be2112745472f79bc58114986ebe2ca0ce1d95ccb936e860fcceb4f01ef3e821606b9d1adb299fc741ecc9436066a017bf2aa6ea6d628a98c5ec1adf38b31a6237831d329cfd222d5193c79cf5795c7b342321f7bde5dfed6f1d7a782b6b5618a3c7192d9d3a616eb657d43c4d16276cc98a329ae8c905cc7625ed57f91a799649c595e03df00b118ee87d835e0cde5e0bcc1f727ee737c2c41251911bb347179fc52159cea2e50484fc001b76f149172147c7f6d5911bf5b60965e0910f611d7c91eb642eb3011ea9b013dc5ca838e37e83336a12b7e4ea3c7dd17d1cb20194fa59cc55e49ed80ecefd99e79c731dc185e6b60bb0e68740a16ba5b1a62314ac883af71fd79422d37bfb0c33cd41e8e383a7f46bf17920147f83feb6bb690900428c68687ccfd8465f171998fb5228672a90a1493ce4c59cc9408dd6baf649a62696cda8b3f00187da506299f2ab419a4edb709852398955c35043c1e2a07428aacc994347da09bc9330602df50acb6118dfa717d5e8f0b4aa952186922c60377a29471347fe652450bac9e2cfbfdb30a09e6c0c4a34ec2fb80c943b4e1630d393b983f1990c2756e9a39e906b7663892693f0f39619bcb3db069fe7e3c3b9944f9dc59cf27d4b0e9256f2f08c3f4f0e46c50f4e1ae0c71ed9217143125f28a093f45b1d09b19733fec3c73d0597a94b346b65ca3c9951442855b1698436b4ae38048c5a1a5fd28ee480dc90f201fbb1b3f0d62d891e362ff014bf78cca15ca2a960ef943ead761fafa84eb53ecb4b7b2fbae57f61afbe2ce02d0022e5bbdf97fb18e852668e41e213755dc4d275e6111bb57ea3455ba82bc645cb22889a35ffbb6150c50a4ad44ed7d7e9b27f0f4043453f99537a2f3a068b47217e20de2c2bcdb5fa834074af32a074d981ed334320612014b575d2972b106a990195e92113b4bdd109096c613dc27fa889b5aa9164f6b5b140d679fa9674641cc9fbc18f06503fc08e2ef787730aaf42ecfe0b2f821e8138ad65f849c2337faeec0a05d699d3dca54c3f26f1550757a4d04ff0bd346cb266d90441735b465055e2f04dae481156c5346c219dd5402970285bcd4dd6f600fa62ec3654889749606ea0541f77439f5504e18a3de0e003f11c200485db26ddca014c2398b39d81256b673f6046d5fc10c91e39be8d297a149d96027d657eb1239938eecee34db92703e8e7216f4c13d45637672f2326d2789964707db8a7b0cc413e2a5f54d2d58da41c890f83cfada816225376991da5df1cd0494557bc6ffe3667051179732e4b937836d969b72fc9c7a5775a717b73038cadd78470ef2556244393c2248e06418a2a2ad23c3190f9f91ae0358dc6d49112d3c723a7e5f85695761fab32082c35d4185f42a9ac669480abcb1c997cfd627dabe636763840e8f0802b55a9629b93f3e77fc351eeefa300e52b975dffe4e0c05953d6d4dc02495b4d28d579dbe01154eb15629c74bb9deddf3744e6de8a39edaef062653d52ed6fe4a9a917015247037b49a418cf81fbd3b2e457977764be2a02118b95b13ac64c636f7de6e2dbe498d34ab1b6690a0c3df80b7cb2632a491a04e398d56022415d756e972038e64b443ac112271896450beeb5490efc218bcc7068053f3db52c09c6e17f57c61ec7c5d8b0e0416fa4c165c4a8e824eed0f31d095f47f51f35d20e224ea220b746968b26e2d740d13fea606e17e299fc77b9c1996b6d187bcbe4732855e7c0d4e753b2f100f2f15ce07b970a26514ca6e2ae23085c7fa4cac01c0a5342f62d0416fff867cdfaeb340949f15de16918290b25489d78e4ba069f307a7ae0c20cc11caedb82e85927149d907753d49be0281ecc0f5f1b97811ead6903e628fa78668c7644f284893641e29f2c95d6feb06ea62296f3387e11ca365aff14263f9de7cc46ae77b05a9ceb776e336e0145be1052033f662020a7b6646cf8744d9314fcc499ea6e235bdc74b52722e8b24e782329026c48c09c3905e398912e8768e68f228cf20cd0aeda3c4d7f4a42846ea9d1dbbb5ec755155ef2923efa54938b35dd15d3db042ace9309f38c0a765272c9f32fe0fafba49b7ef09e80298acd6cb56f8a1cd54aa9ee3dc623e106c79fef0565b40423fb3657af605b17e29c1c9fc47bf1752659e1c536d39487c182adb471a008a2accfeb3ee9108a2d8c851f06f71f6b95507270b5164bff984b5bb06d89e1532f82a3a58f3f1f6b330796fe06a40c5ef2e56ea2c543e7b32e14ce02c27675c809222b29fbc1762ad31f58eb80614c02990916b78a6c016e37402bac843f82c78c9f024e85369e35d3bc5c447a209e21a7ee55c8bd956353514b30b833729f36b147dad189982f62240bcb91c950ca6b2c7db6edd86cba00b74b75851edf4b4e4c8f0497665f15029ae2bac06b5084b6748ea8790b7e68fed03606d145ef60272fd8be9d002eb64a5001780d72aab03e741bbc0eccb41535a96fded4db69d6fa568c3d50e82cf2f32da7e847f6b6232d79dcd4db77c65322c1dc8b84418d956e0f7e85a0d7e56ca6a2aa1025ce6cb83694c98fa72b0f29fbea9ba467b9026fd82c2fbcdf8930e22f73c1a042704270340520829696ec209b023e2de84bad86ba81fa41ee46900403be8157c42fc68d74c071ef25142fcabf1c3001c104a96c724a3782fb72910b31e9b120eeb9465b30a30f885c7599d32fac2690f724a23e6b31060aec4adc42cc5638732a309afe157aa4cc6407cb7bce8fbae2ca4238f6ec0120b634fea3a31500cc72b52305ab91fdc43f5e3452d7843509e3ff7e7ba388f6daafc921c1e2d4f7448399e642b4f9129efc1a7a75e3dd6c38b4c78696d4b2abbddb5848d197adc7d8f647bb6b8b63ed635dec2a247a723d6f2c56f0c891de8b4131ea3a6a59921d166f16ba1ea3684914a95434e0d8f8b019fc82eec29c9831906e2a261baeaa257569111d298c8bae77d9aa1d4f54c4363b609047d6f675580057d945f748377d9f5acdadc69efce1dadc07241a248bc5402f0c36d0cf3021905c2d0f25baf84ca14f07b9231402c3bca83712be90a47c45618e779a998ab246b4189c950507364325979c310131519fa9cf30318f70e1253a35a1a6620838a5cdc7257df64eeee7a5622c8f3a90f618d841a0ff12da552c78f6f4a6cd38310012c494d287aa40914d5d201c9d4a774ba36c5e8415342027fdb70b85786541ed6f86b2aad708e938ca7e175001013061aab3c502d24ff93c5e142606bad8f2f1fbc44b3f271454f82f97a7757e066d34ba3c68a3692ac823e7b5061b46d34108b1aa83ea2a29fa29266f2d9f0110b3ed9f3ade3b515819044a457af423e318ecc7c2d71042816c1e8256466b046f512cdccfa099190a1308249b5b4235ae7a677bb4ed90c0c635d665fd78ee0763f9b037873d3820a493f109090928fc41327f9c3168f4ee04651d88d2d0e8ce9fab35dc4b04bc300745642c704523ec822c928df05f34354df239ea6afc2e1a237928cbe2f7f03d127eefa9aa0c980184c778144bd2ab31fc8c761a313c50d67147ba5c885e680234d0d18972005e88ce518138ed48a1506b6d93512d510a9bf20a0e5176512e7867c3cb030cb60d3d0322e795a9576818d31b6bf2811ad198b79d32502f1623c35d1e37f7ae124bfd74e01cfedbfe4b78606e4cbccdf7ba1559713d222c1f67c79762aff0ad050151acce8e46e70c76e91831104b05b00657114675d8f1e7518280f19875731fd84a90b183161739f92b3620831fdfbafeab7fc224bcaf95c58971e0325954bf148738"}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x54) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000240)) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0xffffff8a) setgid(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext={0x0, 0x71}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x430b, &(0x7f0000000280)={0x0, 0xe634, 0x2, 0x1, 0x92}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x700000000, &(0x7f0000000440), 0x0, 0x0, 0x1}, 0x7fff) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 08:18:42 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r1, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r1, 0x3, 0x900500, 0x30000000000) name_to_handle_at(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@ocfs2_parent={0x18, 0x2, {{0x38, 0x3, 0x80000000}, {0x0, 0x1, 0x6980}}}, &(0x7f0000000080), 0x1400) setuid(r0) 08:18:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x9b00}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:18:42 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1615.305997] cgroup: Invalid name 08:18:42 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1615.429042] FAULT_INJECTION: forcing a failure. [ 1615.429042] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.431730] CPU: 0 PID: 10778 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1615.433257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1615.435065] Call Trace: [ 1615.435647] dump_stack+0x107/0x167 [ 1615.436492] should_fail.cold+0x5/0xa [ 1615.437354] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1615.438471] should_failslab+0x5/0x20 [ 1615.439306] kmem_cache_alloc_trace+0x55/0x320 [ 1615.440333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1615.441471] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1615.442570] __list_lru_init+0x44d/0x890 [ 1615.443478] alloc_super+0x8b8/0xa90 [ 1615.444305] sget_fc+0x13e/0x750 [ 1615.445075] ? set_anon_super+0xc0/0xc0 [ 1615.445958] ? shmem_put_link+0x120/0x120 [ 1615.446894] get_tree_nodev+0x24/0x1d0 [ 1615.447744] vfs_get_tree+0x8e/0x300 [ 1615.448566] path_mount+0x13be/0x20b0 [ 1615.449408] ? strncpy_from_user+0x9e/0x470 [ 1615.450358] ? finish_automount+0xa90/0xa90 [ 1615.451303] ? getname_flags.part.0+0x1dd/0x4f0 [ 1615.452331] __x64_sys_mount+0x282/0x300 [ 1615.453234] ? copy_mnt_ns+0xa00/0xa00 [ 1615.454088] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1615.455242] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1615.456393] do_syscall_64+0x33/0x40 [ 1615.457229] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1615.458334] RIP: 0033:0x7fcb00d4104a [ 1615.459138] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.463095] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1615.464713] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1615.466227] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1615.467722] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1615.469225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1615.470794] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:18:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xc500}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:18:56 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x0, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:18:56 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = getpgrp(0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4, 0x55, 0x3, 0x3, 0x0, 0x3, 0x9090, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8300000, 0x4, @perf_bp={&(0x7f00000002c0), 0xb}, 0x40010, 0x2, 0x4, 0x3, 0x7, 0x800000, 0x3, 0x0, 0x1, 0x0, 0x6}, r1, 0x0, r2, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000040000000000000000000000f2ff00"/104], 0x68) r7 = accept$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x1c) fallocate(r7, 0x1d, 0x3f, 0x9) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001640)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="085418256c5bb7f85194c663805ba5e22c5d06917a338592edc4ddbff88efa049207d29c64cae403569bbac3c5b545faef56bc9dc17afb53f7f449fb3a52b9ab383533d3e40923647bebc199eb42c43761dccdd98d02d9f09ea5d7370bd6cbde59f98de3c16d180a02bd2779e16b"]) ioctl$DVD_WRITE_STRUCT(r6, 0x5390, &(0x7f0000001e00)=@manufact={0x4, 0x3, 0x800, "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"}) ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) unshare(0x48020200) 08:18:56 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:18:56 executing program 4: stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1c) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f00000002c0)='./file1\x00', 0x8, 0x3) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r2, r3, 0x1000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r4, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r4, 0x3, 0x900500, 0x30000000000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x1c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x91}}, './file1\x00'}) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x9, 0x5}, {0x2, 0x9}], r2}, 0x18, 0x2) 08:18:56 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 70) 08:18:56 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:18:56 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1629.124215] FAULT_INJECTION: forcing a failure. [ 1629.124215] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.126636] CPU: 1 PID: 10795 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1629.128048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1629.129746] Call Trace: [ 1629.130290] dump_stack+0x107/0x167 [ 1629.131039] should_fail.cold+0x5/0xa [ 1629.131832] ? create_object.isra.0+0x3a/0xa20 [ 1629.132771] should_failslab+0x5/0x20 [ 1629.133566] kmem_cache_alloc+0x5b/0x310 [ 1629.134397] ? mark_held_locks+0x9e/0xe0 [ 1629.135227] create_object.isra.0+0x3a/0xa20 [ 1629.136117] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1629.137184] kmem_cache_alloc_trace+0x151/0x320 [ 1629.138139] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1629.139153] __list_lru_init+0x44d/0x890 [ 1629.139983] alloc_super+0x8b8/0xa90 [ 1629.140745] sget_fc+0x13e/0x750 [ 1629.141438] ? set_anon_super+0xc0/0xc0 [ 1629.142253] ? shmem_put_link+0x120/0x120 [ 1629.143090] get_tree_nodev+0x24/0x1d0 [ 1629.143882] vfs_get_tree+0x8e/0x300 [ 1629.144645] path_mount+0x13be/0x20b0 [ 1629.145451] ? strncpy_from_user+0x9e/0x470 [ 1629.145478] ? finish_automount+0xa90/0xa90 [ 1629.145497] ? getname_flags.part.0+0x1dd/0x4f0 [ 1629.145529] __x64_sys_mount+0x282/0x300 [ 1629.145556] ? copy_mnt_ns+0xa00/0xa00 [ 1629.148216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1629.148235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1629.148260] do_syscall_64+0x33/0x40 [ 1629.148285] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1629.153732] RIP: 0033:0x7fcb00d4104a [ 1629.154492] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.158237] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1629.159773] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1629.161244] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1629.162700] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1629.164158] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1629.165615] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:18:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xf000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1629.252131] cgroup: Invalid name 08:18:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x900500, 0x30000000000) openat(r0, &(0x7f0000000040)='./file0\x00', 0x183000, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001280)={0x0, 0xfffffffffffffffc, 0x1000, 0x0, @buffer={0x0, 0xb4, &(0x7f0000000000)=""/180}, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/188, 0x6, 0x2, 0x1, &(0x7f00000000c0)}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r1, 0x0) setuid(r1) 08:19:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:19:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x80000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:19:11 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 71) 08:19:11 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c1, 0x2) setresuid(0xee00, r0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) setuid(r0) r1 = timerfd_create(0x3, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) fsetxattr$security_capability(r1, &(0x7f0000000100), &(0x7f00000001c0)=@v3={0x3000000, [{0x7, 0x9}, {0x20}], r2}, 0x18, 0x1) 08:19:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002580)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000000c0)={r2, 0x5, 0x20}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000240)={0x0, 0x0, {0xf21, @struct={0x9, 0x394}, 0x0, 0x1, 0x789c, 0x7, 0x9, 0x20, 0x0, @struct={0x1, 0x5a6a}, 0xfa3, 0x8, [0x200, 0x1, 0x9, 0xffffffffffffffc3, 0x0, 0x1d]}, {0x7, @usage, 0x0, 0x9, 0x1000, 0x2, 0x0, 0x4, 0x3, @usage=0x1, 0x4d84e8de, 0x3ff, [0x1, 0xffffffffffffff80, 0x4, 0x6, 0x4, 0xf2f]}, {0x2, @struct={0xf4, 0x8001}, r2, 0xd54e, 0x1, 0x3, 0x80000001, 0x2c2, 0x400, @struct={0x101}, 0x81, 0x7, [0xb4e40e, 0x80, 0x3, 0x6, 0xa32d, 0x3]}, {0x9, 0x4, 0x4}}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 08:19:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:11 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x6500, 0x7ff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, r1) setuid(r0) [ 1644.177230] FAULT_INJECTION: forcing a failure. [ 1644.177230] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.179901] CPU: 1 PID: 10829 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1644.181434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1644.183244] Call Trace: [ 1644.183825] dump_stack+0x107/0x167 [ 1644.184631] should_fail.cold+0x5/0xa [ 1644.185477] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1644.186595] should_failslab+0x5/0x20 [ 1644.186620] kmem_cache_alloc_trace+0x55/0x320 [ 1644.188011] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1644.189140] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1644.190215] __list_lru_init+0x44d/0x890 [ 1644.191109] alloc_super+0x8b8/0xa90 [ 1644.191927] sget_fc+0x13e/0x750 [ 1644.192664] ? set_anon_super+0xc0/0xc0 [ 1644.193543] ? shmem_put_link+0x120/0x120 [ 1644.194443] get_tree_nodev+0x24/0x1d0 [ 1644.195290] vfs_get_tree+0x8e/0x300 [ 1644.196107] path_mount+0x13be/0x20b0 [ 1644.196944] ? strncpy_from_user+0x9e/0x470 [ 1644.197895] ? finish_automount+0xa90/0xa90 [ 1644.198285] cgroup: Invalid name [ 1644.198833] ? getname_flags.part.0+0x1dd/0x4f0 [ 1644.198869] __x64_sys_mount+0x282/0x300 [ 1644.198891] ? copy_mnt_ns+0xa00/0xa00 [ 1644.198918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1644.198938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1644.198966] do_syscall_64+0x33/0x40 [ 1644.200324] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1644.205681] RIP: 0033:0x7fcb00d4104a [ 1644.206494] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1644.210474] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 08:19:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1644.212125] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1644.213841] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1644.215378] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1644.216919] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1644.218477] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:19:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:11 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0)={0x0, 0xfb, 0xdd, 0x5, 0x7d, "aea87592256ac4b57424f1439ee912f3", "46e2277b7787dd4709a3f4195256a209b4b366a7409fc6a841521af11b35c814034ce06974933206a1a70da383c5d888771a69d4ade8855f422988adeab1cfd683eb584dd9f17c0e1f140fa84bc19603cfdd7f108570414c324d3a50ee0e02409818502035d0e626d68266dc87ee58ba64894a82d5f5051cc2469b5cded2a52ebf22fa2d5ea345740c10edef2753e151c33edbd252d88c39cdea70784804840bd31a3f99afaa329863cd94e5a754fdba73ab93b6ba50669e5004699f993ae8a77400dceba160d56d"}, 0xdd, 0x2) setresuid(0xee00, r0, 0x0) setuid(r0) 08:19:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1644.355358] cgroup: Invalid name [ 1644.464092] ISOFS: Unable to identify CD-ROM format. 08:19:24 executing program 6: syz_io_uring_setup(0x1a11, &(0x7f0000000000)={0x0, 0x8089a2, 0x2, 0x2, 0x34e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) io_uring_setup(0xb0c, &(0x7f0000000100)={0x0, 0x3b2f, 0x8, 0x1, 0x42}) r1 = syz_io_uring_complete(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180), 0x6e, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000000300)=""/138, 0x8a}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)=""/46, 0x2e}], 0x7, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) openat$vcs(0xffffffffffffff9c, &(0x7f0000002d40), 0x4000, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000002e00), 0x80000) socket$inet6(0xa, 0x6, 0x200) getpgrp(r3) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a0c, &(0x7f0000002ec0)={0x0, 0xea30, 0x10, 0x3, 0x6e}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000002f40), &(0x7f0000002f80)) 08:19:24 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:24 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:24 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x4, 0x9}, {0x9, 0x3ff}]}, 0x14, 0x3) 08:19:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x180000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:19:24 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 72) 08:19:24 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:19:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1657.637697] FAULT_INJECTION: forcing a failure. [ 1657.637697] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.639341] CPU: 1 PID: 10864 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1657.640332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1657.641542] Call Trace: [ 1657.641918] dump_stack+0x107/0x167 [ 1657.642451] should_fail.cold+0x5/0xa [ 1657.643014] ? create_object.isra.0+0x3a/0xa20 [ 1657.643679] should_failslab+0x5/0x20 [ 1657.644247] kmem_cache_alloc+0x5b/0x310 [ 1657.644859] ? mark_held_locks+0x9e/0xe0 [ 1657.645466] create_object.isra.0+0x3a/0xa20 [ 1657.646119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1657.646864] kmem_cache_alloc_trace+0x151/0x320 [ 1657.647558] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1657.648298] __list_lru_init+0x44d/0x890 [ 1657.648911] alloc_super+0x8b8/0xa90 [ 1657.649477] sget_fc+0x13e/0x750 [ 1657.649981] ? set_anon_super+0xc0/0xc0 [ 1657.650573] ? shmem_put_link+0x120/0x120 [ 1657.651196] get_tree_nodev+0x24/0x1d0 [ 1657.651782] vfs_get_tree+0x8e/0x300 [ 1657.652343] path_mount+0x13be/0x20b0 [ 1657.652899] ? strncpy_from_user+0x9e/0x470 [ 1657.653530] ? finish_automount+0xa90/0xa90 [ 1657.654131] ? getname_flags.part.0+0x1dd/0x4f0 [ 1657.654800] __x64_sys_mount+0x282/0x300 [ 1657.655354] ? copy_mnt_ns+0xa00/0xa00 [ 1657.655889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1657.656610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1657.657320] do_syscall_64+0x33/0x40 [ 1657.657821] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1657.658519] RIP: 0033:0x7fcb00d4104a [ 1657.659033] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.661551] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1657.662588] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1657.663561] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1657.664540] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1657.665521] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1657.666515] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1657.672092] audit: type=1400 audit(1699345164.744:115): avc: denied { create } for pid=10852 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 08:19:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xe0ffff}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:19:24 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff0f44}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) getresgid(0x0, &(0x7f0000001100), &(0x7f0000001140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001180), &(0x7f00000011c0)=0xc) pidfd_open(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x1c) pidfd_getfd(0xffffffffffffffff, r2, 0x0) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x6}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000001200)={{0x0, 0xee01, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5) 08:19:24 executing program 4: stat(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) 08:19:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xf00000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1657.750187] cgroup: Invalid name 08:19:24 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 73) 08:19:24 executing program 4: stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018058921635a1a000000", @ANYRES32, @ANYRESOCT, @ANYRES32=r1, @ANYBLOB="0108008000000000"]) setuid(r0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000040)) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffd3, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="d7e8bb5cab4a3074f9fefede3fb72d17098ba4b0d9862be4cd1bb07caa0da878d5fb2889a70be7", 0x27, 0xbd8}], 0x800, &(0x7f0000000280)=ANY=[@ANYBLOB="73697a653d002d3270333530332c687567653d616476bd178b119b5f731c3e28f88bfc57fc456973652c73697a653d3633000000000000000675626a5f747970653d2123272c66"]) 08:19:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x1000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:19:24 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1657.835710] FAULT_INJECTION: forcing a failure. [ 1657.835710] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.838167] CPU: 0 PID: 10883 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1657.839659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1657.841450] Call Trace: [ 1657.842022] dump_stack+0x107/0x167 [ 1657.842819] should_fail.cold+0x5/0xa [ 1657.843647] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1657.844744] should_failslab+0x5/0x20 [ 1657.845587] kmem_cache_alloc_trace+0x55/0x320 [ 1657.846573] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1657.847668] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1657.848728] __list_lru_init+0x44d/0x890 [ 1657.849620] alloc_super+0x8b8/0xa90 [ 1657.850427] sget_fc+0x13e/0x750 [ 1657.851154] ? set_anon_super+0xc0/0xc0 [ 1657.852018] ? shmem_put_link+0x120/0x120 [ 1657.852906] get_tree_nodev+0x24/0x1d0 [ 1657.853752] vfs_get_tree+0x8e/0x300 [ 1657.854561] path_mount+0x13be/0x20b0 [ 1657.855386] ? strncpy_from_user+0x9e/0x470 [ 1657.856317] ? finish_automount+0xa90/0xa90 [ 1657.857245] ? getname_flags.part.0+0x1dd/0x4f0 [ 1657.858282] __x64_sys_mount+0x282/0x300 [ 1657.859160] ? copy_mnt_ns+0xa00/0xa00 [ 1657.860004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1657.861130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1657.862253] do_syscall_64+0x33/0x40 [ 1657.863057] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1657.864159] RIP: 0033:0x7fcb00d4104a [ 1657.864965] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.868926] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1657.870574] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1657.872105] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1657.873644] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1657.875174] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1657.876706] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:19:24 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:25 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 74) 08:19:25 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1c) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200", 0x2e}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="f0d388fa85"]) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000000c0)) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7f, 0x900) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000000000000e8ffffffffffffff0100000000020000020000000000000003e329bd9eaeaba6000000000000008100000000000000051500001000000001000000000000000000000000005b9d28c5ba501e08a10100649c3c370000000000000000000000000000002c96cf282d7ad60000080000000000000005000000000000072b8bcf6a5a3d73000000000000000000000000000000007247c56308a041bed303b54546b2505d5f436b4ec9264d24efc8e9e465ff8334dceab47637a7875392d0fc239aa23a"]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r2, r4, 0x0, 0xa4) r5 = getpgid(0x0) perf_event_open(&(0x7f00000007c0)={0x6, 0x80, 0xfa, 0x23, 0x5, 0x1, 0x0, 0x0, 0x41000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x2}, 0x10404, 0xcd6, 0x4, 0x9, 0xfeb3, 0x836, 0x7, 0x0, 0x835, 0x0, 0x1}, r5, 0x9, r1, 0xa) syz_io_uring_setup(0x71e0, &(0x7f0000000240)={0x0, 0xcf13, 0x0, 0x0, 0x386, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80040) 08:19:25 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:19:25 executing program 6: ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040)) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="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", 0xbfb}, {&(0x7f0000000300)="73565806a92a4c6410ab205ed7ca89e1cd7da6c9ec87bc9c962f00ff2e2732ad2a8bdc530ccdb10937", 0x29}], 0x5, 0x0, 0x5, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x45}, 0x4800) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 08:19:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x1800000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:19:25 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) fstat(r1, &(0x7f0000000000)) setuid(r0) [ 1658.027294] selinux_netlink_send: 81 callbacks suppressed [ 1658.027319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10903 comm=syz-executor.6 [ 1658.044498] FAULT_INJECTION: forcing a failure. [ 1658.044498] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.045750] CPU: 1 PID: 10906 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1658.046479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.047361] Call Trace: [ 1658.047666] dump_stack+0x107/0x167 [ 1658.048086] should_fail.cold+0x5/0xa [ 1658.048531] ? create_object.isra.0+0x3a/0xa20 [ 1658.049063] should_failslab+0x5/0x20 [ 1658.049521] kmem_cache_alloc+0x5b/0x310 [ 1658.049994] ? mark_held_locks+0x9e/0xe0 [ 1658.050464] create_object.isra.0+0x3a/0xa20 [ 1658.050966] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1658.051547] kmem_cache_alloc_trace+0x151/0x320 [ 1658.052084] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1658.052654] __list_lru_init+0x44d/0x890 [ 1658.053123] alloc_super+0x8b8/0xa90 [ 1658.053558] sget_fc+0x13e/0x750 [ 1658.053949] ? set_anon_super+0xc0/0xc0 [ 1658.054406] ? shmem_put_link+0x120/0x120 [ 1658.054882] get_tree_nodev+0x24/0x1d0 [ 1658.055334] vfs_get_tree+0x8e/0x300 [ 1658.055758] path_mount+0x13be/0x20b0 [ 1658.056197] ? strncpy_from_user+0x9e/0x470 [ 1658.056696] ? finish_automount+0xa90/0xa90 [ 1658.057181] ? getname_flags.part.0+0x1dd/0x4f0 [ 1658.057698] __x64_sys_mount+0x282/0x300 [ 1658.057710] ? copy_mnt_ns+0xa00/0xa00 [ 1658.057722] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1658.057734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1658.057749] do_syscall_64+0x33/0x40 [ 1658.057762] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1658.057769] RIP: 0033:0x7fcb00d4104a [ 1658.057780] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.057785] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1658.057797] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1658.057803] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1658.057809] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1658.057815] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1658.057821] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1658.068440] cgroup: Invalid name [ 1658.077549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=10903 comm=syz-executor.6 [ 1658.093684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=10903 comm=syz-executor.6 [ 1658.094410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=10903 comm=syz-executor.6 [ 1658.097144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=10903 comm=syz-executor.6 08:19:25 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:25 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 75) 08:19:25 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1658.187941] FAULT_INJECTION: forcing a failure. [ 1658.187941] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.190481] CPU: 0 PID: 10916 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1658.191969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.193747] Call Trace: [ 1658.194317] dump_stack+0x107/0x167 [ 1658.195106] should_fail.cold+0x5/0xa [ 1658.195932] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1658.197024] should_failslab+0x5/0x20 [ 1658.197859] kmem_cache_alloc_trace+0x55/0x320 [ 1658.198839] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1658.199928] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1658.200980] __list_lru_init+0x44d/0x890 [ 1658.201861] alloc_super+0x8b8/0xa90 [ 1658.202664] sget_fc+0x13e/0x750 [ 1658.203391] ? set_anon_super+0xc0/0xc0 [ 1658.204247] ? shmem_put_link+0x120/0x120 [ 1658.205131] get_tree_nodev+0x24/0x1d0 [ 1658.205984] vfs_get_tree+0x8e/0x300 [ 1658.206798] path_mount+0x13be/0x20b0 [ 1658.207629] ? strncpy_from_user+0x9e/0x470 [ 1658.208567] ? finish_automount+0xa90/0xa90 [ 1658.209514] ? getname_flags.part.0+0x1dd/0x4f0 [ 1658.210541] __x64_sys_mount+0x282/0x300 [ 1658.211406] ? copy_mnt_ns+0xa00/0xa00 [ 1658.212259] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1658.213394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1658.214519] do_syscall_64+0x33/0x40 [ 1658.215316] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1658.216427] RIP: 0033:0x7fcb00d4104a [ 1658.217219] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.221203] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1658.222856] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1658.223792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=10903 comm=syz-executor.6 [ 1658.224397] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1658.224410] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1658.224421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1658.224433] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1658.240659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10903 comm=syz-executor.6 [ 1658.251669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=10903 comm=syz-executor.6 [ 1658.255420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=10903 comm=syz-executor.6 [ 1658.270599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=10903 comm=syz-executor.6 [ 1658.287512] cgroup: Invalid name 08:19:39 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000340), 0x4, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc1}]}]}]}, 0x34}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000004c0)=[r0, r0, r0, r1, r0, r0, r2], 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in=@remote, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000900)) fchown(r0, 0x0, r5) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), &(0x7f0000000180)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000380)=0xfff, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 08:19:39 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:39 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 76) 08:19:39 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8802) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x18000, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r4 = openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x800, 0x88, 0x8}, 0x18) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r4, 0xd6) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r5, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x1c) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000100), &(0x7f0000000140)={'L-', 0x7f}, 0x16, 0x1) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/38, 0x26}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000640)=""/37, 0x25}, {&(0x7f0000000680)=""/243, 0xf3}], 0x7) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000b, 0x12, r3, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000180), 0x400, 0x100) syz_io_uring_submit(r7, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r8, 0x0, &(0x7f00000001c0)='./file0\x00', 0x40, 0x301c00, 0x12345}, 0x401) 08:19:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x2000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:19:39 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x900500, 0x30000000000) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x183000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x1c) close(r2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x218, 0x0, 0x6, 0x101, 0x70bd27, 0x25dfdbfb, {0xc, 0x0, 0x7}, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@remote}, @typed={0xa2, 0x3d, 0x0, 0x0, @binary="7fb5ab0dea7219997059c5dc0d03fb3a711e8a6eb67d18a83f87d1472e56f7ff33869c3b5fbe9ffe664e6996f62bd49116c9b0526c395c99cbfa204a16701185c9a1015305a3549d50733848aeb9e614916c586d8a065c53c93468dfe26393f8aca8b76ba7dc67b0b38e13042061fc33674af570a498f5fb930a6d600ff982099856eff2898a170ee88a5109f68efb6d52885c6645c6c3adef46b294656f"}, @generic="246b7b98219a0894da573e30a40d01be3e7e5cc7fa98699dab8730f9cf33c9356f7b0a79263b7e14bf1f39", @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@remote}, @typed={0x14, 0x11, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x5e, 0x0, 0x0, @pid=r4}, @generic="01c38895c357f0e5635ea8115cc5cf5f259420f4dfae99f0646763fa4b02ff036bd51812f0a902e86c8b13703bbbaeced330cfd44d5eda7c959597f6e5512dd0e8ddc5ea4aefa99f3d57917c31e5f31597f2c4c16d7c4994999b94f0eb6f90f46d6d1b34cca6931fa7c4259cf9eea5930b1bd3aad0d5f22d0b8a590a458536f822f38e0f951037bb991e9f11c8616c4f03e8577cb765351dc4086f119dbce3b247d6be8f94b45ac5099b3e6be61197769afbb74638cb230a8c79b9134174a2c743636f65fbb3a17a374ab3c9215e113c44f56fa674042bdd80553b7b0673e270b4e8278b79447c75ce49abecea125c5527dc92938ea6b6d966", @nested={0x4, 0x64}]}, 0x218}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) 08:19:39 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:39 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1672.683272] FAULT_INJECTION: forcing a failure. [ 1672.683272] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.685701] CPU: 1 PID: 10933 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1672.687118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1672.687124] Call Trace: [ 1672.687147] dump_stack+0x107/0x167 [ 1672.687172] should_fail.cold+0x5/0xa [ 1672.687195] ? create_object.isra.0+0x3a/0xa20 [ 1672.687217] should_failslab+0x5/0x20 [ 1672.687235] kmem_cache_alloc+0x5b/0x310 [ 1672.687254] ? mark_held_locks+0x9e/0xe0 [ 1672.687276] create_object.isra.0+0x3a/0xa20 [ 1672.687295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1672.687319] kmem_cache_alloc_trace+0x151/0x320 [ 1672.687345] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1672.687367] __list_lru_init+0x44d/0x890 [ 1672.687392] alloc_super+0x8b8/0xa90 [ 1672.687414] sget_fc+0x13e/0x750 [ 1672.687430] ? set_anon_super+0xc0/0xc0 [ 1672.687453] ? shmem_put_link+0x120/0x120 [ 1672.687468] get_tree_nodev+0x24/0x1d0 [ 1672.687487] vfs_get_tree+0x8e/0x300 [ 1672.687508] path_mount+0x13be/0x20b0 [ 1672.687533] ? strncpy_from_user+0x9e/0x470 [ 1672.687555] ? finish_automount+0xa90/0xa90 [ 1672.687574] ? getname_flags.part.0+0x1dd/0x4f0 [ 1672.687606] __x64_sys_mount+0x282/0x300 [ 1672.687627] ? copy_mnt_ns+0xa00/0xa00 [ 1672.687650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1672.687668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1672.687693] do_syscall_64+0x33/0x40 [ 1672.687714] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1672.687726] RIP: 0033:0x7fcb00d4104a [ 1672.687746] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1672.687756] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1672.687776] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1672.687787] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1672.687798] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1672.687809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1672.687831] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1672.796690] cgroup: Invalid name [ 1672.892532] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,,errors=continue 08:19:54 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:54 executing program 6: io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x19d, &(0x7f00000000c0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) io_cancel(r1, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xa3, &(0x7f00000005c0)=""/163}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) 08:19:54 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 77) 08:19:54 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:19:54 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:54 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8802) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x18000, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r4 = openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x800, 0x88, 0x8}, 0x18) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r4, 0xd6) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r5, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x1c) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000100), &(0x7f0000000140)={'L-', 0x7f}, 0x16, 0x1) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/38, 0x26}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000640)=""/37, 0x25}, {&(0x7f0000000680)=""/243, 0xf3}], 0x7) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000b, 0x12, r3, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000180), 0x400, 0x100) syz_io_uring_submit(r7, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r8, 0x0, &(0x7f00000001c0)='./file0\x00', 0x40, 0x301c00, 0x12345}, 0x401) 08:19:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x7000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:19:54 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r1, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r1, 0x3, 0x900500, 0x30000000000) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x100, 0x6) setuid(r0) [ 1687.822558] FAULT_INJECTION: forcing a failure. [ 1687.822558] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.824906] CPU: 1 PID: 10964 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1687.824917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1687.824922] Call Trace: [ 1687.824944] dump_stack+0x107/0x167 [ 1687.824968] should_fail.cold+0x5/0xa [ 1687.824989] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1687.825010] should_failslab+0x5/0x20 [ 1687.825028] kmem_cache_alloc_trace+0x55/0x320 [ 1687.825049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1687.825072] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1687.825095] __list_lru_init+0x44d/0x890 [ 1687.825119] alloc_super+0x8b8/0xa90 [ 1687.825142] sget_fc+0x13e/0x750 [ 1687.825158] ? set_anon_super+0xc0/0xc0 [ 1687.825181] ? shmem_put_link+0x120/0x120 [ 1687.825196] get_tree_nodev+0x24/0x1d0 08:19:54 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 78) [ 1687.825215] vfs_get_tree+0x8e/0x300 [ 1687.825236] path_mount+0x13be/0x20b0 08:19:54 executing program 4: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') setuid(r0) [ 1687.825260] ? strncpy_from_user+0x9e/0x470 [ 1687.825282] ? finish_automount+0xa90/0xa90 [ 1687.825301] ? getname_flags.part.0+0x1dd/0x4f0 [ 1687.825334] __x64_sys_mount+0x282/0x300 [ 1687.825354] ? copy_mnt_ns+0xa00/0xa00 [ 1687.825379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1687.825397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1687.825422] do_syscall_64+0x33/0x40 [ 1687.825443] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1687.825455] RIP: 0033:0x7fcb00d4104a [ 1687.825474] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.825484] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1687.825505] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1687.825516] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1687.825526] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 08:19:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1687.825537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1687.825548] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1687.930182] cgroup: Invalid name [ 1687.961347] FAULT_INJECTION: forcing a failure. [ 1687.961347] name failslab, interval 1, probability 0, space 0, times 0 08:19:55 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, 0x0, 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1687.961368] CPU: 1 PID: 10975 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1687.961378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 08:19:55 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x0) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1687.961383] Call Trace: [ 1687.961405] dump_stack+0x107/0x167 [ 1687.961428] should_fail.cold+0x5/0xa [ 1687.961449] ? create_object.isra.0+0x3a/0xa20 [ 1687.961470] should_failslab+0x5/0x20 [ 1687.961488] kmem_cache_alloc+0x5b/0x310 [ 1687.961507] ? mark_held_locks+0x9e/0xe0 [ 1687.961529] create_object.isra.0+0x3a/0xa20 [ 1687.961548] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1687.961572] kmem_cache_alloc_trace+0x151/0x320 [ 1687.961597] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1687.961620] __list_lru_init+0x44d/0x890 [ 1687.961644] alloc_super+0x8b8/0xa90 08:19:55 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 79) [ 1687.961692] sget_fc+0x13e/0x750 [ 1687.961709] ? set_anon_super+0xc0/0xc0 [ 1687.961731] ? shmem_put_link+0x120/0x120 [ 1687.961746] get_tree_nodev+0x24/0x1d0 [ 1687.961765] vfs_get_tree+0x8e/0x300 [ 1687.961786] path_mount+0x13be/0x20b0 [ 1687.961810] ? strncpy_from_user+0x9e/0x470 08:19:55 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x4a, 0x200) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x1ff, 0xfffffffffffffffd, 0x8e}) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r6, &(0x7f00000000c0)=0x80, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, 0x80800, 0x1}, 0x5) openat(r6, &(0x7f0000000280)='./file0\x00', 0x14002, 0x10) [ 1687.961837] ? finish_automount+0xa90/0xa90 [ 1687.961855] ? getname_flags.part.0+0x1dd/0x4f0 [ 1687.961888] __x64_sys_mount+0x282/0x300 [ 1687.961908] ? copy_mnt_ns+0xa00/0xa00 [ 1687.961932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1687.961950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1687.961975] do_syscall_64+0x33/0x40 [ 1687.961996] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1687.962008] RIP: 0033:0x7fcb00d4104a [ 1687.962027] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.962038] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1687.962058] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1687.962069] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1687.962080] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1687.962090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1687.962101] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1688.108568] FAULT_INJECTION: forcing a failure. [ 1688.108568] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.120055] CPU: 1 PID: 10986 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1688.121480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1688.123181] Call Trace: [ 1688.123726] dump_stack+0x107/0x167 [ 1688.124487] should_fail.cold+0x5/0xa [ 1688.125257] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1688.126310] should_failslab+0x5/0x20 [ 1688.127083] kmem_cache_alloc_trace+0x55/0x320 [ 1688.128017] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1688.129037] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1688.130036] __list_lru_init+0x44d/0x890 [ 1688.130865] alloc_super+0x8b8/0xa90 [ 1688.131621] sget_fc+0x13e/0x750 [ 1688.132305] ? set_anon_super+0xc0/0xc0 [ 1688.133111] ? shmem_put_link+0x120/0x120 [ 1688.133949] get_tree_nodev+0x24/0x1d0 [ 1688.134735] vfs_get_tree+0x8e/0x300 [ 1688.135484] path_mount+0x13be/0x20b0 [ 1688.136248] ? strncpy_from_user+0x9e/0x470 [ 1688.137111] ? finish_automount+0xa90/0xa90 [ 1688.137982] ? getname_flags.part.0+0x1dd/0x4f0 [ 1688.138935] __x64_sys_mount+0x282/0x300 [ 1688.139737] ? copy_mnt_ns+0xa00/0xa00 [ 1688.140535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1688.141562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1688.142599] do_syscall_64+0x33/0x40 [ 1688.143338] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1688.144390] RIP: 0033:0x7fcb00d4104a [ 1688.145149] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1688.148859] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1688.150406] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1688.151853] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1688.153309] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1688.154770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1688.156209] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:19:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x8000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1688.193491] cgroup: Invalid name 08:19:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:19:55 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x0) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:55 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, 0x0, 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:19:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:19:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x9000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:19:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0xa, 0x0, 0x0) readahead(r2, 0x9, 0x6) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x1c) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x1c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, r5, 0x473, 0x4, 0x0, 0xff}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x0, 0x0, 0xfffffffffffffffe}) [ 1688.422392] cgroup: Invalid name [ 1688.489406] cgroup: Invalid name 08:20:09 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 80) 08:20:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x0) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:20:09 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100, 0x4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r4, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r4, 0x3, 0x900500, 0x30000000000) statx(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x40, &(0x7f00000002c0)) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r3, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r3, 0x3, 0x900500, 0x30000000000) uselib(&(0x7f0000000080)='./file0\x00') statx(r3, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r5, r6, 0x1000) setresuid(r0, r1, r5) 08:20:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r2, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r2, 0x3, 0x900500, 0x30000000000) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x85) openat(r2, &(0x7f0000000000)='./file1\x00', 0x44400, 0xba) sendfile(r0, r1, 0x0, 0x100000001) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) syncfs(r3) 08:20:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xa000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:20:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, 0x0, 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:20:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:20:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x9, 0x8, 0x0, 0x5, 0x14001, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x808, 0x100, 0x3afac00, 0x0, 0x1, 0x10000, 0x401, 0x0, 0x1f, 0x0, 0x4}, r0, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "0070404651fd796ab47483a4c1be26133a48d389342f53cbb88cc2f96518c9ca6fb689bb56a2824f0f6fc853011e3c529931bbfdcfad732e9f6c146e67b6220c"}, 0x48, r3) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f00000002c0)) fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) r6 = dup2(0xffffffffffffffff, r2) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x80, 0x38, 0x5, 0x0, 0x899, 0x100, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x400}, 0x7027, 0xfffffffffffffffe, 0xfffffff7, 0x3, 0x3a3, 0x0, 0x7, 0x0, 0xffff8000, 0x0, 0x50}, r5, 0xc, r6, 0x1) keyctl$chown(0x4, r4, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x84}, {r0, 0x8109}, {0xffffffffffffffff, 0x4}, {r0}], 0x4, &(0x7f00000002c0), &(0x7f0000000440), 0x8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10}) [ 1702.029167] FAULT_INJECTION: forcing a failure. [ 1702.029167] name failslab, interval 1, probability 0, space 0, times 0 [ 1702.031700] CPU: 1 PID: 11032 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1702.033050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1702.034723] Call Trace: [ 1702.035257] dump_stack+0x107/0x167 [ 1702.035993] should_fail.cold+0x5/0xa [ 1702.036743] ? create_object.isra.0+0x3a/0xa20 [ 1702.037660] should_failslab+0x5/0x20 [ 1702.038433] kmem_cache_alloc+0x5b/0x310 [ 1702.039239] ? mark_held_locks+0x9e/0xe0 [ 1702.040042] create_object.isra.0+0x3a/0xa20 [ 1702.040944] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1702.041970] kmem_cache_alloc_trace+0x151/0x320 [ 1702.042921] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1702.043890] __list_lru_init+0x44d/0x890 [ 1702.044709] alloc_super+0x8b8/0xa90 [ 1702.045442] sget_fc+0x13e/0x750 [ 1702.046117] ? set_anon_super+0xc0/0xc0 [ 1702.046903] ? shmem_put_link+0x120/0x120 [ 1702.047733] get_tree_nodev+0x24/0x1d0 [ 1702.048504] vfs_get_tree+0x8e/0x300 [ 1702.049270] path_mount+0x13be/0x20b0 [ 1702.050094] ? strncpy_from_user+0x9e/0x470 [ 1702.050952] ? finish_automount+0xa90/0xa90 [ 1702.051826] ? getname_flags.part.0+0x1dd/0x4f0 [ 1702.052782] __x64_sys_mount+0x282/0x300 [ 1702.053662] ? copy_mnt_ns+0xa00/0xa00 [ 1702.054561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1702.055623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1702.056677] do_syscall_64+0x33/0x40 [ 1702.057437] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1702.058518] RIP: 0033:0x7fcb00d4104a [ 1702.058550] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1702.063029] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1702.063052] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1702.063064] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1702.063084] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1702.069063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1702.070582] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:20:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xc000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:20:09 executing program 4: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', 0xc33, 0x8, &(0x7f0000000540)=[{&(0x7f00000000c0)="c5a4", 0x2, 0x9}, {&(0x7f00000001c0)="938ab08b662608b95ef3131a70c82efb5cdcede69d586a48289b403b49b408ff0f6841e20a477065599d5b64f5a39859af4652322d2a27757a9b38278e3e55eba847c33b2eff8886", 0x48, 0x2}, {&(0x7f0000000240)="42679f5053553e93554b5d2bdce3cde14b834e51acbcd99651fc82cf216b271d91965280e04a9848d20803be4b460f6818e2429009b21ac6c69ed6a42c9365db442dc5bc414300818868ab297d4b10820e6aa25f5f991f6388aa5d8673e8fb26edf2b40fc6279c5d7c033c253426f84c5c6d93007db3b7d4a729c861eb1508283c4d9995dd061b67eb5da3ac2c9f0283fabf78b2622a7f0ba38b95d24634c1043f2eaf42d46f2352ff35f0cedd99e6b4c1faed4f1fb3783a7e3979ada848", 0xbe, 0x3}, {&(0x7f0000000300)="8769cce1f3313ef7750fe5dd8090452528c02df33d1f8bac5effd313bf83e6d81de511284ab04724d2a5ca460900df30a199312dc2c73048a09ac5e6780fde042ad22ae258273a77d5a6ac7960f2af7c32", 0x51, 0x369d}, {&(0x7f0000000100)="d066be1fd143f72e3d3dea8569845268b003c49957774c18b4cb35f81ccca32dc6d72ac4af44d0a8", 0x28, 0xee9}, {&(0x7f0000000380)="ae9ed1abb47bb58bf265bddc78f9688870c60dac210e8b2613a5734e9a530e83e28c1cc279c0a9d9493c6a5906157b37a734e0df8c9b627b7bbd43aba0beb87d9bd0d6dfefef4175f62dc068867734f10e4e5f3d59af2629e62fbafb9f53fbade24df71f39edf1e9ac58421939430f5efc4358305e6211a32729bf018a6e08c5d176d0c4be82a0e937910f9b017e108d760d1068c4c1f4e0e85944ea9535f4d37c5d90174b074a0e28a333135f4cbf4a53aba45fd5ca9bbb02e622e25871299b442b328c88d56b42aa4004a209564dd94dd49d609c30dd4a25bc673ed4901248c96641a850cc99a2e02901dd01ae0236f1c4", 0xf2, 0xfffffffffffffff8}, {&(0x7f0000000480)="72b84b74891358c437cbafe93e57782d7ec2f05a859c48ec3127f612a7916fc0460860c74b14444a5c5fa8a3ddad913bc304e5edd4ee", 0x36, 0x6}, {&(0x7f00000004c0)="f52058a5833c48a684e9c1fba67d623f8f0fe19988d8657bfac19c525f479b19bec106afcfd328d6938b2eb2e7e7b6369a11e156a8ee5363c1d57eaa732276122610a5a49e87cd438d11b317ff5a27c3fdb93052fc4f2403e6ccecdebb21612fcd893a15095b7a3072b7f518b3f459943b15a95e83184578c8429faf8f4c3c", 0x7f, 0x6}], 0xc00, &(0x7f0000000600)={[{'\x00'}, {}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x33, 0x31, 0x33, 0x30, 0x39, 0x62, 0x61], 0x2d, [0x32, 0x34, 0x37, 0x37], 0x2d, [0x65, 0x64, 0x61, 0x62], 0x2d, [0x34, 0x39, 0x61, 0x66], 0x2d, [0x65, 0x66, 0x61, 0x61, 0x33, 0x62, 0x64, 0x64]}}}, {@obj_role={'obj_role', 0x3d, ':[:'}}, {@smackfsfloor}, {@dont_measure}]}) setresuid(0xee00, r0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x2000, 0x0) clone3(&(0x7f0000000940)={0x4800000, &(0x7f00000006c0)=0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740), {0x14}, &(0x7f0000000780)=""/164, 0xa4, &(0x7f0000000840)=""/162, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r2, {0xd027}}, './file0/file0\x00'}) setuid(r0) [ 1702.183492] cgroup: Invalid name 08:20:09 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 81) [ 1702.195803] EXT4-fs warning (device sda): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed 08:20:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xd000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:20:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:20:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:20:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1702.369391] FAULT_INJECTION: forcing a failure. [ 1702.369391] name failslab, interval 1, probability 0, space 0, times 0 [ 1702.371755] CPU: 0 PID: 11045 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1702.371765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1702.371771] Call Trace: [ 1702.371793] dump_stack+0x107/0x167 [ 1702.371818] should_fail.cold+0x5/0xa [ 1702.371845] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1702.371867] should_failslab+0x5/0x20 [ 1702.371886] kmem_cache_alloc_trace+0x55/0x320 [ 1702.371907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1702.371930] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1702.371953] __list_lru_init+0x44d/0x890 [ 1702.371978] alloc_super+0x8b8/0xa90 [ 1702.372000] sget_fc+0x13e/0x750 [ 1702.372018] ? set_anon_super+0xc0/0xc0 [ 1702.372040] ? shmem_put_link+0x120/0x120 [ 1702.372056] get_tree_nodev+0x24/0x1d0 [ 1702.372080] vfs_get_tree+0x8e/0x300 [ 1702.387491] path_mount+0x13be/0x20b0 [ 1702.388264] ? strncpy_from_user+0x9e/0x470 [ 1702.389134] ? finish_automount+0xa90/0xa90 [ 1702.390011] ? getname_flags.part.0+0x1dd/0x4f0 [ 1702.390970] __x64_sys_mount+0x282/0x300 [ 1702.390991] ? copy_mnt_ns+0xa00/0xa00 [ 1702.391017] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1702.391036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1702.391061] do_syscall_64+0x33/0x40 [ 1702.391082] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1702.391095] RIP: 0033:0x7fcb00d4104a [ 1702.391115] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1702.391125] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1702.391145] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1702.391157] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1702.391168] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1702.391179] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1702.391189] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1702.514823] cgroup: Invalid name 08:20:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:20:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') r0 = creat(&(0x7f0000000200)='./file1\x00', 0x2) chroot(&(0x7f0000000280)='./file2\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = openat(r0, &(0x7f0000001a00)='./file1\x00', 0x42, 0x4) io_setup(0x5, &(0x7f0000000040)=0x0) chroot(&(0x7f0000000440)='./file2\x00') io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r3, 0x0}]) openat$incfs(r3, &(0x7f0000000300)='.pending_reads\x00', 0xc6000, 0x8) unlink(&(0x7f0000000340)='./file2\x00') write$P9_RRENAMEAT(r2, &(0x7f0000000480)={0x7, 0x4b, 0x1}, 0x7) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) sendfile(r1, r2, 0x0, 0x100000001) 08:20:23 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1716.752710] FAULT_INJECTION: forcing a failure. [ 1716.752710] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.754736] CPU: 0 PID: 11065 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1716.755901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.757265] Call Trace: [ 1716.757708] dump_stack+0x107/0x167 [ 1716.758345] should_fail.cold+0x5/0xa [ 1716.758977] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1716.759809] should_failslab+0x5/0x20 [ 1716.760446] kmem_cache_alloc_trace+0x55/0x320 [ 1716.761221] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1716.762102] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1716.762953] __list_lru_init+0x44d/0x890 [ 1716.763655] alloc_super+0x8b8/0xa90 [ 1716.764297] sget_fc+0x13e/0x750 [ 1716.764975] ? set_anon_super+0xc0/0xc0 [ 1716.765655] ? shmem_put_link+0x120/0x120 [ 1716.766495] get_tree_nodev+0x24/0x1d0 [ 1716.767162] vfs_get_tree+0x8e/0x300 [ 1716.767904] path_mount+0x13be/0x20b0 [ 1716.768561] ? strncpy_from_user+0x9e/0x470 [ 1716.769421] ? finish_automount+0xa90/0xa90 [ 1716.770189] ? getname_flags.part.0+0x1dd/0x4f0 [ 1716.771124] __x64_sys_mount+0x282/0x300 [ 1716.771831] ? copy_mnt_ns+0xa00/0xa00 [ 1716.771852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1716.771868] ? syscall_enter_from_user_mode+0x1d/0x50 08:20:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xe000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:20:23 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 82) 08:20:23 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x191140, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x19, 0x1f, 0x8, 0x7, 0x0, 0xfff, 0x10200, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x800a, 0xffffffffffffffff, 0x8000, 0x2, 0x13a, 0x5be, 0x1f, 0x0, 0xfb, 0x0, 0xfffffffffffffff7}, r1, 0xf, r0, 0x4) perf_event_open(&(0x7f00000000c0)={0xd78e66d628b69fec, 0x80, 0x1, 0x80, 0x3, 0x8, 0x0, 0x1, 0x20, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_config_ext={0x7, 0x2}, 0xc30, 0x0, 0x20, 0xd, 0x4c, 0x0, 0x5, 0x0, 0x5, 0x0, 0x1000}, 0xffffffffffffffff, 0x7, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:20:23 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='\x00', r1) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)='\\\x00') add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r3 = request_key(&(0x7f0000000380)='trusted\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='.request_key_auth\x00', r2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r4, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) setreuid(r4, r5) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "a13ae9f0f74859194088aeb531cf5a509069afd5c5aa7731d81a501f5392a86b618a7a366a63e6bbf57c22e49e09f7511dcf02d4230c34b6581281f2c18e6295", 0x3f}, 0x48, r3) r6 = getuid() ioprio_set$uid(0x3, r6, 0x4007) setuid(r4) 08:20:23 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1716.771888] do_syscall_64+0x33/0x40 [ 1716.771905] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1716.771915] RIP: 0033:0x7fcb00d4104a [ 1716.771931] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 08:20:23 executing program 6: modify_ldt$write(0x1, &(0x7f0000000200), 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x0, 0x20000000, 0x1000, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x3, 0x20000000, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0xffffc90000000000, &(0x7f0000000240), 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x56d7, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) [ 1716.771939] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1716.771955] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1716.771964] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1716.771973] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1716.771982] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1716.771990] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:20:23 executing program 4: stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) [ 1716.856500] cgroup: Invalid name 08:20:23 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:20:24 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 83) 08:20:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xf000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:20:24 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1717.029106] FAULT_INJECTION: forcing a failure. [ 1717.029106] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.031527] CPU: 0 PID: 11089 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1717.032912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1717.034609] Call Trace: [ 1717.035142] dump_stack+0x107/0x167 [ 1717.035912] should_fail.cold+0x5/0xa [ 1717.036699] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1717.037739] should_failslab+0x5/0x20 [ 1717.038511] kmem_cache_alloc_trace+0x55/0x320 [ 1717.039421] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1717.040437] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1717.041442] __list_lru_init+0x44d/0x890 [ 1717.042270] alloc_super+0x8b8/0xa90 [ 1717.043030] sget_fc+0x13e/0x750 [ 1717.043709] ? set_anon_super+0xc0/0xc0 [ 1717.044525] ? shmem_put_link+0x120/0x120 [ 1717.045348] get_tree_nodev+0x24/0x1d0 [ 1717.046160] vfs_get_tree+0x8e/0x300 [ 1717.046912] path_mount+0x13be/0x20b0 [ 1717.047689] ? strncpy_from_user+0x9e/0x470 [ 1717.048554] ? finish_automount+0xa90/0xa90 [ 1717.049429] ? getname_flags.part.0+0x1dd/0x4f0 [ 1717.050385] __x64_sys_mount+0x282/0x300 [ 1717.051215] ? copy_mnt_ns+0xa00/0xa00 [ 1717.052002] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1717.053065] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1717.054120] do_syscall_64+0x33/0x40 [ 1717.054869] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1717.055906] RIP: 0033:0x7fcb00d4104a [ 1717.056652] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1717.060371] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1717.061930] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1717.063355] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1717.064771] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1717.066204] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1717.067623] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1717.172794] cgroup: Invalid name 08:20:38 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='\x00', r1) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)='\\\x00') add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r3 = request_key(&(0x7f0000000380)='trusted\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='.request_key_auth\x00', r2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r4, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) setreuid(r4, r5) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "a13ae9f0f74859194088aeb531cf5a509069afd5c5aa7731d81a501f5392a86b618a7a366a63e6bbf57c22e49e09f7511dcf02d4230c34b6581281f2c18e6295", 0x3f}, 0x48, r3) r6 = getuid() ioprio_set$uid(0x3, r6, 0x4007) setuid(r4) 08:20:38 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendfile(r0, r5, &(0x7f0000000080)=0x40, 0x7) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r2, r1, 0x0, 0x500000001) 08:20:38 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 84) 08:20:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:20:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x18000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:20:38 executing program 4: prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x3000, &(0x7f00000001c0)={[{@clone_children}, {@name={'name', 0x3d, '@\\'}}, {@subsystem='cpuacct'}, {@noprefix}, {@noprefix}, {@clone_children}, {@cpuset_v2_mode}], [{@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@dont_measure}, {@dont_hash}, {@fowner_eq={'fowner', 0x3d, r0}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) prctl$PR_GET_NO_NEW_PRIVS(0x27) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6100) setresuid(r0, r0, r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x212100) fstat(r2, 0xffffffffffffffff) setuid(r0) 08:20:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x0) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:20:38 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1731.169665] FAULT_INJECTION: forcing a failure. [ 1731.169665] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.172115] CPU: 1 PID: 11106 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1731.172125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1731.172131] Call Trace: [ 1731.172153] dump_stack+0x107/0x167 [ 1731.172179] should_fail.cold+0x5/0xa [ 1731.172201] ? create_object.isra.0+0x3a/0xa20 [ 1731.172222] should_failslab+0x5/0x20 [ 1731.172241] kmem_cache_alloc+0x5b/0x310 [ 1731.172260] ? mark_held_locks+0x9e/0xe0 [ 1731.172283] create_object.isra.0+0x3a/0xa20 [ 1731.172302] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1731.172327] kmem_cache_alloc_trace+0x151/0x320 [ 1731.172353] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1731.172376] __list_lru_init+0x44d/0x890 [ 1731.172400] alloc_super+0x8b8/0xa90 [ 1731.172422] sget_fc+0x13e/0x750 [ 1731.172440] ? set_anon_super+0xc0/0xc0 [ 1731.172462] ? shmem_put_link+0x120/0x120 [ 1731.172478] get_tree_nodev+0x24/0x1d0 [ 1731.172497] vfs_get_tree+0x8e/0x300 [ 1731.172519] path_mount+0x13be/0x20b0 [ 1731.172544] ? strncpy_from_user+0x9e/0x470 [ 1731.172567] ? finish_automount+0xa90/0xa90 [ 1731.172586] ? getname_flags.part.0+0x1dd/0x4f0 [ 1731.172619] __x64_sys_mount+0x282/0x300 [ 1731.172640] ? copy_mnt_ns+0xa00/0xa00 [ 1731.172663] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1731.172682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1731.172707] do_syscall_64+0x33/0x40 [ 1731.172729] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1731.172741] RIP: 0033:0x7fcb00d4104a [ 1731.172761] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.172771] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1731.172792] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1731.172803] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1731.172815] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1731.172826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1731.172850] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:20:38 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r1, 0x0) setuid(r1) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) 08:20:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x19000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1731.328495] cgroup: Invalid name 08:20:38 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 85) 08:20:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005400)={0x28, r4, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00?\x00\x00@'], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r8, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00i'], 0x2c}}, 0x0) 08:20:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x0) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:20:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x1a000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:20:38 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x1c) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200080, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYBLOB=',loose,dfltuid=', @ANYRESHEX=r1, @ANYBLOB=',aname=,cache=loose,fowner=', @ANYRES16, @ANYRESDEC=r2]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) ioprio_set$uid(0x3, r0, 0x4000) setresuid(r0, r3, r0) setuid(r0) [ 1731.414043] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:20:38 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:20:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1731.462321] FAULT_INJECTION: forcing a failure. [ 1731.462321] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.464674] CPU: 0 PID: 11131 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1731.466081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1731.467824] Call Trace: [ 1731.468359] dump_stack+0x107/0x167 [ 1731.469126] should_fail.cold+0x5/0xa [ 1731.469919] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1731.470975] should_failslab+0x5/0x20 [ 1731.471767] kmem_cache_alloc_trace+0x55/0x320 [ 1731.472701] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1731.473760] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1731.474800] __list_lru_init+0x44d/0x890 [ 1731.475635] alloc_super+0x8b8/0xa90 [ 1731.476398] sget_fc+0x13e/0x750 [ 1731.477087] ? set_anon_super+0xc0/0xc0 [ 1731.477895] ? shmem_put_link+0x120/0x120 [ 1731.478740] get_tree_nodev+0x24/0x1d0 [ 1731.479524] vfs_get_tree+0x8e/0x300 [ 1731.480276] path_mount+0x13be/0x20b0 [ 1731.481082] ? strncpy_from_user+0x9e/0x470 [ 1731.481984] ? finish_automount+0xa90/0xa90 [ 1731.482888] ? getname_flags.part.0+0x1dd/0x4f0 [ 1731.483868] __x64_sys_mount+0x282/0x300 [ 1731.484693] ? copy_mnt_ns+0xa00/0xa00 [ 1731.485492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1731.486574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1731.487634] do_syscall_64+0x33/0x40 [ 1731.488384] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1731.489420] RIP: 0033:0x7fcb00d4104a [ 1731.490179] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.493904] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1731.495466] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1731.496930] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1731.498398] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1731.498410] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1731.498422] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1731.502385] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1731.611824] cgroup: Invalid name 08:20:53 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 86) 08:20:53 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:20:53 executing program 6: mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x1000, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r2, 0x0, 0x0) mkdirat(r2, &(0x7f0000000040)='./file0/../file0\x00', 0x40) ftruncate(r0, 0x100000001) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x210040, 0x0, 0x5}, &(0x7f0000000240)='./file0/../file0\x00', 0x18, 0x0, 0x23456}, 0x401) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) close(r0) mkdirat(0xffffffffffffffff, 0x0, 0x86) 08:20:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x1b000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:20:53 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x3}, 0x1c) listen(r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = dup2(r0, r1) r3 = accept4$inet6(r2, 0x0, &(0x7f00000001c0), 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x80000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040), 0xc, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000680)={&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f00000004c0)=""/142, 0x8e}], 0x2, &(0x7f00000005c0)=""/152, 0x98}, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0xff, 0x80000}) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x200048a4) 08:20:53 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400001) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x200, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r2, r3, 0x1000) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r4, r5, 0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}], [{@pcr={'pcr', 0x3d, 0x15}}, {@uid_lt={'uid<', r4}}, {@uid_gt={'uid>', r0}}, {@smackfshat}, {@smackfsfloor={'smackfsfloor', 0x3d, '}F&\xcf'}}]}}) 08:20:53 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x0) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:20:53 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1746.301115] FAULT_INJECTION: forcing a failure. [ 1746.301115] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.304033] CPU: 0 PID: 11159 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1746.305047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1746.306243] Call Trace: [ 1746.306641] dump_stack+0x107/0x167 [ 1746.307172] should_fail.cold+0x5/0xa [ 1746.307726] ? create_object.isra.0+0x3a/0xa20 [ 1746.308394] should_failslab+0x5/0x20 [ 1746.308951] kmem_cache_alloc+0x5b/0x310 [ 1746.309557] ? mark_held_locks+0x9e/0xe0 [ 1746.309574] create_object.isra.0+0x3a/0xa20 [ 1746.309587] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1746.309605] kmem_cache_alloc_trace+0x151/0x320 [ 1746.309623] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1746.309639] __list_lru_init+0x44d/0x890 [ 1746.309657] alloc_super+0x8b8/0xa90 [ 1746.309673] sget_fc+0x13e/0x750 [ 1746.309685] ? set_anon_super+0xc0/0xc0 [ 1746.309701] ? shmem_put_link+0x120/0x120 [ 1746.309712] get_tree_nodev+0x24/0x1d0 [ 1746.309725] vfs_get_tree+0x8e/0x300 [ 1746.309740] path_mount+0x13be/0x20b0 [ 1746.309758] ? strncpy_from_user+0x9e/0x470 [ 1746.309774] ? finish_automount+0xa90/0xa90 [ 1746.309787] ? getname_flags.part.0+0x1dd/0x4f0 [ 1746.309811] __x64_sys_mount+0x282/0x300 [ 1746.309826] ? copy_mnt_ns+0xa00/0xa00 [ 1746.309842] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1746.309856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1746.309874] do_syscall_64+0x33/0x40 [ 1746.309889] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1746.309898] RIP: 0033:0x7fcb00d4104a [ 1746.309913] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1746.309920] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1746.309935] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1746.309943] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1746.309951] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1746.309959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1746.309966] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1746.341806] cgroup: Invalid name 08:20:53 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) fchown(0xffffffffffffffff, 0xffffffffffffffff, r1) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000000, &(0x7f00000002c0)={'trans=xen,', {[{@afid={'afid', 0x3d, 0x1}}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@access_client}, {@fscache}], [{@euid_lt={'euid<', r2}}, {@smackfsdef={'smackfsdef', 0x3d, '.}!H@'}}, {@obj_user={'obj_user', 0x3d, ':'}}, {@dont_hash}, {@smackfstransmute}, {@fsname={'fsname', 0x3d, '+$/['}}, {@smackfshat={'smackfshat', 0x3d, '&-@]%'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_user}]}}) 08:20:53 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:20:53 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 87) 08:20:53 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:20:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x2d070000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1746.472160] FAULT_INJECTION: forcing a failure. [ 1746.472160] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.473802] CPU: 0 PID: 11176 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1746.474736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1746.475835] Call Trace: [ 1746.476192] dump_stack+0x107/0x167 [ 1746.476684] should_fail.cold+0x5/0xa [ 1746.477200] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1746.477888] should_failslab+0x5/0x20 [ 1746.478394] kmem_cache_alloc_trace+0x55/0x320 [ 1746.479026] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1746.479704] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1746.480372] __list_lru_init+0x44d/0x890 [ 1746.480916] alloc_super+0x8b8/0xa90 [ 1746.481425] sget_fc+0x13e/0x750 [ 1746.481885] ? set_anon_super+0xc0/0xc0 [ 1746.482432] ? shmem_put_link+0x120/0x120 [ 1746.482993] get_tree_nodev+0x24/0x1d0 [ 1746.483524] vfs_get_tree+0x8e/0x300 [ 1746.484022] path_mount+0x13be/0x20b0 [ 1746.484538] ? strncpy_from_user+0x9e/0x470 [ 1746.485114] ? finish_automount+0xa90/0xa90 [ 1746.485703] ? getname_flags.part.0+0x1dd/0x4f0 [ 1746.486340] __x64_sys_mount+0x282/0x300 [ 1746.486901] ? copy_mnt_ns+0xa00/0xa00 [ 1746.487429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1746.488137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1746.488831] do_syscall_64+0x33/0x40 [ 1746.489344] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1746.490034] RIP: 0033:0x7fcb00d4104a [ 1746.490559] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1746.493065] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1746.494099] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1746.495066] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 08:20:53 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1000, 0x0) mount$9p_unix(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x131000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200), 0x0, 0x0) faccessat2(r0, &(0x7f0000000240)='./file0\x00', 0x40, 0x1000) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2154d4, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x4) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0xa) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2154d4, 0x0) [ 1746.495073] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 08:20:53 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(0x0, 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1746.495081] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1746.495088] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:20:53 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) setresuid(r1, r0, r0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@debug={'debug', 0x3d, 0x40}}, {@version_9p2000}, {@version_L}, {@cachetag={'cachetag', 0x3d, '['}}, {@loose}, {@cache_none}, {@access_any}]}}) setuid(r0) [ 1746.646321] cgroup: Invalid name 08:21:07 executing program 4: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x12c) setuid(r0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0), 0x2000) 08:21:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x4f000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:21:07 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(0x0, 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:07 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 88) [ 1760.287562] FAULT_INJECTION: forcing a failure. [ 1760.287562] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.289947] CPU: 1 PID: 11197 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1760.291381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1760.293081] Call Trace: 08:21:07 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1760.293629] dump_stack+0x107/0x167 [ 1760.294568] should_fail.cold+0x5/0xa [ 1760.295381] ? create_object.isra.0+0x3a/0xa20 [ 1760.296314] should_failslab+0x5/0x20 [ 1760.297096] kmem_cache_alloc+0x5b/0x310 [ 1760.297923] ? mark_held_locks+0x9e/0xe0 [ 1760.298786] create_object.isra.0+0x3a/0xa20 [ 1760.299671] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1760.300721] kmem_cache_alloc_trace+0x151/0x320 [ 1760.301673] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1760.302686] __list_lru_init+0x44d/0x890 [ 1760.303511] alloc_super+0x8b8/0xa90 [ 1760.304269] sget_fc+0x13e/0x750 [ 1760.304949] ? set_anon_super+0xc0/0xc0 [ 1760.305754] ? shmem_put_link+0x120/0x120 [ 1760.306596] get_tree_nodev+0x24/0x1d0 [ 1760.307381] vfs_get_tree+0x8e/0x300 [ 1760.308286] path_mount+0x13be/0x20b0 [ 1760.309059] ? strncpy_from_user+0x9e/0x470 [ 1760.309931] ? finish_automount+0xa90/0xa90 08:21:07 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x0) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:21:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x3, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x0, 0x0, 0x8, 0x0, 0xb7, 0x800, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_config_ext={0x4a080d01, 0x87c}, 0x10000, 0x1, 0xe030, 0x7, 0x9, 0x3, 0x6, 0x0, 0x3f, 0x0, 0x6}, r2, 0xe, r1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005400)=ANY=[@ANYBLOB="2810ffff", @ANYRES16=r4, @ANYBLOB="95390000000000000000050000000c00018008000100", @ANYRES32=r6, @ANYBLOB="0800050000000000"], 0x28}}, 0x0) [ 1760.310914] ? getname_flags.part.0+0x1dd/0x4f0 [ 1760.312160] __x64_sys_mount+0x282/0x300 [ 1760.312978] ? copy_mnt_ns+0xa00/0xa00 sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="8e691a8ff64a3c771ee64a32b1c482d55f126dfa0a730c7fb8ed1ec96a72676ea93326bd5d4801bc3164d7c42c9a5db994e2fb3b6e2857f6e5f1bcd3625da5374d198d7d95e1b175e7426cea7761b333ad9db3b8", 0x54}], 0x1, &(0x7f0000000200)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x16, 0x2, 0x0, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r6}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdrdstopts={{0xf0, 0x29, 0x37, {0xc, 0x1a, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0xfa, 0x6eaf, [0x3, 0x7, 0x40, 0x5]}}, @pad1, @padn={0x1, 0x1, [0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @generic={0x20, 0x96, "b599ffa20c86622e43937a25e93210818776a1118913b553084c2778744458fc4486ff1997a7e1b19555d177e3af574c15692f17549be2a4d7028b04ff6d06e454e0fc02c7d217c91d978ca96e4fb8e492ead5397daa7cdb308294c79f1ea70e38fc37dc9673c33297352dda25d88dfc4f42fa71c0e147397c733f2b393f83acf4e4135514e2ff068e1828a7d102ecfe9f088e3374e2"}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x11}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x1, 0x1f, 0x0, [@remote, @empty]}}}, @rthdr={{0x48, 0x29, 0x39, {0x4, 0x6, 0x2, 0x4, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x0, 0xc0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x8}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x240}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="4aaf5b8a1347e4b877bc3b488934d8bada253dcb89a050a42fbbdc2f04", 0x1d}, {&(0x7f0000000580)="ceb02a676d0771c7b1e073eb382bd2b556bd2ae5ae0a7ff2fd7b197ca88978c32b27bb27caeb0a8880f5b6b5dbc61c242d002262de468ec21fabf8a69c5938a940af76ba6bd94d91ad393a2a448758cffa91f4c28e4eac2ee4707654a828d68d70b61d93504f596b4ab2e230340c951df49b63468554f9a8f626390efb26c7819fd0ae5dbc3a97753b7cd7f311277ba94ce7d7d9f4409d8beadc7f0fd61b54e98d96d5cc1a89c244ba5eb1cef04880cce71a37a2fa5b7e98158ba74bb2fd09ee2bf0626abd7de9caa90b245cfa7cdc19cec47e9bfcc8ea74375d5e670d3513a879", 0xe1}, {&(0x7f0000000680)="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", 0x1000}], 0x3, &(0x7f00000019c0)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x11, 0xd, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x8000, [0xfffffffffffffffa, 0x3, 0xfffffffffffffff9]}}, @calipso={0x7, 0x40, {0x2, 0xe, 0xa1, 0x5, [0x1, 0xffffffff, 0xc0, 0x6, 0x0, 0x8, 0x401]}}, @ra={0x5, 0x2, 0x3}]}}}, @dstopts={{0xa0, 0x29, 0x37, {0x33, 0x10, '\x00', [@ra={0x5, 0x2, 0x80}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x4631, [0x7, 0x1000000000000000, 0x9, 0x5, 0x7dd2b580000]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8e, 0x80, [0x3, 0x20, 0x0, 0x7ff]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x2c, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9c, 0x100, [0x9e9b, 0x8, 0x4]}}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}, @pad1]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x0, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x33}, @empty, @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x800}}, @rthdr={{0xa8, 0x29, 0x39, {0x1, 0x12, 0x0, 0xeb, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x36}]}}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x6, 0xf, '\x00', [@pad1, @ra, @generic={0x47, 0x72, "a14a20269cdd741ac7f3cd8a87bc5b8a0abd5935f6adf355da92470903216ea3b33691e76eca806e2cad2d106e0f38387df915215133be7e86db0b7fc07b97730b03162669c1691118995ad3f82b00382f6ab6ad3b780f3802fa37076b587ce43725b6188063fbcee7d9a1084267d3d9d055"}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hoplimit_2292={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x360}}], 0x2, 0x44094) [ 1760.313816] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1760.314937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1760.314964] do_syscall_64+0x33/0x40 [ 1760.314985] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1760.314998] RIP: 0033:0x7fcb00d4104a [ 1760.315018] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1760.315029] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1760.316363] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1760.316376] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1760.316388] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1760.316405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1760.317699] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:21:07 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(0x0, 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x7f000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:21:07 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005400)={0x28, r3, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x28}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x4e23, 0x3ff, 0xfa47a71fcd20549c, 0x80, 0x20, 0x2c, r5, r0}, {0x400, 0x4, 0x7, 0xfffffffffffffffa, 0x4, 0x4, 0x80, 0x80000000}, {0x7, 0x100000000, 0x6, 0x400}, 0x200000, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in=@local, 0x4d3, 0x3c}, 0x2, @in=@local, 0x3505, 0x0, 0x3, 0x2, 0x1000, 0x2, 0xffffffff}}, 0xe8) [ 1760.417518] cgroup: Invalid name 08:21:07 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x3, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x0, 0x0, 0x8, 0x0, 0xb7, 0x800, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_config_ext={0x4a080d01, 0x87c}, 0x10000, 0x1, 0xe030, 0x7, 0x9, 0x3, 0x6, 0x0, 0x3f, 0x0, 0x6}, r2, 0xe, r1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005400)=ANY=[@ANYBLOB="2810ffff", @ANYRES16=r4, @ANYBLOB="95390000000000000000050000000c00018008000100", @ANYRES32=r6, @ANYBLOB="0800050000000000"], 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="8e691a8ff64a3c771ee64a32b1c482d55f126dfa0a730c7fb8ed1ec96a72676ea93326bd5d4801bc3164d7c42c9a5db994e2fb3b6e2857f6e5f1bcd3625da5374d198d7d95e1b175e7426cea7761b333ad9db3b8", 0x54}], 0x1, &(0x7f0000000200)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x16, 0x2, 0x0, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r6}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdrdstopts={{0xf0, 0x29, 0x37, {0xc, 0x1a, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0xfa, 0x6eaf, [0x3, 0x7, 0x40, 0x5]}}, @pad1, @padn={0x1, 0x1, [0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @generic={0x20, 0x96, "b599ffa20c86622e43937a25e93210818776a1118913b553084c2778744458fc4486ff1997a7e1b19555d177e3af574c15692f17549be2a4d7028b04ff6d06e454e0fc02c7d217c91d978ca96e4fb8e492ead5397daa7cdb308294c79f1ea70e38fc37dc9673c33297352dda25d88dfc4f42fa71c0e147397c733f2b393f83acf4e4135514e2ff068e1828a7d102ecfe9f088e3374e2"}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x11}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x1, 0x1f, 0x0, [@remote, @empty]}}}, @rthdr={{0x48, 0x29, 0x39, {0x4, 0x6, 0x2, 0x4, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x0, 0xc0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x8}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x240}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="4aaf5b8a1347e4b877bc3b488934d8bada253dcb89a050a42fbbdc2f04", 0x1d}, {&(0x7f0000000580)="ceb02a676d0771c7b1e073eb382bd2b556bd2ae5ae0a7ff2fd7b197ca88978c32b27bb27caeb0a8880f5b6b5dbc61c242d002262de468ec21fabf8a69c5938a940af76ba6bd94d91ad393a2a448758cffa91f4c28e4eac2ee4707654a828d68d70b61d93504f596b4ab2e230340c951df49b63468554f9a8f626390efb26c7819fd0ae5dbc3a97753b7cd7f311277ba94ce7d7d9f4409d8beadc7f0fd61b54e98d96d5cc1a89c244ba5eb1cef04880cce71a37a2fa5b7e98158ba74bb2fd09ee2bf0626abd7de9caa90b245cfa7cdc19cec47e9bfcc8ea74375d5e670d3513a879", 0xe1}, {&(0x7f0000000680)="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", 0x1000}], 0x3, &(0x7f00000019c0)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x11, 0xd, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x8000, [0xfffffffffffffffa, 0x3, 0xfffffffffffffff9]}}, @calipso={0x7, 0x40, {0x2, 0xe, 0xa1, 0x5, [0x1, 0xffffffff, 0xc0, 0x6, 0x0, 0x8, 0x401]}}, @ra={0x5, 0x2, 0x3}]}}}, @dstopts={{0xa0, 0x29, 0x37, {0x33, 0x10, '\x00', [@ra={0x5, 0x2, 0x80}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x4631, [0x7, 0x1000000000000000, 0x9, 0x5, 0x7dd2b580000]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8e, 0x80, [0x3, 0x20, 0x0, 0x7ff]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x2c, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9c, 0x100, [0x9e9b, 0x8, 0x4]}}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}, @pad1]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x0, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x33}, @empty, @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x800}}, @rthdr={{0xa8, 0x29, 0x39, {0x1, 0x12, 0x0, 0xeb, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x36}]}}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x6, 0xf, '\x00', [@pad1, @ra, @generic={0x47, 0x72, "a14a20269cdd741ac7f3cd8a87bc5b8a0abd5935f6adf355da92470903216ea3b33691e76eca806e2cad2d106e0f38387df915215133be7e86db0b7fc07b97730b03162669c1691118995ad3f82b00382f6ab6ad3b780f3802fa37076b587ce43725b6188063fbcee7d9a1084267d3d9d055"}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hoplimit_2292={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x360}}], 0x2, 0x44094) 08:21:07 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x12, 0x101, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) socket$inet_icmp(0x2, 0x2, 0x1) write$P9_RREADLINK(r1, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r1, 0x3, 0x900500, 0x30000000000) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r2, r3, 0x1000) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x928000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}], [{@seclabel}, {@uid_gt={'uid>', r2}}, {@uid_lt={'uid<', r4}}, {@fowner_gt={'fowner>', r5}}, {@fsname={'fsname', 0x3d, '(*%('}}, {@obj_type={'obj_type', 0x3d, '/#-\xf6&\xe8)(\xb3'}}, {@fsname}, {@euid_eq}]}}) 08:21:07 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 89) 08:21:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1760.552814] FAULT_INJECTION: forcing a failure. [ 1760.552814] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.554083] CPU: 0 PID: 11231 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1760.554837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1760.555723] Call Trace: [ 1760.556017] dump_stack+0x107/0x167 [ 1760.556416] should_fail.cold+0x5/0xa [ 1760.556833] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1760.557383] should_failslab+0x5/0x20 [ 1760.557799] kmem_cache_alloc_trace+0x55/0x320 [ 1760.558295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1760.558856] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1760.559386] __list_lru_init+0x44d/0x890 [ 1760.559827] alloc_super+0x8b8/0xa90 [ 1760.560236] sget_fc+0x13e/0x750 [ 1760.560606] ? set_anon_super+0xc0/0xc0 [ 1760.561043] ? shmem_put_link+0x120/0x120 [ 1760.561484] get_tree_nodev+0x24/0x1d0 [ 1760.561903] vfs_get_tree+0x8e/0x300 [ 1760.562310] path_mount+0x13be/0x20b0 [ 1760.562737] ? strncpy_from_user+0x9e/0x470 [ 1760.563197] ? finish_automount+0xa90/0xa90 [ 1760.563659] ? getname_flags.part.0+0x1dd/0x4f0 [ 1760.564166] __x64_sys_mount+0x282/0x300 [ 1760.564599] ? copy_mnt_ns+0xa00/0xa00 [ 1760.565023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1760.565611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1760.566208] do_syscall_64+0x33/0x40 [ 1760.566655] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1760.567231] RIP: 0033:0x7fcb00d4104a [ 1760.567636] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1760.569620] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1760.570449] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1760.571233] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1760.572003] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1760.572770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1760.573558] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1760.634279] cgroup: Invalid name 08:21:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x80ffffff}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:21:21 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:21 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:21:21 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 90) 08:21:21 executing program 6: r0 = inotify_init1(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)) inotify_rm_watch(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000440)='\"\xff\xff\xff\x7f\x00\x00\x00\x00\xcf]?L\ay\x17\x80\xda\x03F\xcfg)\x9d!z\xdf\xc6\x1d\xb0\xa5\xc7%]GP\xc7\xb0@%\xe4p]\xd9q\\\x1f\xa5\x89N\xac]\xa6zZ\xda\xb0\xfd\xcb\x86\xfb\xc3=X\x1c\x82\x05\xc0\x9c\x82:k\xff]\x1c\x1f\x90\xa5&\x7f|=m\xa5\xfa\xbd\xf2R\x94TG\xdcK\xd5\x06\xab)\xc7\xd0\aH\'kE\xf5UH\x88by.\xc6\xf2\xae\xfa^4,\xc5\xd1\x85\xacoV:\x11\x04\x9f\x1c\xd4e3\xacI\x83\xf0Fv\xb6&I\x16\x93\x9c\xe7(;\xd893o\x03+Q\x97\xd3r\xb4G\xd0\x040x0}) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x141000, 0x83) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x126081, &(0x7f00000000c0)={[{@cpuset_v2_mode}, {@noprefix}, {@xattr}], [{@obj_user={'obj_user', 0x3d, 'noprefix'}}]}) setresuid(0xee00, r0, 0x0) setuid(r0) setresuid(r0, r0, r0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r2, r3, 0x1000) r4 = getgid() statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r5, r6, 0x1000) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) fchown(0xffffffffffffffff, 0xffffffffffffffff, r7) r8 = syz_io_uring_complete(0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x200000, 0x72) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x81, 0x7, 0x3d, 0x6, 0x0, 0x7fff, 0x280, 0x13, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x8, 0x3ff}, 0x4200, 0x8001, 0x7, 0x8, 0x3, 0x1, 0xb5f7, 0x0, 0x3ffffffe, 0x0, 0x8}, r9, 0xffffffffffffffff, r8, 0xd6efcc4161ec9d1a) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x3, r2, r4, r5, r7, 0x18, 0x3ff}, 0x0, 0x0, 0xffffffffffffffc0, 0x7c7, 0x8, 0x3, 0x1, 0x8001, 0x5c, 0x3, 0xffffffffffffffff, r9}) setuid(r0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x101) 08:21:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f27e5f00442f00fe8000000000000000000000000000bbfe880000000000000000000000000001e420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000000000000000080065580000000025d138e0692261c1b310eb2ef2362a33f3d41a7f884260dfee900a025d92c964f4fe4f4ba3b8238afe837706303e65b93bae30dff531ef7ea022eeab00"], 0x0) 08:21:21 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1774.601031] FAULT_INJECTION: forcing a failure. [ 1774.601031] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.603383] CPU: 1 PID: 11239 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1774.604769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.606418] Call Trace: [ 1774.606955] dump_stack+0x107/0x167 [ 1774.607695] should_fail.cold+0x5/0xa [ 1774.608464] ? create_object.isra.0+0x3a/0xa20 [ 1774.609386] should_failslab+0x5/0x20 [ 1774.610153] kmem_cache_alloc+0x5b/0x310 [ 1774.610988] ? mark_held_locks+0x9e/0xe0 [ 1774.611807] create_object.isra.0+0x3a/0xa20 [ 1774.612689] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1774.613728] kmem_cache_alloc_trace+0x151/0x320 [ 1774.614665] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1774.615656] __list_lru_init+0x44d/0x890 [ 1774.616478] alloc_super+0x8b8/0xa90 [ 1774.617227] sget_fc+0x13e/0x750 [ 1774.617907] ? set_anon_super+0xc0/0xc0 [ 1774.618707] ? shmem_put_link+0x120/0x120 [ 1774.619541] get_tree_nodev+0x24/0x1d0 [ 1774.620320] vfs_get_tree+0x8e/0x300 [ 1774.621070] path_mount+0x13be/0x20b0 [ 1774.621838] ? strncpy_from_user+0x9e/0x470 [ 1774.622705] ? finish_automount+0xa90/0xa90 [ 1774.623583] ? getname_flags.part.0+0x1dd/0x4f0 [ 1774.624527] __x64_sys_mount+0x282/0x300 [ 1774.625342] ? copy_mnt_ns+0xa00/0xa00 [ 1774.626222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.627409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.628573] do_syscall_64+0x33/0x40 [ 1774.629416] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1774.630565] RIP: 0033:0x7fcb00d4104a [ 1774.631425] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.635581] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1774.637298] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1774.638919] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1774.640529] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1774.642136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1774.643753] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:21:21 executing program 6: r0 = inotify_init1(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)) inotify_rm_watch(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000440)='\"\xff\xff\xff\x7f\x00\x00\x00\x00\xcf]?L\ay\x17\x80\xda\x03F\xcfg)\x9d!z\xdf\xc6\x1d\xb0\xa5\xc7%]GP\xc7\xb0@%\xe4p]\xd9q\\\x1f\xa5\x89N\xac]\xa6zZ\xda\xb0\xfd\xcb\x86\xfb\xc3=X\x1c\x82\x05\xc0\x9c\x82:k\xff]\x1c\x1f\x90\xa5&\x7f|=m\xa5\xfa\xbd\xf2R\x94TG\xdcK\xd5\x06\xab)\xc7\xd0\aH\'kE\xf5UH\x88by.\xc6\xf2\xae\xfa^4,\xc5\xd1\x85\xacoV:\x11\x04\x9f\x1c\xd4e3\xacI\x83\xf0Fv\xb6&I\x16\x93\x9c\xe7(;\xd893o\x03+Q\x97\xd3r\xb4G\xd0\x040xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x9b000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:21:21 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:21:21 executing program 4: stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setuid(r0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000015c0), &(0x7f0000001600)=0x0, &(0x7f0000001640)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004100)=[{{&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000018c0)=""/232, 0xe8}, {&(0x7f00000019c0)=""/200, 0xc8}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002c80)=""/180, 0xb4}], 0x1, &(0x7f0000002d80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000002e80), 0x6e, &(0x7f0000003000)=[{&(0x7f0000002f00)=""/169, 0xa9}, {&(0x7f0000002fc0)=""/47, 0x2f}], 0x2}}, {{&(0x7f0000003040), 0x6e, &(0x7f00000033c0)=[{&(0x7f00000030c0)=""/133, 0x85}, {&(0x7f0000003180)=""/157, 0x9d}, {&(0x7f0000003240)=""/189, 0xbd}, {&(0x7f0000003300)=""/59, 0x3b}, {&(0x7f0000003340)=""/79, 0x4f}], 0x5, &(0x7f0000003440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000003480), 0x6e, &(0x7f0000003a40)=[{&(0x7f0000003500)}, {&(0x7f0000003540)=""/109, 0x6d}, {&(0x7f00000035c0)=""/163, 0xa3}, {&(0x7f0000003680)=""/136, 0x88}, {&(0x7f0000003740)=""/151, 0x97}, {&(0x7f0000003800)=""/100, 0x64}, {&(0x7f0000003880)=""/112, 0x70}, {&(0x7f0000003900)=""/220, 0xdc}, {&(0x7f0000003a00)=""/38, 0x26}], 0x9, &(0x7f0000003b00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003c80)=""/76, 0x4c}, {&(0x7f0000003d00)=""/35, 0x23}, {&(0x7f0000003d40)=""/40, 0x28}, {&(0x7f0000003d80)=""/73, 0x49}], 0x4, &(0x7f0000003e40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000003f00)=@abs, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003f80)=""/198, 0xc6}, {&(0x7f0000004080)=""/11, 0xb}], 0x2}}], 0x7, 0x40010003, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000640)='./file1/../file0\x00', r4, r5, 0x400) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r2, r3, 0x1000) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/180, 0xb4}, {&(0x7f00000002c0)=""/202, 0xca}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="30ffffe4ffffffff0000eeff010000ff", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/47, 0x2f}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0001000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x108}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000700)=""/9, 0x9}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f00000009c0)=""/236, 0xec}, {&(0x7f0000000ac0)=""/50, 0x32}], 0x3}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000001280)=[{&(0x7f0000000bc0)=""/195, 0xc3}, {&(0x7f0000000cc0)=""/115, 0x73}, {&(0x7f0000000d40)=""/55, 0x37}, {&(0x7f0000000d80)=""/53, 0x35}, {&(0x7f0000000dc0)=""/190, 0xbe}, {&(0x7f0000001740)=""/149, 0x95}, {&(0x7f0000000f40)=""/164, 0xa4}, {&(0x7f0000001000)=""/197, 0xc5}, {&(0x7f0000001100)=""/103, 0x67}, {&(0x7f0000001180)=""/217, 0xd9}], 0xa, &(0x7f0000001340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}], 0x5, 0x82, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x400, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_id(&(0x7f0000000e80)='./file0/file0\x00', &(0x7f0000000ec0), &(0x7f0000000f00)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r10, r11, 0x1000) r12 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000042c0)=ANY=[@ANYBLOB="027b20decbc47b17be0001000006000002000200", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB="02000a00", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r0, @ANYBLOB="02000100", @ANYRES32=r9, @ANYBLOB="02000100", @ANYRES32=r10, @ANYBLOB="040001000000000008000500", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000600", @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r12, @ANYBLOB="10000100000000002000010000000000"], 0x84, 0x2) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) fchown(0xffffffffffffffff, 0xffffffffffffffff, r13) fchownat(r8, &(0x7f0000001800)='./file1\x00', r6, r13, 0x400) 08:21:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xc5000000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:21:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xffffe000}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:21:21 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:21 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x639d1876ab868171, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f00000004c0)=""/149, 0x95}, {0x0}], 0x5, 0x2, 0x1) fallocate(r2, 0x1, 0x0, 0x3) lseek(r1, 0x0, 0x3) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x48c00, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101}, 0x2003, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x1c) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000340)=0x1485, 0x1) r5 = openat(r3, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x22003, 0x0) openat(r6, &(0x7f0000000180)='./file1\x00', 0x0, 0x40) open(&(0x7f0000000080)='./file0\x00', 0x40800, 0x84) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000000c0)) sendfile(r0, r5, 0x0, 0x100000001) [ 1774.853453] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1774.855683] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1774.856824] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1774.858668] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 1774.877739] cgroup: Invalid name 08:21:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0xffffff80}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:21:21 executing program 4: stat(&(0x7f00000000c0)='.\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="7365637576d9cc5f423a6ed147908430eb0f6a3ff69a1bdd2315278e34303e41dd9030eb877ddeeac72f24ab694d1d6fc8335cbf46caa0ed8d58ce8146ac296e02d80ff75aef8cc1"]) setuid(r0) 08:21:21 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 91) [ 1774.963689] FAULT_INJECTION: forcing a failure. [ 1774.963689] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.964991] CPU: 0 PID: 11282 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1774.965865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.966749] Call Trace: [ 1774.967041] dump_stack+0x107/0x167 [ 1774.967437] should_fail.cold+0x5/0xa [ 1774.967858] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1774.968422] should_failslab+0x5/0x20 [ 1774.968834] kmem_cache_alloc_trace+0x55/0x320 [ 1774.969329] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1774.969880] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1774.970415] __list_lru_init+0x44d/0x890 [ 1774.970877] alloc_super+0x8b8/0xa90 [ 1774.971276] sget_fc+0x13e/0x750 [ 1774.971655] ? set_anon_super+0xc0/0xc0 [ 1774.972096] ? shmem_put_link+0x120/0x120 [ 1774.972542] get_tree_nodev+0x24/0x1d0 [ 1774.972961] vfs_get_tree+0x8e/0x300 [ 1774.973365] path_mount+0x13be/0x20b0 [ 1774.973794] ? strncpy_from_user+0x9e/0x470 [ 1774.974263] ? finish_automount+0xa90/0xa90 [ 1774.974739] ? getname_flags.part.0+0x1dd/0x4f0 [ 1774.975277] __x64_sys_mount+0x282/0x300 [ 1774.975722] ? copy_mnt_ns+0xa00/0xa00 [ 1774.976155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.976732] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.977302] do_syscall_64+0x33/0x40 [ 1774.977709] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1774.978280] RIP: 0033:0x7fcb00d4104a [ 1774.978687] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.980747] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1774.981585] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1774.982338] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1774.983165] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1774.983957] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1774.984779] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1788.712719] FAULT_INJECTION: forcing a failure. [ 1788.712719] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.714079] CPU: 0 PID: 11295 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1788.714882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1788.715853] Call Trace: [ 1788.716175] dump_stack+0x107/0x167 [ 1788.716603] should_fail.cold+0x5/0xa [ 1788.717058] ? create_object.isra.0+0x3a/0xa20 [ 1788.717594] should_failslab+0x5/0x20 [ 1788.718040] kmem_cache_alloc+0x5b/0x310 [ 1788.718517] ? mark_held_locks+0x9e/0xe0 [ 1788.719022] create_object.isra.0+0x3a/0xa20 [ 1788.719535] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1788.720127] kmem_cache_alloc_trace+0x151/0x320 [ 1788.720671] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1788.721244] __list_lru_init+0x44d/0x890 [ 1788.721717] alloc_super+0x8b8/0xa90 [ 1788.722162] sget_fc+0x13e/0x750 [ 1788.722573] ? set_anon_super+0xc0/0xc0 [ 1788.723073] ? shmem_put_link+0x120/0x120 [ 1788.723576] get_tree_nodev+0x24/0x1d0 [ 1788.724319] vfs_get_tree+0x8e/0x300 [ 1788.724770] path_mount+0x13be/0x20b0 [ 1788.725249] ? strncpy_from_user+0x9e/0x470 [ 1788.725772] ? finish_automount+0xa90/0xa90 [ 1788.726302] ? getname_flags.part.0+0x1dd/0x4f0 [ 1788.726874] __x64_sys_mount+0x282/0x300 [ 1788.727391] ? copy_mnt_ns+0xa00/0xa00 [ 1788.727866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1788.728501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1788.729138] do_syscall_64+0x33/0x40 [ 1788.729594] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1788.730231] RIP: 0033:0x7fcb00d4104a [ 1788.730686] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1788.732951] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1788.733885] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1788.734756] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1788.735649] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1788.736524] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1788.737400] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:21:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:21:35 executing program 5: getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="00fe26f08c717172e91d11fcf1d03e37d0a9cdc5246497e6e9be2a52b04fa488404cabd15439f170e429dd5057d7d5db566fc9e481b1128bce328ef44be2ac02ea82a613a077c2508b07638c2da855795a8523c7986a4979fc9300627bae481812a27b8f03511a4dfbfc9680cf5c993b89f8efb3de820ef8e9bd306955000037976789cf995521a65b9192b2dde0498242f3042690688050b620e188a301b717bf204eb12a7fcd85332358a4e595f838fbe8e29ca7b0315e9f9e74ba8f08031384702d819754"], 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000001b00)=ANY=[@ANYBLOB="84000000f800000000000000fb810500fe59ff82cae86c20d1e98e551895c8862143a60098b4e70be9884d467f1a9425bfcc06d31b6a90704d16295d9c10a9de50482fc7fa46e7a0055e021bf0c92f194fd393345254a6a48786a24f07568d97bc9a87f474a01acc8acff1f7911e2245fb286a95107cc76a6b676a3ba8b95efcfb886ba6bd0176da3fa189b7466d9afeb7cecde386e8d26806d17b0fff"], &(0x7f0000000500), 0x1400) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000280)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c1300003d00000129bd7000fddbdf251700000008008000", @ANYRES32=0x0, @ANYBLOB="0abf908699ad04b2ac7dbefbef221fa0eb8ecffe28b660566e469d180f1b7c0f1491f68b2f9495acd5e06808003b00", @ANYRES32=r3, @ANYBLOB="da121280e8e00823b6b6ec7b1edbd3819eec6d7764740989831418f60c91f714579648b809664875b032ea763f011cd1dea4bd94fb73a1edf4bd1689a42f0ed89525b12422f8ec0888f689e583e3aca164dd2a3c83277b8c85594126681680d4ac51027337140891e9651b53a3a1eccaefb48eeaf5fb53e47d1fbd8396c7248bdc174e71c56720265e8f7234e8f8a2fcbaa0e3df7389178906dc1800d799c173dc28797f69d6cc2c0762fd7b89b37991cad701150cc78a3182d2b4e58bf717d44fe0712416187c1e2f622d738278aeca70cc8333bc483449920621ac2b259cfe9e90096a1d6c10bf2487de7a13b74c9defdda80d0a5c73e63330c5031cd4ff08005a00ac1414aae4a9224824f1209e7e9e07d0430106be04035fc99f00b5de4dc805c9253d24e4e758f17d0f6f26b4ef1395076fc8381653a6742b3d8efec7b1df1c67605a6b1f5bd628c6517fb8b1738e27d886c2fdf7dc91fa7512abd9124c4cafbf03555fee81d190dd035e4014bb1bbfbea7c63756d831af3fe14968a3fa7842b781ce75895a9cc2ef289950dc14fb0d5179f869b93c9fc87fb59f43587108e3918ceeabc32ed8c8051d5e29ccb0931e4c2e1d3fccb4a0fab0e70b87650e5c9fb8ef3da2e5e4dc67e4b9915f79f7e3138abaccf8950ea8f5eac266ccd0aa91e0bc3a93c6b4720bceb8a5bdd28d049b1c4ee37afed1f3e5d88b09b2cc9a37e37281dbcfef99383cc5814291624827b818ce6610f3c59f5739821729ad339d7d19e26e4e5136a9b6aec458974e7c9e95e4e12428286a434f060c08e7094adfa0957f0de2214871b4e75d46e50ea02bf5f06e2911965136c2395fc0d429441353a49dd1787a7e68ed761fe29ccf61c8b60fe75702d867d8950dc5888a6b4eaa35e6c85428b6d56dd3dcbd0a90ef35584025fd8362efc173134b913ce59df19737fddb155aa07df2bb39c6bee4f76224b7f4052b98da2acb785572325e9af939a0d2be2b97a455899adc06da498b7b5c3c8504c771c1f3b6557ef97fa0557286bfa2c59b91c948d8c936efe35ab06df9bc122c88284f3347370e939fba0cfd1ac96c2d7863bebcdaa0167a57cc65df481d6f6998af1fcf0b5d53ddfe61c1c5769b3a907d3081c048d21481b761bbb4554aa83e7e6dece24014d41ad417bbd55b19a99b2ec11705125059627fee1b3a0fe2bd6a7e84fbbd2264327b97d9ac7049b4bee853d334de7627e3d7de5fdcfa88155a63a2d4d8441d69a3556daba2988605dbf3ceaff4557748bcc2b49b1f73be726efd1cfa9de213fbd2a46fe9ad5696b2ac44595a8bb613f2cbfc04ca0d75785934f4b7a655168f9e944c130b94b6657916e386fd29b82d2ab8692d4d1d59a100d729965d46e336d3038001538b43fd2ab10f5f6334b01c4fa55b0e7bada7eb7e285b023a5948fe770d8e60ec3d42f9e868d55a61f05451a661da4333d8592c370938e2185e6ea3e5277b88b46b1ece85c0554e741603889dbcccd5e1744c7f4294cf9f25256b82af9ee42b484277efe8115db18a3ba488fde7611f703309b9d6187a8f139aa30fc51df3458b81521d8164983a6d1e33fae7e6750dfa22d328618325f94698d336afaafa018c937a77a1f8c8b1f30b82facb2dfbecbc28412e6be6ff1cf71937a57d54c4a9bee5ff1453f17bdf3d420e96fa59198a7d89d84c8621d556efabc1794c528cd12e0f21c91cf7056d3224bd0305be77e9e26c5c6d75616de55f64014d3bef41f3999cc88f87c92b514d33b3b712910d11f089e484232735714f25a8c367e0e240ab6d44dee9593db6a2b84c04373ecc73574e61faeeed946e358bbccda6189339de2d11f9fff535cf866de70980ec02c4142fc75a538987c60f68cc5906963c6c2a53fa0c21082f61686efe35b89e823edcb63b340114998501be83dc9691871c2c6e4dd3250390dd4ed07543253f74c0aa6ac9708cebfc48593d29914dc5e4d6cfbf986e62f200557b06e0a64a31625bbc40e8c420e077359ed64c96cee50213a892835bd70714c133fd2b88ffdfd3b3c4f8f5e1d1be7000dbfa6573c976f1f236eed38c0a6f75a88acd22e95c2430ecae289736238099da45774226a75b2b228b7bf36248692f1ddab5dc4909fda4dd130c5b3afd84e526ee2f46af8ab701f7be471f973068808ffd05399b8f64e5ad4d21e59e13dd11e40bb947eb998451d7070eb4db11d1739197edb8e6850f45e15737ce12d1288c92166aa3bb0d01ed5650582df20c63e8ebfbbf841cfe62a5b71ad13f79347d0a6abbb16c764247ff6e7b1faf239cd76ffb76560f293e71d5bbf4859a85dc5de6a83cbd745b6ba0c8282bc9394e30e139705e5dc5c74d1a9ac54b1b3edb023291257be7898f452f5dab9e342fd0d57d920171425e4a7e30057247b24b59735296285bd60cf0a5f2245f341716764669f8de1f0ef44d593e83eb140916350f2f69bb405e04d2945725bc7f289f392fec318de6c7710d54a247e74acda95e4847852736115a599ecea662c21220ae2c79642269fdc64009a3417f819794a5b905be6f3bbf7f85ed1c3613bc6eeb0296194a4409c8bc4da9106d3444647b293c7fb7d2f6993bf4d5c703de7e1fc655dbfc7ad9c5ca21b64d1a12dedf34dc501a41d53811a383ebfde1a251245eb028d37233ad2208b5a4b40eba57bddd1a9e113045a5863223b641d1aab3e8067e9a7a122d6c1624c6f5476e65dd58f3248dd8b7a849d82bb6cc5d8a86c519462860e33293f9937a1c422ec76d3a61d96831e56f0293c0f41ff5db064c31e09485705d032fe4f8d11a313019b3cfcafe87a36242b1511b499f42123d1452abad7879271085e4c221044f04f6b3e1fd68ecbf19a621d064325e40f356b5ef79ce2881655d09b8246299593972816b5bb8f4f16c9d7a3f1dce708fb7fa96776d54239e152eae483d5da8dba91e08e43c53a50e8230f48fbb4bef63a8d433f9af37c6c4936c9c9187d2e345f17aa416ebd95ac4dac02369090c79ab6e4e11d126ffcc0db89ad0d23e4a3e1350e28ef0730afdc306e4573e666af34f2806e6c26571b82b6f84c2dd923f18a9c687b302ebb6184fc207a543d6badfd3f635c4b53585e630f0c1a3a4095d48b52e0341a09759bf5dddee9c4eab00f05f8a2d36e95911fd0508556a78e9d01e5d66b0c141b67b1a62ce43ac6ca16d2c86d2f842de98034db8859cb310aee110ed5cad02606eea897aabb83501cb4cb1497e61a151162d39c23daba89213c37ddd71f8c9fca1c5289bd3fc86648f30533f4c5ed1b683722f3a5b657b994e111cc9cd3ae6aa81838933ce7eeaeea6422f3c33cfdb880ddc8cd5fbb4bdda572d594406f0bc7ec659950f0c1893d2a3e22c811398dd67280b88873d3fe28c66cf4d834eafcd9368baa58512770a0b91bdd02c2f86f64a5f5e0c94dd5028600723b79c5f963a2a27e19bf4aa2757b876ce33ee70c9663121b10cf34c3de16b0df8702dee0914a4ea12d60071c5f9b4478c484596d15466ff478192d0109bbf5661a4a56e4485f3c673af0e364dfaf0aa0d865f2f1164a94734159474fbb0c390686274f437d69ad2bd9026702de68c3c65ad6e78e3721ca6974a6dac3fb2c97be88fdf11ec9b032b7f5e1e313f3f688732b858e3be2aa9912735869f03e17f36a9628358ff2e9cb40a15917d0db796e2ee542e07e28d9158f9fcb1435462ad10ab913333e6b1d8f1fa9ca67b1c84220db56d4d9abbdf364deedafb6d15d1b7353c3b66f49403391f1cfdf524b77fff5bd75e047de4273ae78c59bab4c0bf486939997a4a386b329d056d8ec4d1e0e3acf6866071938fe961eea62e6046b9df8b5913246915df510b7c75e7b46fa7ea7787a3de7b00da3ba4b61f8e9b429737fe869f992724c1c770fd0b8877274e012949b0cdab5407eb657f9f1f93f82a8d2fc3b64ce7e2134f606084d89c193f877d6f3c59a9b9ed0b20b8ed80e713d2efe9841adb71ba84097565f4275b498d5ec96b48190d47d6f514288466749bb82839a5901f09a4ffe025ab8904ca4c6f83ec6230347c9bddc79f02c39a2e301e6577f3dcb1dc0a42fc7be174a86a79552ef9c1f41095d538c7062abcd95124af97e58a93df4664b881fb758aadf7f47a60e8887b87c4c64b86ab4e56595a9f51cd1177a12c3f648fa8be71bf28399eaf668a9876cc4925c0780f2ada684282ac3810063b8d502d115543f7feb247f4195cc1b7db26bd467c075d9303b32697fc0dbac40bf28e499342f5493c3206a64e28f5ceb3cf1f1e6e21257d91e8d99f885624e1e61063e57f2fcd00744947ebb1a15b62b227154d1435016d53d0167d844d7fed9c2b62be5ed81ef6b85f46e1c7197c32c9b0adc6208350f7f8c438f608e4bf6e10b65e923a9d69c437bbb46e8b6336bf05bf306d4e47153b40fd007a0fffeb4fd6256c5236b084302833c814bd5bcb256154944e26e993c64e20e71c43d01789a006fc31d863466548ed19908d37c99de3769e700e49a830fb2ab0d973b00a4a0cd487f262ff91c0e0d367113634bc66a6a80fcdf5e8a1ba22037c9b4bbf111cccaab3fafeb172abd05685c6a4b9ee7e53d64830635e441df36cc818ab4f99fd1ecfbbc17f9b235a88276ba69658e518c889d7b5837bce4f04f0f3c6eeb7628e48fd078a510c26920b56bab983344dab4257a3f3cee11d732fd59000cb3cfb6f871b3cf59f20b176540840bd68fcd523cc182b3df9028f3d8553a1dd19c6a01cccf1d56e8d91815c7f6feb87f8322e703cbb0b667d9f1c09e3cbb3dffcbb27ec0ceda244bdafa79913dc173f028c6f28a880df595e566871b110469a03a7dfe501d30e18579b4f88eeaa6a757b0d3b5fa2ae4dd327ec8ccbccbd89d1b9c6dd59bdec1b9d5033f43235c5761f5c60133b7f897065b90202555b0e048577ae27981782b252c971ca15638c7dd1ca4581062c627fecc204dc2e84227b355d8a44815e993a00b25ed4cfcbeb60427994d81485e29506482aea7ab3e3c6bc74a8cf864508ed675d42ec8e773d8ea22c7950d95b9223c803603700fb4dd866f2943b88389284b54911d81c2676c9aa5c8df4d6954561b9fcfcb3b42a7b9f3ccb22c0e0155a61bf7fef4ccb6f8bf9ef060f9553ebeb0f4490b30f1345580f73dd1c141480a0a08a954aa091532bb66581581ed914223ab77abe1cfb6a295a9c8d827a0b530b3f3d327c4d20d1f7f10eb47fdaa996ae992f9ca893474d26a073593a7b4c160041887091b1c486802c1535ef86e219ee596ae5666e35303540861e48afe960ebdca6153e322a882422c2e042d388edabd1d93b5d3718364aa9c0a1e2ce220c2993574f0869251c9eb3086c272827f7fc09484a5b8fd0f97bc4d3f383dee5e90cd5f806daebca4e1bf4fcf0300f762f54d5e34ffefd0f92f3d9da623e961c830f8c227a760b075780147c1fe0138e5e81c3e8148d2fcc88ee8f75f9f58a12a65106e15420563cdb95213694b03b8969ed0fe53a4e3e51bc6251e8a7699dde51f2766151b6461a69ff1292a82ac7566c24936f6bb3becf66e32b81a17cc7a6f45117dad72b347103abe7c29862a546247e483840c1bad37473d40bd4559ca69a6b1d26c11d0412b638ae98a688aab8072166bf278d9a958f3a6028d05cdc92cfbc3216198d008212477442128d70586a3f453bfd7dafe33acfbf2669c028d45bfcc428758ae625c2a0bf24cddd4171d05afcba44dcd436e2a56f6ccf4980e513139a5a7b3f8dc496709b213306be5e6e59728ffa092f46d852a06caa17c926f9e2a69f541913609c0fc4a420e445c27e03fb4e2756a4902ad2b571076361712898817547e95dfab7e8310809d10a10f53c584e0c3f9b0a1fa15196df6437809157546d2727dcb68f4b057e62f742f97075bb7ac188b7416841650427e3b200e9f1dadc8144cfe4462f8e880f96535deb560a14d68bdf5eeda2e7b2e55943bba1853ec8288d8c2a5f6e62db1a6aa88792aaafaddad031496bc6ac8bb5ba9d2b58a8acfc0ac71eedc0469fe180ef35f1b40a73acd436896aac6ce402c48d99c363a97d77b84a9e81db2cde73a64369be82f42b60d008d1334c6314185f4929587111e26d4cf5a05ab60ebaa45c552c9ad36d7d7fc1ea74bdf9d6f6ba69e3f01f4a4bff87cd2d33b86bfb1481ae7da0b6d2cabbe2fc8c324aaa46d06586ee0652eb125b4b57907bc12eddda22982f8a596e32e0ccd0d6b957767cbb248ce8b6f41dcb345f29f709e925149e42c6eedb67d5663aa46b25366fa9682568bdf813c609fc9735f0cd900ec27cbe85e53a721081acd9ef69b11157d3d5a4887e99a9faaff2385f352dc8bbf40fd97c6320e2ada8b16b781666df488db0560944b848fa7a080c006320eb9a497d5855b67d110950eb1818afc89784d1ebc8415e48952a42cce44bd809a78c15932f7c656ad4be42ace2bd38721e12f4b038b2c842e9042a9f1bed7ed51a886cfafcbaa10a023179d8d009fae68a2f940e0043002f6465762f766373610000000948d93b5a5e8f86fd047d116e872a227e42d652fcb296f331f5eb696b9e42c85fd7ace8cc9f272bc65d679e4aaa6c19149e6c088c5c0b5d9a4fc8129def2a4b46254d8f5b2f68583ee23cc68049598f14d5497c058fbd7f85d37f6e0d454c02ba92ca044bbe8b955ebae177eec5e946ac9aa9032120d8c7abc83f04dead5a88aa9e360741449ed038e85d45a5b8e19aa17305fd1e929ff31c6e93922fb80187b1b86f3583ce891b6153dcaf828039697dfafb2ac79a5d7eaddeb46074d7d8b1a581804de0bbd6b868952f000000"], 0x132c}, 0x1, 0x0, 0x0, 0x44}, 0x4044805) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r2, &(0x7f0000000000), 0x5ac, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) dup2(0xffffffffffffffff, r5) 08:21:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:21:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:35 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 92) 08:21:35 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x4, 0x9}, {0x7, 0x9}]}, 0x14, 0x1) setuid(r0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, r1, 0x100) 08:21:35 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000efdd79b7c3654313ac0cec53e79dcbaf010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000def4655fdef4655fdef4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000050000000020000000400000052", 0x49, 0x1c00}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="e8863c95e97389adba6740c8d10ea77d7ca507d465f7ba2694471a2c1e8838a3305b891e512a7624c4c8f3e9dbe75e5bf33470ab733c67ea736f7919201f73189eebd859c56130840dbf38fb5f254ef7ab669614265dd31a7e8fbfd103aedbcb1d6f23dd2bf60a983087dd96d7dd00"/126]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x24) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="8f464ff109b25de40806072717020fd27d637c3e7f69035974b9bd2c2b9e80d395a3727d2877e4ed12dc6ec300e8094cf008f28e6e6aa3dc8b45865892dfe1edc3b97f66867e6137f0cdcbe9ad72c0bf837fb3718e7fdfb6539baf9e9e5726bd88d0ef32b84dc0e6fa44c114baa3da1ce60ca8696da0bd034a932bf8e934ddea294a0a281caa040731e299eb11348ecbe7a905c782d84f0398cc3b51f4d12109b65a2aa82da987fdc266fb12f64ebd9795e3a559f2dd97432dc3faf5f817a6841c73af3f5a008a9f9ba085e1603457e5d61e84", 0xd3, 0x1000}], 0x82802, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}], [{@audit}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x18}}]}) 08:21:35 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1788.759416] EXT4-fs (loop6): Unrecognized mount option "è†<•és‰­ºg@Èѧ}|¥Ôe÷º&”G" or missing value [ 1788.817408] EXT4-fs (loop6): Unrecognized mount option "è†<•és‰­ºg@Èѧ}|¥Ôe÷º&”G" or missing value [ 1788.889620] cgroup: Unknown subsys name 'hugetlb' 08:21:51 executing program 6: r0 = open(&(0x7f0000000140)='./file1/file0\x00', 0x100, 0x38) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r1, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r1, 0x3, 0x900500, 0x30000000000) statx(0xffffffffffffffff, 0x0, 0x1800, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r0}}, './file1\x00'}) utimensat(r4, &(0x7f0000000300)='./file1/file0\x00', &(0x7f0000000340)={{0x0, 0x2710}, {0x77359400}}, 0x100) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r6, 0x407, 0x42800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0, @ANYBLOB=',dfltgid=', @ANYRESHEX=r2, @ANYBLOB="6c6f6f73652c76657273696f6e3d3970323030302e752c64666c746769643da43b65785a38893dbe75697bf8a80efac11fba43dec3229fea067d6f", @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,fowner=', @ANYRESDEC=r3, @ANYRESOCT=r6]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r5, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x1}, 0x1}, 0xa89) 08:21:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x2) syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x410200) r1 = fork() perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x40080, 0x0, 0x0, 0x0, 0x10}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0xa, 0x80, 0x81, 0xfa, 0x8, 0x0, 0x0, 0x6, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x109, 0xff, 0x4, 0x6, 0xc360, 0xfffffff7, 0xfffc, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xe, r2, 0x1) 08:21:51 executing program 5: r0 = getpid() r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x60002, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x6, 0x36, 0x2, 0x1, 0x0, 0x621b, 0x1000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x4, @perf_config_ext={0x7e1800000000000}, 0x1, 0x9, 0x81, 0x6, 0xffffffff80000001, 0x7fffffff, 0x3f, 0x0, 0x0, 0x0, 0x4}, r0, 0x6, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c20000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38323232353731363100"/192, 0xc0}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005500000000000000", 0x58, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000004040080000000000008000500a076897a69e30500000af3010004000000000000000000000001", 0x40, 0x4400}, {&(0x7f0000012700)="20000000c4caafbcc4caafbc00000000d4f4655f00"/32, 0x20, 0x4480}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4800}, {&(0x7f0000012900)="20000000000000008ecb000000000000d4f4655f00"/32, 0x20, 0x4880}, {&(0x7f0000012a00)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4c00}, {&(0x7f0000012b00)="20000000000000000000000000000000d4f4655f00"/32, 0x20, 0x4c80}, {&(0x7f0000012c00)="c041000000300000d4f4655fd4f4655fd4f4655f00000000000002008000000000000800000000000af301000400000000000000000000000300000020000000", 0x40, 0x6800}, {&(0x7f0000012d00)="20000000000000000000000000000000d4f4655f000000000000000000000000000002ea00"/64, 0x40, 0x6880}, {&(0x7f0000012e00)="ed4100003c000000d5f4655fd5f4655fd5f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000005aec127300000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x6c00}, {&(0x7f0000012f00)="ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000392c7b8c00000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000", 0xa0, 0x7000}, {&(0x7f0000013000)="ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3832323235373136312f66696c65302f66696c653000000000000000000000000000000000000000000000d8199c5e00000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000", 0xa0, 0x7400}, {&(0x7f0000013100)="ed8100000a000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ba95a2c00000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x7800}, {&(0x7f0000013200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800010000000af301000400000000000000000000000300000060000000020000000100000062000000020000000180000062000000000000000000000000000000df980a7e00000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000", 0xc0, 0x7be0}, {&(0x7f0000013300)="ed81000064000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c852ae89800000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x8000}, {&(0x7f0000013400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x83c0}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x1ffff}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20}, {&(0x7f00000005c0)="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af501a6a0c3cfec74ceab7040000000000000000f91cad00"/111, 0x60, 0x31400}, {&(0x7f00000001c0)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000000180)="c19a2e3d2e0a3eabb3be6e20a4190f03000000000b0000000000000000af779795c740d330d933db71dbef7dfa00"/63, 0x3f, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000400"/96, 0x60, 0x80000000041400}, {&(0x7f0000014500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x50000}], 0x0, &(0x7f0000000140)={[{@norecovery}, {@nobh}, {@mblk_io_submit}]}) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x28, 0x8, 0x2, 0x1, 0x0, 0x2885, 0x2080, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000640), 0x6}, 0x4204, 0x4, 0x2, 0x6, 0x1f62, 0xfff, 0x4, 0x0, 0x54, 0x0, 0x1}, r0, 0x1, 0xffffffffffffffff, 0x10) 08:21:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}], 0x5, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:51 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 93) 08:21:51 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:21:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x2}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1804.807522] FAULT_INJECTION: forcing a failure. [ 1804.807522] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.809876] CPU: 0 PID: 11334 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1804.811308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1804.812999] Call Trace: [ 1804.813536] dump_stack+0x107/0x167 [ 1804.814298] should_fail.cold+0x5/0xa [ 1804.815088] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1804.816128] should_failslab+0x5/0x20 [ 1804.816913] kmem_cache_alloc_trace+0x55/0x320 [ 1804.817853] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1804.818918] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1804.819963] __list_lru_init+0x44d/0x890 [ 1804.820815] alloc_super+0x8b8/0xa90 [ 1804.821576] sget_fc+0x13e/0x750 [ 1804.822277] ? set_anon_super+0xc0/0xc0 [ 1804.823095] ? shmem_put_link+0x120/0x120 [ 1804.823945] get_tree_nodev+0x24/0x1d0 [ 1804.824743] vfs_get_tree+0x8e/0x300 [ 1804.825502] path_mount+0x13be/0x20b0 [ 1804.826290] ? strncpy_from_user+0x9e/0x470 [ 1804.827177] ? finish_automount+0xa90/0xa90 [ 1804.828063] ? getname_flags.part.0+0x1dd/0x4f0 [ 1804.829168] __x64_sys_mount+0x282/0x300 [ 1804.830019] ? copy_mnt_ns+0xa00/0xa00 [ 1804.830824] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1804.831908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1804.832967] do_syscall_64+0x33/0x40 [ 1804.833731] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1804.834774] RIP: 0033:0x7fcb00d4104a [ 1804.835545] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1804.839319] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1804.840899] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1804.842369] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1804.843861] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1804.845324] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1804.846803] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:21:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000000340)=""/62, 0x3e}, {&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000440)=""/51, 0x33}, {&(0x7f0000000480)=""/93, 0x60}], 0x9, &(0x7f00000005c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/19, 0x13}, {&(0x7f0000000780)=""/57, 0x39}, {&(0x7f00000007c0)=""/70, 0x46}], 0x5, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000002240)=[{&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f0000000b40)=""/174, 0xae}, {&(0x7f0000000c00)=""/147, 0x93}, {&(0x7f0000000cc0)=""/250, 0xfa}, {&(0x7f0000000dc0)=""/49, 0x31}, {&(0x7f0000000e00)=""/137, 0x89}, {&(0x7f0000002180)=""/166}, {&(0x7f00000013c0)=""/67}], 0x6, &(0x7f0000000f40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001000)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001080)=""/76, 0x4c}, {&(0x7f0000001100)=""/82, 0x52}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/34, 0x22}, {&(0x7f00000012c0)=""/96, 0x60}, {&(0x7f0000001340)=""/116, 0x74}, {&(0x7f0000002100)=""/113, 0x71}, {&(0x7f0000001440)=""/192, 0xc0}], 0x8, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000001680), 0x6e, &(0x7f0000001780)=[{&(0x7f0000001700)=""/77, 0x4d}], 0x1}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001840)=""/61, 0x3d}], 0x1, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001a00)=""/69, 0x45}, {&(0x7f0000001a80)=""/165, 0xa5}, {&(0x7f0000001b40)=""/225, 0xe1}], 0x3, &(0x7f0000001c80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001e00)=""/158, 0x9e}, {&(0x7f0000001ec0)=""/164, 0xa4}, {&(0x7f0000001d40)=""/12, 0xc}], 0x3, &(0x7f0000001fc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000002340)=@abs, 0x6e, &(0x7f0000003400)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/58, 0x3a}], 0x2, &(0x7f0000003440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003500)=""/192, 0xc0}, {&(0x7f00000035c0)=""/226, 0xe2}, {&(0x7f00000036c0)=""/83, 0x53}], 0x3, &(0x7f0000003780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}], 0xa, 0x2060, &(0x7f0000002300)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000c, 0x1010, r2, 0x8000000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 1804.868319] audit: type=1400 audit(1699345311.941:116): avc: denied { map } for pid=11320 comm="syz-executor.6" path="pipe:[35906]" dev="pipefs" ino=35906 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 08:21:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x7}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1804.989951] cgroup: Unknown subsys name 'hugetlb' 08:21:52 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_snmp6\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x260, 0x2e, 0x400, 0x70bd26, 0x25dfdbfe, {0xc}, [@typed={0x4, 0x54}, @generic="b4eba8308aa1fc50a65f771a310758609f68269e870413bb7d073a429594bafed2552204e81c69f388c9f83196c32c98a59dbb722dd2d05bbb9caccf0fe99c2b2facaf702fa7262af61abe579a93ab22ea4f6113450fd482c72a4e93a3efc375be4c525caeac3e3d94b42137f34070356f088fe9390277d8e763b509e94a64823fd24e8b23b465a5f03dbbc653f225046285cc46df67a4e8737a68ebca082aa5f4de8d0cc3100482266d9d19e8a9f5a033c80177c83bd9e107fbeaf4448c4179d1c1240b9461e2feff", @typed={0x8, 0x68, 0x0, 0x0, @u32=0x47d}, @typed={0x8, 0x51, 0x0, 0x0, @u32=0xa6a}, @nested={0xbc, 0x90, 0x0, 0x1, [@generic="53e7668f3105bc7a0039911403066e08257eb764083ad2c299042b1ea7964bc786a875e4902096ca1a76d92f253b82c5ee4468c475ca65f9a24e873bad37c22b4b1a2c2823eae31a87c6da104c90b69a7addf0617cf473d3209dd374dcd7084b607cbcf4e095d3bf09337b3450122d6230c2d968d8fa757d8f91b542b22c2ddae87cdd27c252eb054417934c058048bbb2548396efd1f84b4e04863b", @typed={0xd, 0x1e, 0x0, 0x0, @str='/dev/sr0\x00'}, @typed={0xc, 0x29, 0x0, 0x0, @u64=0xff5}]}, @nested={0xad, 0x65, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @uid}, @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x13, 0x0, 0x0, @pid}, @typed={0xd, 0x47, 0x0, 0x0, @str='/dev/sr0\x00'}, @generic="bb22d229c02196f81da77fe87b9d97f398b96c6579547d78f611aeb12f4b7ea9167485e87f12cfe6b59df4180f99dd218a89af8f69bcd1eb19d08d5513739731a793082d39472dd21920f8c0", @generic="4ef21fd02a0687edf201264c61b56e2fbe972b6a821423d8ef06e342ea175fab612eafe1880adf0413"]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext, 0x10040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext, 0x10040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000040)={{0x2fc6, 0x8000}, {0x0, 0x2}, 0x5, 0x1}) r5 = dup2(r4, r3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1a000, 0x20) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r5, &(0x7f0000000140)=0x9, r7, &(0x7f00000000c0)=0x9, 0x1ff, 0x0) sendfile(r0, r6, 0x0, 0x20d315) 08:21:52 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}], 0x5, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:52 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 94) 08:21:52 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:21:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x8}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:21:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) [ 1805.173775] FAULT_INJECTION: forcing a failure. [ 1805.173775] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.176467] CPU: 1 PID: 11359 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1805.177862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1805.179554] Call Trace: [ 1805.180091] dump_stack+0x107/0x167 [ 1805.180842] should_fail.cold+0x5/0xa [ 1805.181621] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1805.182645] should_failslab+0x5/0x20 [ 1805.183418] kmem_cache_alloc_trace+0x55/0x320 [ 1805.184351] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1805.184376] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1805.184400] __list_lru_init+0x44d/0x890 [ 1805.184424] alloc_super+0x8b8/0xa90 [ 1805.184446] sget_fc+0x13e/0x750 [ 1805.184463] ? set_anon_super+0xc0/0xc0 [ 1805.184486] ? shmem_put_link+0x120/0x120 [ 1805.184501] get_tree_nodev+0x24/0x1d0 [ 1805.184520] vfs_get_tree+0x8e/0x300 [ 1805.184542] path_mount+0x13be/0x20b0 [ 1805.184566] ? strncpy_from_user+0x9e/0x470 [ 1805.184589] ? finish_automount+0xa90/0xa90 [ 1805.184608] ? getname_flags.part.0+0x1dd/0x4f0 [ 1805.184640] __x64_sys_mount+0x282/0x300 [ 1805.184661] ? copy_mnt_ns+0xa00/0xa00 [ 1805.184685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1805.184705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1805.184729] do_syscall_64+0x33/0x40 [ 1805.184751] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1805.184764] RIP: 0033:0x7fcb00d4104a [ 1805.184783] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1805.184793] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1805.184814] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1805.184825] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1805.184836] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1805.184847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1805.184857] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1805.283619] cgroup: Unknown subsys name 'hugetlb' 08:22:05 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x4) r3 = dup2(r2, r1) inotify_init() r4 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10041, 0x14) openat(0xffffffffffffffff, 0x0, 0x4440, 0x189) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r5, 0x2, &(0x7f0000000180)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0xa, 0x3, r4, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r0}]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x20000, 0x10000, 0x16}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "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", "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"}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x7, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r6, r3, 0x0, 0x7ffffff9) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x5, 0x80, 0x3, 0x4, 0x0, 0x80000000000, 0x10, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x832, 0x1, @perf_config_ext={0x4, 0x2a}, 0x18082, 0x1000, 0x1, 0x8, 0x10000, 0x8, 0x7fff, 0x0, 0xfffffffe, 0x0, 0x53}, 0x0, 0x0, r3, 0x1) 08:22:05 executing program 5: r0 = gettid() setpriority(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000100001000600f6000000000000000000050000000000001715000080487fec864b245e0f3f9be149f83265549b000000"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/66, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x3}, 0x18fd0, 0x1f, 0xfffffffb, 0x1, 0x3, 0xfffffffe, 0x7f, 0x0, 0x0, 0x0, 0x847}, 0x0, 0x6, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = mq_open(&(0x7f00000000c0)='.#.O\'%\'/[%$-^]\x00', 0x80, 0x101, &(0x7f0000000100)={0x2, 0x2, 0xbe, 0x9}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) unshare(0x0) 08:22:05 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:05 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 95) 08:22:05 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}], 0x5, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:05 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}]}) 08:22:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x9}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:22:05 executing program 6: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0xfffffffffffffffd) ftruncate(r0, 0x1000003) r2 = getpgrp(0x0) dup2(r0, r1) syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0037264c1e9ac9829f0010", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000001c0)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000340)=0xffffffffffffffff) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="f2959ce875a351031900003f86113962c3000000"], 0x14}}, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0xde, 0x0, 0x1, 0x7fff, r2}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x0, 0x0, 0x0, 0x9, 0x841}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e0466696c65164acba9ee82e77d7fc5eb55ba1457000000ce4764aced7cd561d852d57fe91ac7e5f64ecfb4ebf5e7f6816876234026370add071db3680f0c5cb67d49f91ca91da26960d00d690564ae50862dbd89cdae28d7a0bb541023329e2135d5e0857d8218236b51cae3f412320df6c998fc2109"], 0xb) [ 1818.741706] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 08:22:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0xa}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1818.764840] FAULT_INJECTION: forcing a failure. [ 1818.764840] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.767230] CPU: 0 PID: 11390 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1818.768640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1818.770316] Call Trace: [ 1818.770855] dump_stack+0x107/0x167 08:22:05 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {0x0}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1818.771626] should_fail.cold+0x5/0xa [ 1818.771649] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1818.771670] should_failslab+0x5/0x20 [ 1818.771690] kmem_cache_alloc_trace+0x55/0x320 [ 1818.771710] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1818.771733] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1818.771756] __list_lru_init+0x44d/0x890 [ 1818.771781] alloc_super+0x8b8/0xa90 [ 1818.771803] sget_fc+0x13e/0x750 [ 1818.771820] ? set_anon_super+0xc0/0xc0 [ 1818.771843] ? shmem_put_link+0x120/0x120 [ 1818.771859] get_tree_nodev+0x24/0x1d0 [ 1818.771878] vfs_get_tree+0x8e/0x300 [ 1818.771900] path_mount+0x13be/0x20b0 [ 1818.771925] ? strncpy_from_user+0x9e/0x470 [ 1818.771947] ? finish_automount+0xa90/0xa90 [ 1818.771965] ? getname_flags.part.0+0x1dd/0x4f0 [ 1818.771998] __x64_sys_mount+0x282/0x300 [ 1818.772019] ? copy_mnt_ns+0xa00/0xa00 08:22:05 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0xfc, 0x3, 0x0, 0x0, 0x5, 0x60004, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x8051, 0x1, 0x3f, 0x2, 0x79, 0xb10, 0x3f, 0x0, 0x9, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r0, 0x15) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000240)=')\x01)$]--\x00'], 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1818.772044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1818.772064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1818.772088] do_syscall_64+0x33/0x40 [ 1818.772110] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1818.772122] RIP: 0033:0x7fcb00d4104a [ 1818.772142] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 08:22:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = fork() syz_open_procfs(r0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') [ 1818.772152] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1818.772173] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1818.772184] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1818.772196] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1818.772207] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1818.772218] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1818.787677] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1818.881340] cgroup: Invalid name 08:22:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)=' ', 0x1}], 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7ff, 0x800) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x8d, 0x5, 0x1, 0xc6, 0x0, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_config_ext={0x401, 0x7f}, 0x43018, 0x1ff, 0x1, 0x9, 0xbdd, 0x10001, 0x9591, 0x0, 0x80, 0x0, 0x20}, r1, 0x2, r2, 0xa) readv(r0, &(0x7f0000000280), 0x1000000000000048) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x9, 0x7f, 0x7, 0x1, 0x0, 0x400, 0x0, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xbf7b, 0x4, @perf_config_ext={0x3ff, 0x9}, 0x440a3, 0x80000000, 0xd6, 0x2, 0x8, 0x1a90, 0xfff, 0x0, 0x101, 0x0, 0x599762a5}, 0x0, 0xf, r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) 08:22:05 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 96) 08:22:05 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {0x0}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0xc}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1818.980673] FAULT_INJECTION: forcing a failure. [ 1818.980673] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.982966] CPU: 0 PID: 11416 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1818.984361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1818.984371] Call Trace: [ 1818.985789] dump_stack+0x107/0x167 [ 1818.985817] should_fail.cold+0x5/0xa [ 1818.986935] ? create_object.isra.0+0x3a/0xa20 [ 1818.986957] should_failslab+0x5/0x20 [ 1818.986978] kmem_cache_alloc+0x5b/0x310 [ 1818.988980] ? mark_held_locks+0x9e/0xe0 [ 1818.989790] create_object.isra.0+0x3a/0xa20 [ 1818.990663] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1818.991682] kmem_cache_alloc_trace+0x151/0x320 [ 1818.992609] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1818.993594] __list_lru_init+0x44d/0x890 [ 1818.994430] alloc_super+0x8b8/0xa90 [ 1818.995194] sget_fc+0x13e/0x750 [ 1818.995908] ? set_anon_super+0xc0/0xc0 [ 1818.996746] ? shmem_put_link+0x120/0x120 [ 1818.997598] get_tree_nodev+0x24/0x1d0 [ 1818.998373] vfs_get_tree+0x8e/0x300 [ 1818.999100] path_mount+0x13be/0x20b0 [ 1818.999874] ? strncpy_from_user+0x9e/0x470 [ 1819.000736] ? finish_automount+0xa90/0xa90 [ 1819.001597] ? getname_flags.part.0+0x1dd/0x4f0 [ 1819.002536] __x64_sys_mount+0x282/0x300 [ 1819.003363] ? copy_mnt_ns+0xa00/0xa00 [ 1819.004150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1819.005197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1819.006233] do_syscall_64+0x33/0x40 [ 1819.006985] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1819.008007] RIP: 0033:0x7fcb00d4104a [ 1819.008746] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1819.012378] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1819.013880] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1819.013892] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1819.013909] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1819.017487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1819.018900] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1832.643754] FAULT_INJECTION: forcing a failure. [ 1832.643754] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.646291] CPU: 1 PID: 11425 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1832.647994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.650007] Call Trace: [ 1832.650647] dump_stack+0x107/0x167 [ 1832.651546] should_fail.cold+0x5/0xa [ 1832.652476] ? create_object.isra.0+0x3a/0xa20 [ 1832.653586] should_failslab+0x5/0x20 [ 1832.654415] kmem_cache_alloc+0x5b/0x310 [ 1832.655247] ? mark_held_locks+0x9e/0xe0 [ 1832.656153] create_object.isra.0+0x3a/0xa20 [ 1832.657112] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1832.658234] kmem_cache_alloc_trace+0x151/0x320 [ 1832.659252] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1832.660331] __list_lru_init+0x44d/0x890 [ 1832.661204] alloc_super+0x8b8/0xa90 [ 1832.662002] sget_fc+0x13e/0x750 [ 1832.662722] ? set_anon_super+0xc0/0xc0 [ 1832.663581] ? shmem_put_link+0x120/0x120 [ 1832.664455] get_tree_nodev+0x24/0x1d0 [ 1832.665293] vfs_get_tree+0x8e/0x300 [ 1832.666107] path_mount+0x13be/0x20b0 [ 1832.666936] ? strncpy_from_user+0x9e/0x470 [ 1832.667881] ? finish_automount+0xa90/0xa90 [ 1832.668807] ? getname_flags.part.0+0x1dd/0x4f0 [ 1832.669814] __x64_sys_mount+0x282/0x300 [ 1832.670679] ? copy_mnt_ns+0xa00/0xa00 [ 1832.671537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1832.672660] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1832.673767] do_syscall_64+0x33/0x40 [ 1832.674566] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1832.675674] RIP: 0033:0x7fcb00d4104a [ 1832.676469] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.680341] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1832.681942] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1832.683443] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1832.683454] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1832.683466] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1832.683480] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:22:19 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 97) 08:22:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4620, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x14981, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) accept4$inet6(r4, 0x0, &(0x7f0000000080), 0x800) r5 = dup3(0xffffffffffffffff, r4, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r6, r7, 0x1000) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@rand_addr=0x64010100, 0x4e20, 0x5bfb, 0x4e22, 0x5, 0xa, 0x80, 0x20, 0x5c, 0x0, r6}, {0xb9f, 0x800, 0x6f54278a, 0x80000000, 0xaee0, 0x8, 0x29e3, 0x1ff}, {0xda5, 0x1, 0x1, 0xffffffffffffffff}, 0x6, 0x6e6bba, 0x5f27a6d01251a98, 0x1, 0x5, 0x1}, {{@in=@local, 0x4d2, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x3505, 0x5, 0x0, 0x40, 0x8, 0x8, 0x1}}, 0xe8) 08:22:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {0x0}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:19 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:19 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="9dbb2800a35152455e23f9317c080000", @ANYRES16=r1, @ANYBLOB="24062abd7000fbdbdf2509000000400050800800030001ac0f000500020002000000100004001fd7dce71e035ae2929294c005000200030000001c000100753fbb7ca1e38584f3e05d40e614000011000700170a93f59d2f317c322686587d000000090007000a00fbe7ac00"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x0, 0x1000) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 08:22:19 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x101fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x20, @remote, 0x8}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x26, 0x0, 0x0, &(0x7f0000002900)=""/148, 0x94}, 0x0, 0x80002202, 0x0, {0x1}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) syz_io_uring_setup(0x3ae5, &(0x7f0000000180)={0x0, 0x243c, 0x0, 0x1, 0x164, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="08003f000040975a5581ece0d21f6e9f7f0f2ef816f9be71ebc9c840"], 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x43000400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x4) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0x6, 0x6, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x6, 0x0) 08:22:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0xd}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:22:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}]}) 08:22:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000140)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a09", 0x78, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000001000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {0x0, 0x0, 0x8c00}, {&(0x7f00000000c0)="37b3a0ca784fc55bf98779ae2213a35768a0aaf108f357bf254b4db1deb5db5af4dd33eebc2180441d0ceef1b659dda09341cee2a6da77ec", 0x38, 0x1}], 0x0, &(0x7f0000000040)) umount2(&(0x7f0000000300)='./mnt\x00', 0x0) mkdir(&(0x7f0000000080)='./mnt\x00', 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x280000, &(0x7f0000000400)={'trans=unix,', {[{@noextend}], [{@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@dont_measure}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'none'}}]}}) mount$cgroup(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x40, &(0x7f0000000280)={[{@xattr}, {}, {@xattr}, {@name={'name', 0x3d, '\\-{]-'}}, {@none}, {@release_agent={'release_agent', 0x3d, './mnt'}}, {@release_agent={'release_agent', 0x3d, './mnt'}}, {@name={'name', 0x3d, 'ext4\x00'}}], [{@subj_user={'subj_user', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '^^'}}]}) 08:22:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000340)={0x0, 0x74, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="8359f17a", @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="6d6e09ca044e459fc78ca27728297fa689f9108b9e5a3e210d9015b22211d6cc3f97cd895030adcb9295ade00853ef288e1fd6d3d8554bb81c3261e804728fab2b560d1dd834a6d24419de9149520b04223af6a5e190"], 0x1c}}, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000080)) [ 1832.773456] cgroup: Invalid name [ 1832.787295] cgroup: Invalid name [ 1832.801781] cgroup: Invalid name 08:22:19 executing program 6: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xe9df0ec2de4e3651}}]}, 0x34}}, 0x0) 08:22:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0xe}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:22:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x5, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:19 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:19 executing program 4: syz_open_dev$sg(&(0x7f0000008300), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, 0x0) openat(r0, &(0x7f0000000140)='./file1/file0/file0\x00', 0xd5080, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdfffffffffffc, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r1, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 08:22:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}]}) 08:22:20 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 98) 08:22:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0xf}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:22:20 executing program 6: r0 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x300, 0x60, 0x10}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000010000fc36090000", @ANYRES32=r0, @ANYBLOB="fdffffff002e66696c65300000000000"]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x74c9ccf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) getsockname(0xffffffffffffffff, &(0x7f00000005c0)=@qipcrtr, &(0x7f0000000580)=0x80) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)=',]\\$*[$-$\x00', 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000140)) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000480)={'fscrypt:', @desc1}, &(0x7f00000004c0)={0x0, "80029c031902157744ba97776d275fb08844b7f060b0eba84b6d65e06bc1bd2feffbb7a85493fbc27364346096e0dd2c333dbe8d9c96896f0ee2a1cd33843b36", 0x18}, 0x48, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) unshare(0x48020200) unshare(0x20000000) add_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0xfec5, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000440)='\x00') unshare(0x8020c00) [ 1833.071229] FAULT_INJECTION: forcing a failure. [ 1833.071229] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.073628] CPU: 0 PID: 11468 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1833.075092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1833.076885] Call Trace: [ 1833.077466] dump_stack+0x107/0x167 [ 1833.078235] should_fail.cold+0x5/0xa [ 1833.079034] ? create_object.isra.0+0x3a/0xa20 [ 1833.079994] should_failslab+0x5/0x20 [ 1833.080788] kmem_cache_alloc+0x5b/0x310 [ 1833.081630] ? mark_held_locks+0x9e/0xe0 [ 1833.082493] create_object.isra.0+0x3a/0xa20 [ 1833.083418] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1833.084485] kmem_cache_alloc_trace+0x151/0x320 [ 1833.085457] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1833.086465] __list_lru_init+0x44d/0x890 [ 1833.087314] alloc_super+0x8b8/0xa90 [ 1833.088099] sget_fc+0x13e/0x750 [ 1833.088797] ? set_anon_super+0xc0/0xc0 [ 1833.089620] ? shmem_put_link+0x120/0x120 [ 1833.090474] get_tree_nodev+0x24/0x1d0 [ 1833.091278] vfs_get_tree+0x8e/0x300 [ 1833.092049] path_mount+0x13be/0x20b0 [ 1833.092833] ? strncpy_from_user+0x9e/0x470 [ 1833.093723] ? finish_automount+0xa90/0xa90 [ 1833.094604] ? getname_flags.part.0+0x1dd/0x4f0 [ 1833.095568] __x64_sys_mount+0x282/0x300 [ 1833.096405] ? copy_mnt_ns+0xa00/0xa00 [ 1833.097209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1833.098281] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1833.099345] do_syscall_64+0x33/0x40 [ 1833.100131] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1833.101189] RIP: 0033:0x7fcb00d4104a [ 1833.101211] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1833.101231] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1833.107379] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1833.108860] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1833.110331] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1833.111802] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1833.113276] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1833.117648] cgroup: Invalid name 08:22:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x5, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1848.200545] FAULT_INJECTION: forcing a failure. [ 1848.200545] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.202953] CPU: 0 PID: 11484 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1848.202963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.202969] Call Trace: [ 1848.202992] dump_stack+0x107/0x167 [ 1848.203018] should_fail.cold+0x5/0xa [ 1848.203041] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1848.203063] should_failslab+0x5/0x20 [ 1848.203082] kmem_cache_alloc_trace+0x55/0x320 [ 1848.203103] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1848.203127] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1848.203151] __list_lru_init+0x44d/0x890 [ 1848.203178] alloc_super+0x8b8/0xa90 [ 1848.203201] sget_fc+0x13e/0x750 [ 1848.203219] ? set_anon_super+0xc0/0xc0 [ 1848.203243] ? shmem_put_link+0x120/0x120 [ 1848.203259] get_tree_nodev+0x24/0x1d0 [ 1848.203279] vfs_get_tree+0x8e/0x300 [ 1848.203301] path_mount+0x13be/0x20b0 [ 1848.203326] ? strncpy_from_user+0x9e/0x470 [ 1848.203349] ? finish_automount+0xa90/0xa90 [ 1848.203381] ? getname_flags.part.0+0x1dd/0x4f0 [ 1848.222204] __x64_sys_mount+0x282/0x300 [ 1848.222226] ? copy_mnt_ns+0xa00/0xa00 [ 1848.222253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1848.222272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.222298] do_syscall_64+0x33/0x40 [ 1848.222320] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1848.222341] RIP: 0033:0x7fcb00d4104a [ 1848.228479] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1848.232200] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1848.233720] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1848.235151] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1848.236608] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1848.238038] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1848.239478] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 08:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x18}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:22:35 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 99) 08:22:35 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x179) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="83067a562abe1a0900000000000000c4ce24", @ANYRES16=r2, @ANYBLOB="95390000000000000000050000000c00018008000100", @ANYRES32=r4, @ANYBLOB="0800050000000000"], 0x28}}, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000140)={0x2, 0xfff8, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="71b84f4a3da7158692ab07886b8e95c99990ff0d4990c7ef", 0x18}, {&(0x7f00000001c0)="604ec8", 0x3}, {&(0x7f0000000300)="1b560ab43ceddab3b2d2746c23e62c3a00c6e7427843a8757311dc6987b5efcadf172afe3e4e4c4f1acd2d1692bd0cc5bb801ddc259b32a4aaab1ba2f2bc065909fbc5330de4e42d118d90040be9e90ca70ea6f1d9d83e096c3b692890a7336314dce6fa1072d2a9cca1e14ea32bf6655bdc5b38fac9bde5b306e91d1af359b646eac29358a5545a94f2dae1588d30bacb90861671db83f693e5f211af7be595c94ae9f0edcd23ba5b8c99570da2111e", 0xb0}, {&(0x7f0000000400)="3b9ee4b9e05fdb3aa3ecc1c8e7d33718bfa638b86cd63742034d7b549bf7d8c0274962080c58a06c5b03652cd3af9775eecb0d09cd393d66343698115c3b0235049d6c3c4f2d1b23ddc1b162374a0aa3001daf1e9da032bf83cb926f5424135583183458d2f107d0747f3a85cbb7da209305043ec6", 0x75}, {&(0x7f0000000480)="054d63bb66fb55dae2ef4ee378dd806abdc031690fea6266d75258485b7aba993611f5c08b42c30b8109ed8877c437185163b7041fe6fd78516cd2ef75b88554e2a0261e00bff67544b23bab0e3301571df596926c9d227a0cdf02e3bd8cded3484e7414984d69808fed9dfae7094288a889f8280b6998531c9db8fb05b0a2912acd9fe7a66a567275e836d91dbec419bb50e496170681972a07ce025a438ea73bd821f604d6dbc212e9aeb5", 0xac}, {&(0x7f0000000540)="f363199bd35812c44bd96f75c1d473b950f82ae99c60743070fbe98c9dec168ed88ec95705691ec34949600b7612790af7cb2ac8be6e23ce382f810d67f264cf14400ada33493c8a83c73146dfb79bfe605bf1ef7cf29427ae73b905d1d7c423ad2c3a66d473b6469381f776e18f7f66ecf8538acaf90ff7acf79e419be65edb0961e939a5dce14d77476ee3a03b4a38a33c388ff205e5ce3ff0941447628794efdc978ff0fd18eaf4b392ff8ac5dc6018e9da025c4eecbbfea0a812a78d69a881c60455cd1d93139c8d74d1cb0c759a47939173", 0xd4}, {&(0x7f0000000280)="10892cf5dcc1674119cb21d10002fc82515082e7bae0a6bfa0", 0x19}], 0x7, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x30}, 0x68000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 08:22:35 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@hash}]}) 08:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x19}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:22:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x1, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fallocate(r4, 0x3, 0x900500, 0x30000000000) openat(r4, &(0x7f0000000040)='./file0\x00', 0x183000, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f, 0x1}, 0xe) r5 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r1, r7, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125ce2, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 08:22:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x5}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "7374bf600a2dbb0a10a4446998c60bc654676f080ecee8672b9b990319e9f34b4c45be9b1cbb8fbe1f4541599e2a8deeedad6067575d671432b4ba4028542704ab850b2cd326bd5a16431e3e06cbefba068d34f999e863befaed31fe2f898bdfe4043148f4d1cc27af274cc202dd9cd92b1891ba85c4048baa5cf0aa7a3d5dbef19adb89a7123a5c5cf1f42650df4c63aa25c0c5f606a072b8c1910206999409a39439cacd824f129adb4177e14f533050e77cfd6b9e760c12899b047feb4c8e5b746e5570db48fc8fafeccf98bad6d99a585091b403666ded97ce43cdf6dd1791052bc149861ea2585dfb28b538cc9fe6ffc5e07182615951fd668085ed124af574a07e3495491f19b1aa2a3b69028ccacd78524d988b224ab17ed905da0b840b4a9939e2af6efdf4221126075a8964d904883db014031e0924681a4ef3795071b256b75002a7df298c87c565b1d8a331e7d0c1000e1d707100917dfe107f87ebea9dca1b708b01cacf1c9f348c0d0fd64aa64193637c7169264d06f613c41be60f39b0cc9d813ae5fca2222832f86f2ae87e883efd48df36d16e6c1ca5c378f6ff0fbace91eb3099d744b16171fcc1ab7d5456392f0878ecf27e8caad7386663de490c3044eed7e7cb83e675716eda0cc09f219aadddd814c88048a7c6cefe69a79f2f7a234cfffbf19ac7a9f6ef59faf2776ac3d636904ec1bda09b1c9d8caeafa918983215d866f5cb6f1088e7e99a43425913d258a3dc8550fcbca3e0bec47503e24d709dd1fd1bb3cd92837d10387a0eebb98aab27950a2a66dc0b9bad3e4ef6393036d64949931ffe6479073790b3b885ac8563d4018e9227d644864c17f048daefbb192d15b56a2a440ad6d4ef5af2ac9904d8b69c64d2368928d7595594e6c3fd23229cb6aa80ec308301b1c94777900d34b1b3eea03dca765036a3f5351551affb585f22541074380b60ca062bf8a8a2324fe61ecad5733aec51e0c5ddc648280556b8a038b5816947b1637ef598cfd134cf9833d875fd23d22f5f74e74a4634d50a3ac908eed128f4297924296d95361b9504c08df4a0603eff93ee34bd45ed12e8d06b8f399fefef4ced732aad15b70f3e276101fa4b5a5c17435d0999b3345ccfe853c955e8b7927c7a171506b8e5b4de8a68cb5e80c3709a0e15643b5772d82d04859133e09fa8ab81ac042e67bc918f2847af14a4eb77c3fcac3132ec1af5a57d85acb9ce91d9d15019904396737ade63df938e6f054f8ee21e8994d45b0801ccd8ae8bda90128cb05eddd297d800412bc01fc5cfdfa9d473641fffc793b513da3f7565a27c4ff3678ac6f71560cc6cc95fb4d20f85b7934cb4a4f614182d331ab53b6a09ff47fc272b6c1f5aaca477bfdfed3fac942d639773b7a5656c526eb595d6fa9d301c425947f37088447cb4400c37750b76eb6c1f7933e43b27224c2fdc053e55125d00ab11428af674f58bd5c3ea1ce4762856afccbd37dd59a5e726f2e5e770bcc8372304fc2a33611234e3b0d411fcae8691e621b64581dc32b3d97c02920877b2c995018dcfff2da8687bc64332cffc3d355931561dc799d169f61d121f242dd3605e3fef8a46bf73998202d6a87671719896c61d729006104bdb7e926020f28260c75c2c754e5f073097d7031567e62cbfcbff541702cdaf498bbfe01e2948e6e164271ca4ab4df68a1569d29d3ce7029c0b58d2a1e6d179fa817ec9df17195c8b83a7a7508f18f0e3d07e8871f331d7a151bc11301c7dce402e6a5fda6f3096df2ddfeb48b3991e055c55d2a071ed66bf378e5c451f849cdbd7951cacad16d6b5734b71db866e77086bfab1797942633ec688d78bb2fccaae2b0e796b852b278bd4a4648d0811293e1bfe68e30b42eb27ac0a4e435e086b4cfeeb9fa539f0d800b6108e4c7b9d7237746770a3f3477646b7c9bfd2bc111679d40bffe221be492ba984df6cd4d7d8f9cbf7185e79804416be68d8a2bfa28e5bec4b57bf5f08eeecafabccd55744e49bb4a7dd1324908d91762b9884e7268d0bb6290be3b51091ae6ccf2ebbd4945dd7913bd38509a00ce38d955909bfa1f3740fc123a12e15b853b59b9b691460afdcda150d39e566a83eaa0c3b7bac9819bdbc7e0a620206be87ff2f8ea8091dbffa014d2f2eb919040a434cdeb3db68adf845d2ba751dc0e1ce4afd8672a5ecf0653b8c672c3265aa236a174185f4b4a291bda664bb79c13f8b6932a831385773898d194d2500b38fbfff8c4acafa5a80dfd3f1f906132885446f9f7ad787dbbdab593661ab1c255df879eaf4ca739deaa11379a5c6b650472257fa54b646b29ceb3dbe27e3584914f9f766bbbcc67abeffebb0df881a42b8671bba930b04d1d7710cc15d546ee69ad40e66f04eb28af8bd17b739e68ad75a239303fb97b18f8f08d2f95bdae0f245ebdfc3ecf555a6fd53f5a35af8b2dd016b227d209fc8323a7576e66a9913a0ad4f19d30d2b6f25ac8b5b6c762e2c68c76f9bd7818adbb3c9b194c09471482ec6898754469076b8674ab9e26b5977a0fa693160f18a01d2f2c362186ff75c205cec261d9e6c431ee672e4056b7e458ef02dca1167d09de5977210461758ed506290477a63c5af0698a1f4edf3bc569692bc9febd5fd641860dd34a6926af47ae7bdd3cce59a5b24b6944075e30ec2f2dbd043ebc57a39eaa5559bc4f21f08198e0daa2e8506b21160c8f9b629ad0e80d5e99e5cf4c4ceefb8d9fe5493ebcb066a647269fef2146f1ed55dac66974446e650e49db26ceb24c16c24885a2d2d011d11ec52d5b7a9c8096314d1dc7c992a1dee70be2fc0cc2d9fc94b0d02d479f6f4bfd3fa20df42568e27c0cea6caa1028d5dfbe6a9657053c06132387f9abfbaf93d9b335b69b168bf7fdaa0a44981dadc3358b50f1b24d390f8858d6775fa838388ff8a69b02bf446028485ba9e0c15731288c186b3cdf2fbc088f13f50e5eecc9b3a058d1369b7a254f11aa81a5fabd862bfd5226ce26e0199ef241badd55ba0d6087e9eb1661111a6afef1caf2bd54832bb5a3e8b864c8af220a8a115746c1646e78471ba2edb7c63fcff7f6be047a5f740525fbe5e259beee146dc2a609d3fd576e826ee1e4fce8ccbf75aa713514bda04ed4086cdd11a770cbe5782bca23f5f3ad8682609d5c5d4e5ca4e117d7423740b41081c6945b446223bb435c6ae2314552b7bf53a8b2c8a7a2a961d17315e0f7a660624b119c89ae81d2214b03cd79bc3eb355bf06811d7186b1f0a7219dd8d4096cb0df940719279357b853bc7c5bcf645aa65c12227859ce0851953fcefa6051f2a31e3666abde9ef1ece3eba658de696edf5d87a7d562dfe1f6bb9ac5e6773bc9069c732683715868cf14825345fb60665982549b9bb7c5b7d934ed0c4d136fa089f8459d473bf1ee678cf88c26f4f5ac681aa6dbe6ef78c26e7a3649ae0574f550f9fc64e8caa14586cbc43d8ec72a3170fc4f6c78fdbd40332c1f35adfc04be68a067f2c03325d624e21fa0e1fa6ea879caa84665bedefcd19759872824a0053a110af2b6099d8ea572b0c81cea39147bb2dca0eaefd4be8c3b59b98c27049f04ae5f3652ade0e1561238296d17979581b93d0ee26464fb5675b968cbc397558207fb1d5365f73994c0c8f2bcae0164e74d602a4856355b214af58b6357b2505779260ec73929eb4fe1047bbc2a125ff6c88718d2b8b8fb9c0d1cb1760748ffc5e4998dbaf8fad99df26b2eaf99bce2541d287b243d7b9cf0ecb25588d14c6228a6cb5413f48e3d07817d258c45ca0ab3494ca5b59f87abdf38e439b4a31d60d9474a52e465f36dd0cd56f00d4e5e563bfc6421b40a7522eb71894a698c19510fa7dc690b6b3f782d88e61ca635d5efd4c9c1725dbf24e0c8e246a2dc979e4750de8347687038f0441858bdf5a06bcba827d8d1327601943ca9fd004c121034fa6e1c8b9eff5da764961f5700eab97380e99b37f302239b528b36f5c9bbebaff25edae48fbe59dd272099af5c695a19b62f64485ba01ae8416c02f04360be933b8ba8a49c6c1188a78c3d36d0c61f61b4002bfeb669e29bbcb306f573528a749b085500c7649aea469fca867da4ca9eaecc75a70f41baeb80bf803402a9066dc1e8243192b78533e0ad590e14fd2bf2ce3ac943ade1fcefd247406785ee387d18e9afe8845481748fbadf4d081e01ecce50ef1fc5b457fa296b833d77390764e2af12f7930c6334476dc4cf45d9f272e364336810c11318bd0a95233005d66fe81a5708ae5fad8c7db17e6d97d2340651f7aa7a36e132a77a7a6206b36a95ccb5a48cb19bd3bb886ff0e77bc76653912149ca85895c4f80c373cbbd4305a91213e8ec5b7b18d8587d723c18f02854556aaaa540935eab2b7470a7c1c40c7e843ac1221a51e92eb05af2342fea7c853a46182c8384612aadb40145b95de565140003468eaca74b38bdf4dc640d0af80c3dd81747652c5fe15ffff8965a150a4ca6a9d9c91d067b4fac49b23cd2041dfdab22126c97d812b67ed638cc65d75d836bf439807cd7cd3cd0e6b30c81983e3f45a00282a14d401d81ac7c5544510dc7d157eeaa18b09df5ec949a22d7342b5b720b2a47251e995410f9b35d90824c1b19beb8575c9efe2aaa2a2011790a1099a924c01ca835fb7cc561eb2310a5331d4d9c4a9ee03a5f1364c17a7f4511c0c1b929c630cc110696f9e94b4107d0b75338fda2c5e0b8d46d19b98071e328f57debd56b4a0a9009913ac41518a08e6fa533edf20db0dc5eff43cd3ead623fc826ac03925490537d6b6a47f27031faa17f9852a3cb72d2088f33d35846a40758e60dab4b3980d032adc3e4faa61ff8aaea6b08bc9705cf097701e9af550fa43ec06c0ae2257927eebcbbbf4a05ad8097597943d6aed8a950ba32bc0d19827539019397e2fffa5f7379ffd7ec266f0c1cd947aab0c9e73c2796bd4c32fa0a0effbc84570efdebd3ac1eb57cc89cdbed91ed43a64cccfeba427a017a07d84acc850a45e2f26639598ed061ea81b60fb1873983591d446129ba8b27a4aef3311292017e3cbc00533824888ef80ef1a85c86a370dc11694d2f455e04ceb8811afa53aac77c65b38703d18167aedcc077c988dd9832ee1999a82c8752b921bceae484c19cee6828eef373c979b5c3f208080c8dcb38c53e384bebed6c41c3b9d6958bd2b952d82d17b262dbf30f90ab5c5d197ccee9f6b6525928b0100ffdeace644e159500495ff5a0ea7df7b9ab63617e3879818e25341e97d839beefdf248222cadd61a5d76b1ff34704bb78656afef7994904da269f973598217edc3be93157185aa15ef225f6471d7786a5e28d0f145b96566e101bf46723486867b9aa90f9eb4d1f5612d4950160c1504a367daf984"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) r8 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r3}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, r3}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) mq_timedsend(r8, &(0x7f0000001e00)="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", 0x1000, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000011c0)=ANY=[@ANYBLOB="0100000001000000180000000446b7df0420dadd0303d6cf09f985746b8ab037b71bdacfcccd9fe307e25d554477b4038670c616cebc275a066bbc293c3ad332264fe1763cc1f2f48c", @ANYRES32, @ANYBLOB="000200000000000000f7ff0004000000"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {r23}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {0x0, r7}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}], 0x7f, "9656c75f04ba4d"}) lseek(r1, 0x0, 0x2) r25 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r2, 0x0, 0x480c1, 0x186) copy_file_range(r25, 0x0, r1, 0x0, 0x200f5ef, 0x0) 08:22:35 executing program 5: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='limits\x00') r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000011) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000001740), 0x6e, 0x0, 0x0, 0x0, 0x78}}], 0x1, 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000500)="a5b655e9a4db9af486f233ee95e9f1e0632579f567b8cb20d0461d74a86929867077a69df219932aec664a62ec94cdb50041961d7257c8876e47859175f119e56441c1b05bcb5a31737696871513647c75fba3e09fba47293c1c033f8c2569568dc953512fd1bc801efe32928684c4604fec798ed5dbf607c47ec5c89c3245f2623aa6929935ee0aca0d027503983155410f1d49f8d27ca9e46aa2ee66ded8047db013219bdbaca82d96d71d8fa1134e6bcaf978d64d19a3d03951db94c931c5b565ea2419b6690cbb974e1d1aa41e5dbc0c7b4a92be98383cf95bbc850b1f097a834cfdcd585aa3a6b851021e02c7cc2e38afc42eb27af328d3da955d45b00c") r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, r4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1848.387620] cgroup: Invalid name 08:22:35 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@hash}]}) 08:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x1a}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:22:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x5, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:35 executing program 6: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x2) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x9, 0x1) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x4, &(0x7f0000000280)=[{0x0, 0x0, 0x80000001}, {&(0x7f0000000480)="ee039302c34a371fb02a9d57d129143d858f3036dedec130a364b4b960e08f974139da8ce71c689fe68a0c4a47c606a13380bc1249566ecd6cf4b5c23c9dde401f827aefc9166afade8c29399781f5f59d10499adbdbd5e9cd84e35322ec3f02bbb25083b8b9b096d46ef144930035d5d59e57a5b15c83f205855a2791cf53556207dd7f4ba900281bf1af2fc0c42c5313eb235242860e85022d0f87d9bd8c1d0d5748d76fbe719c88372037115b4eeb87d3aa891d16f81e01cff8d1f175ab3011d1a5fb5607b50824bde6960e8a804fb93d3e526605aec4f465f1e47b2431ec46a5d29367592378fdd2c713d85fb6f7ca786557dbd86231fd6de8d4981ee373e8a5a575602ca1dc02757be81b90a755e9996846800d06af00e7cbc25fbc052bbccb1a8added1595ba8ac859bed6f9ee52d0c81e70da3e8e36c4051fa7b682b96f25897df6436dfb11ec9d39085eb1314826ac8e02cc1dd793b4557b66c4904724845b77eb89f377240fce69f6c6b2ecbff5047d2386afba91fc284f9e4313dd1a165d5d8913707bcd59218852e09cad6f0846e1e76b23038c42600f191e727572f719e9cdaf254b8aba0c530f368de03259e213bce985d27295e7c690e9bbaf39f9722adcf50c89da5acb8ef8696060ff255ed739752087a6ec51ba76d2588af8fc48b339f12521298920a449037c1ab8ad981efd7c50fb9a816ecc3534d2511c579bbfa76bac573fc1fab1452c23724ecd1ffd6650b1fe19764b2eabadf49432c435f49d98c195a4d326165a02286c43596fab103f1ccefced35d0a7b58fd068d76a5878e82d0b5d28375517b2a90ad0b551798a8354b9e2c654556f6f57a035dc2870d83aeccd01310b27a57b0115d755ba3956adb996dbd8c82e49855ef3259981eb9a8c2596449e477016a5e5475ed628a6b4f7e0dc6f821c5d263121bc2feaf70ff75166028fb57bf7910f130f86bc91f5c4a299f2cf6d0e2e404f39489282dd9acd6c7f5a4063da7bc6c6be914e909e238660e7120f35815c5d4cbec267dca4a9813a9e3b79561b127ea3266c761c4e8b3a4776284e3811f962d6218971018408dd6e18d932bab88027831f5a25c6e1b8d6a089ae263792eb26f05c3444f3c876051c59d5bcff0d59b82bfdaed271169cfa4b5cb5fb95b7a23b8cee6f1115edd70433b719a1c3010e2f5dad5a49cd2e4630db192b7845fdd073fa2592b0752bb2a62c5f572e5eae6fe616c440399d23a97ddfe9ecb5cdf46be4aaa6bee1f1df98266c427421a33186054274b1c3eeb7f1c5d91b5b5a4abdee26995e556ce7531fea21f3f2c90dbc24bbd8636ae2dc79fadb1529fab6e530e2bc22563894e1347d7eb719bd019dd704f5f23bf83d960001207d26115769b378bfd9a3d9a7abee2836f7dbb56c30bed33dfafa2ecaaebe8c15a43e2a7ed9663531f01898648f051b3a5f9201e25b8c2130efb653e3541440f163418b6e1a80496ae333585397f0bdade32a6408f1c58a5487515c5aa2cb02eb25a4ffc10dba842b10b6f5aa1a25508e1f6d853f1c3a01a6b7a6a71caa34ea53542f529b0f90364202afc9b1e48dd5b1dd3358ec73f742fc966c745fd0739202572b79cd7a8c5a1ddbabf7056f91c0413e758ebfdbe44f6d0d16e918519cf0d7433a3e615674d83c9413dd882e462fdaf3e47884929fd4a0d0a42e0bbe61dea23fdbd6b81d632c93127898460b4c5234c7e32a2cc20cd55dbd382d8e4e1a8a2a374ef595c9cc208a54e66191bf829a8e45136bb09ed9ca1da42101afd052a22017d44a38888de4055eb62919c2bdb5de7ca6cedffad0f74445009f54f584cabed352626ff18acc70693849d5c0efe1ac71bd82ef4896460f297481e9f2ba771e95f5399a8a4e23d71349b838ff4c4c3d8a611d56dd203827517c2c12f9a660980447bcbe50159cd7c74018a8a1b312596c2d610c5390b7ba625cd490929d63753b8c59907f5e1e3359cbb168274678af5b2ce779dbd344861a897d691b0c8c0c9ef47123767e1fdb5c7d28ff0528a0238f5ddc026365a335e9ee5cabb774760bf31e5dbe826212cec66254a43671070a02960a35678d49435853b23569b5ca321eb498f8202df180047b191f6ee641f66cab6f98c750d163ff06aa4f48b14773a9a16eb66e8c00637bfa8de903ef3dc413099d58f4ac49bd68c8990692bc99cb07765db310dc8c199b7d948088730282d79154ff46f57fbeac6176e0d5c10f5ed38315eca3c05520b3021b2cd71af16ff94a616a585d8b1dd1411466f68b62f17bb4dff6bc1251293fe9e0bb1714e1c02b052a174a71468c8e1a236cbde1a5769bf89c7c8c9dfa9bedbbaf6c80504b469fa0944b560ab3a584b526533329319d535beef5335fff553c1034988e6c9aab7924338d5d7724d6810399d334f07cf553e1f8eb9299a7a5e5b2a041388c26543e4c0bd0b5c55fa93b3ac12417c9735f357b6484c2c1aa25ee505922c72af608a7ad7374dc6f9bfe96ed946abc5ebe8531ab0dc60d9f8c6677dc8fd896788b3b5721260155422dd007aa054c4ae1927da0eac2bbbb21405c35000fa553e4f161ae32a31fc0e63a4a51c80ce39b139e3ad0cc261dcb677fd4a50ef33562704f55723f34b3c56ddefa41b4b1eb7f793a08434482e9f83c63ead4fb5ad624ac69de984994dac7b356962ade3ed640e2d3b5128d741ba217e2afc5d7f0e45c9e8e16341de7e412d3ac23106ea4a227f86fe03bd93a1e9979e1c6ee3dee25a08067bcff70b1cb156b8650d169222d3eee049ff336e283a3fa4fec1699ac3b864649e923b5ee4c7c4a530a01b94233de9b0261e098dd8a2ed3f8b975eca2e96a8f78cf8b1df43f580647c5af6cb9742f533695fc19d0eaf3fb4af77bbfed99935c824ee20dad702bb0d57555d388464c0d837f5ab5dfa8646811f3335c4e3cbd51ec9513ab202a48056499b0e736795a1d160f15472ac34db1663ec66ae87acadd090ae64065ed6e9dca7eda4f5d3ce6a9e3f9f7e1f5a240c6d159f4cf9eb5dbbd3e4e12e09c779641facbb36d01ed92be777155f6fda5b754cdf214bf5fc7494364aa46668dba1121d68f113bb7c5a56cfd629a49098ba567f45f252c9b7bbc1867682b9d43927c2597b20803a4e5b10271e271df666ede6795c63ab2243a421faf2fa41e4e2df5e987dd073a06691d2bbce4e1bf317be976e540c5b126c38429e1a20275e33395e2787d6f9c40d6139c2dcc2b7a12289f575b84d5e30448e1c9ffb0b930a62e6218d1ccfb1592218a0f52d530daf93f0ad356ba27f515c0d37361c2cc6585956dc3124d2ef481650531b022107830e2ebf22a52ea090afea35126bebc89bc0633e8b0fd2c5ad5a4d988623ab6f407728dfa03415b6a27f4b571e53b1a1de24be56d96d903f91ce8966d3ade39d59b5799d69e2fccc21254d2831f26a3f815bd8bf19f1eba21a2fbdae87d35776c84592190f67b9d05701935f5c170a2cefccff884623614d7171bf5f721aaadae863bcfdf0f6bad63d9c9921be00a2c05b92e2234febfa57988651c15d5c1bc193af044d8984cb5f71e6208ac42f002c9a4434e9599f5ae69534dbbf30a1d7b3c947dad76a967bb5ec1e0567a582c3cdc45289425a82dedf8114337e569f3e69cb34a29b104e866a8501868d3f8758a1e27758a5ddd58746a28f45cd6d5425aa9f0b468657d873ad1deebf57e003c3f05b888e933b8d9bfa47e3951dae622d78d74af017edf2bbc19f468015bd745486365332363705815e3b0740139f13ff0fac546b3f761c9355235d93983024e8959ffe45cfd704e17033b6c72e893356ecdbc636ef2306589a29b6cd8e3f26376dd5af3f6ec0fd1cafb4156c319eeb95198713c95c9dd5605b28cf3d83445348b49261c7dc9abc2d9af516c870a8c360029ab7082ef27137e0440d2a880c01b284ad44b121b68aa876dbdc4ce050edc3a0c5449ab42f5bf214ae51065235c36babfce10a24428b26a5f4373e2c85cc90ba34b238f29ece2df12325463e6150e1235c9a933b08f0b226d116e4325b8da34bc9a10eb6f9ea2099a2dad1e3e78d7b73edc8596e0e3ed237aa7f188224a2bb7522d57df45b78dbdc3ec5f02518a9f527ebbd6c7d34bdb414f3b7e775330072041a36f067a1d984d2ba484e762fbbda5768f320ac5448fbeb6b83b0aeaa613c6ba3bebd687505a572101dfbe98a750bf2ad4ef4b1ff05cc05f4774f53b1ea9587d50e8eefa2e6b3bf1eff7c8a95509d633e356aa2ca2e150229a236113127e0927a1bff31bf97784ec0423efa7302f2e16e63761210ee13421001aba26b63888ada3f6dc089605aff786f3b99075b1ab36db4dce0d780a963965da0787ce09e441fb9ef0b2b0d6164328d58ec3d389cfc4d16d588ee9915b68774e6938a8d2274c250e82ccfc440341d0191a8616bba4d9ffe8a685654c0c5de7e9a0285bf3134bbb89fc40479e4be55afe6ce14f8708fc7ac17d8872a585cf0624456c45713b06c8e587ccbbb1839267a45270c9bb2647b72dcce4d29202761f015abca55566962af898874d7e609da2adb90b27e6197e42251f8e600ffed65a53b9a4bb7edd33dad66e2b4aad76b4c748d0cc80670dbdb0744b5e52434fec66f030b9e846039c79964d0bf5d83485fbd4a764619cd8090bfdbd6369107ac058760c83dd9ffdea79552991879784d08dd8fead892c15e3a09ae2ecd96000f14e4a0ca74ac6491c737016ab647ebc232d3d0e4cbb59520b5e78689b748a8567afb0e01bfad3b27a35545c7fa167969c3b20cf2a53d01cfc983729ea7683b1c0059f1f296250c7f823ab2b9b458797f16d4d0cfc5f16b3e25c5ece24f2b2fd8f593dc6c9aa5a2a53200aeb696a52b7b8236a0b5a7a57a605b0fb9517d8de1e9500abc90b4bfe77c057a39d6a87dc2d2f243d3fd2935c93421bc1d97c7571f8088f2bd00437de3847d5226ad71c1ed3eb355da444430efd9909a2a9b9078bfcb2333f9b01d4a0a9b02cb7ee69f6a06ff4704e532c768ebc93cf835b919bb48fecc106bf4d78275614f4e2850dbdc1327ca0160eb3d39ccad2dac5741aee47f6cb4583141d56e2a966cb8e9411581552f0e817f362b020fa2c731e9db98db4a157468e5021cbc581f4cb51946113f976898a9f57114b28ea99b197756a61d68996b6f5468562dc7ec0f27440c0f0267b38b3be2f95da0e87a245f1b9a4a5dbc1fccc74d4da064458ae814d107ffa08f52665e8019a527a1ffcc17998d4fac6ba2f078da2b42ca1a3cc1432c7915bdc1fefaf1a31e0c6efd777a9fe2803b7933a1519c4669bc6a7a74fcc1701201ac0575306fb0c1f8b3fdbb30953aadc7ca2eeda107ac9e9b57f14c57e916f646a8a1d645685af64bcfae860def99cc1fcf9178ef5cb0af882dd24e68c680ba910fc5231997a12e63391a699391471e51dbc978ccf5abbc932b1cfa4a848f0bfc764fcbe1315509584639f5ada17ece755a701b9e019d1dca8b4bd73c3c02a9391c13a9d2bedf3b2bea3cf8df188b4fe718ebacfff972334b0491363eedb29fd02e6a7166fb5a3d0b278bf1e5ad5611920f017ca83c066795c242bfb135c9d1d2362ffee3adbc19034584fb627e9e985097f70a5d64503fb6d04f554511df83a3c9163f54fd6b7f685489e3b033d1d3e150c9c248ece4494308de7fa23d49a6e8b4f85a76225c1c5b2798904ae9b3cf3d31850b091cdc4b77ab693fbbdf4bc152f345a11441bd444405c85c5c114a84743891f1e10", 0xff0, 0xffffffff}, {0x0, 0x0, 0x3}, {&(0x7f0000000180)}], 0x14087, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',check=relaxed,unhide,check=strict,map=off,appraise,fsmagic=0x00000000000008a8,\x00']) unlinkat(r1, &(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x870, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r2, &(0x7f0000000000), 0x1b4000) 08:22:35 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) (fail_nth: 100) 08:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x1b}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1848.633134] FAULT_INJECTION: forcing a failure. [ 1848.633134] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.635600] CPU: 1 PID: 11520 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1848.637040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.638735] Call Trace: [ 1848.639278] dump_stack+0x107/0x167 [ 1848.640055] should_fail.cold+0x5/0xa [ 1848.640847] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1848.641896] should_failslab+0x5/0x20 [ 1848.642679] kmem_cache_alloc_trace+0x55/0x320 [ 1848.643613] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1848.644658] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1848.645663] __list_lru_init+0x44d/0x890 [ 1848.646497] alloc_super+0x8b8/0xa90 [ 1848.647270] sget_fc+0x13e/0x750 [ 1848.647972] ? set_anon_super+0xc0/0xc0 [ 1848.648792] ? shmem_put_link+0x120/0x120 [ 1848.649629] get_tree_nodev+0x24/0x1d0 [ 1848.650423] vfs_get_tree+0x8e/0x300 [ 1848.651182] path_mount+0x13be/0x20b0 [ 1848.651980] ? strncpy_from_user+0x9e/0x470 [ 1848.652865] ? finish_automount+0xa90/0xa90 [ 1848.653746] ? getname_flags.part.0+0x1dd/0x4f0 [ 1848.654711] __x64_sys_mount+0x282/0x300 [ 1848.655543] ? copy_mnt_ns+0xa00/0xa00 [ 1848.656354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1848.657420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.658481] do_syscall_64+0x33/0x40 [ 1848.659243] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1848.660294] RIP: 0033:0x7fcb00d4104a [ 1848.661055] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1848.664827] RSP: 002b:00007fcafe2b4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1848.666383] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb00d4104a [ 1848.667843] RDX: 0000000020000340 RSI: 0000000020000380 RDI: 0000000000000000 [ 1848.669293] RBP: 00007fcafe2b5040 R08: 00007fcafe2b5040 R09: 0000000020000340 [ 1848.670741] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000340 [ 1848.672199] R13: 0000000020000380 R14: 00007fcafe2b5000 R15: 00000000200005c0 [ 1848.676423] cgroup: Invalid name 08:22:35 executing program 4: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff97, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socketpair(0x3, 0x4, 0x9, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000400)) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) stat(&(0x7f0000001cc0)='.\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r3, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000100)=""/214, 0xd6}, {&(0x7f0000000000)=""/96, 0x60}], 0x3, 0x5545, 0x0) open_tree(r3, 0x0, 0x9100) 08:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x4f}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:22:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {0x0}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:51 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@hash}]}) 08:22:51 executing program 5: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)=""/174, 0xae}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f00000003c0)=""/50, 0x32}, {&(0x7f0000000400)}], 0x6, &(0x7f00000004c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x12100) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x40008c5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r2, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r2, 0x3, 0x900500, 0x30000000000) accept4$bt_l2cap(r2, 0x0, &(0x7f0000000400), 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="0300000000000000f8ffff0f", 0xc, 0x7fffffff}], 0x0, &(0x7f0000000040)={[{@shortname_mixed}]}) 08:22:51 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) 08:22:51 executing program 6: io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffffffffffc, 0xc7, 0x7, @buffer={0x0, 0x91, &(0x7f00000000c0)=""/145}, &(0x7f0000000480)="9863093a081c28be3f5341746742bd925ca285db9a54306cbeed86a6c0626449e155a731e24818a95fd53743426058608a48ac59432b1161913b05b31f48c635990bf1cd7aa5686412ca71db108b381e237d1244d94375b5fea2069a82afc564049c81968371b885336b42a1496d5d4387e6a19a424881ddfebd62ac39d876f6249338e1a95bdf4bbdeb8222f3855751dfc105c1bf401850ac25a0dc3e7a911a1c0581b1864e1f6c7035fbbe565e5bb3a1bebf6471742d312e71a2bbd51ef38a1cfb9921727186", &(0x7f0000000180)=""/149, 0x0, 0x10010, 0x1, &(0x7f00000002c0)}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xa3, &(0x7f00000005c0)=""/163}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) r2 = syz_io_uring_setup(0x498b, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000000)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x498b, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000000)=0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r5 = syz_io_uring_setup(0x498b, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x3, 0x218}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000000)) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r5, 0xc0a, r4) 08:22:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x9b}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:22:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4851}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) sched_setattr(0x0, &(0x7f0000000200)={0x38}, 0x0) 08:22:51 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) 08:22:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0xc5}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1864.419643] cgroup: Invalid name [ 1864.542620] audit: type=1326 audit(1699345371.615:117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11546 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4222a4fb19 code=0x7ffc0000 [ 1864.547724] audit: type=1326 audit(1699345371.615:118): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11546 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4222a4fb19 code=0x7ffc0000 [ 1864.576207] audit: type=1326 audit(1699345371.634:119): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11546 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4222a02a04 code=0x7ffc0000 [ 1864.604702] audit: type=1326 audit(1699345371.635:120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11546 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4222a51107 code=0x7ffc0000 08:22:51 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x13, r0, 0x0) syz_open_procfs(0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 08:22:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:22:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {0x0}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:22:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0xf0}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:22:51 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) [ 1864.639017] audit: type=1326 audit(1699345371.635:121): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11546 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4222a4fb19 code=0x7ffc0000 [ 1864.661044] audit: type=1326 audit(1699345371.636:122): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11546 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4222a51107 code=0x7ffc0000 [ 1864.682091] audit: type=1326 audit(1699345371.636:123): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11546 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4222a0272b code=0x7ffc0000 08:22:51 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1864.700258] audit: type=1326 audit(1699345371.636:124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11546 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4222a4fb19 code=0x7ffc0000 [ 1864.718091] audit: type=1326 audit(1699345371.636:125): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11546 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4222a4fb19 code=0x7ffc0000 [ 1864.732580] audit: type=1326 audit(1699345371.643:126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11546 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4222a4fb19 code=0x7ffc0000 [ 1864.752946] cgroup: Invalid name 08:23:06 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:23:06 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:23:06 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {0x0}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:23:06 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) 08:23:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x3, 0x900500, 0x30000000000) openat(r2, &(0x7f0000000040)='./file0\x00', 0x183000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x3, 0x6, 0x53, @mcast2, @local, 0x8000, 0x700, 0x7, 0x7fffffff}}) bind$packet(r2, &(0x7f00000002c0)={0x11, 0xf7, r3, 0x1, 0x7, 0x6, @broadcast}, 0x14) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x2, 0x0, &(0x7f0000004b80)) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x8800) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x0, @initdev}}) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 08:23:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x180}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:23:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x82) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80800, 0x100) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da58b2", 0x29) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000005eb40)={{0x0, 0x6912, 0x4, 0x3, 0x400, 0x100, 0x2, 0x9, 0x1, 0x0, 0x3, 0x6, 0xfffffffffffffff9, 0xff, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000060b40)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x7f, "411ab0b7f6aaeb"}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 08:23:06 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:23:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x700}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:23:07 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) [ 1880.012714] cgroup: Invalid name 08:23:07 executing program 6: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000140)=@v2={0x2000000, [{0x459, 0x2}, {0x4, 0x9}]}, 0x14, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 08:23:07 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x5, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:23:07 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x0) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) [ 1880.080359] cgroup: Invalid name 08:23:07 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:23:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x72d}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1880.305833] serio: Serial port tty33 [ 1880.971842] serio: Serial port tty33 08:23:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x900}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) 08:23:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000640)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@none}, {@cpuset_v2_mode}, {@subsystem='hugetlb'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@hash}]}) 08:23:20 executing program 6: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000140)=@v2={0x2000000, [{0x459, 0x2}, {0x4, 0x9}]}, 0x14, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 08:23:20 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)='\\\x00') request_key(0x0, 0x0, 0x0, r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r1, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 08:23:20 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x0) fsmount(r3, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:23:20 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x52240, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x2140024, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x8) fsmount(r4, 0x0, 0x82) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/71, 0x47}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x5, 0x10001, 0x8, 0x8) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) 08:23:20 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x639d1876ab868171, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x105142, 0xc2) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/80, 0x50}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f00000004c0)=""/149, 0x95}, {0x0}], 0x5, 0x2, 0x1) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x4c20, 0x50, 0x400, 0x0, 0x4d3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4}, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_snmp6\x00') syz_open_procfs(0x0, &(0x7f0000000580)='timers\x00') sendto$unix(r3, &(0x7f00000002c0)="48143da4d38d46b03ce0f7635d84a6863f93e4ed10e68ad707d3b072774a0fa9e42de74b4b38744f56e4028909636e315c4554cf191dd82007dde5e9abac659a271c751780ad902f65c9a07296ca8011beded127f864b925b1ba86543e84975e0e23334ffeaeab5857151fb565e06593a86dcb3eed50f69369c371db640c2377a66c9894459368709abfbbd96dc659beb7050aa549265e62dffce69a7996a954a2a6e0fde6c2bfb8920785fa458078ca3f3c79b9789420011043595df9b8df51101ed5ae133821e86cb35fb5e582337562207ec56f0edc8e1b46e60dc844ae320fb8cfebc823d74aa3e652cbb3f718d1048a", 0xf2, 0x800, &(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite6\x00') fcntl$dupfd(r1, 0x406, r4) sendfile(r0, r3, 0x0, 0x100000001) 08:23:20 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) 08:23:21 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@huge_never}]}) 08:23:21 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000140)=@v2={0x2000000, [{0x459, 0x2}, {0x4, 0x9}]}, 0x14, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 1894.035397] [ 1894.035604] ====================================================== [ 1894.036283] WARNING: possible circular locking dependency detected [ 1894.036968] 5.10.199 #1 Not tainted [ 1894.037392] ------------------------------------------------------ [ 1894.038096] syz-executor.5/11660 is trying to acquire lock: [ 1894.038736] ffff8880159f4b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 1894.039904] [ 1894.039904] but task is already holding lock: [ 1894.040581] ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1894.041583] [ 1894.041583] which lock already depends on the new lock. [ 1894.041583] [ 1894.042502] [ 1894.042502] the existing dependency chain (in reverse order) is: [ 1894.043360] [ 1894.043360] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1894.044114] __mutex_lock+0x13d/0x10b0 [ 1894.044620] rfkill_register+0x36/0xa10 [ 1894.045131] hci_register_dev+0x42e/0xc00 [ 1894.045664] __vhci_create_device+0x2c8/0x5c0 [ 1894.046230] vhci_open_timeout+0x38/0x50 [ 1894.046743] process_one_work+0x9a9/0x14b0 [ 1894.047283] worker_thread+0x61d/0x1310 [ 1894.047797] kthread+0x38f/0x470 [ 1894.048241] ret_from_fork+0x22/0x30 [ 1894.048716] [ 1894.048716] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1894.049445] __mutex_lock+0x13d/0x10b0 [ 1894.049935] vhci_send_frame+0x63/0xa0 [ 1894.052935] hci_send_frame+0x1b9/0x320 [ 1894.053426] hci_tx_work+0x10af/0x1660 [ 1894.053900] process_one_work+0x9a9/0x14b0 [ 1894.054416] worker_thread+0x61d/0x1310 [ 1894.054901] kthread+0x38f/0x470 [ 1894.055322] ret_from_fork+0x22/0x30 [ 1894.055783] [ 1894.055783] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1894.056640] __flush_work+0x105/0xa90 [ 1894.057110] hci_dev_do_close+0x131/0x1240 [ 1894.057614] hci_unregister_dev+0x149/0x430 [ 1894.058147] vhci_release+0x70/0xf0 [ 1894.058601] __fput+0x285/0x980 [ 1894.059013] task_work_run+0xe2/0x1a0 [ 1894.059468] do_exit+0xb6f/0x2600 [ 1894.059888] do_group_exit+0x125/0x310 [ 1894.060372] get_signal+0x4bc/0x22f0 [ 1894.060810] arch_do_signal_or_restart+0x2b7/0x1990 [ 1894.061401] exit_to_user_mode_prepare+0x10f/0x190 [ 1894.061986] syscall_exit_to_user_mode+0x38/0x1e0 [ 1894.062562] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1894.063154] [ 1894.063154] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1894.063831] __mutex_lock+0x13d/0x10b0 [ 1894.064325] bg_scan_update+0x82/0x500 [ 1894.064542] serio: Serial port tty33 [ 1894.064793] process_one_work+0x9a9/0x14b0 [ 1894.064811] worker_thread+0x61d/0x1310 [ 1894.066556] kthread+0x38f/0x470 [ 1894.066972] ret_from_fork+0x22/0x30 [ 1894.067423] [ 1894.067423] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1894.068327] __lock_acquire+0x29e7/0x5b00 [ 1894.068820] lock_acquire+0x197/0x470 [ 1894.069282] __flush_work+0x105/0xa90 [ 1894.069740] __cancel_work_timer+0x368/0x4c0 [ 1894.070267] hci_request_cancel_all+0x73/0x230 [ 1894.070799] hci_dev_do_close+0xd9/0x1240 [ 1894.071287] hci_rfkill_set_block+0x166/0x1a0 [ 1894.071818] rfkill_set_block+0x1fd/0x540 [ 1894.072319] rfkill_fop_write+0x253/0x4b0 [ 1894.072810] vfs_write+0x29a/0xa70 [ 1894.073233] ksys_write+0x1f6/0x260 [ 1894.073675] do_syscall_64+0x33/0x40 [ 1894.074134] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1894.074734] [ 1894.074734] other info that might help us debug this: [ 1894.074734] [ 1894.075590] Chain exists of: [ 1894.075590] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1894.075590] [ 1894.077022] Possible unsafe locking scenario: [ 1894.077022] [ 1894.077639] CPU0 CPU1 [ 1894.078129] ---- ---- [ 1894.078614] lock(rfkill_global_mutex); [ 1894.079047] lock(&data->open_mutex); [ 1894.079714] lock(rfkill_global_mutex); [ 1894.080417] lock((work_completion)(&hdev->bg_scan_update)); [ 1894.081032] [ 1894.081032] *** DEADLOCK *** [ 1894.081032] [ 1894.081670] 1 lock held by syz-executor.5/11660: 08:23:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r0, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0xa00}, "374a806726b2d991f72bf7f75afb504213349b9bd2c8d3f5b999f5613cde4bc48369789adad25d099ad9af9e9ae65d5afa81bb170a5930d11d1d24f773d691c21400398a69cf9a8e968b3b9dcf7e0c779a7b1afadbe435e1f507a8c3512ba2453976121c1e72d51b6a29f369030ad23b106f22654a22f7e7f27f7c2d0867f58e3981cd35a36fb2da610e61c49cc7420cdd9d29dc845eead0cc2257ebee1d174111c39b3242"}, 0xc5) [ 1894.081673] #0: ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1894.081695] [ 1894.081695] stack backtrace: [ 1894.081704] CPU: 1 PID: 11660 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1894.081709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1894.081712] Call Trace: [ 1894.081722] dump_stack+0x107/0x167 [ 1894.081732] check_noncircular+0x263/0x2e0 [ 1894.081741] ? register_lock_class+0xbb/0x17b0 [ 1894.081752] ? print_circular_bug+0x470/0x470 [ 1894.081765] ? find_first_zero_bit+0x94/0xb0 [ 1894.081787] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 1894.081797] __lock_acquire+0x29e7/0x5b00 [ 1894.081811] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1894.081820] ? SOFTIRQ_verbose+0x10/0x10 [ 1894.081829] ? lock_chain_count+0x20/0x20 [ 1894.081838] ? mark_lock+0xf5/0x2df0 [ 1894.081849] lock_acquire+0x197/0x470 [ 1894.081857] ? __flush_work+0xdd/0xa90 [ 1894.081867] ? lock_release+0x680/0x680 [ 1894.081875] ? __flush_work+0x78c/0xa90 [ 1894.081884] ? lock_downgrade+0x6d0/0x6d0 [ 1894.081896] __flush_work+0x105/0xa90 [ 1894.081903] ? __flush_work+0xdd/0xa90 [ 1894.081912] ? lock_chain_count+0x20/0x20 [ 1894.081921] ? queue_delayed_work_on+0xe0/0xe0 [ 1894.081930] ? mark_lock+0xf5/0x2df0 [ 1894.081939] ? mark_lock+0xf5/0x2df0 [ 1894.081949] ? lock_chain_count+0x20/0x20 [ 1894.081958] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1894.081968] ? lock_chain_count+0x20/0x20 [ 1894.081976] ? lock_acquire+0x197/0x470 [ 1894.081984] ? rfkill_send_events+0x1e8/0x390 [ 1894.081994] ? mark_held_locks+0x9e/0xe0 [ 1894.082006] __cancel_work_timer+0x368/0x4c0 [ 1894.082015] ? try_to_grab_pending+0xe0/0xe0 [ 1894.082026] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1894.082034] ? cancel_delayed_work+0x24d/0x2b0 [ 1894.082042] ? trace_hardirqs_on+0x5b/0x180 [ 1894.082050] ? cancel_delayed_work+0x1b8/0x2b0 [ 1894.082059] ? cancel_delayed_work_sync+0x20/0x20 [ 1894.082071] hci_request_cancel_all+0x73/0x230 [ 1894.082079] hci_dev_do_close+0xd9/0x1240 [ 1894.082098] ? rfkill_set_block+0x18f/0x540 [ 1894.082106] ? hci_dev_open+0x350/0x350 [ 1894.082115] ? mark_held_locks+0x9e/0xe0 [ 1894.082126] hci_rfkill_set_block+0x166/0x1a0 [ 1894.082133] ? hci_power_off+0x20/0x20 [ 1894.082141] rfkill_set_block+0x1fd/0x540 [ 1894.082151] rfkill_fop_write+0x253/0x4b0 [ 1894.082159] ? rfkill_sync_work+0xa0/0xa0 [ 1894.082170] ? security_file_permission+0x24e/0x570 [ 1894.082180] ? rfkill_sync_work+0xa0/0xa0 [ 1894.082189] vfs_write+0x29a/0xa70 [ 1894.082199] ksys_write+0x1f6/0x260 [ 1894.082208] ? __ia32_sys_read+0xb0/0xb0 [ 1894.082219] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1894.082228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1894.082238] do_syscall_64+0x33/0x40 [ 1894.082248] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1894.082255] RIP: 0033:0x7f8b3a042b19 [ 1894.082265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1894.082271] RSP: 002b:00007f8b375b8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1894.082280] RAX: ffffffffffffffda RBX: 00007f8b3a155f60 RCX: 00007f8b3a042b19 [ 1894.082286] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1894.082291] RBP: 00007f8b3a09cf6d R08: 0000000000000000 R09: 0000000000000000 [ 1894.082297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1894.082303] R13: 00007ffcc7bda70f R14: 00007f8b375b8300 R15: 0000000000022000 [ 1894.087227] PM: hibernation: Basic memory bitmaps freed [ 1894.089399] cgroup: Invalid name VM DIAGNOSIS: 08:23:21 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff812ff120 RCX=ffffffff85a0e501 RDX=ffffed1008056ef5 RSI=ffffffff816c2e99 RDI=ffff8880402b7840 RBP=ffff8880402b78c8 RSP=ffff8880402b7768 R8 =0000000000000003 R9 =ffff8880402b7b78 R10=0000000000032042 R11=1ffff11008056ef5 R12=ffff8880402b78f8 R13=ffff8880402b7840 R14=1ffff11008056ef5 R15=0000000000000020 RIP=ffffffff8110719f RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7b5d2e9700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000000010c CR3=0000000045fa0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041910a5900000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822ca14c RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff88804782f1d0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000030 R11=0000000000000001 R12=0000000000000060 R13=fffffbfff0f3d088 R14=fffffbfff0f3d03e R15=ffffffff879e81f0 RIP=ffffffff822ca1a0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8b375b8700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555f0d546a50 CR3=000000004bc9c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000