\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:28:45 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x5451, 0x0) 03:28:45 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) (fail_nth: 11) 03:28:45 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x54e3, 0x0) [ 991.240442] 9pnet: Insufficient options for proto=fd [ 991.242427] FAULT_INJECTION: forcing a failure. [ 991.242427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.244937] CPU: 1 PID: 7994 Comm: syz-executor.2 Not tainted 5.10.230 #1 [ 991.246360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 991.248103] Call Trace: [ 991.248650] dump_stack+0x107/0x167 [ 991.249415] should_fail.cold+0x5/0xa [ 991.250200] _copy_to_user+0x2e/0x180 [ 991.250989] simple_read_from_buffer+0xcc/0x160 [ 991.251967] proc_fail_nth_read+0x198/0x230 [ 991.252863] ? proc_sessionid_read+0x230/0x230 [ 991.253814] ? security_file_permission+0xb1/0xe0 [ 991.254807] ? proc_sessionid_read+0x230/0x230 [ 991.255780] vfs_read+0x228/0x620 [ 991.256512] ksys_read+0x12d/0x260 [ 991.257250] ? vfs_write+0xb10/0xb10 [ 991.258039] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.259131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 991.260218] do_syscall_64+0x33/0x40 [ 991.260998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 991.262076] RIP: 0033:0x7fc4fb1af69c [ 991.262861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 991.266711] RSP: 002b:00007fc4f8772170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 991.268317] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4fb1af69c [ 991.269812] RDX: 000000000000000f RSI: 00007fc4f87721e0 RDI: 0000000000000005 [ 991.271304] RBP: 00007fc4f87721d0 R08: 0000000000000000 R09: 0000000000000000 [ 991.272802] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 991.274296] R13: 00007ffd394e0a7f R14: 00007fc4f8772300 R15: 0000000000022000 [ 991.315358] FAULT_INJECTION: forcing a failure. [ 991.315358] name failslab, interval 1, probability 0, space 0, times 0 [ 991.318259] CPU: 0 PID: 8008 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 991.319800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 991.321613] Call Trace: [ 991.322189] dump_stack+0x107/0x167 [ 991.322992] should_fail.cold+0x5/0xa [ 991.323837] ? io_rsrc_data_alloc+0x10e/0x520 [ 991.324840] should_failslab+0x5/0x20 [ 991.325670] __kmalloc+0x72/0x390 [ 991.326431] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 991.327542] io_rsrc_data_alloc+0x10e/0x520 [ 991.328500] ? io_rsrc_buf_put+0x50/0x50 [ 991.329394] io_sqe_files_register+0x1a2/0x820 [ 991.330415] ? io_rsrc_data_alloc+0x520/0x520 [ 991.331406] __do_sys_io_uring_register+0x1c8c/0x2f50 [ 991.332634] ? io_recvmsg+0xd70/0xd70 [ 991.333576] ? fput_many+0x2f/0x1a0 [ 991.334508] ? ksys_write+0x1a9/0x260 [ 991.335494] ? __ia32_sys_read+0xb0/0xb0 [ 991.336529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.337863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 991.339012] do_syscall_64+0x33/0x40 [ 991.339937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 991.341067] RIP: 0033:0x7f282355cb19 [ 991.341909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 991.346624] RSP: 002b:00007f2820ad2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 991.348678] RAX: ffffffffffffffda RBX: 00007f282366ff60 RCX: 00007f282355cb19 [ 991.350574] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 0000000000000004 [ 991.352465] RBP: 00007f2820ad21d0 R08: 0000000000000000 R09: 0000000000000000 [ 991.354339] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 991.355994] R13: 00007ffd62cb740f R14: 00007f2820ad2300 R15: 0000000000022000 03:28:45 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:28:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) [ 991.415312] 9pnet: Insufficient options for proto=fd 03:28:45 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x200}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x12) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x1, 0xb2f3, 0x80000001, 0x841f, 0xc, "0da7ce620ea54061cb02187e5ca9e8fb8cb56c"}) 03:28:45 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:28:45 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:28:45 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x5452, 0x0) [ 991.482073] 9pnet: Insufficient options for proto=fd 03:28:45 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:28:45 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x8924, 0x0) 03:28:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'bond_slave_0\x00'}) [ 991.544052] cgroup: fork rejected by pids controller in /syz4 [ 991.550321] 9pnet: Insufficient options for proto=fd 03:28:46 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:28:46 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_bridge\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) 03:28:46 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 03:28:46 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x3, &(0x7f0000000340)=[r0], 0x1) 03:28:46 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) (fail_nth: 12) 03:28:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x36) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000440)=ANY=[@ANYBLOB="01009300f9000000000000006b85bd5c0e81e9ef6aac74ec0dcafa6ae8450c854d5f5a82053e7b2b5ced3a9aae425b", @ANYRES32=r0, @ANYBLOB="0200000000000008000000696c653000"]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r4, &(0x7f0000001540)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0xa03) timerfd_gettime(r1, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, '0dev/net/tun\x00'}, {0x20, '0dev/net/tun\x00'}, {0x20, '\'.('}, {0x20, '\x00'}], 0xa, "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"}, 0x103b) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000001500)=0x401) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) dup(r0) signalfd(r0, &(0x7f0000000400)={[0x5d42]}, 0x8) r6 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) io_uring_enter(r6, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f00000000c0)) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000100)='U}}\x00', &(0x7f0000000140)='+])\xfa\x00', &(0x7f0000000180)='$-(,+@\x00', &(0x7f0000000200)='/dev/net/tun\x00', &(0x7f0000000240)='/dev/net/tun\x00', &(0x7f0000000280)='P\x01\x00@\x00\x01\x00\x00\x00', &(0x7f0000000080)='/dev/net/tun\x00', &(0x7f0000000300)='--\x00'], &(0x7f00000003c0)=[&(0x7f0000000380)='0dev/net/tun\x00']) 03:28:46 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x5460, 0x0) 03:28:46 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) r1 = dup3(r0, r0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x810, r1, 0x9f00d000) [ 991.776266] FAULT_INJECTION: forcing a failure. [ 991.776266] name failslab, interval 1, probability 0, space 0, times 0 [ 991.779104] CPU: 0 PID: 8059 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 991.780665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 991.782552] Call Trace: [ 991.783239] dump_stack+0x107/0x167 [ 991.784086] should_fail.cold+0x5/0xa [ 991.784946] ? create_object.isra.0+0x3a/0xa20 [ 991.785976] should_failslab+0x5/0x20 [ 991.786849] kmem_cache_alloc+0x5b/0x310 [ 991.787813] create_object.isra.0+0x3a/0xa20 [ 991.788766] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 991.789875] __kmalloc+0x16e/0x390 [ 991.790667] io_rsrc_data_alloc+0x10e/0x520 [ 991.791621] ? io_rsrc_buf_put+0x50/0x50 [ 991.792523] io_sqe_files_register+0x1a2/0x820 [ 991.793530] ? io_rsrc_data_alloc+0x520/0x520 [ 991.794571] __do_sys_io_uring_register+0x1c8c/0x2f50 [ 991.795772] ? io_recvmsg+0xd70/0xd70 [ 991.796717] ? fput_many+0x2f/0x1a0 [ 991.797531] ? ksys_write+0x1a9/0x260 [ 991.798372] ? __ia32_sys_read+0xb0/0xb0 [ 991.799377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.800560] ? syscall_enter_from_user_mode+0x1d/0x50 [ 991.801680] do_syscall_64+0x33/0x40 [ 991.802509] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 991.803619] RIP: 0033:0x7f282355cb19 [ 991.804475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 991.808512] RSP: 002b:00007f2820ad2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 991.810192] RAX: ffffffffffffffda RBX: 00007f282366ff60 RCX: 00007f282355cb19 [ 991.811771] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 0000000000000004 [ 991.813613] RBP: 00007f2820ad21d0 R08: 0000000000000000 R09: 0000000000000000 [ 991.815511] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 991.817344] R13: 00007ffd62cb740f R14: 00007f2820ad2300 R15: 0000000000022000 03:28:58 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x8927, 0x0) 03:28:58 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) (fail_nth: 13) 03:28:58 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x54e3, 0x0) 03:28:58 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, &(0x7f0000000340)=[r0], 0x1) 03:28:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ip6erspan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x8) 03:28:58 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:28:58 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x33a) 03:28:58 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) [ 1003.984604] FAULT_INJECTION: forcing a failure. [ 1003.984604] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.986052] CPU: 1 PID: 8086 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1003.986885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.987905] Call Trace: [ 1003.988235] dump_stack+0x107/0x167 [ 1003.988684] should_fail.cold+0x5/0xa [ 1003.989149] ? kvmalloc_node+0x119/0x170 [ 1003.989642] should_failslab+0x5/0x20 [ 1003.990105] __kmalloc_node+0x76/0x420 [ 1003.990574] ? io_rsrc_data_alloc+0x35c/0x520 [ 1003.991125] kvmalloc_node+0x119/0x170 [ 1003.991593] io_sqe_files_register+0x222/0x820 [ 1003.992164] ? io_rsrc_data_alloc+0x520/0x520 [ 1003.992711] __do_sys_io_uring_register+0x1c8c/0x2f50 [ 1003.993339] ? io_recvmsg+0xd70/0xd70 [ 1003.993805] ? fput_many+0x2f/0x1a0 [ 1003.994246] ? ksys_write+0x1a9/0x260 [ 1003.994706] ? __ia32_sys_read+0xb0/0xb0 [ 1003.995201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.995835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.996475] do_syscall_64+0x33/0x40 [ 1003.996926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.997549] RIP: 0033:0x7f282355cb19 [ 1003.998009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.000254] RSP: 002b:00007f2820ad2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1004.001183] RAX: ffffffffffffffda RBX: 00007f282366ff60 RCX: 00007f282355cb19 [ 1004.002053] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 0000000000000004 [ 1004.002915] RBP: 00007f2820ad21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.003780] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1004.004653] R13: 00007ffd62cb740f R14: 00007f2820ad2300 R15: 0000000000022000 03:28:58 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x5, &(0x7f0000000340)=[r0], 0x1) 03:28:58 executing program 3: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:29:12 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2080c0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:29:12 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 03:29:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x90400, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) 03:29:12 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:29:12 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x894c, 0x0) 03:29:12 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) (fail_nth: 14) 03:29:12 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x8924, 0x0) 03:29:12 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x6, &(0x7f0000000340)=[r0], 0x1) [ 1018.006611] FAULT_INJECTION: forcing a failure. [ 1018.006611] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.008776] CPU: 0 PID: 8111 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1018.010025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1018.011535] Call Trace: [ 1018.012015] dump_stack+0x107/0x167 [ 1018.012694] should_fail.cold+0x5/0xa [ 1018.013393] ? create_object.isra.0+0x3a/0xa20 [ 1018.014217] should_failslab+0x5/0x20 [ 1018.014910] kmem_cache_alloc+0x5b/0x310 [ 1018.015654] create_object.isra.0+0x3a/0xa20 [ 1018.016442] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1018.017370] __kmalloc_node+0x1ae/0x420 [ 1018.018098] ? io_rsrc_data_alloc+0x35c/0x520 [ 1018.018909] kvmalloc_node+0x119/0x170 [ 1018.019622] io_sqe_files_register+0x222/0x820 [ 1018.020451] ? io_rsrc_data_alloc+0x520/0x520 [ 1018.021273] __do_sys_io_uring_register+0x1c8c/0x2f50 [ 1018.022200] ? io_recvmsg+0xd70/0xd70 [ 1018.022890] ? fput_many+0x2f/0x1a0 [ 1018.023544] ? ksys_write+0x1a9/0x260 [ 1018.024226] ? __ia32_sys_read+0xb0/0xb0 [ 1018.024979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1018.025930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1018.026855] do_syscall_64+0x33/0x40 [ 1018.027531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1018.028444] RIP: 0033:0x7f282355cb19 [ 1018.029114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1018.032414] RSP: 002b:00007f2820ad2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1018.033776] RAX: ffffffffffffffda RBX: 00007f282366ff60 RCX: 00007f282355cb19 [ 1018.035040] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 0000000000000004 [ 1018.036331] RBP: 00007f2820ad21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.037608] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1018.038872] R13: 00007ffd62cb740f R14: 00007f2820ad2300 R15: 0000000000022000 03:29:12 executing program 3: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x800454cf, 0x0) r0 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, r0}) 03:29:12 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000002c0)=""/20, 0x14}], 0x4, 0x1ff, 0x7) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x8, 0x0, 0xfffffffe, 0x0, 0x8, "54fa955cc34bf3000000000000000000000004", 0xfffffffc, 0x4}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) 03:29:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x110c, 0x7, 0xa, 0x101, 0x70bd27, 0xe, {0x3, 0x0, 0x8}, [@nested={0x10ef, 0x31, 0x0, 0x1, [@generic="a1d59265396284576e600a8b9ddd1c4cc403cb57cb961aaa50ea17a3172555920f712f6fd4a40e8513768bcfbbd02ba9b321a163059cbf873e0e536f1a1822511ac933e7a0647c7ce25a71d9eb281c19adb3fd6719440b1836f0efa6406c984adf84ece3eeab1fbebc5dabb6598e66eb06db5a23f570af12ca1a8a7cd91012d3e67fd411f42abd4b198770d9208f82707fbe45ac4a0d90afdcf409eebb609f8e29c90ba880888454edc20c75895d2d39e194c7706565940e3e80269c5cc9ea0011574664a567e870379dcbf6d153f92d9c8a3ce23c5c3b4771a46df7dc7bee8cb0f938", @typed={0x8, 0x64, 0x0, 0x0, @u32=0x1}, @generic="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"]}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@multicast2}]}, 0x110c}}, 0xb1163db004f31b3a) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1d) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:29:12 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x7, &(0x7f0000000340)=[r0], 0x1) 03:29:12 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:29:12 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) (fail_nth: 15) 03:29:12 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x8927, 0x0) 03:29:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = dup2(r0, r0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'bridge_slave_0\x00'}) r2 = openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x282100, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'vlan0\x00'}) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) [ 1018.255161] FAULT_INJECTION: forcing a failure. [ 1018.255161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.256980] CPU: 0 PID: 8141 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1018.257999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1018.259238] Call Trace: [ 1018.259637] dump_stack+0x107/0x167 [ 1018.260187] should_fail.cold+0x5/0xa [ 1018.260759] _copy_from_user+0x2e/0x1b0 [ 1018.261350] io_sqe_files_register+0x38a/0x820 [ 1018.262039] ? io_rsrc_data_alloc+0x520/0x520 [ 1018.262722] __do_sys_io_uring_register+0x1c8c/0x2f50 [ 1018.263482] ? io_recvmsg+0xd70/0xd70 [ 1018.264042] ? fput_many+0x2f/0x1a0 [ 1018.264579] ? ksys_write+0x1a9/0x260 [ 1018.265164] ? __ia32_sys_read+0xb0/0xb0 [ 1018.265794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1018.266582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1018.267351] do_syscall_64+0x33/0x40 [ 1018.267911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1018.268676] RIP: 0033:0x7f282355cb19 [ 1018.269223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1018.271944] RSP: 002b:00007f2820ad2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1018.273084] RAX: ffffffffffffffda RBX: 00007f282366ff60 RCX: 00007f282355cb19 [ 1018.274173] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 0000000000000004 [ 1018.275272] RBP: 00007f2820ad21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.276347] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1018.277421] R13: 00007ffd62cb740f R14: 00007f2820ad2300 R15: 0000000000022000 03:29:12 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454c8, 0x0) 03:29:12 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 03:29:12 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x23c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x220, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe2, 0xb, "aeb555642e468a68d879a0712d4b200790f8853bade7e438467062c3fabcb8e83622ecdc90ff5da398618f707e4957e310498381349302c9075ddd87d3853c32d187f65580a87a2ab4b701430c4de609afcd64a7446fec4b886257dfba9ec7b14d46a44c0790ab5fecce255c2063dad482803047b37e0179e62ecccd01ba0e20b02ffecece4338f661166910d7a4b00a69d5ddc600e1f0274ef5862a5deda9e8d115c7d8c6648fdc0b7268d0c8cf711a28999446611e5c67ba3c2fab6f82eb5caad498523d8462cb79928369df204972a85fa2887cae31f62595546864bc"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x124, 0xe, 0x0, 0x1, [{0x2d, 0x0, "d115d41784fbef754532016c564c1b552ef5e3d529a21be00dc8f5aa1525c039bbafc04787cdec8425"}, {0x59, 0x0, "1cc4924b8fa87c401af9b80372b4e1f850f397bea33787718c94706ffae3e5ebaaf55f3e5284e2d2aa75e405dafd06eaf9efb96ee013a1ab29a04d97f75dd3196008e3f6f065e0c1b565c2da780427333a7c1cb687"}, {0x6a, 0x0, "f8fa31e4909b9363f2550e9b56b937434001c79a8a2f7244b186027985975483163c33b1b56a8cdcab84f001f3b7fb57b4247dd8811db085c27b8360e2b95139d6c05155b7f5ef20e1d3cd25626cb7476f71785b5c1a345338d99733e3cb55a1cf7d4b402089"}, {0x28, 0x0, "7e179c7bf5e50ac46ce2e9ff887052607e80a65512529dbde01601261def9cde2c94f589"}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x4000000) 03:29:12 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000340)=[r0], 0x1) 03:29:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x100) dup3(r1, r1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) r6 = dup2(0xffffffffffffffff, r2) r7 = memfd_create(&(0x7f0000000080)='/dev/net/tun\x00', 0x4) syz_io_uring_setup(0x658d, &(0x7f00000002c0)={0x0, 0x1d7e, 0x20, 0x1, 0x4f, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) r9 = perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x80, 0xfa, 0x0, 0x9, 0x0, 0x0, 0x4, 0x25004, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000440), 0x5}, 0x40080, 0x749, 0x4, 0x1, 0x7fff, 0xba, 0xe75, 0x0, 0x49d, 0x0, 0x9}, r1, 0x10, 0xffffffffffffffff, 0x5) syz_io_uring_submit(r5, r8, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x5, 0x6, 0x1, {0x0, 0x0, r9}}, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x75b, &(0x7f0000000100)=[r4, r6, r7], 0x3}, 0xfffffffd) sendfile(r2, r0, &(0x7f00000000c0)=0x3, 0x5) 03:29:12 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x0) 03:29:12 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) (fail_nth: 16) 03:29:12 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:29:12 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x894c, 0x0) [ 1018.524863] FAULT_INJECTION: forcing a failure. [ 1018.524863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.526451] CPU: 0 PID: 8178 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1018.527309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1018.528366] Call Trace: [ 1018.528711] dump_stack+0x107/0x167 [ 1018.529171] should_fail.cold+0x5/0xa [ 1018.529659] _copy_from_user+0x2e/0x1b0 [ 1018.530165] io_sqe_files_register+0x38a/0x820 [ 1018.530745] ? io_rsrc_data_alloc+0x520/0x520 [ 1018.531318] __do_sys_io_uring_register+0x1c8c/0x2f50 [ 1018.531973] ? io_recvmsg+0xd70/0xd70 [ 1018.532452] ? fput_many+0x2f/0x1a0 [ 1018.532920] ? ksys_write+0x1a9/0x260 [ 1018.533395] ? __ia32_sys_read+0xb0/0xb0 [ 1018.533910] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1018.534567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1018.535223] do_syscall_64+0x33/0x40 [ 1018.535691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1018.536338] RIP: 0033:0x7f282355cb19 [ 1018.536812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1018.539131] RSP: 002b:00007f2820ad2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1018.540096] RAX: ffffffffffffffda RBX: 00007f282366ff60 RCX: 00007f282355cb19 [ 1018.541012] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 0000000000000004 [ 1018.541927] RBP: 00007f2820ad21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.542826] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1018.543717] R13: 00007ffd62cb740f R14: 00007f2820ad2300 R15: 0000000000022000 03:29:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000200)={{0x0, 0x1, 0x0, 0x82000000, 0x7, 0x8, 0x8000, 0xff, 0xfff, 0x0, 0x401, 0x1, 0x7, 0xdc4d, 0xfda}}) 03:29:25 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454c8, 0x0) 03:29:25 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) (fail_nth: 17) 03:29:25 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 03:29:25 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454ca, 0x0) 03:29:25 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x319300, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x4000000000, 0x8, 0x4}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) clone3(&(0x7f0000000580)={0xa000, &(0x7f00000002c0)=0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0), {0x2f}, &(0x7f0000000400)=""/167, 0xa7, &(0x7f00000004c0)=""/86, &(0x7f0000000540)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) sendfile(r3, r4, 0x0, 0x4) syz_io_uring_setup(0x71d8, &(0x7f0000000600)={0x0, 0x941e, 0x20, 0x3, 0x1b2, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)=0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r6, 0x7002) syz_io_uring_submit(r2, r5, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r6, &(0x7f0000000700), 0x0, 0x0, 0x80000}, 0x7f) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="a88df8032c2107a152574a21ac6f1a4731abf876eb9e29de77daaf3e4f5d37568fda35d5cb945c579f28c654c63833f06819b12d29a859f9676c1db36dac6c17db5045", 0x43}, {&(0x7f0000000180)="7e7047f7caad637821dcc314a3c7d6bd7dcc986f616a9dbef3a71e48d72b06c8cc8d6f6830b660209546fb60a26af5adbb4dadb0c4121a47010805a071d24880e27061d0c4965d7a38ce2b1c930ce382005738eca98760c3cc305c85c210448dcdd8d5bb5c2c4aaa1b165a1bed4452617462ee123434b995c951a5aafc093d683ac919626eba96f8cd2db1b058fc45b477e3bae40afc48c79b68267a77154b9547b3d4d73b2d4a779813ece7a3b5e8679ac9485d60692d9cdd0da5f53129573f3a7b78c82c1f5fd12b133f2ed449d0ad2a494016190320e7727ce136c5d6784ed8c5301efd82aebc24aec9a2803f39e5", 0xf0}, {&(0x7f0000000040)="fe88a3ff01ad782574af78005f5a25fedd60389a072c3060c8325fa7180285cddc006d73c4201d1df51b", 0x2a}, {&(0x7f0000000280)="2b46b88536a6216796fa61539cb8", 0xe}, {&(0x7f00000002c0)}], 0x5) 03:29:25 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x9, &(0x7f0000000340)=[r0], 0x1) 03:29:25 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1031.543310] FAULT_INJECTION: forcing a failure. [ 1031.543310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.546012] CPU: 0 PID: 8208 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1031.547545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1031.549400] Call Trace: [ 1031.549987] dump_stack+0x107/0x167 [ 1031.550795] should_fail.cold+0x5/0xa [ 1031.551654] _copy_from_user+0x2e/0x1b0 [ 1031.552547] io_sqe_files_register+0x38a/0x820 [ 1031.553590] ? io_rsrc_data_alloc+0x520/0x520 [ 1031.554615] __do_sys_io_uring_register+0x1c8c/0x2f50 [ 1031.555767] ? io_recvmsg+0xd70/0xd70 [ 1031.556617] ? fput_many+0x2f/0x1a0 [ 1031.557442] ? ksys_write+0x1a9/0x260 [ 1031.558291] ? __ia32_sys_read+0xb0/0xb0 [ 1031.559205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1031.560379] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1031.561533] do_syscall_64+0x33/0x40 [ 1031.562354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1031.563510] RIP: 0033:0x7f282355cb19 [ 1031.564337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1031.568463] RSP: 002b:00007f2820ad2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1031.570167] RAX: ffffffffffffffda RBX: 00007f282366ff60 RCX: 00007f282355cb19 [ 1031.571761] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 0000000000000004 [ 1031.573363] RBP: 00007f2820ad21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1031.574956] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1031.576544] R13: 00007ffd62cb740f R14: 00007f2820ad2300 R15: 0000000000022000 03:29:26 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454cb, 0x0) 03:29:26 executing program 3: setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@empty, @dev={0xac, 0x14, 0x14, 0x41}}, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) syz_io_uring_setup(0x3139, &(0x7f00000002c0)={0x0, 0x14ef, 0x2, 0x0, 0x16e, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000200)=""/99) dup(r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)="b2327639cd5df8a1b7dba5d75f69873e8402c1986906fa8c5118b078807ad1c60424c84bad760e68f9d9b8db2f308c0858d06e8a0caf2945a49e95cb93e614e26021c0d6f6671cd75d632a735e5e20d3d33db0f6a2c57627129947273a978f194b002bab628e892370a541", 0x6b, r1}, 0x68) 03:29:26 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0c"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:29:38 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) (fail_nth: 18) 03:29:38 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 03:29:38 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:29:38 executing program 3: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x80000, 0x8) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x5e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 'ovf\x00', 0x24, 0x81, 0x80}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e24, 0x10000, 0x1ff, 0x3350, 0x20}}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x800454cf, 0x0) 03:29:38 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40441, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) r1 = socket$inet(0x2, 0x6, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=@reiserfs_2={0x8, 0x2, {0x3, 0x69d}}, 0x101000) 03:29:38 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x0) 03:29:38 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454cc, 0x0) 03:29:38 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000340)=[r0], 0x1) [ 1044.046571] FAULT_INJECTION: forcing a failure. [ 1044.046571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.049318] CPU: 1 PID: 8238 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1044.050855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1044.052696] Call Trace: [ 1044.053290] dump_stack+0x107/0x167 [ 1044.054119] should_fail.cold+0x5/0xa [ 1044.054976] _copy_to_user+0x2e/0x180 [ 1044.055831] simple_read_from_buffer+0xcc/0x160 [ 1044.056867] proc_fail_nth_read+0x198/0x230 [ 1044.057824] ? proc_sessionid_read+0x230/0x230 [ 1044.058827] ? security_file_permission+0xb1/0xe0 [ 1044.059892] ? proc_sessionid_read+0x230/0x230 [ 1044.060887] vfs_read+0x228/0x620 [ 1044.061680] ksys_read+0x12d/0x260 [ 1044.062480] ? vfs_write+0xb10/0xb10 [ 1044.063311] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1044.064462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1044.065617] do_syscall_64+0x33/0x40 [ 1044.066441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1044.067582] RIP: 0033:0x7f282350f69c [ 1044.068409] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1044.072467] RSP: 002b:00007f2820ad2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1044.074165] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f282350f69c [ 1044.075746] RDX: 000000000000000f RSI: 00007f2820ad21e0 RDI: 0000000000000006 [ 1044.077334] RBP: 00007f2820ad21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1044.078930] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1044.080501] R13: 00007ffd62cb740f R14: 00007f2820ad2300 R15: 0000000000022000 [ 1044.082318] audit: type=1400 audit(1733196578.510:14): avc: denied { create } for pid=8245 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 03:29:38 executing program 3: r0 = syz_io_uring_setup(0x4d52, &(0x7f0000000240)={0x0, 0xfffffffc, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x6, 0x18, [0x2, 0x8, 0x4f, 0x6eda], &(0x7f0000000000)=[0x0, 0x0, 0x0]}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x2aa}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x3e84, &(0x7f00000013c0)={0x0, 0x750c, 0x8, 0x3, 0x2c9, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000001440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc1}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000001380)=@IORING_OP_WRITEV={0x2, 0x4, 0x4000, @fd_index, 0x100000000, &(0x7f0000000180)=[{&(0x7f0000000100)="a151621f0e67bee2047878676abb622b2f4f0b236e7da0a0c1e4ca3ca08f485f69e51503bbf738960b9e7b2e6671d61d7e0a8d7d6a93bd46107e1ba1d39c41a66d5748047621f02a16e7c255e619fed19287581443b018f8774c06985e752b92cc4eaeba9e1313c2bf7f9d6285f770a55403cfc8375d3576077e45caa2ac", 0x7e}, {&(0x7f00000002c0)="a4faf67c119ac554c2f0d8ab2ab3b9cb4189e71976ba25c1b08e56fbbe0386348999e4594aa50fe078f411a5d1c765181d71d9c3e2df09a4e227e6783b8a0c1b4f02f9b1a16107b1dee258281c07f531c20de30db661cad1cd854112e4ae21f4ced9f5c16fde67bce2bffb7131eca42d54c902698b1b32ffb706fb5e1c122a4bb42427d80ba7ddd0c3e3e440d4261e7281a7652defbc207ff0dfaf6df6b905808381e6c7adf9adf1c73bbfe4a418", 0xae}, {&(0x7f0000000380)="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", 0xffb}], 0x3, 0x26, 0x0, {0x0, r4}}, 0x3) 03:29:38 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xb, &(0x7f0000000340)=[r0], 0x1) 03:29:38 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:29:38 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454cd, 0x0) 03:29:38 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454ca, 0x0) 03:29:52 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x0) 03:29:52 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:29:52 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000200)=@hopopts={0x1d, 0x205, '\x00', [@hao={0xc9, 0x10, @mcast2}, @pad1, @generic={0x5, 0x1000, "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"}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x6a71}]}, 0x1038) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:29:52 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:29:52 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xc, &(0x7f0000000340)=[r0], 0x1) 03:29:52 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454cb, 0x0) 03:29:52 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 03:29:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001300)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000012c0)='./file1\x00', 0x134, 0x181000, 0x12345}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000001380)={'syzkaller0\x00'}) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8001, 0x5, &(0x7f0000000140)=[{&(0x7f0000000080)="7995b0cd4e29020c89e1a0f0d3542a94a5f8e2778fc64ae81b8278bd957ea15422212fd55b1bd03649", 0x29, 0x80000000}, {&(0x7f00000000c0)="39f40d914e3db5eb937789debfdcccc9ea2acb1e0efdb9f926ef3a4f997700a9036821b7a80b0e9fb3d01d6dedd64de2c06d79d1df1978a0", 0x38, 0x4}, {&(0x7f0000000100)="66a307890954aae70c64fc3acb4b45c63274a9565a543a06ddd6c66e608873045de7aff90584", 0x26}, {&(0x7f0000000200)="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", 0x1000, 0xff}, {&(0x7f0000001200)="0b75d302d36f9b2cdcf88d519d82e21a1c6aeca714d9b07ea576c91583a85fde8351d6d4159c25c48dbddcc174fac9acb31e0ea7a07fbecc6a9af4acba6ede6e0b94b921ba3e370914cc56902977205c287ec8f4d870eec974bb783b7106368bce6d3cb52f0ef206aaa5e34266af438b74e02d45f9e5fe99b19eeae48f81729712f98d928e99dda43027de7f93862635d74b728da25856970ab61cbb93d68b2f0ee23281e58fe9d7e0726d4c222cff304be18b591e45fe", 0xb7, 0x3}], 0xc00, &(0x7f00000014c0)={[{@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@nonumtail}, {@uni_xlate}, {@uni_xlate}, {@shortname_win95}], [{@dont_hash}, {@subj_user={'subj_user', 0x3d, '\x1c}'}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'obj_type'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type}]}) r6 = syz_open_dev$vcsa(&(0x7f00000013c0), 0xfffffffffffffff7, 0xc801) ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f0000001400)) dup3(r1, r5, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', &(0x7f0000000100)={0x1c12c1, 0x1a8, 0x13}, 0x18) fsetxattr$security_ima(r7, &(0x7f0000000140), &(0x7f0000000380)=@v2={0x6, 0x3, 0x0, 0x1, 0xf2, "de61c18ac5d3f8cf90258f0a0b145255ca50f7f3875d15b2c211cc6279e09653ca4bd11d4f3adb9be1cb1c1e8f28f8ef04bcc7d8e9a7b75cd3b37e984a0ec86e70b3cc5811f22b86d68ebc4341806f17d5237ca558441f98daafd92a72472040e0a5f10b756cd45b74b3247eb2a65a507500eba2c583d1b7cafcf81ed92ba3c0290453c8de435bb0cbf775e72bb774fdd16b6fe1733f5d6bce6539461cec475b60e24e8551a49354959c6180ae62831a98e03add1721a83cf7d9a28b890bd2fbe06285bb7fe5b79615470bf42b0928da1579946c1cb6ffc35a8cf06cb349aec46dd36feac937af74b5a4765176c88cadc800"}, 0xfb, 0x1) renameat(r5, &(0x7f0000001440)='./file0\x00', r7, &(0x7f0000001480)='./file1\x00') 03:29:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000040), 0xfffffffffffffff7, 0x0, [0x80000000, 0x5, 0x1e0, 0x917]}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000002c0)=""/232) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/keyboard', 0x10402, 0x98) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000280)=0x1) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0xfff) 03:29:52 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xd, &(0x7f0000000340)=[r0], 0x1) 03:29:52 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:29:52 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 03:29:52 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:29:52 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x3, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:29:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0xa) 03:29:52 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454cc, 0x0) 03:29:52 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xe, &(0x7f0000000340)=[r0], 0x1) 03:29:52 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:29:52 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x5, 0x1, 0x80, 0x6, 0x7fffffff}) 03:30:05 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x2, 'w\x00\b\x00\x00\x00\x00\x00\x00\x00\b\x00&\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12, 0x30, r1, 0x79f94000) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:30:05 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d1, 0x0) 03:30:05 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:30:05 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:30:05 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xf, &(0x7f0000000340)=[r0], 0x1) 03:30:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) dup3(r0, r0, 0x80000) 03:30:05 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454cd, 0x0) 03:30:05 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:30:06 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x0) 03:30:06 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x10, &(0x7f0000000340)=[r0], 0x1) 03:30:06 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x5, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:30:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x7ff7, 0x0, 0x2, 0x0, 0xfffffffffffffe78) dup3(0xffffffffffffffff, r2, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) 03:30:06 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="d2452ab94a2a0100f6ae65b43000"/24]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x20010, r1, 0x8000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0\x00'}) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/183, 0xb7}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3, 0x7, 0x5) syz_io_uring_setup(0x6ed3, &(0x7f00000002c0)={0x0, 0x5a40, 0x2, 0x1, 0x35, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r2, &(0x7f00000003c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0xa, 0x800, 0x0, 0x8, 0x2}, 0x7) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[r1, r3, 0xffffffffffffffff, r3, r1, 0xffffffffffffffff, r0, r3]}, 0x8) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) 03:30:06 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 03:30:06 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:30:06 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:30:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETLINK(r1, 0x400454cd, 0x201) 03:30:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101001, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:30:19 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1f000000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf251c0000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x2004) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x5}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x49c9, 0x7fff, 0x583, 0xf6f, 0x7}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) 03:30:19 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 1) 03:30:19 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:30:19 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x11, &(0x7f0000000340)=[r0], 0x1) [ 1084.989777] FAULT_INJECTION: forcing a failure. [ 1084.989777] name failslab, interval 1, probability 0, space 0, times 0 03:30:19 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d8, 0x0) 03:30:19 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x6, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:30:19 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) [ 1084.991584] CPU: 0 PID: 8407 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1084.992777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1084.994037] Call Trace: [ 1084.994446] dump_stack+0x107/0x167 [ 1084.995022] should_fail.cold+0x5/0xa [ 1084.995597] should_failslab+0x5/0x20 [ 1084.996209] __kmalloc_track_caller+0x79/0x370 [ 1084.996879] ? strndup_user+0x74/0xe0 [ 1084.997450] memdup_user+0x22/0xd0 [ 1084.997990] strndup_user+0x74/0xe0 [ 1084.998568] __x64_sys_mount+0x133/0x300 [ 1084.999206] ? copy_mnt_ns+0xa00/0xa00 [ 1084.999804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1085.000626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.001436] do_syscall_64+0x33/0x40 [ 1085.002007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1085.002806] RIP: 0033:0x7f5793fc9b19 [ 1085.003392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.006137] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1085.007328] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1085.008396] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1085.009481] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1085.010572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.011700] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:30:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000040)=0xfff) 03:30:19 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x12, &(0x7f0000000340)=[r0], 0x1) 03:30:19 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x7, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:30:19 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x9, "77004ade02ff001a00000000f90000f700", 0x0, 0x80}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x4, 0x0, r3, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x4000, 0x1}, 0x8) 03:30:19 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d9, 0x0) 03:30:32 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:30:32 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x0) 03:30:32 executing program 7: prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='veth0_vlan\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='.\xd5-#!\x00') ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x9, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:30:32 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 2) 03:30:32 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/166) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x800454cf, 0x0) 03:30:32 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:30:32 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000340)=[r0], 0x1) 03:30:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d1, 0x0) [ 1098.520146] FAULT_INJECTION: forcing a failure. [ 1098.520146] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.524211] CPU: 0 PID: 8452 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1098.525879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1098.527908] Call Trace: [ 1098.528549] dump_stack+0x107/0x167 [ 1098.529432] should_fail.cold+0x5/0xa [ 1098.530362] ? create_object.isra.0+0x3a/0xa20 [ 1098.531480] should_failslab+0x5/0x20 [ 1098.532405] kmem_cache_alloc+0x5b/0x310 [ 1098.533393] create_object.isra.0+0x3a/0xa20 [ 1098.534455] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1098.535704] __kmalloc_track_caller+0x177/0x370 [ 1098.536830] ? strndup_user+0x74/0xe0 [ 1098.537757] memdup_user+0x22/0xd0 [ 1098.538618] strndup_user+0x74/0xe0 [ 1098.539507] __x64_sys_mount+0x133/0x300 [ 1098.540486] ? copy_mnt_ns+0xa00/0xa00 [ 1098.541438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1098.542706] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1098.543963] do_syscall_64+0x33/0x40 [ 1098.544864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1098.546106] RIP: 0033:0x7f5793fc9b19 [ 1098.547005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1098.551487] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1098.553329] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1098.555059] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1098.556792] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1098.558521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.560265] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:30:33 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x400840, 0xf) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000200)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bond_slave_0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0x7ff, 0x20001) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000140)) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x30440, 0x0) 03:30:33 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x14, &(0x7f0000000340)=[r0], 0x1) 03:30:33 executing program 3: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x81, 0x1}}, './file0\x00'}) ioctl$TUNSETOFFLOAD(r2, 0x800454cf, 0x1f) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r3, 0x7002) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000080)=0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) 03:30:33 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x9, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:30:33 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 03:30:33 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2f800, &(0x7f0000000340)=[r0], 0x1) 03:30:33 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454dc, 0x0) 03:30:33 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:30:46 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:30:46 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d8, 0x0) 03:30:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'wg1\x00'}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00) dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:30:46 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:30:46 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)={0x2e, 0x6, '\x00', [@hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x8, [0x10001]}}, @pad1, @ra={0x5, 0x2, 0x1ff}, @ra={0x5, 0x2, 0x5}, @pad1]}, 0x40) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:30:46 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x2) 03:30:46 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 3) 03:30:46 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454e2, 0x0) [ 1112.460145] FAULT_INJECTION: forcing a failure. [ 1112.460145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.462834] CPU: 0 PID: 8509 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1112.464385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.466237] Call Trace: [ 1112.466839] dump_stack+0x107/0x167 [ 1112.467653] should_fail.cold+0x5/0xa [ 1112.468518] _copy_from_user+0x2e/0x1b0 [ 1112.469407] memdup_user+0x65/0xd0 [ 1112.470196] strndup_user+0x74/0xe0 [ 1112.471006] __x64_sys_mount+0x133/0x300 [ 1112.471923] ? copy_mnt_ns+0xa00/0xa00 [ 1112.472794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.473965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.475119] do_syscall_64+0x33/0x40 [ 1112.475958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.477099] RIP: 0033:0x7f5793fc9b19 [ 1112.477932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.482065] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.483772] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1112.485380] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1112.486979] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1112.488587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.490193] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:30:47 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 4) 03:30:47 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x3) 03:30:47 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_io_uring_setup(0x342c, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) fstatfs(r1, &(0x7f0000000080)=""/174) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x2, 0x9}) 03:30:47 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xb, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:30:47 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x40049409, 0x0) 03:30:47 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:30:47 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d9, 0x0) 03:30:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000, 0x400, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) move_mount(r4, &(0x7f0000000380)='./file0\x00', r1, &(0x7f00000003c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) [ 1112.689482] SELinux: duplicate or incompatible mount options [ 1112.695797] FAULT_INJECTION: forcing a failure. [ 1112.695797] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.698573] CPU: 1 PID: 8533 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1112.700247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.702311] Call Trace: [ 1112.702947] dump_stack+0x107/0x167 [ 1112.703819] should_fail.cold+0x5/0xa [ 1112.704761] ? copy_mount_options+0x55/0x180 [ 1112.705836] should_failslab+0x5/0x20 [ 1112.706746] kmem_cache_alloc_trace+0x55/0x320 [ 1112.707852] ? _copy_from_user+0xfb/0x1b0 [ 1112.708880] copy_mount_options+0x55/0x180 [ 1112.709911] __x64_sys_mount+0x1a8/0x300 [ 1112.710890] ? copy_mnt_ns+0xa00/0xa00 [ 1112.711823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.712387] SELinux: duplicate or incompatible mount options [ 1112.713094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.713118] do_syscall_64+0x33/0x40 [ 1112.716612] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.717834] RIP: 0033:0x7f5793fc9b19 [ 1112.718745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.723150] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.724977] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1112.726703] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1112.728436] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1112.730141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.731877] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:30:47 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x14) 03:30:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00'}) 03:31:01 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:31:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x17) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 03:31:01 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:31:01 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 5) 03:31:01 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xc, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:31:01 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x0) 03:31:01 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x0) 03:31:01 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x300) [ 1127.315813] FAULT_INJECTION: forcing a failure. [ 1127.315813] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.318354] CPU: 1 PID: 8577 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1127.319792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1127.321537] Call Trace: [ 1127.322090] dump_stack+0x107/0x167 [ 1127.322852] should_fail.cold+0x5/0xa [ 1127.323652] ? create_object.isra.0+0x3a/0xa20 [ 1127.324617] should_failslab+0x5/0x20 [ 1127.325413] kmem_cache_alloc+0x5b/0x310 [ 1127.326266] create_object.isra.0+0x3a/0xa20 [ 1127.327186] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1127.328253] kmem_cache_alloc_trace+0x151/0x320 [ 1127.329233] ? _copy_from_user+0xfb/0x1b0 [ 1127.330112] copy_mount_options+0x55/0x180 [ 1127.330998] __x64_sys_mount+0x1a8/0x300 [ 1127.331844] ? copy_mnt_ns+0xa00/0xa00 [ 1127.332678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1127.333777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1127.334863] do_syscall_64+0x33/0x40 [ 1127.335643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1127.336726] RIP: 0033:0x7f5793fc9b19 [ 1127.337503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1127.341376] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:31:01 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1100) [ 1127.342974] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1127.344707] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1127.346204] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1127.347699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.349193] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:31:15 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 6) 03:31:15 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x40087602, 0x0) 03:31:15 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1200) 03:31:15 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:31:15 executing program 3: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, 0xffffffffffffffff, 0xafbf9000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x14d040, 0x0) dup(r1) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0xfffffffffffffdfd, 0x40000) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) 03:31:15 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x100000, 0x0, 0x0, 0x0, 0x2, 'w\x00Kn\x00\x00\x00\x00\b\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'wg0\x00'}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) 03:31:15 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xd, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:31:15 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454dc, 0x0) [ 1141.146113] FAULT_INJECTION: forcing a failure. [ 1141.146113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1141.149073] CPU: 0 PID: 8596 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1141.150729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.152734] Call Trace: [ 1141.153379] dump_stack+0x107/0x167 [ 1141.154255] should_fail.cold+0x5/0xa [ 1141.155183] _copy_from_user+0x2e/0x1b0 [ 1141.156155] copy_mount_options+0x76/0x180 [ 1141.157187] __x64_sys_mount+0x1a8/0x300 [ 1141.158169] ? copy_mnt_ns+0xa00/0xa00 [ 1141.159106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.160366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.161641] do_syscall_64+0x33/0x40 [ 1141.162534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.163765] RIP: 0033:0x7f5793fc9b19 [ 1141.164659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.169120] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1141.170954] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1141.172671] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1141.174398] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1141.176135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.177869] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:31:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fstat(r0, &(0x7f0000000080)) 03:31:15 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:31:15 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1300) 03:31:15 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xe, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:31:15 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x401054d5, 0x0) 03:31:15 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454e2, 0x0) 03:31:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'bond_slave_1\x00'}) socket$inet(0x2, 0x800, 0x400) r1 = fcntl$getown(r0, 0x9) r2 = gettid() pidfd_open(r2, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x86040, 0xc, 0x8}, 0x18) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={0xffffffffffffffff, r3}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:31:15 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:31:15 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 7) 03:31:15 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000200)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net\x00') ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) 03:31:15 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x82000) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000140)={0x0, 0xf5c, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:31:15 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xf, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:31:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) [ 1141.524174] FAULT_INJECTION: forcing a failure. [ 1141.524174] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.526907] CPU: 1 PID: 8645 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1141.528443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.530307] Call Trace: [ 1141.530913] dump_stack+0x107/0x167 [ 1141.531733] should_fail.cold+0x5/0xa [ 1141.532585] ? getname_flags.part.0+0x50/0x4f0 [ 1141.533632] should_failslab+0x5/0x20 [ 1141.534480] kmem_cache_alloc+0x5b/0x310 [ 1141.535395] getname_flags.part.0+0x50/0x4f0 [ 1141.536378] ? _copy_from_user+0xfb/0x1b0 [ 1141.537311] user_path_at_empty+0xa1/0x100 [ 1141.538251] __x64_sys_mount+0x1e9/0x300 [ 1141.539150] ? copy_mnt_ns+0xa00/0xa00 [ 1141.540023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.541206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.542361] do_syscall_64+0x33/0x40 [ 1141.543192] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.544337] RIP: 0033:0x7f5793fc9b19 [ 1141.545179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.549298] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1141.551000] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1141.552595] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1141.554193] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1141.555794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.557400] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:31:16 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x401054d6, 0x0) 03:31:16 executing program 7: pwrite64(0xffffffffffffffff, &(0x7f0000000040)="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", 0x15c, 0x5) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:31:16 executing program 2: utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x1, 0x1000}) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x14d4f, &(0x7f0000000240)={0x0, 0x7121, 0x0, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:31:16 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x40049409, 0x0) 03:31:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:31:16 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x10, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:31:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x0) 03:31:28 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:31:28 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x11, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:31:28 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 8) 03:31:28 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x81, 0x305100) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$KDDISABIO(r5, 0x4b37) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[r1, r3, r4]}, 0x3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:31:28 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x4020940d, 0x0) 03:31:28 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x800454cf, 0xc) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000b, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) ftruncate(r0, 0x1) 03:31:28 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000005002a000900000008000200", @ANYRES32=r2, @ANYBLOB="0500290000000000"], 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c6ede131bca34e8c5027930e6d8f968c41c9c5361106930d46089b73362c68704b7ea23001ca32845938cb4a40131113128a0feecf59aae6a5f8b41f16dd1ffa627de277b181a9cf08364f203de7", @ANYRES16=r7, @ANYBLOB="0100007f5dc5b37a20a36c40a2a89787d9a1b90a4323f8690109", @ANYRES32=r6, @ANYBLOB="0500290000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x5c, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}]}, 0x5c}}, 0x800) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r9, 0x0) setreuid(0xffffffffffffffff, r9) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@subsystem='net'}, {@xattr}, {@name={'name', 0x3d, '}'}}, {@cpuset_v2_mode}, {@none}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x39, 0x61, 0x37, 0x33, 0x65, 0x33], 0x2d, [0x61, 0x31, 0x54, 0x36], 0x2d, [0x36, 0x35, 0x33, 0x37], 0x2d, [0x33, 0x32, 0x32, 0x61], 0x2d, [0x5b, 0x62, 0x36, 0x35, 0x64, 0x61, 0x61, 0x66]}}}, {@fsname={'fsname', 0x3d, '\x93'}}, {@permit_directio}, {@hash}, {@uid_gt={'uid>', r9}}]}) r10 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000340)=[r8], 0x1) [ 1154.244925] FAULT_INJECTION: forcing a failure. [ 1154.244925] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.246762] CPU: 0 PID: 8691 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1154.247787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1154.249059] Call Trace: [ 1154.249462] dump_stack+0x107/0x167 [ 1154.250011] should_fail.cold+0x5/0xa [ 1154.250584] ? create_object.isra.0+0x3a/0xa20 [ 1154.251265] should_failslab+0x5/0x20 [ 1154.251840] kmem_cache_alloc+0x5b/0x310 [ 1154.252458] create_object.isra.0+0x3a/0xa20 [ 1154.253111] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1154.253902] kmem_cache_alloc+0x159/0x310 [ 1154.254532] getname_flags.part.0+0x50/0x4f0 [ 1154.255199] ? _copy_from_user+0xfb/0x1b0 [ 1154.255826] user_path_at_empty+0xa1/0x100 [ 1154.256462] __x64_sys_mount+0x1e9/0x300 [ 1154.257077] ? copy_mnt_ns+0xa00/0xa00 [ 1154.257677] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1154.258475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1154.259252] do_syscall_64+0x33/0x40 [ 1154.259815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1154.260597] RIP: 0033:0x7f5793fc9b19 [ 1154.261165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1154.263962] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1154.265138] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1154.266259] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1154.267349] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1154.268432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.269523] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:31:43 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x3262, 0x1, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:31:43 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x5) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:31:43 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:31:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0xa) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffffffffebd0, 0x0, 0x8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) pwrite64(r1, &(0x7f0000000000)="3b2ea6873f33f885fcc27c612b867b1f4717f255dd673cdffa1efd55f929a18ea2252f13dea2ef62f80fa1432fcfcfc586a761b23d95f21f88e05174bb9dcb5a528ad28f3119a07278d24399fdedd1f2fb7c46124d", 0x55, 0xffffffffffffffc1) 03:31:43 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x12, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:31:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x40087602, 0x0) 03:31:43 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 9) 03:31:43 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) [ 1169.038111] FAULT_INJECTION: forcing a failure. [ 1169.038111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.041045] CPU: 0 PID: 8728 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1169.042734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.044728] Call Trace: [ 1169.045377] dump_stack+0x107/0x167 [ 1169.046259] should_fail.cold+0x5/0xa [ 1169.047203] strncpy_from_user+0x34/0x470 [ 1169.048227] getname_flags.part.0+0x95/0x4f0 [ 1169.049307] ? _copy_from_user+0xfb/0x1b0 [ 1169.050332] user_path_at_empty+0xa1/0x100 [ 1169.051372] __x64_sys_mount+0x1e9/0x300 [ 1169.052274] ? copy_mnt_ns+0xa00/0xa00 [ 1169.053119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1169.054260] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1169.055378] do_syscall_64+0x33/0x40 [ 1169.056182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1169.057295] RIP: 0033:0x7f5793fc9b19 [ 1169.058105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.062176] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1169.063823] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1169.065363] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1169.066911] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1169.068458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.070009] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:31:43 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x23c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x220, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe2, 0xb, "aeb555642e468a68d879a0712d4b200790f8853bade7e438467062c3fabcb8e83622ecdc90ff5da398618f707e4957e310498381349302c9075ddd87d3853c32d187f65580a87a2ab4b701430c4de609afcd64a7446fec4b886257dfba9ec7b14d46a44c0790ab5fecce255c2063dad482803047b37e0179e62ecccd01ba0e20b02ffecece4338f661166910d7a4b00a69d5ddc600e1f0274ef5862a5deda9e8d115c7d8c6648fdc0b7268d0c8cf711a28999446611e5c67ba3c2fab6f82eb5caad498523d8462cb79928369df204972a85fa2887cae31f62595546864bc"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x124, 0xe, 0x0, 0x1, [{0x2d, 0x0, "d115d41784fbef754532016c564c1b552ef5e3d529a21be00dc8f5aa1525c039bbafc04787cdec8425"}, {0x59, 0x0, "1cc4924b8fa87c401af9b80372b4e1f850f397bea33787718c94706ffae3e5ebaaf55f3e5284e2d2aa75e405dafd06eaf9efb96ee013a1ab29a04d97f75dd3196008e3f6f065e0c1b565c2da780427333a7c1cb687"}, {0x6a, 0x0, "f8fa31e4909b9363f2550e9b56b937434001c79a8a2f7244b186027985975483163c33b1b56a8cdcab84f001f3b7fb57b4247dd8811db085c27b8360e2b95139d6c05155b7f5ef20e1d3cd25626cb7476f71785b5c1a345338d99733e3cb55a1cf7d4b402089"}, {0x28, 0x0, "7e179c7bf5e50ac46ce2e9ff887052607e80a65512529dbde01601261def9cde2c94f589"}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1f, 0x73}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000340)=[r5], 0x1) 03:31:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x43cdc1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:31:43 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454d2, 0x0) 03:31:43 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:31:43 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:31:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x401054d5, 0x0) 03:31:43 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 10) 03:31:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r0}, {@val, @actul_num={@val=0x2b, 0x6, 0x6b}}}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:31:43 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffff0000}}, './file0\x00'}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x60200, 0x20) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETLINK(r1, 0x400454cd, 0x301) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0xfffffffffffffc01, 0x3, &(0x7f0000000580)=[{&(0x7f0000000400)="7c6be577ee200a9a92108264c9ac5dd63fb8d1aacd8bc9ad6270df6df3b600f85b051ea0cf15bdbf138ebf663a183e3c26c90db221c5c971cc49ec1227cd7756a32a4746d7cdb9c9b8f823c4b0fc0c4c38acf6dc88615570a8e37ffa4b607974b00eb167931afda5fefe05fb744066c01af3d9373dbad405cd21e4f4be89fa1435ee3d8f28dc04e7d1a9daa08bc1c8c5d24f6fd163d1f98d5586974fe15a1546af3ff8caaf30d2b6c07ee47157ecba6faf02ec9e9a39c5a4a9476e2c064c7362a54fb76677a355", 0xc7, 0xfffffffffffffffd}, {&(0x7f0000000940)="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", 0x1000, 0x4}, {&(0x7f0000000500)="a82bb44c1feb82f2c696e1727d3305f533e216c99f2fa8f7849955679e630edf9580eb916ea5edbe9f7d2f1afe4a090d078362307942d30c785e0e35b28e3eff3208db91396a72a677", 0x49, 0x7fff}], 0x1000000, &(0x7f0000000600)={[{@bh}, {@nodiscard}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x454a}}, {@nogrpid}, {@stripe}, {@grpjquota}], [{@smackfshat={'smackfshat', 0x3d, '\x02\x02\x02\x02\x02\x02'}}, {@dont_appraise}, {@audit}, {@dont_measure}, {@smackfsroot}, {@seclabel}]}) unlinkat(r5, &(0x7f00000006c0)='./file0/file0\x00', 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x23c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x220, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe2, 0xb, "aeb555642e468a68d879a0712d4b200790f8853bade7e438467062c3fabcb8e83622ecdc90ff5da398618f707e4957e310498381349302c9075ddd87d3853c32d187f65580a87a2ab4b701430c4de609afcd64a7446fec4b886257dfba9ec7b14d46a44c0790ab5fecce255c2063dad482803047b37e0179e62ecccd01ba0e20b02ffecece4338f661166910d7a4b00a69d5ddc600e1f0274ef5862a5deda9e8d115c7d8c6648fdc0b7268d0c8cf711a28999446611e5c67ba3c2fab6f82eb5caad498523d8462cb79928369df204972a85fa2887cae31f62595546864bc"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x124, 0xe, 0x0, 0x1, [{0x2d, 0x0, "d115d41784fbef754532016c564c1b552ef5e3d529a21be00dc8f5aa1525c039bbafc04787cdec8425"}, {0x59, 0x0, "1cc4924b8fa87c401af9b80372b4e1f850f397bea33787718c94706ffae3e5ebaaf55f3e5284e2d2aa75e405dafd06eaf9efb96ee013a1ab29a04d97f75dd3196008e3f6f065e0c1b565c2da780427333a7c1cb687"}, {0x6a, 0x0, "f8fa31e4909b9363f2550e9b56b937434001c79a8a2f7244b186027985975483163c33b1b56a8cdcab84f001f3b7fb57b4247dd8811db085c27b8360e2b95139d6c05155b7f5ef20e1d3cd25626cb7476f71785b5c1a345338d99733e3cb55a1cf7d4b402089"}, {0x28, 0x0, "7e179c7bf5e50ac46ce2e9ff887052607e80a65512529dbde01601261def9cde2c94f589"}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x23c, r8, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x220, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe2, 0xb, "aeb555642e468a68d879a0712d4b200790f8853bade7e438467062c3fabcb8e83622ecdc90ff5da398618f707e4957e310498381349302c9075ddd87d3853c32d187f65580a87a2ab4b701430c4de609afcd64a7446fec4b886257dfba9ec7b14d46a44c0790ab5fecce255c2063dad482803047b37e0179e62ecccd01ba0e20b02ffecece4338f661166910d7a4b00a69d5ddc600e1f0274ef5862a5deda9e8d115c7d8c6648fdc0b7268d0c8cf711a28999446611e5c67ba3c2fab6f82eb5caad498523d8462cb79928369df204972a85fa2887cae31f62595546864bc"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x124, 0xe, 0x0, 0x1, [{0x2d, 0x0, "d115d41784fbef754532016c564c1b552ef5e3d529a21be00dc8f5aa1525c039bbafc04787cdec8425"}, {0x59, 0x0, "1cc4924b8fa87c401af9b80372b4e1f850f397bea33787718c94706ffae3e5ebaaf55f3e5284e2d2aa75e405dafd06eaf9efb96ee013a1ab29a04d97f75dd3196008e3f6f065e0c1b565c2da780427333a7c1cb687"}, {0x6a, 0x0, "f8fa31e4909b9363f2550e9b56b937434001c79a8a2f7244b186027985975483163c33b1b56a8cdcab84f001f3b7fb57b4247dd8811db085c27b8360e2b95139d6c05155b7f5ef20e1d3cd25626cb7476f71785b5c1a345338d99733e3cb55a1cf7d4b402089"}, {0x28, 0x0, "7e179c7bf5e50ac46ce2e9ff887052607e80a65512529dbde01601261def9cde2c94f589"}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x130, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x3, 0x6, 0x0, {0x10001, 0x81, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}, 0x8, 0xfffffffc, 0xe3}}, @NL80211_ATTR_KEYS={0x60, 0x51, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "ca700c0058829b77e8fd1f8fec"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "844832f256f9f8b6dc88ec86c5"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f78a389300ef2ecac382d61459"}]}]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x1, 0x1, 0x0, {0x320c, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0x0, 0x1f}}, @NL80211_ATTR_KEYS={0x50, 0x51, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "16b8978137"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xffffffff}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c}, 0x8880) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:31:43 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x22) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x216845, 0x0) link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00') r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file1\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1169.343064] FAULT_INJECTION: forcing a failure. [ 1169.343064] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.345704] CPU: 1 PID: 8756 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1169.347220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.349051] Call Trace: [ 1169.349640] dump_stack+0x107/0x167 [ 1169.350453] should_fail.cold+0x5/0xa [ 1169.351298] ? alloc_fs_context+0x57/0x840 [ 1169.352236] should_failslab+0x5/0x20 [ 1169.353078] kmem_cache_alloc_trace+0x55/0x320 [ 1169.354100] alloc_fs_context+0x57/0x840 [ 1169.355001] path_mount+0xaa3/0x2120 [ 1169.355828] ? strncpy_from_user+0x9e/0x470 [ 1169.356772] ? finish_automount+0xa90/0xa90 [ 1169.357716] ? getname_flags.part.0+0x1dd/0x4f0 [ 1169.358785] ? _copy_from_user+0xfb/0x1b0 [ 1169.359700] __x64_sys_mount+0x282/0x300 [ 1169.360586] ? copy_mnt_ns+0xa00/0xa00 [ 1169.361442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1169.362596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1169.363722] do_syscall_64+0x33/0x40 [ 1169.364537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1169.365656] RIP: 0033:0x7f5793fc9b19 [ 1169.366476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.370507] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1169.372169] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1169.373728] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1169.375299] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1169.376862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1169.378431] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:31:43 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x14, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) [ 1169.441623] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1169.498375] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 03:31:57 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) 03:31:57 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:31:57 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 11) 03:31:57 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x401054d6, 0x0) 03:31:57 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454d3, 0x0) 03:31:57 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2f800, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:31:57 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000200)={{r0}, 0x0, 0x8, @unused=[0xbf5, 0xfffffffffffffffd, 0x12, 0x873b], @devid=r2}) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x800454cf, 0x0) 03:31:57 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1183.077112] FAULT_INJECTION: forcing a failure. [ 1183.077112] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.079580] CPU: 1 PID: 8797 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1183.081061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.082859] Call Trace: [ 1183.083431] dump_stack+0x107/0x167 [ 1183.084216] should_fail.cold+0x5/0xa [ 1183.085037] ? create_object.isra.0+0x3a/0xa20 [ 1183.086024] should_failslab+0x5/0x20 [ 1183.086853] kmem_cache_alloc+0x5b/0x310 [ 1183.087734] create_object.isra.0+0x3a/0xa20 [ 1183.088680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1183.089776] kmem_cache_alloc_trace+0x151/0x320 [ 1183.090795] alloc_fs_context+0x57/0x840 [ 1183.091678] path_mount+0xaa3/0x2120 [ 1183.092488] ? strncpy_from_user+0x9e/0x470 [ 1183.093419] ? finish_automount+0xa90/0xa90 [ 1183.094364] ? getname_flags.part.0+0x1dd/0x4f0 [ 1183.095368] ? _copy_from_user+0xfb/0x1b0 [ 1183.096270] __x64_sys_mount+0x282/0x300 [ 1183.097141] ? copy_mnt_ns+0xa00/0xa00 [ 1183.097987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1183.099123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.100236] do_syscall_64+0x33/0x40 [ 1183.101038] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.102145] RIP: 0033:0x7f5793fc9b19 [ 1183.102955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.106969] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1183.108615] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1183.110155] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1183.111707] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1183.113249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1183.114796] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:31:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) 03:31:57 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340)=[r1], 0x1) 03:31:57 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x2) 03:31:57 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454d7, 0x0) 03:31:57 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x800000, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0xffffffff}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x309000, 0x0) r2 = io_uring_setup(0x78da, &(0x7f0000000100)={0x0, 0xdcf0, 0x2, 0x2, 0x1f9, 0x0, r1}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000a, 0x810, r2, 0x9ee48000) r3 = openat$incfs(r1, &(0x7f00000000c0)='.log\x00', 0x20001, 0xb) ioctl$RTC_AIE_OFF(r3, 0x7002) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x11, r0, 0x19331000) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:31:57 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x4020940d, 0x0) 03:31:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:31:57 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:32:10 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1195.667701] FAULT_INJECTION: forcing a failure. [ 1195.667701] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.670529] CPU: 0 PID: 8844 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1195.672199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.674218] Call Trace: [ 1195.674873] dump_stack+0x107/0x167 [ 1195.675751] should_fail.cold+0x5/0xa [ 1195.676676] ? legacy_init_fs_context+0x44/0xe0 [ 1195.677803] should_failslab+0x5/0x20 [ 1195.678720] kmem_cache_alloc_trace+0x55/0x320 [ 1195.679840] ? lockdep_init_map_type+0x2c7/0x780 [ 1195.680985] legacy_init_fs_context+0x44/0xe0 [ 1195.682180] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1195.683401] alloc_fs_context+0x4fd/0x840 [ 1195.684410] path_mount+0xaa3/0x2120 [ 1195.685317] ? strncpy_from_user+0x9e/0x470 [ 1195.686356] ? finish_automount+0xa90/0xa90 [ 1195.687407] ? getname_flags.part.0+0x1dd/0x4f0 [ 1195.688530] ? _copy_from_user+0xfb/0x1b0 [ 1195.689538] __x64_sys_mount+0x282/0x300 03:32:10 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:32:10 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)=ANY=[@ANYBLOB="01001000010084cc9f02b2b524e590b8f1f3e52f0a376edb821328b7e5c6ec306f9d967b6864427cc481bc71ebaeb3349e26a770ee20a9c183443ddc46254a13239c33209bc15c9c0100ec1c2ddb4e1ec00936bf8333", @ANYRES32=0xffffffffffffffff, @ANYBLOB="80000000070000002e2f66696c653000"]) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000080)={0x54ffaf27, 0xf077}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:32:10 executing program 3: nanosleep(&(0x7f0000000000), &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:32:10 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x4) 03:32:10 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 12) 03:32:10 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000001400030000000000000000000000ff0bffac1414bb0807000000000000000002000000000000000000cb12d6e976871417dae20000ffffe000005f25cfec7bbb335c5192c09e68853ef4d853ba0703b169bb20c800ca9b8c81cbe7af4fb78e0d302263b4929b4129690f3d3c56129db4c52fbe946a5bf537dcb2cad69e61e3f85fa7e6cc060ae8e0e84421f29f7b888bb62673c45cc9eba4a26bb9ea61bcca48212ba6ff2f923ed3158479a703ae87da"], 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x4}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x4}]}, 0x24}}, 0x4008891) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x2) 03:32:10 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454dd, 0x0) [ 1195.690514] ? copy_mnt_ns+0xa00/0xa00 [ 1195.691657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1195.692926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1195.694179] do_syscall_64+0x33/0x40 [ 1195.695093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1195.696334] RIP: 0033:0x7f5793fc9b19 [ 1195.697236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.701697] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1195.703547] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1195.704581] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1195.705268] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1195.705279] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1195.705290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1195.705301] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:32:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x9, 0xf73b, 0x4, 0x3, 0x3}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x60}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xe000, {0x8001, 0x9}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x101) [ 1195.754009] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.7'. 03:32:10 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 13) 03:32:10 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) 03:32:10 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454d2, 0x0) 03:32:10 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x14) 03:32:10 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000140)) io_uring_enter(r0, 0x77f2, 0x1191, 0x0, &(0x7f0000000000)={[0x9]}, 0x8) syncfs(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1], 0x1) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x80, 0x1) 03:32:10 executing program 7: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x0, 0x4, 0x0, 0x2, "77004a6efdff0000000008002600", 0x4, 0x3}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000003f80)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}, 0x10) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000004000)={{0x1, 0x1, 0x18, r2, {0x8001}}, './file0\x00'}) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000004080)) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000003fc0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7d}) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) recvmmsg(r5, &(0x7f0000003e40)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003580)=[{&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/234, 0xea}, {&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/52, 0x34}, {&(0x7f00000034c0)=""/186, 0xba}], 0x8, &(0x7f0000003600)=""/65, 0x41}, 0xffff}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003680)=""/144, 0x90}], 0x1, &(0x7f0000003780)=""/7, 0x7}, 0x4}, {{&(0x7f00000037c0)=@isdn, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003840)=""/249, 0xf9}, {&(0x7f0000003940)=""/220, 0xdc}, {&(0x7f0000003a40)=""/155, 0x9b}, {&(0x7f0000003b00)=""/100, 0x64}, {&(0x7f0000003b80)=""/8, 0x8}, {&(0x7f0000003bc0)=""/209, 0xd1}], 0x6, &(0x7f0000003d40)=""/194, 0xc2}, 0x7fffffff}], 0x3, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000003f00), &(0x7f0000003f40)='./file0\x00', 0x8, 0x0) 03:32:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x11c}}, './file0\x00'}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000340)={'veth0_vlan\x00'}) 03:32:10 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1195.899717] FAULT_INJECTION: forcing a failure. 03:32:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8cc0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_team\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'ipvlan0\x00'}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0xffffffffffffe68a) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x40) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000440)) [ 1195.899717] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.902756] CPU: 0 PID: 8882 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1195.904442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.906444] Call Trace: [ 1195.907091] dump_stack+0x107/0x167 [ 1195.907972] should_fail.cold+0x5/0xa [ 1195.908892] ? create_object.isra.0+0x3a/0xa20 [ 1195.910003] should_failslab+0x5/0x20 [ 1195.910936] kmem_cache_alloc+0x5b/0x310 [ 1195.911918] create_object.isra.0+0x3a/0xa20 [ 1195.912977] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1195.914219] kmem_cache_alloc_trace+0x151/0x320 [ 1195.915352] ? lockdep_init_map_type+0x2c7/0x780 [ 1195.916499] legacy_init_fs_context+0x44/0xe0 [ 1195.917573] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1195.918799] alloc_fs_context+0x4fd/0x840 [ 1195.919802] path_mount+0xaa3/0x2120 [ 1195.920709] ? strncpy_from_user+0x9e/0x470 [ 1195.921750] ? finish_automount+0xa90/0xa90 [ 1195.922795] ? getname_flags.part.0+0x1dd/0x4f0 [ 1195.923914] ? _copy_from_user+0xfb/0x1b0 [ 1195.924926] __x64_sys_mount+0x282/0x300 [ 1195.925905] ? copy_mnt_ns+0xa00/0xa00 [ 1195.926858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1195.928110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1195.929363] do_syscall_64+0x33/0x40 [ 1195.930254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1195.931501] RIP: 0033:0x7f5793fc9b19 [ 1195.932395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.936842] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1195.938673] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1195.940400] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1195.942122] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1195.943863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1195.945581] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:32:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x298202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:32:10 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x8) unshare(0xa000400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x800454cf, 0x0) ftruncate(r1, 0x1) 03:32:10 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r0, 0x1) 03:32:10 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:32:10 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x80086601, 0x0) 03:32:10 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454d3, 0x0) 03:32:10 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x1) 03:32:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) dup(r0) 03:32:23 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454d7, 0x0) 03:32:23 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:32:23 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x90000, 0x30) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) setreuid(0xffffffffffffffff, r3) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) setreuid(0xffffffffffffffff, r4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x7fff, 0x5, &(0x7f00000002c0)=[{&(0x7f0000000100)="3ac0aea7f476c83bf0748499be49fc6f676a12", 0x13, 0x9}, {&(0x7f0000000440)="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", 0x1000, 0x9}, {&(0x7f0000000140)="aa22b4b56c6156dcca52ddc4860f6c3e8d40631e40d31effd60ca8f6d6f18f492b2397e5dc63a6702579ba7cecf69d0ee459b0702a0400c9150584efc9f1c06430af9b88f7586aa5b1d80300d6f6344a1e8928c99c6fccd1ceae56ea5d9bbe3dc38c88e2072c2a4ec53298e4087d0fc43b4be6d6dc9240575c3b8bf19bc7af127def5bffebd936fa3e981c0a5b103edd912c", 0x92, 0x65}, {&(0x7f0000001440)="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", 0xfe, 0x2}, {&(0x7f0000001540)="fc6b9cc08c7b56b19030b001d1ddb8d13131832a8654836e3ed727542bb9a6bc4c83ff42a2c05c41cb168c3ae236e49dcb7a01d6a49ba3db8eb57084f12ac7f11d9e6b9080d4c70db162bb04f209328d288e719a182b09e1e718af3e0d2f91d4028c6e4eac8e5dbdb8979b637b711a2cda15fb2bd0e82ddd777383b7c695355ee3261c9e6b975a70d6ac06bb6e0db3dfbbadf7cfc112f13a74c56f4dd39f04931f7a754526ef26aa64e914c3df06be53c8f8b29946c4389d09724b42f54837248250babb7b229de6cf1e9a896928", 0xce, 0x6}], 0x4, &(0x7f0000001640)={[{@utf8no}, {@shortname_winnt}, {@utf8}, {@numtail}, {@uni_xlateno}], [{@appraise_type}, {@subj_user={'subj_user', 0x3d, '[&.&@&+$'}}, {@fowner_gt={'fowner>', r3}}, {@fowner_gt={'fowner>', r4}}, {@dont_hash}]}) 03:32:23 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x80087601, 0x0) 03:32:23 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 14) 03:32:23 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:32:23 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x46c9, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3f, 0x0, 0xff, 0x1, 0x0, 0x0, 0x20020, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x1, 0x1ea, 0x6, 0x3, 0x80, 0x4, 0x3, 0x0, 0x8000, 0x0, 0x7}, 0x0, 0x7, r0, 0x2) pwritev2(r3, &(0x7f0000000380)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000180)="9c7861948b7d9e241b66", 0xa}, {&(0x7f00000002c0)="752121d449f5751aec769eac08c82f594def098e3bfea9d7288c7a1279ab3194147005ffa6f78cdfb6338f591b5deebd75fe5da644f79686b232815c645aa8c0e5bb3df1e29bfa76b439", 0x4a}, {&(0x7f00000001c0)="965f6901035716b7029df2adc3b64f46c8ffc9ace2a70f6753e3cd99ba69d6315f5cdf662f68d7477f2f5d921556a8bd306d5527", 0x34}], 0x4, 0xdb0, 0x1, 0x8) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)={0x40000000}) creat(&(0x7f0000000080)='./file0\x00', 0x41) [ 1208.662483] FAULT_INJECTION: forcing a failure. [ 1208.662483] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.665323] CPU: 0 PID: 8934 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1208.666887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1208.668804] Call Trace: [ 1208.669409] dump_stack+0x107/0x167 [ 1208.670241] should_fail.cold+0x5/0xa [ 1208.671114] ? v9fs_mount+0x5a/0x8f0 [ 1208.671976] should_failslab+0x5/0x20 [ 1208.672843] kmem_cache_alloc_trace+0x55/0x320 [ 1208.673889] ? v9fs_write_inode+0x60/0x60 [ 1208.674832] v9fs_mount+0x5a/0x8f0 [ 1208.675655] ? v9fs_write_inode+0x60/0x60 [ 1208.676603] legacy_get_tree+0x105/0x220 [ 1208.677531] vfs_get_tree+0x8e/0x300 [ 1208.678378] path_mount+0x1429/0x2120 [ 1208.679258] ? strncpy_from_user+0x9e/0x470 [ 1208.680238] ? finish_automount+0xa90/0xa90 [ 1208.681223] ? getname_flags.part.0+0x1dd/0x4f0 [ 1208.682294] ? _copy_from_user+0xfb/0x1b0 [ 1208.683266] __x64_sys_mount+0x282/0x300 [ 1208.684189] ? copy_mnt_ns+0xa00/0xa00 [ 1208.685080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1208.686271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1208.687452] do_syscall_64+0x33/0x40 [ 1208.688295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1208.689463] RIP: 0033:0x7f5793fc9b19 [ 1208.690308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.694522] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1208.696270] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1208.697894] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1208.699530] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1208.701160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1208.702788] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:32:23 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x5, "77004a6efdff0000000008002600", 0x0, 0xa4}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/242) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./mnt\x00') umount2(&(0x7f0000001480)='./mnt\x00', 0x0) chmod(&(0x7f00000014c0)='./mnt\x00', 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) [ 1208.730166] FAT-fs (loop6): Unrecognized mount option "appraise_type=imasig" or missing value 03:32:36 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x6654, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 03:32:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x12) 03:32:36 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000200)={{r1}, "d641ebe992a2edb2028f56f5ec9b7a595e3e986409fa9e27f61e9a51fc6c952f0ae00d03d2ddadc382c2ee67e0329012dbc7f79e23972f249b95bcbcfa16aedf170ca613e9e4bd0047550e3c8c7e83e12cff15835497fc9012cb0a898559dd6db2e4cd2bcb75128709698b9630d5415777a8008bbc040bebf287d49e6b78747242222bbb86176b9b17de12c761c8e730a16831a1b396ecf74ca6b244a39cfa89e0e5d41d14a23f5f3bdfdca7689123c8bfc3b9fc2a426695001b551bfe3fc8c1236211421b1e2c910bb1ef6aae91dc002c05305ebe2f0ff3bacc7a0d65f2c4084e777513192ed5d8b302b5028b71d25a5f9c11add2e5e7ef8c8666525631311abf8e81b519df065797707d257ae6737edd109e2e71d5dd9c20b20057ab84156c147545ca963fde96c3d41d3f2694e8474be45a14bcbc1c8ffaa63478229137714fd53508e27f1f0cd48d3a39cdf8651dedd79018e637cdad1ca6395a73c0402ac4db384bd128b23d3fb99e23ad7cd32fd7ca2f61a44a035a5592ee8b11a8ebe5e2342e9352f61a46ac06068002fd5957946243e2434a31bde54b2677e914c2e12b1434818caf8d5df0b7ca2793807ef23283af3bb023f62be87f2ddf57d8eb5bb140ee732d40617853d3fee3cb87fdb6f341eb41050b3386416212048aa00947655ad8f5a4d56a47f1cb26161f1229e8dfa43086926b5dffb5d7a6916b2cd73b1b00b4a2a0bfe18ca7f918526185873fbea65e3b764df572d82957ad9034953fe2d1efd87791623d26ee45d1f53dec4ed1a0d78760fb1949072fd19c329bbfadd9aea417a0caab993fd67d33263b765d37461933d1806c3f937f5e44868d7c3c5ed9c023bad4e9cf3c739b26f5ee199f685d4042467050a85cd90a9b8f43acdd0fe4cd023f520e861d43facebea1bbc7add9d3522b811bb6db68c20197b0dc71633a752cc6004a7913f487b3f66df6efe1409789198840a028fb404f8070ee30d6ffae7ab1c3ab009474165db4982f6304b1ccaa77392c53ff2872695c3ffa40d91ffc715870a64a65532a73cd72d0abaf97fb8c8b90ccb6eda30fc9b2199c09ceb4c14428d2ca98de917e0e228ef497fed5fcdee50654e1a8fd1517912946aba1d0e87a59a3de0123c894053e6d35c2451230ae0886841c09a1fbaac3b9463ac646b4f0b535d4cd4bbd315c0e05f51e4aea5b76fc87ba371fa529d465585635ebb9fc3312d8d804b011a4d92af90b594cfd0832f998710a823dca47aa0b5a2e14ae28d7812407147d7a19302f788af7c26af98abe5be2082c52bc1c60f6130a9ce3e2b5d24b8ef04416a290f9fcceca48f4535c6493ae671f4d4efb733797bbcb198c69b2cbc67f59c71eeecb54a0c5fb066153c4b41d009282ff2706a07e129733451ea1927fd85a06a87466b6978fa31c013fbc8a2e8c958bcb14888f54fcbfe419883c19eebd6db7cba34a310cce8c7def72671efdb2180b70d6e70de9a6d7ec492a1f467ea8b4a6e1e09f8fe039ec8c11ee858c29206435cc1ea648b49a1c1d08d48372cd75e730b71abdeca226def6cd465b13348aa5f24e9c89e640111ffe8dfb36dd14623138f78a59ed9814dc4af47381084ab02e08be350dc039ee2b3cd67fc35bd597f8c70ec08496592cceec3588d39b6e0e434f174bccee2563a5678199546af421dea985e258d6534a51b616b3363f8b226fa25b281e75382ca309170d314d63eadabb7344e98dd6ff180b5bd2d9027423586362ae317732b0aac808a0a5d23a3b448c51bdc9c1672cec6a8671a0bd495b411d0740244327fac91848c740060342801d3fc1817e7f353d576d32117cb917b9ae074b143961e3ce3bf7a035121f91272e69256f1770ee58a397c0634b9a7ed026103d2099d0b958e9fe6a5e2cd78e748ea9999177f3643118aa93655029bb19f7fa6a3459f570daa03af51826ab131c2301702b7e7d3ee71cdc72028abfbc5f464f89b49f983ae5c4c44d165f096e78c20efca243827e005ceade054877df38f472d27acbd01f7283dcebbda768bacb75ac2550c20d6f4e00de7d210fa114c6087dea3bae0c3f044dea288b0e433b33137c85222acf852aab3b11a6a258e628a5021d4f44bbeaae40e3ddf7e017f29d71949126bc6ff41aa452c7fc87db678d01a9b1b3dccc040fce1f58bc2fad8d72e3ad013cf20d6fee1c75ac5bee6e238fcf19b2f819394a4fc9c01ffed8fc12ded89cd2a0b4ff5de92f8ebc555313b11426566fc6ed2908219ec23853e323f584799b77f3b72873d55a28baf48db86d1a3fa33229e573b3484aa0e6ad540e9772e49b449b402782edc912a11416d9c31e8dfae87e1525542b3046fcb9803374624026ef1994d985c7f7b24ada3f806da344e1b44556de9f9c08316e51d3bd5f10f00e2fbe1cf1ae153fc938fef2310dac1a11350b90d32c6edbfb145b3571d24cbe92d7d7d3c3e88af8c16b31d5be7244f14889465b18fbc1002bff6c7c3950ad366687b4a8708ad6e4c8b67865ef5b41b5bd607f4c20145c9c3ea731f1a9b91013e4018807271dbb2581559747511c30cd0ccc76751fb078062aa6fabfd949df02130340ce195256ab9c9a2273fc55764087ce4ad265aa25f2d0348f8f8f583e66e41f312e191573a71062f59c3e65128bb9bfba1bb1f28c1e2169c1f8d0388a590125b0a81ab10ab67db263666bc8467930af7efd24f5bde46a47b433a800f288b369ffef037ef7c3f0aa4754fe049b727e4689ea4d326ec6611176b1cef4fc4ddd722c39bb0fb7479c97bf7b8ed7570a5a4289b48ccc4f4f35e25faa054e31ad8b3cb488cfbb484b4dfd9f1af1d1199c484676700da8ad4f46d7ca3a44363452eeeacdc8da1858acdf3147e45b72451f08e05284c7e30db3cf865de11fbbd0edda0d238cbc6e143b195fb7d3056fc28efe1faf94472b6ba54e0d63db838530ac532ff646fa495cb417d14852a501efe1206247fbb9c7923988937a3a6599c70bd1ae8ab9c77f4e78b9ccbc6af71c5ae71798fbfe3329e393ffcc91a32ab148c08cf6b2c78a9f0f01cb7d57301b5f08a40cf93eeaf26a7acad67b8a607949a0e24cd0647d5a0e254ca1bf9bc8e5bd2748f87a5628f8251dbafb448d6b49837d36ea72fdb25e238c9780559f2f1ee9339f7f07579fec045a582d49ebce1301bcf24ff683b137799561f149f9396d24db2b960a51daddfbeb8f47077ed28f54123f8b61db50f5d4a0609921174ba8e77b15073441ab687721891b310405446b62534fc7fc4433dc23d7ecce798feeccd5e223e69ef6b92a4a104f759428a6522e5565d6f3727dd1232d107fe3224dc7767836998a0e41bb4987b4844d82a352375569d40ab88690ab5bef01f96a95a74f846c51faabce241c8c20ebbe6524072f3ee99fa0221bee4f65e99714e3bf5b7f558c036bd17803a63aa7c63c307afa621ba74cc8573c49151764f8ee86b5ef8928b197a3c9288000f581304f2a2123230c6729a8703e6bcc2d1cf1e1ccd05b0f37f6a48dafa5ea42ae00424e6f68a94234c430af7250f6bad70a91af5796597beda2cdf4a7a7f55e00a9a67da13960ad8e9495fa5558d5bedc398f5b7dd72ac79086154c2982649a027210d2e63fa5355988336dfdbb20bebd21dbac93dd9c76bd96d97c8910822c58ba4b797fde2079611fd86f6eb10175970eef9086fabfef769bdc46001b2b206a04dbba27588119656304626526996829b8fb69a9f4e8724035bb59d29b93447be24de31825659529928fdeb619e25f36ecd7bfc3d5e6962e5d9934e74e87949d724d729768ef08d2848349651bd5b8bd0cf019e13269dc837def48821ecf829eaadf3354207dfa5bd63c516a4976f9bac23d9b46477b0b3aa46327dc9921feccf9ae940b7e191c9c2da86c174fb4ec0d2c587369cf704e4f2e031ba2dccbc1905395f129a0373cc8bd064b4eb5cc4100bf446f625e61a8a508ebbef27a758fba20c7faa4005560b10284c7aa4c0ffb1b58123ff1cf7244b560e0d259011578eb070da9bf95998fc5b3198ab302a6e41da2b384e6a3b94b0f6b70b24c699d90bd9e8cc21fda0cff7bd8772d3cd5bc8cb98b1c26620fd4972099a5afcadc4823835abd01ae15573cc20832008dafbe6a30495cddd1e4fb48b80f318697e163f2aeab81006516033bfc04510cb1b871b4a41d556fbf5fdf683e6c0f918b21655c6c425972bd3469be455888a7ce12ca2b72a0a44ac8fc6f0267acd0e71f8f650319a680a3bf4e77baf5da458643cbe886e7630e925466fd6fa99f997ae41bf5ef94d36889ed64328bf59bf75a57ebf2e22689421ca7182a5fed5f61d073cfb6c2c3310e6f9086816d10cfb15cfc5e47a2abac0194cb000f8c56558f336c958fbefc5ea681a79b12a709e50f522350bbed837db764401810863193a7c131a961a68dc32054be475148e0a565c60a212879ca4cfa0a994aa19c859024a0b0a070befec95e026607442d1f5307a36aea9a05445f0651de4a8b14d29b84bb110fdb17247cc3dbbbf15e5c67907fa0379956fb009e3c07fa24057ad7d94a5127ddd8dcb980d87cc8417845cc43ce74b8258a8e1568ac0266a5a6aaf401b15a436256450dc083bc6f2e919995f68b870002ee9bf0f1654478a6e5a5188e0e2cd4cb5f86f834d6a6fa446fd0f32ce9ff95bad4b3fb84ec4abb5641b509e4e47979276d908d06bc963c2413853529b1cc1aeac8718500cc55b60c92bc1274f78df61d5c149c5a410d13e41dabbaffc1a78221819cea54d10f5117e961d60d00b12fef124c40196fe0047755d84438def677feeb6166d23283b220eff650cb63574180b0e29a92469e0beeaa529f0957ceedbf9c8b1610094fd1d84cf98dff2661a48063860d5108c6e677d951c8ec2638beb7f4f8b9d701aa7f743d6ec8d842cb0ad52a139a8d605ce1062380524e068626e3699267d6a73b8b9cd899df72f2995100480ee8d2695a18bde269b226023e0901cc878f6a9d55a16b7649a9c67c226864f59d4771f1ca5a7ce2e1a9699abfe4468004a44ea49505daacad3c03be7420fb1741f555f6a97e2514860d928cb38c4452e03131508592ac267a320610d05b7feee11706a48ca32dc6889657fa3b59dfa44478abec95741053c64b5479a6c37810157053debf7483a3defdcd67589c22d239d5823517f92ed74238a50852c52ec1ae927442c30a348d00c5022760b588235c8e9b27119f1a7b01a82f3dc4637c7e98eabc92b0eae48056df9d524ab25f6ee603c4b549dff7fe0ae470ae57e11f5e81bcda2cbff1d0bd1d132d9e4ded324ef4609497faa683a3a91176efb72796a2675cc5d80d43d0c9f8ede6155d84eb068d6def2447a4a3d2b50437e2134ee519f1035245584600c7deda2867b4bcbe5ff63b8378ecef60f6babbf3bac29dbd223a857cca6cd67e1f79f00b78769aab892ca9a2585d4f25cf0888beeccf15e38960a0b4eec0b42445bc70be8d11d2491bded37c4a1c3288d3de16a483cf06b8659d794e51e7d9e3e047f335530f60972b0c9a5d9d9916b538acc3e247e17f0ab3603f9219723b0cb40c6ce972233d8d9f46af5ecaf8d09cf1a074bd901e7e129cc0b7cfa83af6bcc636006ad7c0e5e51968edbccce3c7d3455763e04e823ac4acafff73a5bac034cf4243c3662656cc81c454ef5ddfdfe0c60ee97785dfce9e15e887a633a2e851d542b26844dc76c322b8786615aae68fc956f81447b9dee77214df76b60abf7ef59ba12b6fa0cb42ddd3c904fcc4cd846e"}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) 03:32:36 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:32:36 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454dd, 0x0) 03:32:36 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 15) 03:32:36 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x801054db, 0x0) 03:32:36 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r10}}, 0x6) syz_io_uring_submit(r5, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r0, &(0x7f0000000000)={0x48041, 0x21, 0x18}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r10}}, 0x9) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1221.902444] FAULT_INJECTION: forcing a failure. [ 1221.902444] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.905132] CPU: 0 PID: 8956 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1221.906668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1221.908549] Call Trace: [ 1221.909143] dump_stack+0x107/0x167 [ 1221.909965] should_fail.cold+0x5/0xa [ 1221.910821] ? create_object.isra.0+0x3a/0xa20 [ 1221.911856] should_failslab+0x5/0x20 [ 1221.912710] kmem_cache_alloc+0x5b/0x310 [ 1221.913627] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1221.914789] create_object.isra.0+0x3a/0xa20 [ 1221.915791] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1221.916941] kmem_cache_alloc_trace+0x151/0x320 [ 1221.917984] ? v9fs_write_inode+0x60/0x60 [ 1221.918908] v9fs_mount+0x5a/0x8f0 [ 1221.919711] ? v9fs_write_inode+0x60/0x60 [ 1221.920645] legacy_get_tree+0x105/0x220 [ 1221.921563] vfs_get_tree+0x8e/0x300 [ 1221.922392] path_mount+0x1429/0x2120 [ 1221.923243] ? getname_flags.part.0+0xa4/0x4f0 [ 1221.924271] ? getname_flags.part.0+0xb1/0x4f0 [ 1221.925291] ? finish_automount+0xa90/0xa90 [ 1221.926271] ? getname_flags.part.0+0x1dd/0x4f0 [ 1221.927332] ? _copy_from_user+0xfb/0x1b0 [ 1221.928395] __x64_sys_mount+0x282/0x300 [ 1221.929311] ? copy_mnt_ns+0xa00/0xa00 [ 1221.930194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1221.931378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1221.932572] do_syscall_64+0x33/0x40 [ 1221.933415] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1221.934576] RIP: 0033:0x7f5793fc9b19 [ 1221.935421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1221.939623] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1221.941359] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1221.942971] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1221.944578] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1221.946168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1221.947782] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:32:36 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d6e, &(0x7f0000000240)={0x0, 0x5eea, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/229}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:32:49 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 16) 03:32:49 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1234.780709] FAULT_INJECTION: forcing a failure. 03:32:49 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 03:32:49 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0xc0045878, 0x0) 03:32:49 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x800454cf, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r3, 0x7002) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000140)={'netpci0\x00'}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)={'ip6_vti0\x00'}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x312) openat(r2, &(0x7f0000000040)='./file0\x00', 0x292003, 0x124) 03:32:49 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0xfffffffd, 0x0, 0x0, 0x3, 0x5, "77004aaa005703a5270e28002600", 0x80000, 0x7}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:32:49 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:32:49 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1234.780709] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.782641] CPU: 1 PID: 8992 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1234.783462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.784452] Call Trace: [ 1234.784802] dump_stack+0x107/0x167 [ 1234.785215] should_fail.cold+0x5/0xa [ 1234.785637] should_failslab+0x5/0x20 [ 1234.786060] __kmalloc_track_caller+0x79/0x370 [ 1234.786564] ? v9fs_session_init+0xa7/0x1680 [ 1234.787045] ? kernel_text_address+0xf2/0x120 [ 1234.787545] kstrdup+0x36/0x70 [ 1234.787915] v9fs_session_init+0xa7/0x1680 [ 1234.788390] ? lock_release+0x680/0x680 [ 1234.788835] ? find_held_lock+0x2c/0x110 [ 1234.789279] ? kmem_cache_alloc_trace+0x151/0x320 [ 1234.789846] ? v9fs_show_options+0x690/0x690 [ 1234.790371] ? trace_hardirqs_on+0x5b/0x180 [ 1234.790905] ? kasan_unpoison_shadow+0x33/0x50 [ 1234.791402] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.791945] v9fs_mount+0x79/0x8f0 [ 1234.792404] ? v9fs_write_inode+0x60/0x60 [ 1234.792935] legacy_get_tree+0x105/0x220 [ 1234.793500] vfs_get_tree+0x8e/0x300 [ 1234.793989] path_mount+0x1429/0x2120 [ 1234.794487] ? strncpy_from_user+0x9e/0x470 [ 1234.795007] ? finish_automount+0xa90/0xa90 [ 1234.795595] ? getname_flags.part.0+0x1dd/0x4f0 [ 1234.796169] ? _copy_from_user+0xfb/0x1b0 [ 1234.796665] __x64_sys_mount+0x282/0x300 [ 1234.797212] ? copy_mnt_ns+0xa00/0xa00 [ 1234.797727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.798423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.799141] do_syscall_64+0x33/0x40 [ 1234.799653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.800367] RIP: 0033:0x7f5793fc9b19 [ 1234.800827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.803318] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1234.804359] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1234.805182] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1234.805967] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1234.806762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1234.807539] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:32:49 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 17) [ 1234.875367] FAULT_INJECTION: forcing a failure. [ 1234.875367] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.876772] CPU: 1 PID: 9015 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1234.877549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.878476] Call Trace: [ 1234.878827] dump_stack+0x107/0x167 [ 1234.879309] should_fail.cold+0x5/0xa [ 1234.879779] ? create_object.isra.0+0x3a/0xa20 [ 1234.880303] should_failslab+0x5/0x20 [ 1234.880728] kmem_cache_alloc+0x5b/0x310 [ 1234.881187] create_object.isra.0+0x3a/0xa20 [ 1234.881663] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.882227] __kmalloc_track_caller+0x177/0x370 [ 1234.882743] ? v9fs_session_init+0xa7/0x1680 [ 1234.883227] ? kernel_text_address+0xf2/0x120 [ 1234.883735] kstrdup+0x36/0x70 [ 1234.884086] v9fs_session_init+0xa7/0x1680 [ 1234.884554] ? lock_release+0x680/0x680 [ 1234.884996] ? find_held_lock+0x2c/0x110 [ 1234.885443] ? kmem_cache_alloc_trace+0x151/0x320 [ 1234.885980] ? v9fs_show_options+0x690/0x690 [ 1234.886461] ? trace_hardirqs_on+0x5b/0x180 [ 1234.886941] ? kasan_unpoison_shadow+0x33/0x50 [ 1234.887449] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.888007] v9fs_mount+0x79/0x8f0 [ 1234.888409] ? v9fs_write_inode+0x60/0x60 [ 1234.888878] legacy_get_tree+0x105/0x220 [ 1234.889339] vfs_get_tree+0x8e/0x300 [ 1234.889818] path_mount+0x1429/0x2120 [ 1234.890334] ? strncpy_from_user+0x9e/0x470 [ 1234.890929] ? finish_automount+0xa90/0xa90 [ 1234.891527] ? getname_flags.part.0+0x1dd/0x4f0 [ 1234.892183] ? _copy_from_user+0xfb/0x1b0 03:32:49 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/238) creat(&(0x7f00000001c0)='./file0\x00', 0x2a8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x4a, 0x5b, 0x100, 0x11, @private0, @mcast2, 0x40, 0x700, 0x6, 0x4}}) getpeername$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20004010}, 0x8054) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1234.892739] __x64_sys_mount+0x282/0x300 [ 1234.893475] ? copy_mnt_ns+0xa00/0xa00 [ 1234.893996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.894639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.895266] do_syscall_64+0x33/0x40 [ 1234.895668] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.896272] RIP: 0033:0x7f5793fc9b19 [ 1234.896676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.898915] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1234.899767] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1234.900630] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1234.901437] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1234.902246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1234.903066] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:32:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:32:49 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r0, &(0x7f0000000000)={0x202000, 0x2, 0x18}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345}, 0x81) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000100)={'veth1_macvtap\x00', @ifru_hwaddr}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r4], 0x3) 03:32:49 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:32:49 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'batadv0\x00', {0x2, 0x0, @broadcast}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x800454cf, 0x0) 03:32:49 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x541141, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000080)={'nr0\x00'}) r2 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000, 0x400, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) move_mount(r5, &(0x7f0000000380)='./file0\x00', r2, &(0x7f00000003c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltgid=', @ANYRESHEX=r3, @ANYBLOB="2c706f737b7861636c2c6c6f6f73652c76657273696f6e3d39703239d8a68734ff5dc26c746769643d", @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,defcontext=unconfined_u,smackfshat=\',\'A,seclabel,pcr=00000000000000000051,defcontext=user_u,appraise,\x00']) r6 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000, 0x400, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) move_mount(r9, &(0x7f0000000380)='./file0\x00', r6, &(0x7f00000003c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) getresgid(&(0x7f0000001a40)=0x0, &(0x7f0000001a80), &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000001b00)={{}, {0x1, 0x5}, [{0x2, 0x1}, {0x2, 0x1, 0xee01}], {0x4, 0x1}, [{0x8, 0x1, 0xffffffffffffffff}, {}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x5, r3}, {0x8, 0x5, r7}, {0x8, 0x4, r10}, {0x8, 0x3, 0xffffffffffffffff}], {0x10, 0x4}, {0x20, 0x6}}, 0x7c, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) [ 1235.022537] SELinux: duplicate or incompatible mount options [ 1235.027014] SELinux: duplicate or incompatible mount options [ 1235.037281] SELinux: duplicate or incompatible mount options [ 1235.044070] SELinux: duplicate or incompatible mount options 03:32:49 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0xc0045878, 0x0) 03:32:49 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x80086601, 0x0) 03:32:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0xfffffffe, 0x8, 0x0, 0x286}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'vxcan1\x00'}) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000000c0)={'gretap0\x00'}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r5, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x7) pidfd_open(0xffffffffffffffff, 0x0) 03:32:49 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x800, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x11) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:33:03 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 18) 03:33:03 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'geneve1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:33:03 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TUNSETOFFLOAD(r1, 0x800454cf, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) 03:33:03 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1249.223101] FAULT_INJECTION: forcing a failure. [ 1249.223101] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.225733] CPU: 0 PID: 9058 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1249.227243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1249.229116] Call Trace: [ 1249.229713] dump_stack+0x107/0x167 [ 1249.230533] should_fail.cold+0x5/0xa [ 1249.231442] should_failslab+0x5/0x20 [ 1249.232520] __kmalloc_track_caller+0x79/0x370 [ 1249.233762] ? v9fs_session_init+0xe9/0x1680 [ 1249.234898] ? kernel_text_address+0xf2/0x120 [ 1249.236124] kstrdup+0x36/0x70 [ 1249.237143] v9fs_session_init+0xe9/0x1680 [ 1249.238370] ? lock_release+0x680/0x680 [ 1249.239506] ? find_held_lock+0x2c/0x110 [ 1249.240678] ? kmem_cache_alloc_trace+0x151/0x320 [ 1249.242060] ? v9fs_show_options+0x690/0x690 [ 1249.243378] ? trace_hardirqs_on+0x5b/0x180 [ 1249.244550] ? kasan_unpoison_shadow+0x33/0x50 [ 1249.245875] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1249.247278] v9fs_mount+0x79/0x8f0 [ 1249.248425] ? v9fs_write_inode+0x60/0x60 [ 1249.249695] legacy_get_tree+0x105/0x220 [ 1249.251082] vfs_get_tree+0x8e/0x300 [ 1249.252109] path_mount+0x1429/0x2120 [ 1249.253215] ? strncpy_from_user+0x9e/0x470 [ 1249.254475] ? finish_automount+0xa90/0xa90 [ 1249.255752] ? getname_flags.part.0+0x1dd/0x4f0 [ 1249.257013] ? _copy_from_user+0xfb/0x1b0 [ 1249.258226] __x64_sys_mount+0x282/0x300 [ 1249.259362] ? copy_mnt_ns+0xa00/0xa00 [ 1249.260448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1249.261889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1249.263200] do_syscall_64+0x33/0x40 [ 1249.264131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1249.265321] RIP: 0033:0x7f5793fc9b19 [ 1249.266203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1249.270560] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1249.272394] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1249.274191] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1249.275794] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1249.277422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1249.279072] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:33:03 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r3, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0x39, 0x3, 0x5, 0x447d463af7c1412c, @mcast2, @private2, 0x1, 0x7, 0x4}}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private0, 0x1000, 0x1, 0x0, 0x0, 0x3, 0x880000, r4}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r7, 0x7002) sendto(r7, &(0x7f0000000640)="5299f07c0556b7ede36ac66a8fca316c24519c907880c03023bc2c1a00ab2e6635a80ba7aab5b0709d891a139faa90ba625b83364f4d7d2a53745a10873f697e318472ea76d7a22b6b3d8fa45bde5fd285d660bae33d24e2cfcc28406a92e1d55fb21c6de7e1dfd680caea32ea97e69aea13d993152b778c327dc0db1e089bdbec6e", 0x82, 0x40000, &(0x7f0000000380)=@rc={0x1f, @any, 0x6}, 0x80) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4010, r2, 0x10000000) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r8, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r0, &(0x7f00000001c0)={0x11}, r9}, 0x4) r10 = syz_open_dev$hiddev(&(0x7f0000000000), 0xff, 0xa2040) readv(r10, &(0x7f0000000180)=[{&(0x7f0000000080)=""/65, 0x41}, {&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000440)=""/175, 0xaf}], 0x3) 03:33:03 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0xc0189436, 0x0) 03:33:03 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x80087601, 0x0) 03:33:03 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x9, 0x4, &(0x7f0000000380)=[{&(0x7f00000000c0)="c1cbe52d0a6b0fe710639c26dcaf00f23971627ad6041b1a0e39357fa82e5503bea666057bff77ac52b909ce4024c2569cdec1d8e8b3f094e15545b5eb321d73e1b8c9c47871a800125c7e652fec3237b71737cf6877da1b60db3cbb1ef69fd7d36996380a7381a66dfe74315bc0166bd7e9e070960875409c1dbd78378e3c93ee4758f81867ec8b6dfadfcd7ddecaccba43c7c0b2ad7c81a5e4fbda53e5119bb5247a042b07cdf5cfdca268a9b423ddb79f2373f6834201a0d312bb9d312328a4baef9b1fe79a4a1e64a965f6a2c083af671af0e06af70bd5fa0e0d67ff32d96eba9635695d02f554058b40d2ea4758dd18ce42e3feaf56b9adb6", 0xfb, 0x7}, {&(0x7f00000001c0)="099881422f33594d4589f4c5ca12d09dd40c8ab2d17c0cd00fd00cd3bf04345f9324acf51f1640a1009c8a4f", 0x2c, 0x1ff}, {&(0x7f00000002c0)="6cae4142c758aef65ccc0baff64466961aebc027d767e093ef8bbe3df616374ff71f930f7f4b", 0x26, 0x3ff}, {&(0x7f0000000440)="a2ccbe7f6f1247be8da67ff5b25e45aa3a415b5772ee5f3a4e894596ba26cdcbb8db2d16aea97369eb1656f6a66fe452dd5ebed58b3759e7e3491bcfea32bd4160b35cd4f472127c1aa1d3657902e8c78a61039bf6e08d4a356f153f1e99671007f82abecd577bd7c4bc618c84da867361aefb669796b404b9efe305f9c792effb02a4725c5f513e384b32ddd351686b0e71866030d0f26c00f68387c827e74291db822faeb455f825508b1aff000546174f226b9698bc394b2b5aa2932bd16265649d0bd88750d841072e4a6e4b64e5663c3255844a94179963463cad134f94f6a5c55ebfe5bfa6fa06f607c1550b", 0xef, 0xfffffffffffffbff}], 0x1400080, &(0x7f0000000540)=ANY=[@ANYBLOB='u\x00\'8,map=acorn,overriderockperm,dont_measure,permit_directio,euid>', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d3a5d2c7375626a5f747970653d002c7375626a5f726f6c653d5b24cf2c00"]) openat(r2, &(0x7f0000000300)='./file0\x00', 0x801, 0x4) r3 = syz_open_pts(r0, 0x109000) fallocate(r3, 0x8, 0x8, 0x101) 03:33:03 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:33:03 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 19) 03:33:03 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) 03:33:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:33:03 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000500)=[{}, {&(0x7f0000000080)=""/127, 0x7f}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000380)=""/69, 0x45}], 0x7}, 0x3f}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000680)=""/184, 0xb8}, {&(0x7f0000000740)=""/251, 0xfb}, {&(0x7f0000000840)=""/41, 0x29}], 0x5}, 0x5}, {{&(0x7f0000000900), 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/30, 0x1e}], 0x1, &(0x7f0000000a00)=""/53, 0x35}, 0x8000}, {{&(0x7f0000000a40)=@nl=@proc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/110, 0x6e}], 0x1, &(0x7f0000000b80)=""/25, 0x19}, 0x2}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000bc0)=""/168, 0xa8}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/149, 0x95}, {&(0x7f0000001d40)=""/220, 0xdc}, {&(0x7f0000001e40)=""/124, 0x7c}, {&(0x7f0000001ec0)=""/145, 0x91}, {&(0x7f0000001f80)=""/234, 0xea}, {&(0x7f0000002080)=""/124, 0x7c}], 0x8}, 0x4}, {{&(0x7f0000002180)=@l2, 0x80, &(0x7f0000002680)=[{&(0x7f0000002200)=""/214, 0xd6}, {&(0x7f0000002300)=""/195, 0xc3}, {&(0x7f0000002400)=""/133, 0x85}, {&(0x7f00000024c0)=""/142, 0x8e}, {&(0x7f0000002580)=""/251, 0xfb}], 0x5, &(0x7f0000002700)=""/47, 0x2f}, 0xac8}, {{&(0x7f0000002740)=@nfc_llcp, 0x80, &(0x7f0000002980)=[{&(0x7f00000027c0)=""/144, 0x90}, {&(0x7f0000002880)}, {&(0x7f00000028c0)=""/155, 0x9b}], 0x3, &(0x7f00000029c0)=""/110, 0x6e}, 0xe78}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002a40)=""/23, 0x17}, {&(0x7f0000002a80)=""/9, 0x9}, {&(0x7f0000002ac0)=""/76, 0x4c}, {&(0x7f0000002b40)=""/74, 0x4a}, {&(0x7f0000002bc0)=""/111, 0x6f}, {&(0x7f0000002c40)=""/139, 0x8b}, {&(0x7f0000002d00)=""/209, 0xd1}, {&(0x7f0000002e00)=""/132, 0x84}, {&(0x7f0000002ec0)=""/202, 0xca}, {&(0x7f0000002fc0)=""/225, 0xe1}], 0xa, &(0x7f0000003180)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000004180)=""/171, 0xab}, {&(0x7f0000004240)=""/247, 0xf7}, {&(0x7f0000004340)=""/227, 0xe3}, {&(0x7f0000004440)=""/228, 0xe4}], 0x4, &(0x7f0000004580)=""/201, 0xc9}, 0x28000}], 0x9, 0x2023, &(0x7f00000048c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1249.419432] FAULT_INJECTION: forcing a failure. [ 1249.419432] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.420851] CPU: 1 PID: 9088 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1249.421655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1249.422611] Call Trace: [ 1249.422926] dump_stack+0x107/0x167 [ 1249.423355] should_fail.cold+0x5/0xa [ 1249.423795] ? create_object.isra.0+0x3a/0xa20 [ 1249.424317] should_failslab+0x5/0x20 [ 1249.424763] kmem_cache_alloc+0x5b/0x310 [ 1249.425238] create_object.isra.0+0x3a/0xa20 [ 1249.425739] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1249.426320] __kmalloc_track_caller+0x177/0x370 [ 1249.426866] ? v9fs_session_init+0xe9/0x1680 [ 1249.427376] ? kernel_text_address+0xf2/0x120 [ 1249.427904] kstrdup+0x36/0x70 [ 1249.428271] v9fs_session_init+0xe9/0x1680 [ 1249.428776] ? lock_release+0x680/0x680 [ 1249.429226] ? find_held_lock+0x2c/0x110 [ 1249.429698] ? kmem_cache_alloc_trace+0x151/0x320 [ 1249.430255] ? v9fs_show_options+0x690/0x690 [ 1249.430777] ? trace_hardirqs_on+0x5b/0x180 [ 1249.431287] ? kasan_unpoison_shadow+0x33/0x50 [ 1249.431824] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1249.432412] v9fs_mount+0x79/0x8f0 [ 1249.432828] ? v9fs_write_inode+0x60/0x60 [ 1249.433327] legacy_get_tree+0x105/0x220 [ 1249.433801] vfs_get_tree+0x8e/0x300 [ 1249.434235] path_mount+0x1429/0x2120 [ 1249.434689] ? strncpy_from_user+0x9e/0x470 [ 1249.435199] ? finish_automount+0xa90/0xa90 [ 1249.435707] ? getname_flags.part.0+0x1dd/0x4f0 [ 1249.436245] ? _copy_from_user+0xfb/0x1b0 [ 1249.436741] __x64_sys_mount+0x282/0x300 [ 1249.437200] ? copy_mnt_ns+0xa00/0xa00 [ 1249.437654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1249.438268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1249.438859] do_syscall_64+0x33/0x40 [ 1249.439292] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1249.439891] RIP: 0033:0x7f5793fc9b19 [ 1249.440327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1249.442510] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1249.443390] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1249.444225] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1249.445065] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1249.445895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1249.446719] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:33:03 executing program 6: syz_open_dev$rtc(&(0x7f0000000000), 0x5c6, 0x1) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) read(r3, &(0x7f0000000080)=""/188, 0xbc) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:33:03 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0xc020660b, 0x0) 03:33:03 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x801054db, 0x0) 03:33:03 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) 03:33:03 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", "", "", ""]}, 0x18}}, 0x48000) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x8, 0x1) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1], 0x1) 03:33:04 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:33:19 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 20) 03:33:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x313) 03:33:19 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:33:19 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='#}{!\x00', &(0x7f0000000100)='.\\^[*\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='%{&)\x00', &(0x7f0000000380)='#]).^[}!,\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='[\\\xa5$]$+\x00']) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r5, 0x1fffe, 0x0, 0x0, 0x2, 0x0, {0x1, r4}}, 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:33:19 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0xc0045878, 0x0) 03:33:19 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000100)=@x25, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000440)=[{0x18, 0x107, 0x0, "da"}, {0x68, 0x88, 0x7fffffff, "6c4bc607d2b3588515e5c54fb83dcb5f9af8e7519bb905e68ef5f2f823fb25911bb3cd77e776df2b848e1d6365f6a07d5082e1a0e80a7b59939c911ad76174f38e0b0c291d161fe10cd98f0f0e57d2708a"}, {0x80, 0x0, 0x74, "eedcb45d815cdca34621f11e9f744fc9ccd1a2a98381cfb68ad2e1cb38d092de83ae2319a940a87659f02fac36a69d5eba30b564e7ec2b809fd12a8ba80433d2a9e672126bacbd29f8f2ce7c9ef0b6cbed2c00f4cc046e4ff8e2a11ad2fd0a333c864a24e0761ab8cb2b"}, {0x98, 0x101, 0x1, "f8e8592468eff0fd2136bc996a92e082df47224029152e8ed937d26d6bdcf2259e306eb680e9715c3f8ea21fe58dd9cbf40d193466cfbd46fdb13098d4b7ad7852c1b5b17d6628728f4931402dc0da5160381708140b1ec61c18e9eabf6cd66ac6e3502c69e016a1aaee1ae1c2994fcb4cc6b15772b7f00878a455b0dd893b23558e"}, {0x110, 0x108, 0x7, "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"}, {0x70, 0x10a, 0x81, "753d35347bcb38aed074ab39c6ee23f9b19c212971ab766bea8567eef571d572081eb11b2a85237e65e52320c629c45170f1797ffb5460603add437cc804536e084d5cd990a9961a7d65a5b033333a782285eb9df7e163ab63d0"}, {0x108, 0x108, 0x1000, "baeefbb4e58f2bcb5938982a6a1d3a5747489ec905b8f138b28a1d000f7f6a8a06fca3545b8bf2f6c28868a912b95409b0da0372114ecef8057e9d701ebeb79c9ec75f656e651a150ab8a53e0b24a7645b2c5efcd1cc6aec3ad8a674b38575ff3daeca7179ee0f7e3d3f62ed9a40cde45c154c957fc36301d584bc4602a8e8d893d12a4328c1a97054b011c9667dc837af8f689f2fb5ccef1bbb7bd0291b4958a7a64849a00ede8ff755eabf6e75623ca5890f098bb34dd10de916ca850ce9dd82e031ced59457d587771cf63892ddc3d5eeca2c967b937d19cdc91446295c858f83b5c853bada0d95ca53848b5cb3a38123741b728fec"}, {0xf0, 0x9a, 0xb9c7, "be71337093fbe99fb99640c4498a0d861861fe7bea29536770d7e739e6a6fbb89adecd5cb7ba4236192b9bb31867a1ec247a679052b008b96ee7c4d143d6fd14d1dd390666dc87766490e4f6b447d659e489a093194f48d3954bc7240dd60dbba4ddd4c39e860c3fe21e4998bd7e967b2269716b85f9640155ebae117246bb6cf5d140655c2b484396b00233458dd0b634467c3ef0a6e5428f48d0f3b51a742a31c612f0305c20d0ae339023c0f1f5a9f3e69242775b43b51d19524782ad956a95993cf75c77aca8c13b7ad8e369a13767044b92b6d908fc38c6"}], 0x510}}, {{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000980)="670b0789b90727eb5251971f54387e0f98a181c4516c1df8b302a00358447e88c4e47257323b23b9da40a4955436bdc03b0faa10c0bf9eea6dc0f6a47b43ef7cc16fbe34c1c98f3d153600837d8feaf5ba589f1739abfaca4c50f4f66ff5b50360194b9fb4ff3b90eb1085c2c9323236bf0f8efb02310c8e1ef7ad8f58855202d3f0965a478f98dd0a5ff8385fb5954994a78c3102ecc72f717e957bc03a7efee39ec6096cc90fe483cc5a3fa580723601e9d5bc26dba9e8fd15301849", 0xbd}], 0x1, &(0x7f0000000a40)=[{0x108, 0x105, 0x4, "a23f01ffaf9960339ccdd1f1a44e0af6886556a57931c771631cfb305b416794d9c2fea0cdcb5cba8ba2f7a01b1831a00634005ea6f5c47708ef68d33fcb32c3600e21070c801251ca76fe1b44cc75615b22d3a10a8cf9af6b07d13a4a9fd8e4d07598af1906ffe0dbabea10fff8a8a56d3a10e8b4d68d0524f03a1d442d6e2388495e5550844715f44991746d10608a5172136a2edada5d809a89bbf312e5e8ba43042147915706305d3d4a5b154f5d44f656c51bd1ef555052458d3e92a67ff6287a82d8ba72abd7cf41ed8a5178e92c54f01af7cb62c043404a6a8eb454ebe625cd7042376dca63984c42c623b6600561a682"}, {0x40, 0x105, 0xfff, "7671fc00c965de870bee7c7e7c348b508720707467f4eb500a7b86b220758e41ebc73638d43f1f2ae910620d"}, {0xb8, 0xff, 0x3f, "44e8840c48fca5834869fcf9d6503f7d28dd2f45e2ee36f011edc05bf49e9a2ee5bfa91301b2897fd0b4357121c8d20f5cc1c83a5ab38f54b23760acf000f1eaf0b00e5452add75da8c044dd36b1c6e712b8904f9ead51b960bf62f7aaa5ab917ac77b5b21d207a7b3a61586ec128783aa0b75c95e629860033656f3f2982c138556e09a661012e378ac529c23716c69fe9a2a30df9998d02a9f87786daae4db0fb22402d87deb"}, {0x60, 0x103, 0x0, "b96a179787d3b2343c23cf93d8b9c6f8298dd1fd7cfccffb7a160d4a849bc5a00c64f7b6a20a80d0f439281b73d0a09509b07f215380f89f05ef282e694fed194dbc8d3e9d266f9491787abf9260ebfa"}, {0xf8, 0x0, 0x1, "7e9066ee028903d187099d645bda6b5e9f38d74fee178810cb13b4dfdb3e1ce348c14a44135fad310d2ffce2e4c037490f3420699fdbb87b53dc5254aa6de3d767e1f15e97dfb5281744ba801629db84a5ec58b8d368240a5ac59dc99586d521be197d47b61d7476e662f20d52478b8ae6fc84c2a089a9ec507549739859abdbc32d0381e1e9135b048aa02e5710e7cfdbe681c6bdee46af1e7a710d06e18a2ad9eb801513b5ea0fa59d6238de561ac4bf8be6786213caa98116a762f39d220f78327994afaaa81c487cd25e3b0fa34ef1a3908f223e0e7078dca5e540f38269fd492943133e33"}, {0x98, 0x3a, 0x8, "2bbd9871a0bcb87de509d004c1ddcf99f31efdc67bfb7dc8033a514b943bf69c42c2ffe1b2ff0c81ae13cadaccd66b2705175f5bdc93068d009f0467fcaf904b3cac9b4e8ee6605182be3eceacf7701e4f544a52b03ec63812c4d7c67cba5cf5ac0599a37f63c17014e93ec98026d45af52bd5e1b0976aed49fc8ddb834631165cb3ac2d75"}, {0x110, 0x119, 0x2, "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"}, {0xb8, 0x10a, 0x5, "d3b7747cd03216508c32cc176e70d7dea6c09959af0a09a72039be23b7cc27ba10ab69337828b29cfab05e4580d1fc80d95beb9662b143e7029b52c74d2e045017a82385f751780f529d3594b3f3cb5bda0a515747601105b843059240762d618fcd2387e7c6beb73d26f428cde9d56c87bac21e7b579a0a54e757bd41ba3dd508d39a8f1395394ecca9ac53aa53d7be728bc9f7702ec6c66e4c6cfd35a15ea9bca1dcf83bc6f1"}], 0x5b8}}], 0x2, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:33:19 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x21) 03:33:19 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffe}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40040, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'batadv_slave_0\x00'}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x5) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xa) [ 1264.931809] FAULT_INJECTION: forcing a failure. [ 1264.931809] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.934554] CPU: 1 PID: 9141 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1264.936056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1264.937914] Call Trace: [ 1264.938503] dump_stack+0x107/0x167 [ 1264.939304] should_fail.cold+0x5/0xa [ 1264.940158] ? p9_client_create+0xaf/0x1230 [ 1264.941124] should_failslab+0x5/0x20 [ 1264.941981] kmem_cache_alloc_trace+0x55/0x320 [ 1264.942991] ? find_held_lock+0x2c/0x110 [ 1264.943905] p9_client_create+0xaf/0x1230 [ 1264.944832] ? lock_downgrade+0x6d0/0x6d0 [ 1264.945802] ? p9_client_flush+0x430/0x430 [ 1264.946755] ? trace_hardirqs_on+0x5b/0x180 [ 1264.947747] ? lockdep_init_map_type+0x2c7/0x780 [ 1264.948834] ? __raw_spin_lock_init+0x36/0x110 [ 1264.949920] v9fs_session_init+0x1dd/0x1680 [ 1264.950913] ? lock_release+0x680/0x680 [ 1264.951811] ? kmem_cache_alloc_trace+0x151/0x320 [ 1264.952892] ? v9fs_show_options+0x690/0x690 [ 1264.953900] ? trace_hardirqs_on+0x5b/0x180 [ 1264.954858] ? kasan_unpoison_shadow+0x33/0x50 [ 1264.955866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1264.957007] v9fs_mount+0x79/0x8f0 [ 1264.957839] ? v9fs_write_inode+0x60/0x60 [ 1264.958775] legacy_get_tree+0x105/0x220 [ 1264.959687] vfs_get_tree+0x8e/0x300 [ 1264.960509] path_mount+0x1429/0x2120 [ 1264.961389] ? strncpy_from_user+0x9e/0x470 [ 1264.962346] ? finish_automount+0xa90/0xa90 [ 1264.963317] ? getname_flags.part.0+0x1dd/0x4f0 [ 1264.964354] ? _copy_from_user+0xfb/0x1b0 [ 1264.965316] __x64_sys_mount+0x282/0x300 [ 1264.966224] ? copy_mnt_ns+0xa00/0xa00 [ 1264.967099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1264.968265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1264.969446] do_syscall_64+0x33/0x40 [ 1264.970277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1264.971404] RIP: 0033:0x7f5793fc9b19 [ 1264.972230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1264.976338] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1264.978045] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1264.979628] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1264.981217] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1264.982862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1264.984434] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:33:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:33:19 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/372, @ANYRESDEC=r0, @ANYRESHEX=r7, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) r9 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x20ab82, 0x160) ioctl$RTC_AIE_OFF(r9, 0x7002) ioctl$SIOCGIFHWADDR(r9, 0x8927, &(0x7f0000000040)={'wg1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x23) [ 1278.464793] FAULT_INJECTION: forcing a failure. [ 1278.464793] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.467626] CPU: 0 PID: 9167 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1278.469248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.471230] Call Trace: [ 1278.471856] dump_stack+0x107/0x167 [ 1278.472720] should_fail.cold+0x5/0xa [ 1278.473621] ? create_object.isra.0+0x3a/0xa20 [ 1278.474717] should_failslab+0x5/0x20 [ 1278.475619] kmem_cache_alloc+0x5b/0x310 [ 1278.476585] create_object.isra.0+0x3a/0xa20 [ 1278.477620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1278.478838] __kmalloc_track_caller+0x177/0x370 [ 1278.479925] ? v9fs_session_init+0xe9/0x1680 [ 1278.480961] ? kernel_text_address+0xf2/0x120 [ 1278.482035] kstrdup+0x36/0x70 [ 1278.482787] v9fs_session_init+0xe9/0x1680 [ 1278.483782] ? lock_release+0x680/0x680 [ 1278.484710] ? find_held_lock+0x2c/0x110 [ 1278.485679] ? kmem_cache_alloc_trace+0x151/0x320 [ 1278.486812] ? v9fs_show_options+0x690/0x690 [ 1278.487851] ? trace_hardirqs_on+0x5b/0x180 [ 1278.488868] ? kasan_unpoison_shadow+0x33/0x50 [ 1278.489944] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1278.491142] v9fs_mount+0x79/0x8f0 [ 1278.491975] ? v9fs_write_inode+0x60/0x60 [ 1278.492956] legacy_get_tree+0x105/0x220 [ 1278.493953] vfs_get_tree+0x8e/0x300 [ 1278.494831] path_mount+0x1429/0x2120 [ 1278.495960] ? strncpy_from_user+0x9e/0x470 [ 1278.496974] ? finish_automount+0xa90/0xa90 [ 1278.498000] ? getname_flags.part.0+0x1dd/0x4f0 [ 1278.499095] ? _copy_from_user+0xfb/0x1b0 [ 1278.500071] __x64_sys_mount+0x282/0x300 [ 1278.501020] ? copy_mnt_ns+0xa00/0xa00 [ 1278.501944] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1278.503165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1278.504365] do_syscall_64+0x33/0x40 [ 1278.505228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1278.506429] RIP: 0033:0x7f5793fc9b19 [ 1278.507299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1278.511631] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1278.513405] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1278.515074] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1278.516731] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1278.518399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1278.520065] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:33:32 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x401) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:33:32 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:33:32 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 21) 03:33:32 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x60ff) 03:33:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0xc0045878, 0x0) 03:33:32 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x400, 0x21) setresuid(0xffffffffffffffff, r2, 0x0) setreuid(0xffffffffffffffff, r2) quotactl(0x0, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)="f129ba04e5ed24068917a30d5308d5d0a39e56fe81691982815dcd6e16f417c80c78e9bbee7eaa92c6857844cdcba7c7792309270fc73c21bb1bcc265b20604a4ced887f01081c8b578548f354bc69") socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) write(r3, &(0x7f0000000440)="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", 0x1000) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) 03:33:32 executing program 6: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "b8a594566ce2865b97c739c2af129632b8a98a222c38203a1ea0c11928cf16dddbc2755b20573edb9a2588b68f6a0e2f220d98ba9daec7455195350342174a0d"}, 0x48, 0xfffffffffffffffc) keyctl$link(0x8, r0, r0) keyctl$link(0x8, r0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "b8a594566ce2865b97c739c2af129632b8a98a222c38203a1ea0c11928cf16dddbc2755b20573edb9a2588b68f6a0e2f220d98ba9daec7455195350342174a0d"}, 0x48, 0xfffffffffffffffc) keyctl$link(0x8, r1, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "b8a594566ce2865b97c739c2af129632b8a98a222c38203a1ea0c11928cf16dddbc2755b20573edb9a2588b68f6a0e2f220d98ba9daec7455195350342174a0d"}, 0x48, 0xfffffffffffffffc) keyctl$link(0x8, r2, r2) keyctl$link(0x8, r2, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) add_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000002c0)="c339157f35c7f5fec0a0714eab5f3ede304a642c8805113ba87210574e5738239366702877ee768360f1ac38f854f1b0ddcdace92895116ba3bec1ca2cdd2495cec118ac2b2862", 0x47, 0xfffffffffffffffd) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x152}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r5 = syz_io_uring_setup(0x4d53, &(0x7f0000000240)={0x0, 0xf335, 0x0, 0x4000002}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pwrite64(r6, &(0x7f0000000440)="7a627e9c8070e0c12ffe71ae383fac09365c4722985bc7e16dd4ef31ca2c3588a20dbc006d484610da0293de31fc0444c96758f609523dc4ec8bbd3228689a161da807236eec8bbd85d04bfe3a37528c05302fe6795dcde65afd365f7a6eef6dd7ed8975f0f8397287cb4889f87e7f172a9c3a5011841b0c9c70554c952cb3ccbc1302abe752cbee260a8012a1359154fa267765223532d9487e7027a916f2cac4148da30e31874c1776218542eb81358dbd02ff578306676ff97f9c58fbf144e3700a9b68fbb15a522d4801a8020c52d3d10a265fe67a4befe3cc70586d4f97bc", 0xe1, 0x80000000) syz_io_uring_setup(0x5dbb, &(0x7f0000000380)={0x0, 0x6143, 0x10, 0x0, 0x22e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580)) request_key(&(0x7f00000005c0)='syzkaller\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)=':[\x00', r0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000340)=[r3, 0xffffffffffffffff, r5], 0x3) 03:33:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xb2200, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) fdatasync(r0) 03:33:32 executing program 7: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x3) 03:33:32 executing program 3: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x28, 0x7, 0x4, 0x9, 0x0, 0xa9f, 0x20000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7ff, 0x200}, 0x10, 0x6, 0x1, 0x4, 0x3, 0x3ff, 0x4, 0x0, 0x0, 0x0, 0x184}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x0, 0x0, 0x4b}) ioctl$TUNSETOFFLOAD(r1, 0x800454cf, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000000c0)=[r3], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000011, 0x832, r3, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 03:33:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$inet(0x2, 0x5, 0x614) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:33:33 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r0, r0, 0x0, 0x20) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:33:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:33:33 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) 03:33:33 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0xc0189436, 0x0) 03:33:33 executing program 6: r0 = gettid() pidfd_open(r0, 0x0) r1 = gettid() pidfd_open(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="9a39494e8d79fee5a2c2ce219898a1ca9d51a16a45c79c49a61b3c7f260ee5a7e8a109e96a527bb06b7a5c9c0f3df73317d6c0a6e6f5685392a4a98a35a015a5a82d41272214608f05bb462dd6"]) clone3(&(0x7f0000001480)={0x200800000, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000300), {0x3b}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000001500)=""/7, &(0x7f00000003c0)=[0x0, 0x0, r0, 0xffffffffffffffff, r1], 0x5, {r2}}, 0x8f) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x138) r5 = syz_io_uring_setup(0x4d51, &(0x7f0000000240)={0x0, 0xb88, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r6 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x4fab, 0x8, 0x0, 0x3bf, 0x0, r4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000340)=[r3, 0xffffffffffffffff, r6], 0x3) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r9, 0x7002) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4007, @fd=r10, 0xfffffffffffffff9, 0x100000001, 0x3, 0x1, 0x1}, 0x7e) r11 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x80100, 0x10a) ioctl$RTC_AIE_OFF(r11, 0x7002) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)) creat(&(0x7f0000000140)='./file0\x00', 0x82) 03:33:33 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0xf0ff1f) 03:33:33 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) dup3(r0, r0, 0x80000) 03:33:33 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:33:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x6400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, r0) 03:33:46 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0xc020660b, 0x0) 03:33:46 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'bond0\x00'}) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x9, 0xfffffffe}) 03:33:46 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0xfffffffa, 0x8, 0x0, 0x80004}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) syz_io_uring_setup(0x7d2f, &(0x7f0000000080)={0x0, 0xda9a, 0x0, 0x0, 0x3e5, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="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", 0x1000, 0x1, 0x1}, 0x100) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:33:46 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:33:46 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x1ffff000) 03:33:46 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 22) 03:33:46 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000004c0)='./file1/file0\x00', 0x2) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) r2 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) r3 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000, 0x400, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) move_mount(r5, &(0x7f0000000380)='./file0\x00', r3, &(0x7f00000003c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="19fb6ea4aa316573b3e43ddfac4eb4538b51a791f07a7d2d0000646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',posixacl,loose,version=9p2000.u,fscache,version=9p2000,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,defcontext=unconfined_u,smackfshat=\',\'A,seclabel,pcr=00000000000000000051,defcontext=user_u,appraise,\x00']) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000, 0x400, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) move_mount(r8, &(0x7f0000000380)='./file1\x00', r2, &(0x7f00000003c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltgid=', @ANYRESHEX=r6, @ANYBLOB=',po^ixacl,loose,version=9p2000.u,dfltgid=', @ANYRESHEX=r7, @ANYBLOB="2c76657273696f6e3d3970323030302c666f77ee65723d", @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,defcontext=unconfined_u,smackfshat=\',\'A,seclabel,pcr=00000000000000000051,defcontext=user_u,appraise,\x00']) recvmsg$unix(r0, &(0x7f0000000180)={&(0x7f0000000440), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/123, 0x7b}, {&(0x7f0000000980)=""/213, 0xd5}, {&(0x7f0000001a80)=""/4101, 0x1005}, {&(0x7f0000000780)=""/114, 0x72}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000d35c4f6b9df14b063db238b9171419fe00e5b4c220d9abe361871db64ebaf74e63d6b8c10f8bc10b73b884ea079340c1cf300dfd0ca5fba5991f3154795ab1276e7df31a1af5df66bd0c1ba6d14238330c7aa888ef16cd746dcdc525", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x88}, 0x40010000) chown(&(0x7f0000000000)='./file0\x00', 0x0, r7) [ 1291.743097] FAULT_INJECTION: forcing a failure. [ 1291.743097] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.745680] CPU: 1 PID: 9229 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1291.747219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1291.749061] Call Trace: [ 1291.749658] dump_stack+0x107/0x167 [ 1291.749998] SELinux: duplicate or incompatible mount options [ 1291.750482] should_fail.cold+0x5/0xa [ 1291.750510] should_failslab+0x5/0x20 [ 1291.750529] __kmalloc_track_caller+0x79/0x370 [ 1291.750548] ? p9_client_create+0x41d/0x1230 [ 1291.750574] kstrdup+0x36/0x70 [ 1291.750593] p9_client_create+0x41d/0x1230 [ 1291.750614] ? lock_downgrade+0x6d0/0x6d0 [ 1291.750639] ? p9_client_flush+0x430/0x430 [ 1291.750659] ? trace_hardirqs_on+0x5b/0x180 [ 1291.750679] ? lockdep_init_map_type+0x2c7/0x780 [ 1291.750700] ? __raw_spin_lock_init+0x36/0x110 [ 1291.750725] v9fs_session_init+0x1dd/0x1680 [ 1291.750745] ? lock_release+0x680/0x680 [ 1291.750772] ? kmem_cache_alloc_trace+0x151/0x320 [ 1291.750790] ? v9fs_show_options+0x690/0x690 [ 1291.750817] ? trace_hardirqs_on+0x5b/0x180 [ 1291.750836] ? kasan_unpoison_shadow+0x33/0x50 [ 1291.750853] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1291.750877] v9fs_mount+0x79/0x8f0 [ 1291.750900] ? v9fs_write_inode+0x60/0x60 [ 1291.750920] legacy_get_tree+0x105/0x220 [ 1291.750941] vfs_get_tree+0x8e/0x300 [ 1291.750958] path_mount+0x1429/0x2120 [ 1291.750982] ? strncpy_from_user+0x9e/0x470 [ 1291.750999] ? finish_automount+0xa90/0xa90 [ 1291.751018] ? getname_flags.part.0+0x1dd/0x4f0 [ 1291.751036] ? _copy_from_user+0xfb/0x1b0 [ 1291.751062] __x64_sys_mount+0x282/0x300 [ 1291.751078] ? copy_mnt_ns+0xa00/0xa00 [ 1291.751101] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1291.751120] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1291.751141] do_syscall_64+0x33/0x40 [ 1291.751159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1291.751172] RIP: 0033:0x7f5793fc9b19 [ 1291.751194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1291.765593] SELinux: duplicate or incompatible mount options [ 1291.765913] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1291.790580] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1291.792175] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1291.793774] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1291.795378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1291.796982] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:33:46 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0], 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) chown(&(0x7f0000000080)='./file0/file0\x00', 0x0, r3) 03:33:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETLINK(r1, 0x400454cd, 0x102) 03:33:46 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x20000000) 03:33:46 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 23) 03:33:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'macvtap0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:33:46 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) 03:33:46 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:33:46 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x21) 03:33:46 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1291.952973] FAULT_INJECTION: forcing a failure. [ 1291.952973] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.956315] CPU: 1 PID: 9267 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1291.957862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1291.959745] Call Trace: [ 1291.960339] dump_stack+0x107/0x167 [ 1291.961160] should_fail.cold+0x5/0xa [ 1291.962020] ? create_object.isra.0+0x3a/0xa20 [ 1291.963061] should_failslab+0x5/0x20 [ 1291.963916] kmem_cache_alloc+0x5b/0x310 [ 1291.964822] ? lock_downgrade+0x6d0/0x6d0 [ 1291.965756] create_object.isra.0+0x3a/0xa20 [ 1291.966744] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1291.967369] 9pnet: Insufficient options for proto=fd [ 1291.967887] __kmalloc_track_caller+0x177/0x370 [ 1291.969538] ? p9_client_create+0x41d/0x1230 [ 1291.970531] kstrdup+0x36/0x70 03:33:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x410440, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ipvlan1\x00'}) [ 1291.971256] p9_client_create+0x41d/0x1230 [ 1291.972325] ? lock_downgrade+0x6d0/0x6d0 [ 1291.973251] ? p9_client_flush+0x430/0x430 [ 1291.974198] ? trace_hardirqs_on+0x5b/0x180 [ 1291.975154] ? lockdep_init_map_type+0x2c7/0x780 [ 1291.976209] ? __raw_spin_lock_init+0x36/0x110 [ 1291.977223] v9fs_session_init+0x1dd/0x1680 [ 1291.978187] ? lock_release+0x680/0x680 [ 1291.979079] ? kmem_cache_alloc_trace+0x151/0x320 [ 1291.980147] ? v9fs_show_options+0x690/0x690 [ 1291.981129] ? trace_hardirqs_on+0x5b/0x180 [ 1291.982085] ? kasan_unpoison_shadow+0x33/0x50 [ 1291.983104] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1291.984234] v9fs_mount+0x79/0x8f0 [ 1291.985031] ? v9fs_write_inode+0x60/0x60 [ 1291.985953] legacy_get_tree+0x105/0x220 [ 1291.986877] vfs_get_tree+0x8e/0x300 [ 1291.987708] path_mount+0x1429/0x2120 [ 1291.988559] ? strncpy_from_user+0x9e/0x470 [ 1291.989514] ? finish_automount+0xa90/0xa90 [ 1291.990478] ? getname_flags.part.0+0x1dd/0x4f0 [ 1291.991511] ? _copy_from_user+0xfb/0x1b0 [ 1291.992437] __x64_sys_mount+0x282/0x300 [ 1291.993335] ? copy_mnt_ns+0xa00/0xa00 [ 1291.994220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 03:33:46 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1291.995382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1291.996644] do_syscall_64+0x33/0x40 [ 1291.997474] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1291.998621] RIP: 0033:0x7f5793fc9b19 [ 1291.999446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1292.003540] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1292.005226] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1292.006818] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1292.008404] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1292.009985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1292.011578] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 [ 1292.038866] 9pnet: Insufficient options for proto=fd 03:33:46 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="86c646dd0966399ab4e49caac6c84b2f270f6617a87d302d3ed1e5cfbfc0c059dc805bc1425e8c54c7532f27ae5bae203a017489a214b11466d6fe19f72b6a7ebd09d8e95f5c8bca8ac6a85a99e23075c7b107d7343dce26f8bda21ab4a19c60773d6f3b843296a3d214a982364a1c5bf74ba6e443e37c4fe656fa51106787cd0f7e5d909c9708e7b3e3787e2bc7cbc21ec8a411425ed46b59e5b169c5f8b2ad0847c1dff27bfbdf2327c963e3d57964986b3862e2c7", 0xb6}, {&(0x7f0000000200)="5609e1687b2adfbc3915db2f7152629464a84da558ce9155a15acd642807941dbd1d4d68f9f07c0f01ed72fccc4115681408d37758e98b04db584728c4ca94a8e7a44d80847cee6da3c66f3750fad0ad9e94f0f774098b59d8c9e4a2f73b7cc23b8e", 0x62}, {&(0x7f0000000280)="e07e47e1863a1af69ac9d062d8b367abed284e0472393aa6d6872d502045c2527fab9c0ce7912965f98d10360f8ea4ae40ccd4c00c69938e6f05fc6e1e2df58cad2deb8f15c8688f22b0c9b5d1afb248067f4a8a98f6ff0de6a9615601ee4656d847cf7ec62a1cfc15d907f5b52fa104a8982c67a7f43d594558a79dd4107c22b1055d00b4a2675c4e9edcf5954afec187e13b258aed5d0ec440bf4a039df5dc452a25e2a7561a3f33575b6f3292ded8eb1f18b899f61e0f8f3bab21c903f70aae6e4253f3f3cea6a687bd172d6bfcff6e6da9fa696a4088f454e7b30c", 0xdd}, {&(0x7f0000000380)="4249256111fc7fb84edf8c0cad63bb987a2c677f944c94ef3ecd0efbfc8ea08c7ff5059e8e8b60cbeac6311f572056cbd2b56ec97630075de1ce760d7b0f017800381165e042ee78d357c07d345eaac7a09bf4c6bee9d9bc78292ccb433469f265c6921a9d15d0cc2924e99918e4f640bcd53c51a7bd4698bc6082ae84916f72a2e2ffa64cdb558c61aefd917db04af57612494407683fce107bb0060fac5b0b8366a204500651c823cf1f50f86df2ad9779b764d8e8df3683475b7e0f49eb9a21ff1fab600e20f4b2965469cc3ae811383d76ccc6ea3a978e19ad55c143fa65a6fa9d7548358d27f6431e249ff5cbc3cdcc37e7643652a312006c6e80f264aeac77b46ada5be63c68177cb116f0203e8cdab45dc4f4c3b7a4b13595ed16dfe67837667c5bc3bde652d231b648a1e66f1dd596606cf2b4686008834e6cbf1a4647e2b75b3b73fc49724ae27ee0f367eb0304136aac0806b90d7c3f65cbb5e327b60d3fbb35f53ad38c26c8c0bb3aa9737ebf9f5cff400d0c48eb5f784543c2d7bf04b6c38cc2b4e0628dc35b62ec3c5d9af0e671df86812b138fff1ed73f02c9a0131f30d631ce385c21b2bf94b45b9bd75726ae6de495c1ce203e3d7eedfaa0da8308cc2d407701e74cfc2d2ec292f2196c89b8a1601b079e14ed56571390c05908bc3cf7e2e74f70960f62856248a3fed262456a868fd2809de0f3341c177dc82acdeb89cc92a041eef601b87eb3eb90e89c3f57386aaa7c27627f4f0bcd6669b2bc5bb4de33f70f00216728cceeca0590efff727ad24d21fef4fbba40ac95dd5f288a533a985aef1d1fb1b969bf89b4f0dc21c57cfbf09e5afdeec9a61baa34296625662bc055989a88ecc9874d5d541d8dd307c9e578a09a21c54f5bc72868835d2de75f0cf8d2790ab6989b0e948d2dcd2df3941f95aed89b3f6a63643d96ac56c6b3ceff5583d40d337c8107a26595d9dd1aafed476288ecf5f4fea6c1616a72c4c43eb0bee5b8b95722752db67517d5b08a73d9346269fb80bf9d3535d41812d593f6ed7db59ba56b06a10807d3a24dc4a536b1f8cb219d1e0fe06ecb09a0d6b34bbc4fb3a2a0eed86027c9aff67f8ea6d4680215e89d6d064ba419d5eab094fd4d782c1d41d1902fb9381d05a3df7f8346ee75c210bc56e2aa233295c5a306383500a2c990402293f08604796214468dc0a6deab5a5c8ba0a41d186c00695bb77dabb864081b0b14dfe9e5a785e9872a1a2ae36507cd307502a86ec595ba9ae897c5b0374bd2516a6636cae4fefee4ca1f9bc86c0056c87776b3e25676448909a0efde91df91567c32d24f6842aa1602cfba870cd1c23ad8e860a9bdb0a4510ed354837a6d2b48a7309d72248100c67104d14af9aa4530ff9ae44cedbb2bda62733e533bc226c55d6cfcfbd026bb8af25b1522000cb4b97cab086ba91af2d224f5736f0d197de032d36b7b4623304e4497e17d1dd3e1dd6cc55ac7a432ff4cbce74b6aea61e4cb9bc8de9632417368355e697fca312e27e7434af8760d601c76662d3de659201fdb44f3c6306727e871bec4d32266703356b00703cca330ffcf5953471f99515d441e5709a9549da8b2efe856348b6b9a5b20ac4f4e5a41453b094d21f36528345941f173735684b90c626912d2353fcd0caa13cca84326893704b8f6b789200882e0363c964652664f859ce07cecdd7f1f224d7c8491a8d07c2e8f1020a75aaf036035befdda3d7759d8b8cd23158ef09802f7c6daa8de2eaed111ca1d73b5fcc99aa978d91a8858cdf792d302145d652fc1d139927c7c823ec15a6aa5d519e836feb2abd03ff3d0edd4e3bad2950572d531792dddb195f41282489f63d58d3800e2f3113cbc07b0d62fc080cd535c658a39fe136b4b5449fc2c4be73466d79a2e894c51cc185b24c1ad17250807f63f2fbbb3bed0d03edb342d0e7775c35549947d79b6f94c32d6d3385c692fbd0657a9e9382cf459e89af62b1b0597061b9a54933eb1f32ed9c58b2a7e1031afbb0adf7c738638165dbcee0d0432a31257d3be92af8c2ebc8ab44adee363511415c0aca0f9a23dffa10ae3fa3d00e997f7f25f0908f5016d19d3eaa612f518edd7cfb2accefb53b774260e1e89f019f567f857cecddcc4d98ca84d4a997dcb743b2c737c7dffef1da491f9bdd524b3936bd9970210397c3c927f51f949673c680ff2d097a76f5b759002a442575e28fddeaca372a39daede7707f9e4cd4149a9058cd2e42ee0cc689769231482fc42f319bad28634ce3926d546a4114e4cf3e920544536f5f56bbfeb7f1a351d243f86e829129b37f9e2001e837215ab2b4b56a0c20eef451ee9f999eebd1fa346cb1389a22087806a6e68c21ef860aae637c62d03dd9f8cb4bf544a502bb968646952cf974fd243a4ee60ffce7bb3e027991446ae84c6967b2f5fbc5a0d9d2502fda27259df04a9a2f7daa854f9cb51718c543253130b59565043b255dc37c7055b40213011a41f4251d771818878315b2658c373a36a9b751fea62c4ad05405107eb7cbe0da9b914464284f316969e511091138bfce57e94cb240d0fade109690e961812520655a54a99ece9db5c0f7a74b6ed77af9b387d458d0c26d90aaeeab4ffa5ce277c5d07fb55c16561b5e88510a058487ba3c0c74bb5a81307ff7cf4210cd15652f7e2c5355f90d953fef0efba44f9bd5a8bc814aa78f43005bab50e00d98fa1a4010181daf1a96f1e7ea0709a287914db1e9aebb5c2b1be4a4347df4c0e605b8d29f059cd1a780cfd42de716b6091ff52029113742c3b33fc892b56eaef5ddb2cfe7d90c8623590926a0754c004f91b4317309efce0759e7f15d1e877a8ee87e651bd4c8529083e7f5b48f9b5164b01ad852b5758af94608e8dabd46e7e2c820552f6c932aa9faca2906992661cac295e074bf714e84c67ee539787e80884729404db8002e5f8f7b6c0d62256e666cabf2102a85dbfbffb08644d2970dbaf45467d77fc57d23659707387795ff02b194ba57b4d259fe6bb2236da9c187b7af04b8cdd3c04dd34f90c5166b95d30ffa2eefa673e3bc561341baa5d18ec99f19c2ffd2977f2227fed15d3fcfeb706666186d2e2ceea715bcc84a07be363b3e24b9b0fedd4128b0956d099903ac86c62a692821f5b18b99993411a671ef7548aa39a8afb731392afae48a7b577ac8bb16cca711c66896151f3b036b1d26849a619a2c3829f06befe6dfe2afb09afa5accc2673067ca0d07934f7e7bfb14c85ad9ad4f02919b8577d10146eb545e9b42db0489cce2628ef04ac4ac7936634d8768b2d08a943d2bc3d45333fc523db1b5b977ded5b2bc4b53ad42f7ec631627816786fde635380cf40487439bf7482344e52afe1f397e7ba96e45fb1c48e64dcae39c205b9c28fa992fd51c187ea2d2b0676d6ca20a96111ede2db16ba7550754352a843a0b1d728af3c912b25d1ceda10a037687b6f05ff4958f8c3beb0fe5dd58edee3d9dd23abd6bc826d268b83bbfc5eef5bd63889bb9e11554d8db1479ac3b59e754855bba992ec9231092262f011e42f629fa6eb08c3b568fdb6b5513b2c556dcbf3f75832d16f7250a64cfae15d81373daf3861b87d49b145094818100139f616ccd49719dc7777d6582b12dd84009c65039e46f38b7a993fc5a034469059aec62c96885e7f9717511b546a2df3b9a35ea6a523475abd5b05283dcccaa242e83a3ae154ccf3b93077787b48ad7ac3fe9a36bc03152fcfd6200e2ef2aeb654a5a5aa254186663875c8432aab11050c400efccdaadb118051e94870f2b19e9b7bb14a238e5908a3a2b138115bb7400373aaecfd709723b7a1df5496ac7d1f561eaf65d2413b58b9cb7f3d1da1297621335930ff7c0a66f9f25c093e07fdab48eacc98db16beb5aa62bc07ebe2473cb1b005b3831a1cddad97ef4af6bb538d40e258da92c86bf6d88965fc6dbcb79db3274f99dd69b3fe5510ed330900dd2cf8912411c1c36a0e4ee34280d2b47bb694bc1672e58d30ad1e92def4507f9c801e8b98d81730f5a1d4214fb7712be5b25acbcb2db5f8da522fcdc824839d1047967c25fdac6422b559e7560ed7e37897c8b5efb7dab1ce01eba1ef29c400f6474eb428b3ee148025443e8b65f7e31f5ffff073ccd3144633b1ff082e7802219c3214e951ce8ae72144c0170d248b4e491c88d7dc0ed8c82e382168e39a89722fafe1d7fe6dcdb1e098f16153d6cafad0cf3711464c8cd71fb86b900ea2f950633926ec1bc0a80e07b8bb7a46376a0e7481120b75f9ec03a090c11c3157602699e4f550b78babca596fd8bcc018d1cbf4c4a95dc7df9112c4ee9c4716facb91457b97012dbd89406f80c23679b6c4fc3c1c54685d9b7d617b649b70f3c86d78305409056b2d8e1f1d3f509b0057409181af812a3ec420f4ab0ad2d70408ad583b2026bec285e7c949c48073151f64fb927fd42c5e5f64e16c679ff19e26e7e4b28ddf81c34ef48d4678c2fa1b3ca185f6e4b3b8c6f9e29ffbbf83032c9a3e73790ec51c0a553294de4b031b5c99a6f6da4091bb8f7516e5a47c49e855d9ef2e903256c2b831dbcc825eaf9ae42b4803362e4918930182fd80b6b8008f4585814f7575e13788d3f30f9480afbbb9b3ff5ca34722bac69bba8f59a104ea39e908a9f0335c2e0453f4a74342f92e8d0fa0290d8fe14e2822cf82fa4e2d526c96f12113740e2f081beacb906ed965b72441b278d5c700a9c7ef3961ddcc7580b4704526e8ec437359320cde20a35cd60fa929e15abc88864a6bcdb42e9a92bcabcdd263085bbc073016cd346fce45c1bf4b0c6270c09b2b38e61f5ab2b37d15fc91f423a4e5ed21ca732f4fa91fc453a19e796fa35267507fa1abd857b74a9bd922a3827d8ccff7ef83731c0e3a755880f1cd44d9f3d2032f84c4ab14279efaaaed8c57658e67f397cb3e8bd358bf385286f746210e9d6900dcb8244ed95ee5229051ea56fc07a882a741be421ef87265e4803fe941b54cce07a40f9daf27beda4f31718d99f144adbdff4f71af287688322432c8106b07cd822cc9ac2594b7ff3e4f0be48d4e1cd90267735ca1031d6767c05824ba5bbbdf3ba237217d7b5f07877bd965f188a9b8cfa8f4db2303df8f29f257325ee52f77fac3cefb52fbbcfda88e1f3212473450a3dba670eeb364879f927bc0cf3b4d19f405697c85c9115305c7a3649d7d256ba767e2902b6a421238ae488b01816a8346d7cbc09de731cbd2f282740f7ff5709de0fc74580e8b2d5ad224acbc51efeb9b8e45f4134323b1bb12f4029b78bacd7948441f294603f53c6d6083c3eeccd50333dd7d727ea71d0414d7c8e45d92f746557a1f6a15ff6a187405a21cf6e9487d67c5c16eb836e5dff2465cf396e7e0ac53a82bfa49ceb5b58fc32c1c0e072951394937c68818a518647bf5804246d34fe1dc639151ddbb356c9823788fd1195ab92073ebe7889eb6dd363a5c422fafefd023e7dd362e5e642bc2fb1fb7236447284af8c65dede8391a25b3606339241e3d05c729df0a5d26b61d01813a6a04d39e29d3c35b4a55a8b20689f0d75638e5857342e13cee53067e9d6b65474414a50944ae05ac1fb2575f9634ce75da9d9024f86e1c74f7daf5b34d3ffd95ca613d510e960614b959ffbdda8069c48106b8cffd143ad4026ebd1e83b49ec7b0a0ecd3fbf79d3e4395e95f114671e5b83f0552dcfc41c51f459774b8292f34dc33a31eac316a06ef210e9bf2917213e66dbb9a750037c73928b323cb392ff7c66b", 0x1000}], 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$TIOCEXCL(r1, 0x540c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) 03:33:46 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) eventfd2(0xd173, 0x80800) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58af, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r0, 0x1) fcntl$setlease(r2, 0x400, 0x2) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) fcntl$setlease(r4, 0x400, 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000), 0x4000003b) 03:33:46 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:33:46 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x21000000) 03:33:46 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) [ 1292.120118] 9pnet: Insufficient options for proto=fd 03:33:46 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x60ff) 03:33:46 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0xff600000) 03:33:46 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:34:00 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 24) 03:34:00 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0xf0ff1f) 03:34:00 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x1c12c1, 0x1a8, 0x13}, 0x18) fsetxattr$security_ima(r1, &(0x7f0000000140), &(0x7f0000000380)=@v2={0x6, 0x3, 0x0, 0x1, 0xf2, "de61c18ac5d3f8cf90258f0a0b145255ca50f7f3875d15b2c211cc6279e09653ca4bd11d4f3adb9be1cb1c1e8f28f8ef04bcc7d8e9a7b75cd3b37e984a0ec86e70b3cc5811f22b86d68ebc4341806f17d5237ca558441f98daafd92a72472040e0a5f10b756cd45b74b3247eb2a65a507500eba2c583d1b7cafcf81ed92ba3c0290453c8de435bb0cbf775e72bb774fdd16b6fe1733f5d6bce6539461cec475b60e24e8551a49354959c6180ae62831a98e03add1721a83cf7d9a28b890bd2fbe06285bb7fe5b79615470bf42b0928da1579946c1cb6ffc35a8cf06cb349aec46dd36feac937af74b5a4765176c88cadc800"}, 0xfb, 0x1) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x2202, 0x118) sendfile(r2, r0, &(0x7f00000000c0)=0x9, 0x683c) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180), 0x0) 03:34:00 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x2000000000) 03:34:00 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x77fac386eb21f0b0, 0x1a) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:34:00 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:34:00 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xb0e}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:34:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r1, 0x34d6, 0x0, 0x0, 0x0, 0x0) r2 = epoll_create(0x7ffd) readv(r2, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000001c0)=r3) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000500)={{r1}, r3, 0x1a, @unused=[0x8000, 0x200, 0x8000, 0xb48d], @subvolid=0x1fc}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"5ed12b369cb51b2d667a69e6c197f454", r3, 0x0, {0x3, 0x7}, {0x6, 0x200}, 0x1f, [0x7, 0x83a, 0x8, 0x4, 0x8000, 0x7, 0x0, 0x9, 0xe427, 0x1, 0x1f3, 0xfffffffffffffffe, 0x2, 0x4, 0x591, 0x3]}) [ 1306.469941] FAULT_INJECTION: forcing a failure. [ 1306.469941] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.472760] CPU: 0 PID: 9317 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1306.474399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.476367] Call Trace: [ 1306.476996] dump_stack+0x107/0x167 [ 1306.477862] should_fail.cold+0x5/0xa [ 1306.478786] should_failslab+0x5/0x20 [ 1306.479688] __kmalloc_track_caller+0x79/0x370 [ 1306.480772] ? p9_client_create+0x51e/0x1230 [ 1306.481830] kmemdup_nul+0x2d/0xa0 [ 1306.482685] p9_client_create+0x51e/0x1230 [ 1306.483702] ? p9_client_flush+0x430/0x430 [ 1306.484711] ? trace_hardirqs_on+0x5b/0x180 [ 1306.485748] ? lockdep_init_map_type+0x2c7/0x780 [ 1306.486909] ? __raw_spin_lock_init+0x36/0x110 [ 1306.488000] v9fs_session_init+0x1dd/0x1680 [ 1306.489055] ? kmem_cache_alloc_trace+0x151/0x320 [ 1306.490222] ? v9fs_show_options+0x690/0x690 [ 1306.491302] ? trace_hardirqs_on+0x5b/0x180 [ 1306.492345] ? kasan_unpoison_shadow+0x33/0x50 [ 1306.493452] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1306.494691] v9fs_mount+0x79/0x8f0 [ 1306.495555] ? v9fs_write_inode+0x60/0x60 [ 1306.496561] legacy_get_tree+0x105/0x220 [ 1306.497543] vfs_get_tree+0x8e/0x300 [ 1306.498435] path_mount+0x1429/0x2120 [ 1306.499369] ? strncpy_from_user+0x9e/0x470 [ 1306.500409] ? finish_automount+0xa90/0xa90 [ 1306.501460] ? getname_flags.part.0+0x1dd/0x4f0 [ 1306.502585] ? _copy_from_user+0xfb/0x1b0 [ 1306.503602] __x64_sys_mount+0x282/0x300 [ 1306.504580] ? copy_mnt_ns+0xa00/0xa00 [ 1306.505525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1306.506800] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1306.508045] do_syscall_64+0x33/0x40 [ 1306.508944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1306.510182] RIP: 0033:0x7f5793fc9b19 [ 1306.511092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1306.515567] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1306.517414] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1306.519159] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1306.520861] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1306.522581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1306.524325] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:34:01 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) pidfd_getfd(r1, r1, 0x0) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x16}, @val={0x1, 0x3, 0xc3e0, 0x9, 0x18, 0x3}, @x25={0x2, 0x4, 0x9, "b42375832d78d31a52be91ea7664591234aadf372f660054bf02775589cc332557076bfd93caac99a24fdb9c0ee42d0f7a95d4c7ed2f968edd8535c48622c5bf9e27f8248102e366b0dfff671ad9e052092a02626548c6afac761aadfaafee66047f3fd7ceed029e54b1d9692ee3b25c942350e8f0d8a90687f2b7119f5436315223b6c3c33b330695b283f9cf037f747ee990dbf8ee941c6763ce949ca7f08f477245f41c8e9521b2cd392f84ecefee1ce07f143d89524b89a8e3d817"}}, 0xce) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:34:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x7e, 0x101080) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) r2 = dup(r1) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x667013762adb08d8, {0x1}}, 0x8000) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) 03:34:01 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x82) setresuid(0xffffffffffffffff, r1, 0x0) setreuid(0xffffffffffffffff, r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@nodevmap}], [{@euid_eq={'euid', 0x3d, r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$)\xd9'}}, {@smackfsdef={'smackfsdef', 0x3d, '%*'}}, {@seclabel}, {@audit}]}}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x30}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x148, 0x1000) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:34:01 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:34:01 executing program 6: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x1b, &(0x7f0000000000)=@generic={0x8, 0x2, 0x13, "a4b080bf", "f5df677f0376672e04069dfb99d38d5e82885a"}) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d0f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1, 0xffffffffffffffff, r3], 0x3) 03:34:01 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r1 = creat(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x7, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000000)=0x7, 0x4) fsmount(r1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)={0x16, 0x17, 0x2, {0xfffffffffffffeaa, './file0'}}, 0x16) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) pwrite64(r4, &(0x7f00000000c0)="04", 0x1, 0x3ff03) dup2(r3, r4) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10000660) 03:34:01 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x21) 03:34:01 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x2100000000) [ 1306.757107] udc-core: couldn't find an available UDC or it's busy [ 1306.758673] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1306.870982] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 1307.312549] udc-core: couldn't find an available UDC or it's busy [ 1307.313969] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 03:34:21 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 25) 03:34:21 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setreuid(0xffffffffffffffff, r2) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r2, r3) 03:34:21 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x1ffff000) [ 1327.551729] FAULT_INJECTION: forcing a failure. [ 1327.551729] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.554380] CPU: 0 PID: 9372 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1327.555992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1327.557910] Call Trace: [ 1327.558522] dump_stack+0x107/0x167 [ 1327.559580] should_fail.cold+0x5/0xa [ 1327.560466] ? create_object.isra.0+0x3a/0xa20 [ 1327.561526] should_failslab+0x5/0x20 [ 1327.562405] kmem_cache_alloc+0x5b/0x310 [ 1327.563350] create_object.isra.0+0x3a/0xa20 [ 1327.564382] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1327.565554] __kmalloc_track_caller+0x177/0x370 [ 1327.566626] ? p9_client_create+0x51e/0x1230 [ 1327.567676] kmemdup_nul+0x2d/0xa0 [ 1327.568494] p9_client_create+0x51e/0x1230 [ 1327.569476] ? p9_client_flush+0x430/0x430 [ 1327.570450] ? trace_hardirqs_on+0x5b/0x180 [ 1327.571475] ? lockdep_init_map_type+0x2c7/0x780 [ 1327.572577] ? __raw_spin_lock_init+0x36/0x110 [ 1327.573634] v9fs_session_init+0x1dd/0x1680 [ 1327.574630] ? lock_release+0x680/0x680 [ 1327.575582] ? kmem_cache_alloc_trace+0x151/0x320 [ 1327.576692] ? v9fs_show_options+0x690/0x690 [ 1327.577706] ? trace_hardirqs_on+0x5b/0x180 [ 1327.578692] ? kasan_unpoison_shadow+0x33/0x50 [ 1327.579765] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1327.580933] v9fs_mount+0x79/0x8f0 [ 1327.581751] ? v9fs_write_inode+0x60/0x60 [ 1327.582704] legacy_get_tree+0x105/0x220 [ 1327.583661] vfs_get_tree+0x8e/0x300 [ 1327.584513] path_mount+0x1429/0x2120 [ 1327.585389] ? strncpy_from_user+0x9e/0x470 [ 1327.586375] ? finish_automount+0xa90/0xa90 [ 1327.587362] ? getname_flags.part.0+0x1dd/0x4f0 [ 1327.588451] ? _copy_from_user+0xfb/0x1b0 [ 1327.589404] __x64_sys_mount+0x282/0x300 [ 1327.590331] ? copy_mnt_ns+0xa00/0xa00 [ 1327.591230] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.592456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.593639] do_syscall_64+0x33/0x40 [ 1327.594488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1327.595684] RIP: 0033:0x7f5793fc9b19 [ 1327.596535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1327.600798] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1327.602547] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1327.604216] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1327.605850] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1327.607510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1327.609143] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:34:21 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000500)=[{}, {&(0x7f0000000080)=""/127, 0x7f}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000380)=""/69, 0x45}], 0x7}, 0x3f}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000680)=""/184, 0xb8}, {&(0x7f0000000740)=""/251, 0xfb}, {&(0x7f0000000840)=""/41, 0x29}], 0x5}, 0x5}, {{&(0x7f0000000900), 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/30, 0x1e}], 0x1, &(0x7f0000000a00)=""/53, 0x35}, 0x8000}, {{&(0x7f0000000a40)=@nl=@proc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/110, 0x6e}], 0x1, &(0x7f0000000b80)=""/25, 0x19}, 0x2}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000bc0)=""/168, 0xa8}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/149, 0x95}, {&(0x7f0000001d40)=""/220, 0xdc}, {&(0x7f0000001e40)=""/124, 0x7c}, {&(0x7f0000001ec0)=""/145, 0x91}, {&(0x7f0000001f80)=""/234, 0xea}, {&(0x7f0000002080)=""/124, 0x7c}], 0x8}, 0x4}, {{&(0x7f0000002180)=@l2, 0x80, &(0x7f0000002680)=[{&(0x7f0000002200)=""/214, 0xd6}, {&(0x7f0000002300)=""/195, 0xc3}, {&(0x7f0000002400)=""/133, 0x85}, {&(0x7f00000024c0)=""/142, 0x8e}, {&(0x7f0000002580)=""/251, 0xfb}], 0x5, &(0x7f0000002700)=""/47, 0x2f}, 0xac8}, {{&(0x7f0000002740)=@nfc_llcp, 0x80, &(0x7f0000002980)=[{&(0x7f00000027c0)=""/144, 0x90}, {&(0x7f0000002880)}, {&(0x7f00000028c0)=""/155, 0x9b}], 0x3, &(0x7f00000029c0)=""/110, 0x6e}, 0xe78}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002a40)=""/23, 0x17}, {&(0x7f0000002a80)=""/9, 0x9}, {&(0x7f0000002ac0)=""/76, 0x4c}, {&(0x7f0000002b40)=""/74, 0x4a}, {&(0x7f0000002bc0)=""/111, 0x6f}, {&(0x7f0000002c40)=""/139, 0x8b}, {&(0x7f0000002d00)=""/209, 0xd1}, {&(0x7f0000002e00)=""/132, 0x84}, {&(0x7f0000002ec0)=""/202, 0xca}, {&(0x7f0000002fc0)=""/225, 0xe1}], 0xa, &(0x7f0000003180)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000004180)=""/171, 0xab}, {&(0x7f0000004240)=""/247, 0xf7}, {&(0x7f0000004340)=""/227, 0xe3}, {&(0x7f0000004440)=""/228, 0xe4}], 0x4, &(0x7f0000004580)=""/201, 0xc9}, 0x28000}], 0x9, 0x2023, &(0x7f00000048c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:34:21 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x0) r2 = syz_io_uring_setup(0x4d51, &(0x7f0000000080)={0x0, 0xd9f7, 0x1, 0x2, 0x314, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:34:21 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:34:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28a022, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$TUNSETOFFLOAD(r2, 0x800454cf, 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ipvlan0\x00'}) ftruncate(r0, 0x9) 03:34:22 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x60ffffffffff) 03:34:22 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:34:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x482040, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:34:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x1d) 03:34:36 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 26) 03:34:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETLINK(r1, 0x400454cd, 0x13) 03:34:36 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x7f697a5ef000) 03:34:36 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) r1 = syz_io_uring_setup(0x4591, &(0x7f0000000240)={0x0, 0xfffffffc, 0x20, 0x5, 0x15a, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:34:36 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x20000000) 03:34:36 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:34:36 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454dd, 0x0) 03:34:36 executing program 6: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'ipvlan1\x00'}) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) acct(&(0x7f0000000000)='./file0/../file0\x00') r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000, 0x80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) move_mount(r9, &(0x7f0000000380)='./file0\x00', r6, &(0x7f00000003c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',dfltgid=', @ANYRESHEX=r7, @ANYBLOB=',posixacl,loose,version=9p2000.u,dfltgid=', @ANYRESHEX=r8, @ANYBLOB="2c76657273696f6e3d397032010000000000000065723d22e3c49e4a79ddd8261fad02b2e1598bc4ef0aceb09e73af7e695bbcb7ee181145f991db08558c05029fa7c1a7b10f7dd7f599942aa6277f2736593a17c08f046ee67f0d1a0088461a02bdfcff53d8a5470d1ebd1a010ce63ddc508cc57b72e8301b27047784dac528f3c37bbd4adde73ccd943b31b0e336d534", @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,defcontext=unconfined_u,smackfshat=\',\'A,seclabel,pcr=00000000000000000051,defcontext=user_u,appraise,\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) 03:34:36 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454d3, 0x0) 03:34:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) [ 1342.283511] FAULT_INJECTION: forcing a failure. [ 1342.283511] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.284929] CPU: 0 PID: 9422 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1342.285744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1342.286748] Call Trace: [ 1342.287069] dump_stack+0x107/0x167 [ 1342.287506] should_fail.cold+0x5/0xa [ 1342.287981] should_failslab+0x5/0x20 [ 1342.288440] __kmalloc_track_caller+0x79/0x370 [ 1342.288988] ? p9_client_create+0x598/0x1230 [ 1342.289518] ? kfree+0xd7/0x340 [ 1342.289920] kmemdup_nul+0x2d/0xa0 [ 1342.290345] p9_client_create+0x598/0x1230 [ 1342.290868] ? p9_client_flush+0x430/0x430 [ 1342.291376] ? trace_hardirqs_on+0x5b/0x180 [ 1342.291904] ? lockdep_init_map_type+0x2c7/0x780 [ 1342.292480] ? __raw_spin_lock_init+0x36/0x110 [ 1342.293032] v9fs_session_init+0x1dd/0x1680 [ 1342.293555] ? lock_release+0x680/0x680 [ 1342.294041] ? kmem_cache_alloc_trace+0x151/0x320 [ 1342.294619] ? v9fs_show_options+0x690/0x690 [ 1342.295150] ? trace_hardirqs_on+0x5b/0x180 [ 1342.295673] ? kasan_unpoison_shadow+0x33/0x50 [ 1342.296235] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1342.296847] v9fs_mount+0x79/0x8f0 [ 1342.297276] ? v9fs_write_inode+0x60/0x60 [ 1342.297778] legacy_get_tree+0x105/0x220 [ 1342.298267] vfs_get_tree+0x8e/0x300 [ 1342.298721] path_mount+0x1429/0x2120 [ 1342.299181] ? strncpy_from_user+0x9e/0x470 [ 1342.299698] ? finish_automount+0xa90/0xa90 [ 1342.300229] ? getname_flags.part.0+0x1dd/0x4f0 [ 1342.300785] ? _copy_from_user+0xfb/0x1b0 [ 1342.301287] __x64_sys_mount+0x282/0x300 [ 1342.301773] ? copy_mnt_ns+0xa00/0xa00 [ 1342.302247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1342.302877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1342.303504] do_syscall_64+0x33/0x40 [ 1342.303959] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1342.304581] RIP: 0033:0x7f5793fc9b19 [ 1342.305028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1342.307257] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1342.308186] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1342.309051] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1342.309910] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1342.310766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1342.311623] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 [ 1342.333223] 9pnet: Unknown protocol version 9p2 03:34:36 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2400c080}, 0x40890) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = signalfd4(r1, &(0x7f0000000000)={[0x101]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2561627b}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1], 0x1) 03:34:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:34:36 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x21000000) 03:34:51 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0xff600000) 03:34:51 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 03:34:51 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x7f697a7ef000) 03:34:51 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r3, 0x7002) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000000)={0x6, 0xce49, 0x4, 0xb1}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:34:51 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 27) 03:34:51 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x160) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) openat(r0, &(0x7f0000000100)='./file0\x00', 0x101100, 0x0) 03:34:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) setns(0xffffffffffffffff, 0x10000000) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x2, 0x6}) 03:34:51 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) [ 1357.181102] FAULT_INJECTION: forcing a failure. [ 1357.181102] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.183312] CPU: 0 PID: 9464 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1357.184559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1357.186146] Call Trace: [ 1357.186652] dump_stack+0x107/0x167 [ 1357.187281] should_fail.cold+0x5/0xa [ 1357.187946] should_failslab+0x5/0x20 [ 1357.188633] __kmalloc_track_caller+0x79/0x370 [ 1357.189442] ? p9_client_create+0x598/0x1230 [ 1357.190264] ? kfree+0xd7/0x340 [ 1357.190890] kmemdup_nul+0x2d/0xa0 [ 1357.191606] p9_client_create+0x598/0x1230 [ 1357.192494] ? p9_client_flush+0x430/0x430 [ 1357.193246] ? trace_hardirqs_on+0x5b/0x180 [ 1357.194014] ? lockdep_init_map_type+0x2c7/0x780 [ 1357.194889] ? __raw_spin_lock_init+0x36/0x110 [ 1357.195729] v9fs_session_init+0x1dd/0x1680 [ 1357.196607] ? lock_release+0x680/0x680 [ 1357.197333] ? kmem_cache_alloc_trace+0x151/0x320 [ 1357.198187] ? v9fs_show_options+0x690/0x690 [ 1357.198955] ? trace_hardirqs_on+0x5b/0x180 [ 1357.199822] ? kasan_unpoison_shadow+0x33/0x50 [ 1357.200726] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1357.201726] v9fs_mount+0x79/0x8f0 [ 1357.202423] ? v9fs_write_inode+0x60/0x60 [ 1357.203169] legacy_get_tree+0x105/0x220 [ 1357.203872] vfs_get_tree+0x8e/0x300 [ 1357.204586] path_mount+0x1429/0x2120 [ 1357.205315] ? strncpy_from_user+0x9e/0x470 [ 1357.206197] ? finish_automount+0xa90/0xa90 [ 1357.207021] ? getname_flags.part.0+0x1dd/0x4f0 [ 1357.207925] ? _copy_from_user+0xfb/0x1b0 [ 1357.208667] __x64_sys_mount+0x282/0x300 [ 1357.209386] ? copy_mnt_ns+0xa00/0xa00 [ 1357.210085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1357.211174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1357.212251] do_syscall_64+0x33/0x40 [ 1357.212924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1357.213982] RIP: 0033:0x7f5793fc9b19 [ 1357.214638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1357.218467] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1357.220054] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1357.221539] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1357.223018] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1357.224513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1357.225991] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:34:51 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 03:34:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0x0, 0x1}) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'wg0\x00'}) 03:34:51 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_setup(0x75a4, &(0x7f0000000180)={0x0, 0xbd60, 0x8, 0x0, 0x7e, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) syz_io_uring_setup(0x4811, &(0x7f0000000080)={0x0, 0x40, 0x2, 0x2, 0x1eb, 0x0, r3}, &(0x7f0000fee000/0x10000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r2, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x4}, 0xa7e) 03:34:51 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:35:04 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 28) 03:35:04 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 03:35:04 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl(r0, 0xffff, &(0x7f0000000080)="a404288fc68e4928e63136caa87ea8a41299a7c4f8a2979a25805cf69aecf68859a899c73d8a5fbdae5b0b096469dbd5b6ce9676c04922bec05e1f3f9c0f762ae8199ca2d5aa273f451aa70e224ba67ff022310b0270ec1557d25196b903841aeb9789c8237254e010aeb7c5bec58316052d1a9bb269b31e36ba5264643573de22caa833c3db182f0789502d2ab3e952e1bb576ab030789c2379eb6e3dc3c6d304832d3add112f302a0b5aed2939aa77a0ca1fed2da1b42864b0c64773c8d1732d42ec0b3d7ba9b3288636f049c424cf59217b1437f9764a23f2d96bfbe16f9667b07fc954dcc5c90ff104f386") mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x85) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1], 0x1) close(r1) 03:35:04 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x2000000000) 03:35:04 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3c57}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x65}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x94f0}]}, 0x90}, 0x1, 0x0, 0x0, 0x8054}, 0x4020040) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r3], 0x3) 03:35:04 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x7f697c96f000) 03:35:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0x5) r4 = syz_io_uring_setup(0x24d4f, &(0x7f0000000380)={0x0, 0x38d, 0x10, 0x2000000, 0x2aa}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000480), &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x0, 0x1000, 0x54, &(0x7f00000000c0)="3ceb2d75752fdfb73989021c99335f533eabe75778622031b17a84c1a957530217c6a85a5f697ba362d28b3039e1d186f0bfd95a8af7122ec75a5d15a423fa942b02f9705a97f3b4b8b3f7ed2fca7f50d73582b1", 0xca, 0x0, &(0x7f00000004c0)="276d577dc981c204201814df7254957645ca33c91e9368e91139af6dee11a12dbb18bd8ac65007cfef02ae999b84ab72d1144b5515a39b6775241bb34a075b42527db3aa0dd623a1ecfb049f6ee39c56616b2c5a105352d5883db2980ce74690ba8967b763c0e2920ed5f4b0e57b9355fdbed12f07d24d905a910f72a652dff2cc0d4a7af6a91be9c442212a86c4a35d56288279cf6b448d1698a52fe1b4eefbefc6ae66e8d34b8920f10657c332ddf730696f0fd97478c04d9983ffb353198f0d52dc134556000f0ef4"}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r5 = syz_io_uring_setup(0x4d51, &(0x7f0000000240)={0x0, 0x866d, 0x0, 0x0, 0x2ac}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r5, 0x0, 0x0, 0x32, 0x2, 0x1, {0x0, r6}}, 0x1) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendfile(r1, r7, &(0x7f0000000040)=0x13d, 0x5) ftruncate(r0, 0xffffffffe413284d) 03:35:04 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:35:05 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1370.562836] FAULT_INJECTION: forcing a failure. [ 1370.562836] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.565699] CPU: 1 PID: 9507 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1370.567413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1370.569405] Call Trace: [ 1370.569963] dump_stack+0x107/0x167 [ 1370.570701] should_fail.cold+0x5/0xa [ 1370.571504] should_failslab+0x5/0x20 [ 1370.572276] __kmalloc_track_caller+0x79/0x370 [ 1370.573185] 9pnet: Insufficient options for proto=fd [ 1370.573244] ? parse_opts.part.0+0x8e/0x340 [ 1370.573270] kstrdup+0x36/0x70 [ 1370.575552] parse_opts.part.0+0x8e/0x340 [ 1370.576469] ? p9_fd_show_options+0x1c0/0x1c0 [ 1370.577433] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1370.578573] ? quarantine_put+0x8b/0x1a0 [ 1370.579449] ? trace_hardirqs_on+0x5b/0x180 [ 1370.580387] ? kfree+0xd7/0x340 [ 1370.581117] p9_fd_create+0x98/0x4a0 [ 1370.581900] ? p9_conn_create+0x510/0x510 [ 1370.582761] ? p9_client_create+0x798/0x1230 [ 1370.583736] ? kfree+0xd7/0x340 03:35:05 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) recvfrom(r0, &(0x7f00000000c0)=""/33, 0x21, 0x2040, &(0x7f0000000100)=@hci={0x1f, 0x2, 0x2}, 0x80) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1], 0x1) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x110, r2, 0x8000000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x1, 0xcd32, 0x101, 0x18000000, 0x5}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r5}}, 0x6) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0xfffffff7) [ 1370.584468] p9_client_create+0x7ff/0x1230 [ 1370.585783] ? p9_client_flush+0x430/0x430 [ 1370.586711] ? trace_hardirqs_on+0x5b/0x180 [ 1370.587611] ? lockdep_init_map_type+0x2c7/0x780 [ 1370.588603] ? __raw_spin_lock_init+0x36/0x110 [ 1370.589575] v9fs_session_init+0x1dd/0x1680 [ 1370.590456] ? lock_release+0x680/0x680 [ 1370.591297] ? kmem_cache_alloc_trace+0x151/0x320 [ 1370.592290] ? v9fs_show_options+0x690/0x690 [ 1370.593227] ? trace_hardirqs_on+0x5b/0x180 [ 1370.594093] ? kasan_unpoison_shadow+0x33/0x50 [ 1370.595040] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1370.596081] v9fs_mount+0x79/0x8f0 [ 1370.596821] ? v9fs_write_inode+0x60/0x60 [ 1370.597684] legacy_get_tree+0x105/0x220 [ 1370.598528] vfs_get_tree+0x8e/0x300 [ 1370.599311] path_mount+0x1429/0x2120 [ 1370.600105] ? strncpy_from_user+0x9e/0x470 03:35:05 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1370.601016] ? finish_automount+0xa90/0xa90 [ 1370.602032] ? getname_flags.part.0+0x1dd/0x4f0 [ 1370.602998] ? _copy_from_user+0xfb/0x1b0 [ 1370.603860] __x64_sys_mount+0x282/0x300 [ 1370.604706] ? copy_mnt_ns+0xa00/0xa00 [ 1370.605528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1370.606627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1370.607689] do_syscall_64+0x33/0x40 [ 1370.608460] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1370.609546] RIP: 0033:0x7f5793fc9b19 [ 1370.610342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1370.614119] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1370.615683] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1370.617195] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1370.618692] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1370.620137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1370.621591] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 [ 1370.623893] 9pnet: Insufficient options for proto=fd [ 1370.646052] 9pnet: Insufficient options for proto=fd 03:35:05 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:35:05 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000100)={0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:35:05 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:35:05 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:35:05 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x7ffffffff000) [ 1370.736150] 9pnet: Insufficient options for proto=fd 03:35:19 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:35:19 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0xf05e7a697f0000) 03:35:19 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x2100000000) 03:35:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:35:19 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') r0 = syz_io_uring_setup(0x21e6, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)=0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x2080, 0xb339546f0dc19227) ioctl$RTC_AIE_OFF(r2, 0x7002) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r3 = openat(r2, &(0x7f0000000000)='./file0/file0\x00', 0xe000, 0x100) syz_io_uring_submit(0x0, r1, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x7, 0x0, r3, &(0x7f0000001680), &(0x7f0000000380)='./file0/file0\x00', 0x100, 0x1000}, 0x3) r4 = socket$netlink(0x10, 0x3, 0x9) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x2}, {0x4}, 0x1eb, 0x0, 0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)="46ea7c719cc3e7dbd3264f14a86854c64beb7a10e969ad05d0e06ce7363b56ee172b06fa753007f12bfea66bfe6ff9d18f98ec3e3ab09abb8c56beaf55813bfeb42a4f78629f0c14b97e506e545e61c84592f62d38f81573cc5e27dc3bd074be07820390e6d571650f5a73ab87ed9de4d6957572c829c105f002a3b917873b020a3c50408227bfff1a0475a761eb0f9d9e9d54595c70a64150dca8f53790a438c5bede2746eb0a1dceddc4e230795e35f268c06b14e7fa55fba79141e6842de020897261d4f04e97a698237516266ff40acfae2f60d5989cda4780bf14e314afebc5281e586750a55cb9f96e86eb06f309b16a8155d05198e4edad5eb3e9a8526d97cca9ecd06a45dc2fe94146cfd273f1f1ab581a462f06a706e6e1e6bb1bd33e0700e486eec8a98094f6d42302bc47ddae3f1c42198fbeb0f4236645ef81a1572bbc8f926248cd01d0fa281f552fadacbed70c09e22ad9fa132b5528760f5d5ac4e3502d92924eba31b5fa55a3081fc42589cf43a9a133549f7b88abdf23d5931ff2cfb9a0b2a83c4d071c0ccafb5bfd3b24c566b1f388800122087240705f2783bbd5ce96b5ce0acabbf8363356d7764a7cae23", 0x1b5, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x104b}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) r5 = syz_io_uring_setup(0x5098, &(0x7f0000000240)={0x0, 0xe823, 0x0, 0xfffffffc, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) r6 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) io_uring_enter(r6, 0x58af, 0x0, 0x2, 0x0, 0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) close(r5) 03:35:19 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:35:19 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 29) 03:35:19 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}, 0x2403) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x1901, 0x0, &(0x7f0000000140)=[r8, r0]}, 0x2) r9 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20c}, &(0x7f00000a0000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) io_uring_enter(r9, 0x58af, 0x0, 0x2, 0x0, 0x0) io_uring_enter(r9, 0x3452, 0x63b9, 0xf25917531b897f6c, &(0x7f00000002c0)={[0x1ff]}, 0x8) r10 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r10], 0x3) creat(&(0x7f00000001c0)='./file0\x00', 0x40) 03:35:19 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) [ 1384.845472] 9pnet: Insufficient options for proto=fd [ 1384.851678] FAULT_INJECTION: forcing a failure. [ 1384.851678] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.853138] CPU: 1 PID: 9565 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1384.853988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1384.854995] Call Trace: [ 1384.855336] dump_stack+0x107/0x167 [ 1384.855797] should_fail.cold+0x5/0xa [ 1384.856278] ? create_object.isra.0+0x3a/0xa20 [ 1384.856844] should_failslab+0x5/0x20 [ 1384.857316] kmem_cache_alloc+0x5b/0x310 [ 1384.857840] ? legacy_get_tree+0x105/0x220 [ 1384.858362] ? vfs_get_tree+0x8e/0x300 [ 1384.858839] create_object.isra.0+0x3a/0xa20 [ 1384.859381] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1384.860005] __kmalloc_track_caller+0x177/0x370 [ 1384.860582] ? parse_opts.part.0+0x8e/0x340 [ 1384.861113] kstrdup+0x36/0x70 [ 1384.861526] parse_opts.part.0+0x8e/0x340 [ 1384.862049] ? p9_fd_show_options+0x1c0/0x1c0 [ 1384.862606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1384.863251] ? quarantine_put+0x8b/0x1a0 [ 1384.863742] ? trace_hardirqs_on+0x5b/0x180 [ 1384.864278] ? kfree+0xd7/0x340 [ 1384.864689] p9_fd_create+0x98/0x4a0 [ 1384.865151] ? p9_conn_create+0x510/0x510 [ 1384.865668] ? p9_client_create+0x798/0x1230 [ 1384.866204] ? kfree+0xd7/0x340 [ 1384.866626] p9_client_create+0x7ff/0x1230 [ 1384.867141] ? p9_client_flush+0x430/0x430 [ 1384.867664] ? trace_hardirqs_on+0x5b/0x180 [ 1384.868194] ? lockdep_init_map_type+0x2c7/0x780 [ 1384.868777] ? __raw_spin_lock_init+0x36/0x110 [ 1384.869342] v9fs_session_init+0x1dd/0x1680 [ 1384.869936] ? lock_release+0x680/0x680 [ 1384.870429] ? kmem_cache_alloc_trace+0x151/0x320 [ 1384.871022] ? v9fs_show_options+0x690/0x690 [ 1384.871562] ? trace_hardirqs_on+0x5b/0x180 [ 1384.872090] ? kasan_unpoison_shadow+0x33/0x50 [ 1384.872649] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1384.873266] v9fs_mount+0x79/0x8f0 [ 1384.873712] ? v9fs_write_inode+0x60/0x60 [ 1384.874218] legacy_get_tree+0x105/0x220 [ 1384.874710] vfs_get_tree+0x8e/0x300 [ 1384.875163] path_mount+0x1429/0x2120 [ 1384.875627] ? strncpy_from_user+0x9e/0x470 [ 1384.876149] ? finish_automount+0xa90/0xa90 [ 1384.876685] ? getname_flags.part.0+0x1dd/0x4f0 [ 1384.877247] ? _copy_from_user+0xfb/0x1b0 [ 1384.877777] __x64_sys_mount+0x282/0x300 [ 1384.878270] ? copy_mnt_ns+0xa00/0xa00 [ 1384.878747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1384.879381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1384.880016] do_syscall_64+0x33/0x40 [ 1384.880467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1384.881093] RIP: 0033:0x7f5793fc9b19 [ 1384.881548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1384.883801] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1384.884719] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1384.885583] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1384.886445] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1384.887301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1384.888158] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:35:19 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) open(&(0x7f0000000000)='./file0\x00', 0x41, 0xe9) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) 03:35:19 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x60ffffffffff) 03:35:19 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0xf07e7a697f0000) 03:35:19 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:35:19 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) 03:35:19 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:35:19 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x104, 0x31) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0xb33, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x6}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:35:19 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) 03:35:19 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000003800)=[{{&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000000940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0xa8}}, {{&(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000d80)=[{&(0x7f00000003c0)="d9aa95d6122503541eadac430bc867f7a9699b9797a99161dbb936e24be1667097a34e97090f7d430cc333993d6fcf0b15", 0x31}, {&(0x7f0000000a00)="e746d92fb0b6202bc1f5e2ec4245d89c9168e12b8b7cacc5571a261609bbd0fec2405aaea9b44c6fb48c9eaa1aa360aa2d59174a13197dc32177e4c0e7dafbfc8992a6ed609910ea3020cfd1135219b03ec1d83e5e512d583524a3f899c1d4572aaca2a4dca1f9c94a1bb0cfeecb78ca2cf538c5080bb95dbb240798fa2ef0279f2eea90ebb2ca17e182b30bb3f2c6f02e1bdc7c5dd296a33e787b64976e3fae902ff6473934a5ec101b5dcd43a81718832dba86e31a0253f40fe45328872b373a6c75", 0xc3}, {&(0x7f0000000b00)="2ccb91d305534bb6359eb0c2ef2cbf960f9b4aee8285db351d227ba3da3dee9fd4f19649747d34bfd273cecb5d51b9e6e4a4557083028c2658fa47ff85ba83cb7741a916ce2eb8475a49313af87a2ebfffe4813ef15e81cb68e2f3edcc3bc688c01d", 0x62}, {&(0x7f0000000b80)="59fa137f1b35cc347f95901b104ff44b5ec248e33829b9fecfc9228b243b72ae7066f3ef36c64be6af9c0d5e82afac5e184e605d9ee918385941bab37d6d1a1950109c4fa70f616268ea9aec83df512ee8cfb5f45f281379b24072073a778dd31f99e95e053740e340bad1de8c43b493f009f0237320cb9794bcb4e08f305388746733ae3dc4ab2595eb7e736b342c04a634a5e8e399e8d801ca60e6f4378935ba514477d363876cded73f8d61", 0xad}, {&(0x7f0000000c40)="b63eb87725b04fea79a53a5bc652eb5f6b8ed5ec9de11be563922c04730dc06d1339d5edf28bb6ae87f8f0b7ef794a27c6fb33939eb65db81d02a58bb1bdc3a69f0669316155d4eff24a9d738876e070ca0816a17a08f742ebe972cccce6dd2557c395ab17", 0x65}, {&(0x7f0000000cc0)="1038cb7367f1b565e20110dfed48a6fd0a92fcbbc8940b7ec3db81b6d77d9f7b9666bd3820779199a15d26fcee", 0x2d}, {&(0x7f0000000d00)="c3d6ee7f0b979331220ce09b12e86a100b1d3609a10f7efc488c2f6021b83f5e8dcbbe3628b15c4ebbfa95e5e797dd2d43d9cabc0fac1286a74322a16235f809f5e6e90c", 0x44}], 0x7}}, {{&(0x7f0000000e00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000e40)="e4fcf272ac7015d9d1aee10d83bea1183e212fe9426c16014e185890a1576fe3b03d18a904a9a5418dcc474c3bdd9a3fcd50f6dacd837cccd7631f983819148e6a8eb1bc51ee701f453c91a2fb43abfe5e9d504e266bcd0a2cc8b1802e701d84c217f1553c07e1234500ae885939be77f9664bff26391d1ee234318bbd6462165a5b59179509", 0x86}, {&(0x7f0000000f00)="18e7f61d70c8d775b8f2085a0a26eccd6180d50a3d65de6339360b35cbe8117519aa", 0x22}, {&(0x7f0000000f40)="b95e68ef1a6cc608f0dcd3060b4b970cf53945ed2c368cfcd0df1de9a59c384759955addbe906f6789dbb70e27af57e3719b60ccb4aee9cbab337d8dca50384c6bbc0b2ad407a0c18b7a6d514bb09a667930cd255cbe86e49a3a4cce399d2368270fb4cdcba8660c98295384ee5314bd362fec5dbb194747a356e58fd22a6f2e9a2377a04708cd78c970d82288fb2ccb0eedc842b829880a4727f26d4f9d0ba44d", 0xa1}], 0x3, &(0x7f0000003900)=ANY=[@ANYBLOB="1400000000000000000000000200000006000000000000001400000000000000000000000200000008000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414bbffffffff000000001293237a49459de423491de58f879b1a2e980ce7d1552261ab39a6e5d7d7718bc7854abe06902d64db9da93e491cd7f071b4fab793b123fc549deb657a7ba073e5812a7b2f6db575cee77b09de948d58c11f3583720378cb5a1a2c3856e9c31ff08443fa48cfb7fdd0ea9015364340623ae9601988363240221b5faf78a7472a7aaafe100c192e6f05a2fc82efce9f9c41528f95849f9b40638bea7732889b3d8dab44c6d83f74ad7259199e9e3f6f86a530598afa95fa7df1aeb85e35de2dcba2b68c6ed9318ebeab684829d7973a1919a624e375de8861f671f17e97"], 0x378}}, {{&(0x7f00000013c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000003740)=[{&(0x7f0000001400)="42d88b8ed939e8e937b06b2265c9d6bd1f1dd1d633b37d87d908f4b18027dab6340581b6c534c53068c82d266beac89cef23c916d1daed78bf3bba157ffac60116b80bcdbfb38caff82b065d5fb26f89dfcda7dc48ac58f965f920af488c5daf296c449f9d73987ddf323847c38f7aff0fd46e67ef35be6904de007e82cb17f9d9ee48ff89ea62f221c5c1b5c4acfe", 0x8f}, {&(0x7f00000014c0)="4faeca7ebb977839acc4270209ae81568e4fa71848d251d01b5954f7daf6ad271be86730edeacbd1dbb1e892b75440da867cdb80af9c40eadc4ebf7ef1016c35470d9e11c5b38a4f5435cd0eb25df84913d09b95c54bbf28328e578d11aa47260a10a34222373922a1d43f92f708", 0x6e}, {&(0x7f0000001540)="5c1a7dcd66fb36b46b5a07f096a6533a8e53ca483dfa994a6947788b13fba8f1cc9e3b2c707adf71afb4e51eea2836dc84b0738455c3c84256395f7631e829227760a86ac2b5f90ebdae254ead997fd9445bd567718c512f3dd0a0eadcca0e705e81ff262e97d55d9d27a1b213b83e492529e703e3868172ed65456cd7", 0x7d}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="3934c9a12cbc48b6aa408245972a829a1eb759d71d6f1559e32496e304aa0b13246f5366c9404a367508ee9dfd57cdd37f0ae49543bb8105ce2961b6a9135033ec2c21967063b0ecc42acd4def09fc94d9d495be42efa919e7f854afbad050d9d4abbfbc18dd00652809c33f308409715f18a64a6d0386ed7c4237456a4cacf3b3b608ccebce09ad4fd1ec84764f250d286dc7e621eb32a7486f599a6491093a7daf2794b1a9924eab63771924adc12d69557fa9056ae8edec2134dda8040764bb45563eaba1f253deef788d24ea169e087d3f379755d6", 0xd7}, {&(0x7f00000026c0)="24d8f8326bcd5156788b4521d1a3262107046864cb86080218ef37701987d7356630d2921738d1d2d61097a7bf166e20502ec843df5be98612a414f764201a6d0b5fd41c62a73d2136aec7ffdbfe473ca07fa61f8b24c4d5b2f6ad811ef89900389ff40e4a8b", 0x66}, {&(0x7f0000002740)="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", 0x1000}], 0x7, &(0x7f00000037c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x30}}], 0x4, 0x4004001) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1, 0xffffffffffffffff, r3], 0x3) r4 = signalfd(r3, &(0x7f0000000080)={[0x101]}, 0x8) sendmsg$unix(r4, &(0x7f00000005c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000440)="30c8c6d2e2a02ab6f65ede4db7b2ad4679772d4b9822df6fb4a263362bcd998be94675cc9c313021a11ea3f5ff4a405a35e67b125ad8661ff6e9924d0caff39316a3009b07bd4acbc6faab966e95e617f32ae2ecea1b6c2d2edb6bea2875678bbb0ccb17f15cf3cf289492799a9ca8fecac5441e22309b74a67553409644dd08c6323ee4", 0x84}, {&(0x7f00000002c0)="01b40e1b8c235c4342be810cc487d65c6a6004f5560d28dfa021dd96aded37f5b80a854d2c0285c45f1f5d89f795bd3245a6f1a335c035c609e35929ec3ad77b4f9457cc3bca5f3cc91030b8c6f33c78d19eb7f484b34f330e2a116e4f05", 0x5e}, {&(0x7f0000000500)="cd8e7f3982bca65487c2103f56dd5a5b40972616ef9dbec5273782dc15f6877e5dd2d609e1e1762016023d1d349d9dc38011711014b57884d8e8794cb291627f785018913777906d3a6df0c1ed636687ed58499c629fde239d145f6f5ea438d6773a1eb16de3c287b691ed4539ece193e8ab89333189c37e23dbfb380e4bc6a5d413b2435bb43decd67a125b455638917867deae508a0e5df98258f6411f85385f0befcee0092a5f324261ab992841467dbdedb01a7c1d627741f40f3d5330", 0xbf}], 0x3, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20000080}, 0x4000880) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) [ 1385.050224] 9pnet: Insufficient options for proto=fd 03:35:19 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x7fe122365000) 03:35:19 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 30) 03:35:19 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) [ 1385.160385] FAULT_INJECTION: forcing a failure. [ 1385.160385] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.163443] CPU: 0 PID: 9605 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1385.165118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1385.167143] Call Trace: [ 1385.167792] dump_stack+0x107/0x167 [ 1385.168675] should_fail.cold+0x5/0xa [ 1385.169616] should_failslab+0x5/0x20 [ 1385.170535] __kmalloc_track_caller+0x79/0x370 [ 1385.171634] ? match_number+0xaf/0x1d0 [ 1385.172585] kmemdup_nul+0x2d/0xa0 [ 1385.173455] match_number+0xaf/0x1d0 [ 1385.174356] ? match_u64+0x190/0x190 [ 1385.175261] ? __kmalloc_track_caller+0x2c6/0x370 [ 1385.176428] ? memcpy+0x39/0x60 [ 1385.177234] parse_opts.part.0+0x1f3/0x340 [ 1385.178282] ? p9_fd_show_options+0x1c0/0x1c0 [ 1385.179386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1385.180674] ? trace_hardirqs_on+0x5b/0x180 [ 1385.181738] ? kfree+0xd7/0x340 [ 1385.182544] p9_fd_create+0x98/0x4a0 [ 1385.183446] ? p9_conn_create+0x510/0x510 [ 1385.184444] ? p9_client_create+0x798/0x1230 [ 1385.185516] ? kfree+0xd7/0x340 [ 1385.186321] p9_client_create+0x7ff/0x1230 [ 1385.187355] ? p9_client_flush+0x430/0x430 [ 1385.188379] ? trace_hardirqs_on+0x5b/0x180 [ 1385.189421] ? lockdep_init_map_type+0x2c7/0x780 [ 1385.190576] ? __raw_spin_lock_init+0x36/0x110 [ 1385.191687] v9fs_session_init+0x1dd/0x1680 [ 1385.192724] ? lock_release+0x680/0x680 [ 1385.193698] ? kmem_cache_alloc_trace+0x151/0x320 [ 1385.194862] ? v9fs_show_options+0x690/0x690 [ 1385.195926] ? trace_hardirqs_on+0x5b/0x180 [ 1385.196968] ? kasan_unpoison_shadow+0x33/0x50 [ 1385.198071] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1385.199310] v9fs_mount+0x79/0x8f0 [ 1385.200166] ? v9fs_write_inode+0x60/0x60 [ 1385.201165] legacy_get_tree+0x105/0x220 [ 1385.202143] vfs_get_tree+0x8e/0x300 [ 1385.203048] path_mount+0x1429/0x2120 [ 1385.203963] ? strncpy_from_user+0x9e/0x470 [ 1385.205009] ? finish_automount+0xa90/0xa90 [ 1385.206063] ? getname_flags.part.0+0x1dd/0x4f0 [ 1385.207188] ? _copy_from_user+0xfb/0x1b0 [ 1385.208209] __x64_sys_mount+0x282/0x300 [ 1385.209193] ? copy_mnt_ns+0xa00/0xa00 [ 1385.210150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1385.211424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1385.212676] do_syscall_64+0x33/0x40 [ 1385.213580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1385.214807] RIP: 0033:0x7f5793fc9b19 [ 1385.215710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1385.220164] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1385.222023] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1385.223759] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1385.225507] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1385.227252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1385.228974] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 [ 1385.233356] 9pnet: Insufficient options for proto=fd 03:35:34 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:35:34 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x420000, 0x3c) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffe, 0x2000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x9) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x0, 0x333, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r2, 0x1438, 0x202a, 0x1, &(0x7f00000000c0)={[0x4]}, 0x8) io_uring_enter(r5, 0x69a1, 0x432, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000000)=[r5]}, 0x1) 03:35:34 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 31) 03:35:34 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0xf0967c697f0000) 03:35:34 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 03:35:34 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x401, 0x220181) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = dup(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x78, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x3}, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1114, 0x1}, @fda={0x66646185, 0xa, 0x1, 0x1b}, @flat=@handle={0x73682a85, 0x110b, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}, 0x400}], 0xf7, 0x0, &(0x7f0000000440)="92e31fcf92b3d79e1432dfd515c4f718daea936f04f141ec675fb44b3faeffd8729f31c0ae7a6475fafb02af7a118a890d63620904076a3b3629a9f091e5718db236f3524cd888dec40db46b758ae0a992ad5da64a556c443391e3a6d5c1d8622a153719240f1f0b48e219fa5f73aed13e3872e92bf7fb30c6fdd0affca87b2ef4fd7f771ae17d40fdf61d3158d91ced023bc780bf9ab95a652c18092c7a2c02a1f90bd5fc8dde7b1ffc2e084f824c242c5a707b77589140c13a8709ab94a5589a98b2b72af2914171415f6e59ff8b6ed5a4210f2a4b7c8c5cb913543ee741c9ffe39e4be1f2dfc939a2497cc352a9652ad3f6f95ea789"}) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x5883, 0x0, 0x0, 0x4a}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x401, 0x5, 0x0, {0x0, r7, r3}}, 0x1) dup3(r4, r4, 0x0) r8 = open(&(0x7f0000000000)='./file0/../file0\x00', 0x10000, 0x28) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2007, @fd=r8, 0x10000, 0x0, 0x0, 0x19, 0x1, {0x3}}, 0x10000) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000340)=[r2], 0x1) 03:35:34 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x401054d6, 0x0) 03:35:34 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x7fe122565000) [ 1400.235319] FAULT_INJECTION: forcing a failure. [ 1400.235319] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.238065] CPU: 0 PID: 9620 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1400.239690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1400.241652] Call Trace: [ 1400.242269] dump_stack+0x107/0x167 [ 1400.243152] should_fail.cold+0x5/0xa [ 1400.244070] ? create_object.isra.0+0x3a/0xa20 [ 1400.245128] should_failslab+0x5/0x20 [ 1400.246058] kmem_cache_alloc+0x5b/0x310 [ 1400.246991] create_object.isra.0+0x3a/0xa20 [ 1400.248052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1400.249250] __kmalloc_track_caller+0x177/0x370 [ 1400.250377] ? match_number+0xaf/0x1d0 [ 1400.251285] kmemdup_nul+0x2d/0xa0 [ 1400.252127] match_number+0xaf/0x1d0 [ 1400.252982] ? match_u64+0x190/0x190 [ 1400.253887] ? __kmalloc_track_caller+0x2c6/0x370 [ 1400.255043] ? memcpy+0x39/0x60 [ 1400.255539] 9pnet: Insufficient options for proto=fd [ 1400.255832] parse_opts.part.0+0x1f3/0x340 [ 1400.258032] ? p9_fd_show_options+0x1c0/0x1c0 [ 1400.259084] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1400.260338] ? trace_hardirqs_on+0x5b/0x180 [ 1400.261383] ? kfree+0xd7/0x340 [ 1400.262186] p9_fd_create+0x98/0x4a0 [ 1400.263053] ? p9_conn_create+0x510/0x510 [ 1400.264022] ? p9_client_create+0x798/0x1230 [ 1400.265065] ? kfree+0xd7/0x340 [ 1400.265843] p9_client_create+0x7ff/0x1230 [ 1400.266863] ? p9_client_flush+0x430/0x430 [ 1400.267878] ? trace_hardirqs_on+0x5b/0x180 [ 1400.268894] ? lockdep_init_map_type+0x2c7/0x780 [ 1400.270062] ? __raw_spin_lock_init+0x36/0x110 [ 1400.271160] v9fs_session_init+0x1dd/0x1680 [ 1400.272173] ? lock_release+0x680/0x680 [ 1400.273098] ? kmem_cache_alloc_trace+0x151/0x320 [ 1400.274218] ? v9fs_show_options+0x690/0x690 [ 1400.275237] ? trace_hardirqs_on+0x5b/0x180 [ 1400.276225] ? kasan_unpoison_shadow+0x33/0x50 [ 1400.277273] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1400.278457] v9fs_mount+0x79/0x8f0 [ 1400.279276] ? v9fs_write_inode+0x60/0x60 [ 1400.280233] legacy_get_tree+0x105/0x220 [ 1400.281168] vfs_get_tree+0x8e/0x300 [ 1400.282035] path_mount+0x1429/0x2120 [ 1400.282914] ? strncpy_from_user+0x9e/0x470 [ 1400.283903] ? finish_automount+0xa90/0xa90 [ 1400.284896] ? getname_flags.part.0+0x1dd/0x4f0 [ 1400.285970] ? _copy_from_user+0xfb/0x1b0 [ 1400.286928] __x64_sys_mount+0x282/0x300 [ 1400.287857] ? copy_mnt_ns+0xa00/0xa00 [ 1400.288752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1400.289969] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1400.291158] do_syscall_64+0x33/0x40 [ 1400.292017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1400.293217] RIP: 0033:0x7f5793fc9b19 [ 1400.294083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1400.298439] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1400.300232] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1400.301915] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1400.303602] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1400.305293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1400.306983] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:35:34 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 03:35:34 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x401054d6, 0x0) 03:35:34 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 03:35:34 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x4, 0x1) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000001c0)={0x34, 0x19, 0x10, 0xf, 0x2, 0x4, 0x1, 0xe8, 0x1}) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000140)={0x2e, 0x20, 0xe, 0x14, 0x7, 0x3ff, 0x0, 0x94, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f00000000c0)=""/22, 0x3}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:35:34 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 03:35:34 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0xf0ff1f00000000) 03:35:34 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x401054d6, 0x0) 03:35:48 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0xf0ffffff7f0000) 03:35:48 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x7ffffffff000) 03:35:48 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 03:35:48 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) 03:35:48 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 32) 03:35:48 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10100, 0x3) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = syz_io_uring_setup(0x6bc2, &(0x7f0000000240)={0x0, 0x2ec1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x157}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[r1, 0xffffffffffffffff, r4], 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000010, 0x2010, r0, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r6, 0x7002) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x8, r5, 0xffffffffffffffff, 0x0, 0x7d, 0x0, 0x2, r6}, &(0x7f0000000140)) 03:35:48 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0xf07e7a697f0000) [ 1414.448886] FAULT_INJECTION: forcing a failure. [ 1414.448886] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.451326] CPU: 0 PID: 9664 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1414.452771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1414.454527] Call Trace: [ 1414.455081] dump_stack+0x107/0x167 [ 1414.455843] should_fail.cold+0x5/0xa [ 1414.456640] ? create_object.isra.0+0x3a/0xa20 [ 1414.457594] should_failslab+0x5/0x20 [ 1414.458388] kmem_cache_alloc+0x5b/0x310 [ 1414.459247] create_object.isra.0+0x3a/0xa20 [ 1414.460164] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1414.461219] __kmalloc_track_caller+0x177/0x370 [ 1414.462180] ? match_number+0xaf/0x1d0 [ 1414.463002] kmemdup_nul+0x2d/0xa0 [ 1414.463738] match_number+0xaf/0x1d0 [ 1414.464507] ? match_u64+0x190/0x190 [ 1414.465260] ? __kmalloc_track_caller+0x2c6/0x370 [ 1414.466256] ? memcpy+0x39/0x60 [ 1414.466939] parse_opts.part.0+0x1f3/0x340 [ 1414.467843] ? p9_fd_show_options+0x1c0/0x1c0 [ 1414.468789] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1414.469875] ? trace_hardirqs_on+0x5b/0x180 [ 1414.470782] ? kfree+0xd7/0x340 [ 1414.471469] p9_fd_create+0x98/0x4a0 [ 1414.472239] ? p9_conn_create+0x510/0x510 [ 1414.473097] ? p9_client_create+0x798/0x1230 [ 1414.474004] ? kfree+0xd7/0x340 [ 1414.474702] p9_client_create+0x7ff/0x1230 [ 1414.475586] ? p9_client_flush+0x430/0x430 [ 1414.476461] ? trace_hardirqs_on+0x5b/0x180 [ 1414.477353] ? lockdep_init_map_type+0x2c7/0x780 [ 1414.478335] ? __raw_spin_lock_init+0x36/0x110 [ 1414.479300] v9fs_session_init+0x1dd/0x1680 [ 1414.480197] ? lock_release+0x680/0x680 [ 1414.481030] ? kmem_cache_alloc_trace+0x151/0x320 [ 1414.482030] ? v9fs_show_options+0x690/0x690 [ 1414.482961] ? trace_hardirqs_on+0x5b/0x180 [ 1414.483845] ? kasan_unpoison_shadow+0x33/0x50 [ 1414.484761] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1414.485781] v9fs_mount+0x79/0x8f0 [ 1414.486506] ? v9fs_write_inode+0x60/0x60 [ 1414.487345] legacy_get_tree+0x105/0x220 [ 1414.488158] vfs_get_tree+0x8e/0x300 [ 1414.488897] path_mount+0x1429/0x2120 [ 1414.489659] ? strncpy_from_user+0x9e/0x470 [ 1414.490537] ? finish_automount+0xa90/0xa90 [ 1414.491396] ? getname_flags.part.0+0x1dd/0x4f0 [ 1414.492331] ? _copy_from_user+0xfb/0x1b0 [ 1414.493163] __x64_sys_mount+0x282/0x300 [ 1414.493969] ? copy_mnt_ns+0xa00/0xa00 [ 1414.494756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1414.495797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1414.496838] do_syscall_64+0x33/0x40 [ 1414.497576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1414.498612] RIP: 0033:0x7f5793fc9b19 [ 1414.499356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1414.503070] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1414.504592] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1414.506001] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1414.507423] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1414.508828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1414.510229] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:35:48 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:35:48 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0xf07e7a697f0000) 03:35:49 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0xffffffffff600000) 03:35:49 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x3, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="da58b6fa01205339704793a5aade8ca01839a7c401b5ed061ecb99de540acb4503ed6c69057360f0efac84f84bf33d817c8c319caddb38d68f933276ef0678df80de698f91b72978315a8c42e546b06e1cb1ac918d689c1c5e1fb0cb58da37799a18c444d199af91e897ca579c4aeae49f99b1b22def119601b861722f18a0aae7b49f142bf6bd0a6c06fa2bb3def197b322d5f5d06166e884a9f3fe0368ff22eebbf26abdf14f0dfe0321a11f15f7e6a88a008e183c2e0990b96d05f69f483b13b0e9b82f30305e48c7acfadbfa0b310f37616bb35992faece53be62a44a849619e5ffb", 0xe4, 0x9}, {&(0x7f0000000440)="5d14956b4d90a0459c03ff98fd860b1782c585b686ebefbf8966682dfdeb91487888ce0036e3b06dfe8c261e1ea793182757ed22f68520b284907e4ff5d36bab0b6cb4c53dc0df20027e64020e1fdc62abc73ce26b055377eac7fa4189b6e3a89b2886a1b0e9767c41da0399878e0b154312bfc1053cf277a032946b37bfded24631f8e66fa7cea120c84838e08e838bbdeb5086938e4ec102c0e5fbfcf6d63ec5e46786dc9f14714cca8ad1e8de57155467e5d7be0947b7e38c205d4aaf67758d05c039b4d1bf09dc63", 0xca, 0x3}, {&(0x7f0000000540)="4fda6b1985307b648a362d520bf6bd592d71237b577a025471e9dabf09e9e1526133c71c39f23ef026adf022bd6dcbb11afbfe7f2931fd78c84630a3af5d2ad814ba70f7ffe27734a18d896555d8ad3db6bd80e5d2fab40d991637b30aabe91f5e3e2c856185d1e19289f7b2879119ead9716011ef0b840e553a08e84470c75b3aebf592312bf3ae96cbdff89e36154a9c58ac75373950400dd14e4865ae59aa6a7b09a0707d622d3c09cf22b1c0219f60da3fe4b77956209b890259bc2751fc3de95d1438a7942938288d127cd6b128d2021fbfea6edef8bb8a90294c2ecb5c4607ba09a30304f30203436b9afb9a1754f46fb6d8", 0xf5, 0x10001}], 0x42802, &(0x7f0000000980)=ANY=[@ANYBLOB='nocompress,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',euid=', @ANYRESDEC=0xee01, @ANYBLOB=',audit,dont_appraise,fsmagic=0x0000000000000009,fowner<', @ANYRESDEC, @ANYBLOB=',fowner=', @ANYRESDEC=0xee00, @ANYBLOB="00002f050411cca22da06463f0be32ba3af10aecfdbdef03ee3070321aec19c28c1ea669cc1a35822ccf28a27289516d1966b3ab3b9575ad6c42aa0cdb980dd38cfb6fde370a4397247864f387b5f6f7eafdee"]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000700)={0x379, 0x3, 0x2, 0x5, 0xa, [{0x7, 0x4, 0x3f, '\x00', 0x809}, {0x3, 0x10001, 0x0, '\x00', 0xbcbbaf0c8b557d9b}, {0x7, 0x1, 0xfffffffffffffffb, '\x00', 0x401}, {0x744, 0x0, 0xffff, '\x00', 0x120a}, {0x1, 0x4, 0x10000, '\x00', 0x2000}, {0x7, 0x7, 0xe2, '\x00', 0x101}, {0x81, 0x1, 0x7fff, '\x00', 0x2406}, {0x2, 0x99, 0x6, '\x00', 0x101}, {0x100000001, 0x87, 0x6, '\x00', 0x8}, {0x1, 0x8, 0xe15a, '\x00', 0x2000}]}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:35:49 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) acct(0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r3, 0x9, 0x0, 0xffffff80, 0x6, 0x0, {0x0, r8}}, 0x81) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r3], 0x3) 03:35:49 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x503622e17f0000) 03:35:49 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:36:02 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0xf07e7a697f0000) 03:36:02 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4007, @fd=r0, 0x8000, 0x5, 0x80, 0x18, 0x0, {0x0, r4}}, 0x711) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:36:02 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x505622e17f0000) 03:36:02 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0xfffffffa, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x5, 0x20000}) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x44) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffc, 0xf0, 0x0, @scatter={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000200)=""/168, 0xa8}]}, &(0x7f00000002c0)="c64764b547c2613221d7e95993e725051884d9278b458ab5bab6bcb2fe87bd6f1324110c54f24ff1a3e33bbf7c985c8ee353f204e51eb25872179d25050add603133c5e7b11e9a3c99dd040465a33f304965ecf80f888e57f48454f64ddf3d6f4bdfe5be577309e5f7118ab69e8212c996339811440aa6d8c54de373d8eae0a5d15e8d1d6a5049366c596885a8cfc1d949edb3e6df718f42c15f1b9dc62af9e96aa18ee6f7f67b7c0e55454f2182c916a19a68c998331d92f6366c8fef1894364e11153741b18d7ec563a5010fa358add921501ccdc9899632e37407777a0b6336d302bc7cf32e37e2525ffd2934c96d", &(0x7f00000003c0)=""/195, 0x2, 0x10022, 0x2, &(0x7f00000004c0)}) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x4, 0x7, 0x6}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000080ff0100c8e900000000006c653000"]) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x100000001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x66500, 0x4) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r2, 0x800454e1, 0x0) 03:36:02 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) creat(&(0x7f0000000000)='./file0\x00', 0x20) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:36:02 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 33) 03:36:02 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:36:02 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) [ 1427.780068] FAULT_INJECTION: forcing a failure. [ 1427.780068] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.782649] CPU: 0 PID: 9722 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1427.784194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1427.786046] Call Trace: [ 1427.786636] dump_stack+0x107/0x167 [ 1427.787457] should_fail.cold+0x5/0xa [ 1427.788314] ? create_object.isra.0+0x3a/0xa20 [ 1427.789352] should_failslab+0x5/0x20 [ 1427.790201] kmem_cache_alloc+0x5b/0x310 [ 1427.791123] create_object.isra.0+0x3a/0xa20 [ 1427.792099] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1427.793239] __kmalloc_track_caller+0x177/0x370 [ 1427.794278] ? match_number+0xaf/0x1d0 [ 1427.795165] kmemdup_nul+0x2d/0xa0 [ 1427.795959] match_number+0xaf/0x1d0 [ 1427.796793] ? match_u64+0x190/0x190 [ 1427.797621] ? __kmalloc_track_caller+0x2c6/0x370 [ 1427.798699] ? memcpy+0x39/0x60 [ 1427.799455] parse_opts.part.0+0x1f3/0x340 [ 1427.800417] ? p9_fd_show_options+0x1c0/0x1c0 [ 1427.801429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1427.802599] ? trace_hardirqs_on+0x5b/0x180 [ 1427.803574] ? kfree+0xd7/0x340 [ 1427.804316] p9_fd_create+0x98/0x4a0 [ 1427.805151] ? p9_conn_create+0x510/0x510 [ 1427.806075] ? p9_client_create+0x798/0x1230 [ 1427.807066] ? kfree+0xd7/0x340 [ 1427.807809] p9_client_create+0x7ff/0x1230 [ 1427.808764] ? p9_client_flush+0x430/0x430 [ 1427.809710] ? trace_hardirqs_on+0x5b/0x180 [ 1427.810675] ? lockdep_init_map_type+0x2c7/0x780 [ 1427.811740] ? __raw_spin_lock_init+0x36/0x110 [ 1427.812767] v9fs_session_init+0x1dd/0x1680 [ 1427.813731] ? lock_release+0x680/0x680 [ 1427.814629] ? kmem_cache_alloc_trace+0x151/0x320 [ 1427.815708] ? v9fs_show_options+0x690/0x690 [ 1427.816701] ? trace_hardirqs_on+0x5b/0x180 [ 1427.817661] ? kasan_unpoison_shadow+0x33/0x50 [ 1427.818675] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1427.819825] v9fs_mount+0x79/0x8f0 [ 1427.820619] ? v9fs_write_inode+0x60/0x60 [ 1427.821549] legacy_get_tree+0x105/0x220 [ 1427.822454] vfs_get_tree+0x8e/0x300 [ 1427.823295] path_mount+0x1429/0x2120 [ 1427.824152] ? strncpy_from_user+0x9e/0x470 [ 1427.825113] ? finish_automount+0xa90/0xa90 [ 1427.826080] ? getname_flags.part.0+0x1dd/0x4f0 [ 1427.827129] ? _copy_from_user+0xfb/0x1b0 [ 1427.828061] __x64_sys_mount+0x282/0x300 [ 1427.828968] ? copy_mnt_ns+0xa00/0xa00 [ 1427.829840] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1427.831020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1427.832175] do_syscall_64+0x33/0x40 [ 1427.833005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1427.834163] RIP: 0033:0x7f5793fc9b19 [ 1427.835001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1427.839152] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1427.840854] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1427.842457] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1427.844066] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1427.845658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1427.847262] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:36:02 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x46c52000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xb089aab0dfe8c4aa, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x800454e1, 0x0) 03:36:02 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x9, "77004ade02ff001a00000000f90000f700", 0x0, 0x80}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x4, 0x0, r3, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x4000, 0x1}, 0x8) 03:36:02 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:36:02 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000d00)) ioctl$RTC_AIE_OFF(r2, 0x7002) recvmmsg$unix(r2, &(0x7f0000000c40)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f0000000380)=""/218, 0xda}], 0x2, &(0x7f0000000480)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/101, 0x65}, {&(0x7f0000000600)=""/113, 0x71}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000740)=""/242, 0xf2}, {&(0x7f0000000840)=""/43, 0x2b}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000980)=""/52, 0x34}, {&(0x7f00000009c0)=""/142, 0x8e}], 0x9, &(0x7f0000000b40)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="c03879ad"], 0xe8}}], 0x2, 0x0, &(0x7f0000000cc0)={0x0, 0x3938700}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:36:02 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x108408, &(0x7f00000002c0)={[{@name={'name', 0x3d, '\'\\*{*'}}, {@xattr}, {@cpuset_v2_mode}], [{@smackfsfloor={'smackfsfloor', 0x3d, '('}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@hash}]}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) getpeername$unix(r0, &(0x7f0000000380), &(0x7f00000001c0)=0x6e) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1, 0xffffffffffffffff, r4], 0x3) 03:36:02 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x9, "77004ade02ff001a00000000f90000f700", 0x0, 0x80}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x4, 0x0, r3, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x4000, 0x1}, 0x8) 03:36:02 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0xf0ff1f00000000) [ 1441.842713] FAULT_INJECTION: forcing a failure. [ 1441.842713] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.844172] CPU: 1 PID: 9759 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1441.844985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.845966] Call Trace: [ 1441.846288] dump_stack+0x107/0x167 [ 1441.846717] should_fail.cold+0x5/0xa [ 1441.847169] ? p9_fd_create+0x161/0x4a0 [ 1441.847642] should_failslab+0x5/0x20 [ 1441.848086] kmem_cache_alloc_trace+0x55/0x320 [ 1441.848622] p9_fd_create+0x161/0x4a0 [ 1441.849066] ? p9_conn_create+0x510/0x510 [ 1441.849549] ? p9_client_create+0x798/0x1230 [ 1441.850059] ? kfree+0xd7/0x340 [ 1441.850448] p9_client_create+0x7ff/0x1230 [ 1441.850945] ? p9_client_flush+0x430/0x430 [ 1441.851446] ? trace_hardirqs_on+0x5b/0x180 [ 1441.851952] ? lockdep_init_map_type+0x2c7/0x780 [ 1441.852511] ? __raw_spin_lock_init+0x36/0x110 [ 1441.853047] v9fs_session_init+0x1dd/0x1680 [ 1441.853550] ? lock_release+0x680/0x680 [ 1441.854017] ? kmem_cache_alloc_trace+0x151/0x320 [ 1441.854578] ? v9fs_show_options+0x690/0x690 [ 1441.855094] ? trace_hardirqs_on+0x5b/0x180 [ 1441.855603] ? kasan_unpoison_shadow+0x33/0x50 [ 1441.856132] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1441.856728] v9fs_mount+0x79/0x8f0 [ 1441.857144] ? v9fs_write_inode+0x60/0x60 [ 1441.857629] legacy_get_tree+0x105/0x220 [ 1441.858103] vfs_get_tree+0x8e/0x300 [ 1441.858542] path_mount+0x1429/0x2120 [ 1441.858989] ? strncpy_from_user+0x9e/0x470 [ 1441.859497] ? finish_automount+0xa90/0xa90 [ 1441.860000] ? getname_flags.part.0+0x1dd/0x4f0 [ 1441.860542] ? _copy_from_user+0xfb/0x1b0 [ 1441.861028] __x64_sys_mount+0x282/0x300 [ 1441.861501] ? copy_mnt_ns+0xa00/0xa00 [ 1441.861957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1441.862568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1441.863169] do_syscall_64+0x33/0x40 [ 1441.863609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1441.864207] RIP: 0033:0x7f5793fc9b19 [ 1441.864643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.866778] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1441.868126] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1441.869078] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1441.869906] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1441.870729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.871561] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:36:16 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0xf0ffffff7f0000) 03:36:16 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:36:16 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc905, 0x0) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='logfs\x00', 0x1010000, &(0x7f0000001740)='\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10010, r2, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@xdp={0x2c, 0xa, 0x0, 0x12}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="470b8bf4a5254b4f0b566d69b8d897d01abac55e3b84ae4c64e0ec6ae3062d82c0152c93be85dc3ea63c99174c661b13afa927df61033615c102854c61c2dd4146fd5a13ad377a6a25f8e91302ff7ddf3de9c2f35da2f4899c266c30f52f5a827b0c5c379fc137812175ebbf87e564868e80353804168d7c41e3ee58497a4f05d9e4fbeda33ba3f7a1d291fc76b00668d6af109efd7ee702c1edaaa8ba445b2ca8c4f4893963cf9186cdf5f35faeeadf2d69a61d1e97522504208d9dd7b2a64ab19edd52ef39666f3c460c58c9518359539d8733e38a596a1514d25d4007aa3148ad78525500045935fb0761bec26e8bdc8512e0", 0xf4}], 0x1, &(0x7f0000000440)=[{0x1010, 0x114, 0xff, "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"}, {0x48, 0x104, 0x122, "7555f6af10cc27fd516911365aa21f673550c8bca907053c882b28f311e0e2253b027f3abeb13fe798c5eea7d30ec33aa86951"}, {0xa8, 0x112, 0x4, "7ca5801dac505ec80daf9f29d6c57d5eb35a2a9e21e4482b5e75fdc0e72c05ce4f36a237690085ffccca28293e2998962de75ddfe49f60a34dde9294af5673f096dee4a446b8125ec33779c03edea7b24f41f048c303056997817ddd2f5750f3c2250451668e3423d16b5c475de881f30c6b6723a99b4a8300ab6f929b03204fa72f5f5c108cde7b0eeb0d5734cd53ad2190"}, {0xa0, 0x107, 0x1, "dd05d38f8ddd24d1fa8d3bd71c4e54ff5f9510573bb58079c164f682805f195ee3a94f6c93bfb89d6d037f3195096e3e5e3c0d5e7070acc935b546909bb7ac78610c2ba9a46e05a493820d0db0b60fb406e8f342e5cb5abf9ecf490c8d3965e8152eb5d2fb69d69b4ab7af4fbd62c3d41516cb18a96a5910d4cae1eaf8ff3ee3b99cd91af078ffc9e5af753f22"}, {0x80, 0x11, 0x1, "20c1e8e3575ce8c26ed432e3effcdcefd3b1b7414098d4c2b12f3fe60c3913e1c3bdf0d7d5a635d260fc853b9fd3a3f3b7053b786e151dd0ba9d577566e0d863684c2e7763b289dafd6d4e960c6026e1f03b31d5b3ac5a19d3a5af94137456bb52c12e8df479d10ed3da9e864b8009bc"}, {0x48, 0x101, 0x3, "e850d57deb8610ead2c4be3e6f8589babe1f405574a0665d6cc0030f2949ff15a724a3031b8d31c8b35015cd25ddaca27785"}], 0x1268}, 0x0, 0x4008, 0x1, {0x0, r5}}, 0x7) 03:36:16 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000e, 0x12, r2, 0x8000000) 03:36:16 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) 03:36:16 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x9, "77004ade02ff001a00000000f90000f700", 0x0, 0x80}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x4, 0x0, r3, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x4000, 0x1}, 0x8) 03:36:16 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 34) 03:36:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000200)={0x0, 0x934, 0x9, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000600)={0x13, 0x7, {0x1, @struct={0x81, 0x8000}, 0x0, 0x280, 0x4, 0x1000, 0x9, 0xfffffffffffffbff, 0x440, @struct={0x3ff, 0xbcac}, 0x4bd080b3, 0x9, [0xe109, 0x6dc, 0x7, 0x7, 0x7, 0x2]}, {0x1, @usage=0x200, r2, 0x0, 0x7, 0x2, 0x8, 0x5, 0x461, @struct={0x0, 0x101}, 0x2, 0xffffffff, [0xffffffffffffff80, 0x3, 0x6, 0x5, 0x5, 0x9]}, {0x7, @struct={0x8000000, 0x2}, r3, 0x1, 0x4, 0x1, 0x7ff, 0x10000, 0x2, @struct={0xd8c5, 0x5}, 0x7c13, 0x4, [0x7, 0x7, 0x100000001, 0xd41, 0x10000, 0x6]}, {0xffffffffffff2c6d, 0x8001, 0x5}}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)) ioctl$RTC_AIE_OFF(r5, 0x7002) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x800454e1, 0x9) 03:36:16 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400401, 0x81) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r4, 0x7002) inotify_add_watch(r4, &(0x7f00000005c0)='./file0\x00', 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r5}}, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000700)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000006c0)={0x40000000}, r1}, 0xb751) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x1, 0x0, 0x1, {0x0, r6}}, 0xb44) fsetxattr$security_ima(r1, &(0x7f0000000640), &(0x7f0000000680)=@sha1={0x1, "38694d45450989098bf438d4d9c716c505078131"}, 0x15, 0x1) r7 = accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x6) sendmmsg(r7, &(0x7f0000000580)=[{{&(0x7f00000002c0)=@phonet={0x23, 0x1, 0x0, 0x7f}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="1dcbbefefef1309ab06dd6db7931552bced757940e4e59376daf74e30961657b822fa259990f63824d31b7dd15de205bb20fcd556cc930e8ecaab5f69ed8e4fa60f8fde4673bd69fc9fd2fbb8f22", 0x4e}, {&(0x7f00000001c0)="56ecbb4a99587dbe8e0838dd318c202e8f16a56d776054b0883910f5086151bf1ada", 0x22}], 0x2, &(0x7f0000000480)=[{0xf8, 0x115, 0x82, "8279130d8cd1135dc3d00108e028de10ae26beff2d8ce113af9a722fb9b36e3123bcd11fe77cdfd8bd1e13005405e1e392b3f8374619ae25823ded7bee9d6750bfa4f9106b1d804e316deec176d005b9b2efb207301da515e4c99549caeb911a4d74513468218dca853d50e25700d2d23054aeadd11566d3a86d3d8b4670cc10447e701cb71cf96873ef828cb4bb6695c7644c6aee078ceecb3bc49a1f50f5b39b9ee35748ccf0fe54b66b8deb1e0c0752a251c78e7cce0e23fd5df631529a7ac2e5023799120470b371a6af98814fa95a431189d597b4963cb72ecf9e2d3cced79ab412d0"}], 0xf8}}], 0x1, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10100, 0xc2) 03:36:16 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:36:16 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 35) 03:36:16 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) (fail_nth: 1) 03:36:16 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x11) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) [ 1442.016791] FAULT_INJECTION: forcing a failure. [ 1442.016791] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.018132] CPU: 1 PID: 9787 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1442.018947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1442.019854] Call Trace: [ 1442.020150] dump_stack+0x107/0x167 [ 1442.020545] should_fail.cold+0x5/0xa [ 1442.020960] ? p9_fd_create+0x161/0x4a0 [ 1442.021393] should_failslab+0x5/0x20 [ 1442.021807] kmem_cache_alloc_trace+0x55/0x320 [ 1442.022306] p9_fd_create+0x161/0x4a0 [ 1442.022719] ? p9_conn_create+0x510/0x510 [ 1442.023168] ? p9_client_create+0x798/0x1230 [ 1442.023654] ? kfree+0xd7/0x340 [ 1442.024017] p9_client_create+0x7ff/0x1230 [ 1442.024480] ? p9_client_flush+0x430/0x430 [ 1442.024939] ? trace_hardirqs_on+0x5b/0x180 [ 1442.025409] ? lockdep_init_map_type+0x2c7/0x780 [ 1442.025924] ? __raw_spin_lock_init+0x36/0x110 [ 1442.026425] v9fs_session_init+0x1dd/0x1680 [ 1442.026892] ? lock_release+0x680/0x680 [ 1442.027329] ? kmem_cache_alloc_trace+0x151/0x320 [ 1442.027859] ? v9fs_show_options+0x690/0x690 [ 1442.028340] ? trace_hardirqs_on+0x5b/0x180 [ 1442.028806] ? kasan_unpoison_shadow+0x33/0x50 [ 1442.029299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1442.029850] v9fs_mount+0x79/0x8f0 [ 1442.030237] ? v9fs_write_inode+0x60/0x60 [ 1442.030688] legacy_get_tree+0x105/0x220 [ 1442.031128] vfs_get_tree+0x8e/0x300 [ 1442.031542] path_mount+0x1429/0x2120 [ 1442.031957] ? strncpy_from_user+0x9e/0x470 [ 1442.032426] ? finish_automount+0xa90/0xa90 [ 1442.032891] ? getname_flags.part.0+0x1dd/0x4f0 [ 1442.033394] ? _copy_from_user+0xfb/0x1b0 [ 1442.033845] __x64_sys_mount+0x282/0x300 [ 1442.034279] ? copy_mnt_ns+0xa00/0xa00 [ 1442.034698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1442.035260] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1442.035821] do_syscall_64+0x33/0x40 [ 1442.036219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1442.036769] RIP: 0033:0x7f5793fc9b19 [ 1442.037167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1442.039131] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1442.039955] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1442.040719] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1442.041483] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1442.042248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1442.043012] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:36:16 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:36:16 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0xffffffffff600000) 03:36:16 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) 03:36:16 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x40, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x100010, r0, 0x56b74000) 03:36:16 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:36:30 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:36:30 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 36) 03:36:30 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:36:30 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) 03:36:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:36:30 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x1c12c1, 0x1a8, 0x13}, 0x18) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x48200, 0x44) fsetxattr$security_ima(r0, &(0x7f0000000140), &(0x7f0000000380)=@v2={0x6, 0x3, 0x0, 0x1, 0xf2, "de61c18ac5d3f8cf90258f0a0b145255ca50f7f3875d15b2c211cc6279e09653ca4bd11d4f3adb9be1cb1c1e8f28f8ef04bcc7d8e9a7b75cd3b37e984a0ec86e70b3cc5811f22b86d68ebc4341806f17d5237ca558441f98daafd92a72472040e0a5f10b756cd45b74b3247eb2a65a507500eba2c583d1b7cafcf81ed92ba3c0290453c8de435bb0cbf775e72bb774fdd16b6fe1733f5d6bce6539461cec475b60e24e8551a49354959c6180ae62831a98e03add1721a83cf7d9a28b890bd2fbe06285bb7fe5b79615470bf42b0928da1579946c1cb6ffc35a8cf06cb349aec46dd36feac937af74b5a4765176c88cadc800"}, 0xfb, 0x1) mknodat$null(r0, &(0x7f0000000080)='./file0/file0\x00', 0x8000, 0x103) creat(&(0x7f0000000000)='./file0\x00', 0xa0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0xaa7e}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[r2], 0x1) 03:36:30 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:36:30 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) syz_io_uring_setup(0x2fa, &(0x7f00000003c0)={0x0, 0xd770, 0x4, 0xfffffffe, 0x3d0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x77359400}, 0x1, 0x0, 0x1}, 0x2) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd, 0xd8, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0xffff) r10 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r10, 0x0) io_uring_enter(r10, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x810, r10, 0x19d38000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x10010, r10, 0x8000000) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) [ 1456.473243] FAULT_INJECTION: forcing a failure. [ 1456.473243] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.474540] CPU: 1 PID: 9827 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1456.475267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1456.476211] Call Trace: [ 1456.476506] dump_stack+0x107/0x167 [ 1456.476915] should_fail.cold+0x5/0xa [ 1456.477351] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 1456.477940] should_failslab+0x5/0x20 [ 1456.478370] kmem_cache_alloc+0x5b/0x310 [ 1456.478829] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1456.479404] p9_client_rpc+0x220/0x1370 [ 1456.479851] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1456.480459] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1456.481059] ? pipe_poll+0x21b/0x7f0 [ 1456.481476] ? p9_fd_close+0x4a0/0x4a0 [ 1456.481912] ? anon_pipe_buf_release+0x280/0x280 [ 1456.482448] ? p9_fd_poll+0x1e0/0x2c0 [ 1456.482878] ? p9_fd_create+0x357/0x4a0 [ 1456.483324] ? p9_conn_create+0x510/0x510 [ 1456.483784] ? p9_client_create+0x798/0x1230 [ 1456.484284] ? kfree+0xd7/0x340 [ 1456.484660] p9_client_create+0xa76/0x1230 [ 1456.485139] ? p9_client_flush+0x430/0x430 [ 1456.485613] ? trace_hardirqs_on+0x5b/0x180 [ 1456.486096] ? lockdep_init_map_type+0x2c7/0x780 [ 1456.486627] ? __raw_spin_lock_init+0x36/0x110 [ 1456.487145] v9fs_session_init+0x1dd/0x1680 [ 1456.487630] ? lock_release+0x680/0x680 [ 1456.488088] ? kmem_cache_alloc_trace+0x151/0x320 [ 1456.488626] ? v9fs_show_options+0x690/0x690 [ 1456.489124] ? trace_hardirqs_on+0x5b/0x180 [ 1456.489605] ? kasan_unpoison_shadow+0x33/0x50 [ 1456.490117] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1456.490691] v9fs_mount+0x79/0x8f0 [ 1456.491092] ? v9fs_write_inode+0x60/0x60 [ 1456.491557] legacy_get_tree+0x105/0x220 [ 1456.492023] vfs_get_tree+0x8e/0x300 [ 1456.492436] path_mount+0x1429/0x2120 [ 1456.492869] ? strncpy_from_user+0x9e/0x470 [ 1456.493350] ? finish_automount+0xa90/0xa90 [ 1456.493834] ? getname_flags.part.0+0x1dd/0x4f0 [ 1456.494354] ? _copy_from_user+0xfb/0x1b0 [ 1456.494822] __x64_sys_mount+0x282/0x300 [ 1456.495272] ? copy_mnt_ns+0xa00/0xa00 [ 1456.495712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1456.496306] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1456.496884] do_syscall_64+0x33/0x40 [ 1456.497300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1456.497875] RIP: 0033:0x7f5793fc9b19 03:36:30 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "76005b6efdff00000000080026000200"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) r1 = signalfd(r0, &(0x7f0000000100), 0x8) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000140)) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) [ 1456.498290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1456.500537] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1456.501431] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1456.502233] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1456.503035] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1456.503798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1456.504603] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:36:31 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:36:31 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x3, &(0x7f0000000340)=[r0], 0x1) 03:36:31 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r0 = syz_io_uring_setup(0x1a21, &(0x7f00000000c0)={0x0, 0xe431, 0x10, 0x1, 0x10b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080), 0x0) 03:36:45 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 37) 03:36:45 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:36:45 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x20000000, 0x0, 0x0, 0x4, 0x2, "77004a6efdff0000000008002600", 0x20}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ip_vti0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:36:45 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 1) 03:36:45 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x1c) 03:36:45 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, &(0x7f0000000340)=[r0], 0x1) 03:36:45 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:36:45 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x8000000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x20010, r1, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[r4, 0xffffffffffffffff, r1], 0x3, 0x0, 0x1, {0x0, r5}}, 0x467) r6 = syz_io_uring_setup(0x4d50, &(0x7f0000000240)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x49) openat(r0, &(0x7f0000000080)='./file0\x00', 0x5005c0, 0x104) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r6], 0x3) [ 1470.586328] FAULT_INJECTION: forcing a failure. [ 1470.586328] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.587853] CPU: 0 PID: 9864 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1470.588729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1470.589784] Call Trace: [ 1470.590129] dump_stack+0x107/0x167 [ 1470.590598] should_fail.cold+0x5/0xa [ 1470.591082] ? create_object.isra.0+0x3a/0xa20 [ 1470.591676] should_failslab+0x5/0x20 [ 1470.592160] kmem_cache_alloc+0x5b/0x310 [ 1470.592696] create_object.isra.0+0x3a/0xa20 [ 1470.593254] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1470.593897] kmem_cache_alloc+0x159/0x310 [ 1470.594427] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1470.595076] p9_client_rpc+0x220/0x1370 [ 1470.595585] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1470.596248] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1470.596942] ? pipe_poll+0x21b/0x7f0 [ 1470.597427] ? p9_fd_close+0x4a0/0x4a0 [ 1470.597926] ? anon_pipe_buf_release+0x280/0x280 [ 1470.598526] ? p9_fd_poll+0x1e0/0x2c0 [ 1470.599007] ? p9_fd_create+0x357/0x4a0 [ 1470.599512] ? p9_conn_create+0x510/0x510 [ 1470.600027] ? p9_client_create+0x798/0x1230 [ 1470.600596] ? kfree+0xd7/0x340 [ 1470.601016] p9_client_create+0xa76/0x1230 [ 1470.601568] ? p9_client_flush+0x430/0x430 [ 1470.602107] ? trace_hardirqs_on+0x5b/0x180 [ 1470.602660] ? lockdep_init_map_type+0x2c7/0x780 [ 1470.603270] ? __raw_spin_lock_init+0x36/0x110 [ 1470.603844] v9fs_session_init+0x1dd/0x1680 [ 1470.604390] ? lock_release+0x680/0x680 [ 1470.604918] ? kmem_cache_alloc_trace+0x151/0x320 [ 1470.605539] ? v9fs_show_options+0x690/0x690 [ 1470.606094] ? trace_hardirqs_on+0x5b/0x180 [ 1470.606645] ? kasan_unpoison_shadow+0x33/0x50 [ 1470.607215] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1470.607881] v9fs_mount+0x79/0x8f0 [ 1470.608368] ? v9fs_write_inode+0x60/0x60 [ 1470.608972] legacy_get_tree+0x105/0x220 [ 1470.609488] vfs_get_tree+0x8e/0x300 [ 1470.609964] path_mount+0x1429/0x2120 [ 1470.610452] ? strncpy_from_user+0x9e/0x470 [ 1470.610997] ? finish_automount+0xa90/0xa90 [ 1470.611554] ? getname_flags.part.0+0x1dd/0x4f0 [ 1470.612142] ? _copy_from_user+0xfb/0x1b0 [ 1470.612683] __x64_sys_mount+0x282/0x300 [ 1470.613188] ? copy_mnt_ns+0xa00/0xa00 [ 1470.613682] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1470.614350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1470.614992] do_syscall_64+0x33/0x40 [ 1470.615461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1470.616100] RIP: 0033:0x7f5793fc9b19 [ 1470.616584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.618902] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1470.619854] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1470.620924] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1470.622025] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1470.623117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1470.624203] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:36:45 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:36:45 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:36:45 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x81, 0x1, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8100, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x11c) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000300d48bb6cc707290a8ffffffffbb1496bbbbbb"]) 03:36:45 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x5, &(0x7f0000000340)=[r0], 0x1) 03:36:45 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 38) 03:36:45 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) [ 1470.794947] FAULT_INJECTION: forcing a failure. [ 1470.794947] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.796381] CPU: 0 PID: 9888 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1470.797222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1470.798248] Call Trace: [ 1470.798587] dump_stack+0x107/0x167 [ 1470.799029] should_fail.cold+0x5/0xa [ 1470.799503] ? p9_fcall_init+0x97/0x290 [ 1470.799993] should_failslab+0x5/0x20 [ 1470.800439] __kmalloc+0x72/0x390 [ 1470.800871] p9_fcall_init+0x97/0x290 [ 1470.801346] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1470.801962] p9_client_rpc+0x220/0x1370 [ 1470.802472] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1470.803083] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1470.803738] ? pipe_poll+0x21b/0x7f0 [ 1470.804192] ? p9_fd_close+0x4a0/0x4a0 [ 1470.804680] ? anon_pipe_buf_release+0x280/0x280 [ 1470.805261] ? p9_fd_poll+0x1e0/0x2c0 [ 1470.805731] ? p9_fd_create+0x357/0x4a0 [ 1470.806212] ? p9_conn_create+0x510/0x510 [ 1470.806711] ? p9_client_create+0x798/0x1230 [ 1470.807243] ? kfree+0xd7/0x340 [ 1470.807651] p9_client_create+0xa76/0x1230 [ 1470.808167] ? p9_client_flush+0x430/0x430 [ 1470.808700] ? trace_hardirqs_on+0x5b/0x180 [ 1470.809201] ? lockdep_init_map_type+0x2c7/0x780 [ 1470.809783] ? __raw_spin_lock_init+0x36/0x110 [ 1470.810349] v9fs_session_init+0x1dd/0x1680 [ 1470.810875] ? lock_release+0x680/0x680 [ 1470.811358] ? kmem_cache_alloc_trace+0x151/0x320 [ 1470.811944] ? v9fs_show_options+0x690/0x690 [ 1470.812472] ? trace_hardirqs_on+0x5b/0x180 [ 1470.812997] ? kasan_unpoison_shadow+0x33/0x50 [ 1470.813556] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1470.814179] v9fs_mount+0x79/0x8f0 [ 1470.814632] ? v9fs_write_inode+0x60/0x60 [ 1470.815139] legacy_get_tree+0x105/0x220 [ 1470.815615] vfs_get_tree+0x8e/0x300 [ 1470.816074] path_mount+0x1429/0x2120 [ 1470.816536] ? strncpy_from_user+0x9e/0x470 [ 1470.817069] ? finish_automount+0xa90/0xa90 [ 1470.817589] ? getname_flags.part.0+0x1dd/0x4f0 [ 1470.818161] ? _copy_from_user+0xfb/0x1b0 [ 1470.818758] __x64_sys_mount+0x282/0x300 [ 1470.819272] ? copy_mnt_ns+0xa00/0xa00 [ 1470.819752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1470.820363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1470.821005] do_syscall_64+0x33/0x40 [ 1470.821453] entry_SYSCALL_64_after_hwframe+0x67/0xd1 03:36:45 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1100) r1 = syz_io_uring_setup(0x2a77, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = signalfd(r1, &(0x7f0000000080)={[0x3fde028a]}, 0x8) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000440)={{r1}, "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"}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1470.822080] RIP: 0033:0x7f5793fc9b19 [ 1470.822781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.825180] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1470.826290] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1470.827375] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1470.828448] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1470.829468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1470.830370] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:36:45 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x42d0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) lseek(r4, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x10001, r0, &(0x7f0000000080), 0xff, 0x0) 03:36:45 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000abb219c28ece56d952f1e6745749c792bf3a3ec1a46a61db2ccb5dee2f0bf37b06b87b48f62a4ea264", @ANYRES16=r0, @ANYBLOB="000427bd7000fcdbdf2511000000040032000100010005002d0001000000050029000100000005002d00000000000500300000000008002c0006000000cce81c949800885a3ea53e217c8f56c2d7d1f174ac"], 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4004841) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40084) socketpair(0xf, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$TUNSETOFFLOAD(r2, 0x800454e1, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x5) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r3, 0x7002) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000180)={'batadv_slave_0\x00'}) 03:36:45 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r3 = syz_io_uring_setup(0x454f, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x2}, 0x40000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x810, r0, 0x3ba5c000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r7, 0x800454e0, 0x0) 03:37:00 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:37:00 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x4, 0x0, 0x0, 0x7f, 0x4, 0x0, {0x0, 0x0, r0}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:37:00 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$FITHAW(r1, 0xc0045878) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) 03:37:00 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x6, &(0x7f0000000340)=[r0], 0x1) [ 1485.992837] FAULT_INJECTION: forcing a failure. [ 1485.992837] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.994264] CPU: 0 PID: 9931 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1485.995249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.996324] Call Trace: [ 1485.996654] dump_stack+0x107/0x167 [ 1485.997102] should_fail.cold+0x5/0xa [ 1485.997567] ? create_object.isra.0+0x3a/0xa20 [ 1485.998119] should_failslab+0x5/0x20 [ 1485.998578] kmem_cache_alloc+0x5b/0x310 [ 1485.999071] create_object.isra.0+0x3a/0xa20 [ 1485.999596] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1486.000212] __kmalloc+0x16e/0x390 [ 1486.000641] p9_fcall_init+0x97/0x290 [ 1486.001114] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1486.001725] p9_client_rpc+0x220/0x1370 [ 1486.002203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.002845] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1486.003485] ? pipe_poll+0x21b/0x7f0 [ 1486.003934] ? p9_fd_close+0x4a0/0x4a0 [ 1486.004403] ? anon_pipe_buf_release+0x280/0x280 [ 1486.004977] ? p9_fd_poll+0x1e0/0x2c0 [ 1486.005451] ? p9_fd_create+0x357/0x4a0 [ 1486.005938] ? p9_conn_create+0x510/0x510 [ 1486.006436] ? p9_client_create+0x798/0x1230 [ 1486.006973] ? kfree+0xd7/0x340 [ 1486.007375] p9_client_create+0xa76/0x1230 [ 1486.007889] ? p9_client_flush+0x430/0x430 [ 1486.008398] ? trace_hardirqs_on+0x5b/0x180 [ 1486.008923] ? lockdep_init_map_type+0x2c7/0x780 [ 1486.009503] ? __raw_spin_lock_init+0x36/0x110 [ 1486.010059] v9fs_session_init+0x1dd/0x1680 [ 1486.010576] ? lock_release+0x680/0x680 [ 1486.011061] ? kmem_cache_alloc_trace+0x151/0x320 [ 1486.011636] ? v9fs_show_options+0x690/0x690 [ 1486.012170] ? trace_hardirqs_on+0x5b/0x180 [ 1486.012690] ? kasan_unpoison_shadow+0x33/0x50 [ 1486.013245] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1486.013862] v9fs_mount+0x79/0x8f0 [ 1486.014289] ? v9fs_write_inode+0x60/0x60 [ 1486.014789] legacy_get_tree+0x105/0x220 [ 1486.015281] vfs_get_tree+0x8e/0x300 [ 1486.015746] path_mount+0x1429/0x2120 [ 1486.016206] ? strncpy_from_user+0x9e/0x470 [ 1486.016725] ? finish_automount+0xa90/0xa90 [ 1486.017256] ? getname_flags.part.0+0x1dd/0x4f0 [ 1486.018000] ? _copy_from_user+0xfb/0x1b0 [ 1486.018705] __x64_sys_mount+0x282/0x300 [ 1486.019389] ? copy_mnt_ns+0xa00/0xa00 [ 1486.020061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.020952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.021838] do_syscall_64+0x33/0x40 [ 1486.022474] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.023348] RIP: 0033:0x7f5793fc9b19 [ 1486.023978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.027119] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1486.028424] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1486.029640] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1486.030871] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1486.032085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.033305] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:37:00 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 39) 03:37:00 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:37:00 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0/file0\x00', 0x200000, 0x100) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x44000, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x104) faccessat2(r0, &(0x7f00000002c0)='./file0\x00', 0x2, 0x1000) r2 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x100) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r5 = syz_io_uring_setup(0x4d4d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000340)=[r3, 0xffffffffffffffff, r5], 0x3) renameat2(r1, &(0x7f0000000300)='./file0/file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x80000000, 0x10000, 0x62aa0, 0xeee, 0x200, 0x4}, {0x6, 0x4, 0x7, 0x8, 0x2, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) openat(r0, &(0x7f00000003c0)='./file0/file0/file0\x00', 0xc02, 0x40) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x884c1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x10001, 0x101c00) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000100)={0x2, 0x0, 0x5, 0xc1, 0x3ff}) 03:37:00 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x430800, 0x4) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {r12}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=r15, @ANYBLOB="c0ffffffffffffff090000000000000009000000000000000000361500000000000000000000000500000000000000040000007747000004000000e0ffffff0001000000000000050000000000000009000000000000000700000000000f002000000000000000000000000000000000000000000000000000000000000000000000000000000026ce72f95122e1e5718ab9767043cec498378c5f3a110bac716943ed974f09bb5c81356b79cad7187434ed0f03edd2bf35a3425198f760b623001e33a67fc36d60f172be312829f18654b38c76a337563e83668e2891c106e2c23fe48c3795a1c96a"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000480)=ANY=[@ANYRES64=r16, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000051380)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {0x0, r14}, {r15}, {r16}], 0x1, "1056fcbe1cecb2"}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:37:00 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x7, &(0x7f0000000340)=[r0], 0x1) 03:37:00 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:37:00 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) 03:37:00 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:37:00 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:37:00 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/60, 0x3c) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:37:15 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:37:15 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:37:15 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syncfs(r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x7, 0x3, 0x80, 0x9}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) 03:37:15 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000340)=[r0], 0x1) 03:37:15 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0xac58, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) pread64(r2, &(0x7f00000000c0)=""/178, 0xb2, 0x3) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 03:37:15 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f00000000c0)="dc4cfe66b6b279ce1de37ee829b9292eab72098acacd05a86e675374456defa2597b1d256c3a75cc855961e1e3d7e1eae6f1291306a0cb44879cbff0c29811876bbb41ec6c6d746cac2c1ef4250dd211ee45b568e6cb6f55ee68385883e5d5de1e5d2fd780ae001916ba5b950df5c61f9ada9387040452bb2fb6e78eeff56186ae89ef302f23d980ecfcdcf7de9ae637a28d704f6b7ba4ba3c636a393fcde6e1d9d115b7e8e504a30e3ebbe804", 0xad}, {&(0x7f0000000180)="ed05e89c3d6e410a7df005c8b41ba7ed0a25f51bd02b74005ecc46aa", 0x1c, 0xa3}, {&(0x7f0000000440)="0f5a06beb3d78a3af401319ad21cb63c6f21e38251c2073b28b52b24676fc8135204f8b65f253b040b82935f0c73c4bf7cf59f7c223ad5aaa515a695793c8aa33ec5bb6db07d3c7975c84aea6750cbc8023f11374a97e6cbec82cdca05cabeb1c1f3f30039c0b6b02b6070528a2f12864fa3abcece442436e10fe2e19b5a17e27894b72f646e9ac346b2267dbaacc1dfd725783e09be4d0cbd7584ae8660a02d35919b73ae0cce266f8585c7a1c94df37001", 0xb2, 0x5}, {&(0x7f0000000500)="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", 0xfb, 0x101}], 0x1040, &(0x7f0000000600)={[{@nonumtail}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_mixed}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@shortname_win95}], [{@uid_gt}]}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:37:15 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0x0, 0x3, 0x40, 0x0, 0x2, "77004a6efd0100eaffff07002600", 0x464, 0x4}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000c2, 0x0) lseek(r0, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fdatasync(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100004000000000c8e1d6cf628ff55fba50b7b7192484d8112717d0062fe86c39d2dee00d9f4d621c128c35555460ce097e10976396c3576766a21aa35f77d8551fcc5ba5904597790240d82fee580a13e0fe8e2ac366e71e9ca51e0b2cb9914a9f1ebb1db017011dd1c2907122d505be131afaf7d6d9580daa6d6d437b30041b1a9d8ba0c06e58629be0acd65340cc84b5b626e18ee4facdcee8b737eb265c60353fd380db6e328c845f2c7c983c3524b76aae5bea560c141603aec5dc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/48}) 03:37:15 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 40) [ 1501.086903] FAULT_INJECTION: forcing a failure. [ 1501.086903] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.089360] CPU: 1 PID: 10202 Comm: syz-executor.4 Not tainted 5.10.230 #1 03:37:15 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) [ 1501.090925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1501.092740] Call Trace: [ 1501.093325] dump_stack+0x107/0x167 [ 1501.094093] should_fail.cold+0x5/0xa [ 1501.094882] ? p9_fcall_init+0x97/0x290 [ 1501.095707] should_failslab+0x5/0x20 [ 1501.096498] __kmalloc+0x72/0x390 [ 1501.097211] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1501.098266] p9_fcall_init+0x97/0x290 [ 1501.099044] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1501.100099] p9_client_rpc+0x220/0x1370 [ 1501.100917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1501.102008] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1501.103115] ? pipe_poll+0x21b/0x7f0 [ 1501.103880] ? p9_fd_close+0x4a0/0x4a0 [ 1501.104683] ? anon_pipe_buf_release+0x280/0x280 [ 1501.105665] ? p9_fd_poll+0x1e0/0x2c0 [ 1501.106456] ? p9_fd_create+0x357/0x4a0 [ 1501.107276] ? p9_conn_create+0x510/0x510 [ 1501.108129] ? p9_client_create+0x798/0x1230 [ 1501.109024] ? kfree+0xd7/0x340 [ 1501.109729] p9_client_create+0xa76/0x1230 03:37:15 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) syncfs(r0) [ 1501.110619] ? p9_client_flush+0x430/0x430 [ 1501.111588] ? trace_hardirqs_on+0x5b/0x180 [ 1501.112481] ? lockdep_init_map_type+0x2c7/0x780 [ 1501.113460] ? __raw_spin_lock_init+0x36/0x110 [ 1501.114417] v9fs_session_init+0x1dd/0x1680 [ 1501.115314] ? lock_release+0x680/0x680 [ 1501.116150] ? kmem_cache_alloc_trace+0x151/0x320 [ 1501.117141] ? v9fs_show_options+0x690/0x690 [ 1501.118063] ? trace_hardirqs_on+0x5b/0x180 [ 1501.118953] ? kasan_unpoison_shadow+0x33/0x50 [ 1501.119898] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1501.120953] v9fs_mount+0x79/0x8f0 [ 1501.121692] ? v9fs_write_inode+0x60/0x60 [ 1501.122551] legacy_get_tree+0x105/0x220 [ 1501.123389] vfs_get_tree+0x8e/0x300 [ 1501.124155] path_mount+0x1429/0x2120 [ 1501.124947] ? strncpy_from_user+0x9e/0x470 [ 1501.125844] ? finish_automount+0xa90/0xa90 [ 1501.126734] ? getname_flags.part.0+0x1dd/0x4f0 [ 1501.127696] ? _copy_from_user+0xfb/0x1b0 [ 1501.128562] __x64_sys_mount+0x282/0x300 [ 1501.129396] ? copy_mnt_ns+0xa00/0xa00 03:37:15 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1501.130369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1501.131892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1501.133229] do_syscall_64+0x33/0x40 [ 1501.134092] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1501.135180] RIP: 0033:0x7f5793fc9b19 [ 1501.135969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1501.139839] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1501.141436] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1501.142945] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1501.144465] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1501.145977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1501.147484] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:37:15 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x9, &(0x7f0000000340)=[r0], 0x1) 03:37:15 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:37:15 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 41) 03:37:15 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:37:15 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x3b5, 0xffffff80, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:37:15 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x43b2, 0x0) recvmsg(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/226, 0xe2}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000180)=""/99, 0x63}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/48, 0x30}, {&(0x7f0000000380)=""/93, 0x5d}], 0x6}, 0x40000100) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r3], 0x3) 03:37:15 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200002, 0x2) unlink(&(0x7f0000000000)='./file0\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1501.343866] FAULT_INJECTION: forcing a failure. [ 1501.343866] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.346343] CPU: 1 PID: 10486 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1501.347812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1501.349545] Call Trace: [ 1501.350119] dump_stack+0x107/0x167 [ 1501.350879] should_fail.cold+0x5/0xa [ 1501.351677] ? create_object.isra.0+0x3a/0xa20 [ 1501.352641] should_failslab+0x5/0x20 [ 1501.353442] kmem_cache_alloc+0x5b/0x310 03:37:15 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) [ 1501.354306] create_object.isra.0+0x3a/0xa20 [ 1501.355386] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1501.356450] __kmalloc+0x16e/0x390 [ 1501.357192] p9_fcall_init+0x97/0x290 [ 1501.357997] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1501.359061] p9_client_rpc+0x220/0x1370 [ 1501.359881] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1501.360976] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1501.362088] ? pipe_poll+0x21b/0x7f0 [ 1501.362859] ? p9_fd_close+0x4a0/0x4a0 [ 1501.363676] ? anon_pipe_buf_release+0x280/0x280 [ 1501.364656] ? p9_fd_poll+0x1e0/0x2c0 [ 1501.365458] ? p9_fd_create+0x357/0x4a0 [ 1501.366295] ? p9_conn_create+0x510/0x510 [ 1501.367150] ? p9_client_create+0x798/0x1230 [ 1501.368059] ? kfree+0xd7/0x340 [ 1501.368749] p9_client_create+0xa76/0x1230 03:37:15 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x54) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) [ 1501.369646] ? p9_client_flush+0x430/0x430 [ 1501.370639] ? trace_hardirqs_on+0x5b/0x180 [ 1501.371512] ? lockdep_init_map_type+0x2c7/0x780 [ 1501.372491] ? __raw_spin_lock_init+0x36/0x110 [ 1501.373444] v9fs_session_init+0x1dd/0x1680 [ 1501.374349] ? lock_release+0x680/0x680 [ 1501.375170] ? kmem_cache_alloc_trace+0x151/0x320 [ 1501.376154] ? v9fs_show_options+0x690/0x690 [ 1501.377060] ? trace_hardirqs_on+0x5b/0x180 [ 1501.377948] ? kasan_unpoison_shadow+0x33/0x50 [ 1501.378881] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1501.379917] v9fs_mount+0x79/0x8f0 [ 1501.380655] ? v9fs_write_inode+0x60/0x60 [ 1501.381494] legacy_get_tree+0x105/0x220 [ 1501.382329] vfs_get_tree+0x8e/0x300 [ 1501.383090] path_mount+0x1429/0x2120 [ 1501.383873] ? strncpy_from_user+0x9e/0x470 [ 1501.384747] ? finish_automount+0xa90/0xa90 [ 1501.385637] ? getname_flags.part.0+0x1dd/0x4f0 03:37:15 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1501.386583] ? _copy_from_user+0xfb/0x1b0 [ 1501.387564] __x64_sys_mount+0x282/0x300 [ 1501.388387] ? copy_mnt_ns+0xa00/0xa00 [ 1501.389175] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1501.390272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1501.391322] do_syscall_64+0x33/0x40 [ 1501.392086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1501.393124] RIP: 0033:0x7f5793fc9b19 [ 1501.393897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1501.397641] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1501.399188] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1501.400644] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1501.402101] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1501.403550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1501.405005] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:37:15 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) lseek(r1, 0x924b, 0x4) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:37:15 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 03:37:15 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000340)=[r0], 0x1) 03:37:15 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r3, 0x7002) connect(r3, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r4, 0x800454e0, 0x0) 03:37:15 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x8, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x3f) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x8010, r3, 0xba27b000) 03:37:15 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200, 0x54) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x43) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1], 0x1) 03:37:16 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:37:16 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 03:37:32 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 42) 03:37:32 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:37:32 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r3], 0x3) 03:37:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x9c, 0x3, 0x5, 0x8, 0x0, 0x5, 0x8140, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000040)}, 0x10040, 0x0, 0x8b9, 0x3, 0x4, 0x4, 0x0, 0x0, 0x8, 0x0, 0x25}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(0xffffffffffffffff, r1, 0x0) 03:37:32 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, "7700000000000000007a755d3a626cdc8c00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:37:32 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:37:32 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xb, &(0x7f0000000340)=[r0], 0x1) 03:37:32 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x40, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r2}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r1, 0x80, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x0, 0x0, 0x1, {0x0, r2}}, 0x10000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1517.615794] FAULT_INJECTION: forcing a failure. [ 1517.615794] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.618837] CPU: 0 PID: 10764 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1517.620497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1517.622594] Call Trace: [ 1517.623356] dump_stack+0x107/0x167 [ 1517.624291] should_fail.cold+0x5/0xa [ 1517.625217] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1517.626618] should_failslab+0x5/0x20 [ 1517.627540] kmem_cache_alloc+0x5b/0x310 [ 1517.628540] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1517.629907] idr_get_free+0x4b5/0x8f0 [ 1517.630850] idr_alloc_u32+0x170/0x2d0 [ 1517.631788] ? __fprop_inc_percpu_max+0x130/0x130 [ 1517.632966] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1517.634270] ? lock_release+0x680/0x680 [ 1517.635231] idr_alloc+0xc2/0x130 [ 1517.636067] ? idr_alloc_u32+0x2d0/0x2d0 [ 1517.637050] ? rwlock_bug.part.0+0x90/0x90 [ 1517.638085] p9_client_prepare_req.part.0+0x612/0xac0 [ 1517.639366] p9_client_rpc+0x220/0x1370 [ 1517.640321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.641609] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1517.642924] ? pipe_poll+0x21b/0x7f0 [ 1517.643836] ? p9_fd_close+0x4a0/0x4a0 [ 1517.644773] ? anon_pipe_buf_release+0x280/0x280 [ 1517.645929] ? p9_fd_poll+0x1e0/0x2c0 [ 1517.646867] ? p9_fd_create+0x357/0x4a0 [ 1517.647819] ? p9_conn_create+0x510/0x510 [ 1517.648806] ? p9_client_create+0x798/0x1230 [ 1517.649860] ? kfree+0xd7/0x340 [ 1517.650679] p9_client_create+0xa76/0x1230 [ 1517.651714] ? p9_client_flush+0x430/0x430 [ 1517.652727] ? trace_hardirqs_on+0x5b/0x180 [ 1517.653771] ? lockdep_init_map_type+0x2c7/0x780 [ 1517.654918] ? __raw_spin_lock_init+0x36/0x110 [ 1517.656033] v9fs_session_init+0x1dd/0x1680 [ 1517.657087] ? lock_release+0x680/0x680 [ 1517.658052] ? kmem_cache_alloc_trace+0x151/0x320 [ 1517.659233] ? v9fs_show_options+0x690/0x690 [ 1517.660317] ? trace_hardirqs_on+0x5b/0x180 [ 1517.661368] ? kasan_unpoison_shadow+0x33/0x50 [ 1517.662472] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1517.663703] v9fs_mount+0x79/0x8f0 [ 1517.664586] ? v9fs_write_inode+0x60/0x60 [ 1517.665599] legacy_get_tree+0x105/0x220 [ 1517.666592] vfs_get_tree+0x8e/0x300 [ 1517.667488] path_mount+0x1429/0x2120 [ 1517.668412] ? strncpy_from_user+0x9e/0x470 [ 1517.669451] ? finish_automount+0xa90/0xa90 [ 1517.670504] ? getname_flags.part.0+0x1dd/0x4f0 [ 1517.671637] ? _copy_from_user+0xfb/0x1b0 [ 1517.672637] __x64_sys_mount+0x282/0x300 [ 1517.673613] ? copy_mnt_ns+0xa00/0xa00 [ 1517.674569] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.675843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.677084] do_syscall_64+0x33/0x40 [ 1517.677982] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1517.679223] RIP: 0033:0x7f5793fc9b19 [ 1517.680115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.684552] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1517.686409] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1517.688156] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1517.689895] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1517.691641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1517.693364] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:37:32 executing program 2: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0xfffffffe, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:37:32 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:37:32 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xc, &(0x7f0000000340)=[r0], 0x1) 03:37:32 executing program 6: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x800, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x316, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r3], 0x3) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/8, 0x8) 03:37:32 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:37:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x28000, 0xf5e1e8eb6e6780e7, 0x15}, 0x18) fcntl$dupfd(r0, 0x0, r1) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) 03:37:47 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETOFFLOAD(r1, 0x800454e0, 0x2) syz_open_dev$mouse(&(0x7f0000000100), 0x7, 0x100) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r3 = openat$incfs(r2, &(0x7f0000000200)='.log\x00', 0x2080, 0x103) ioctl$RTC_AIE_OFF(r3, 0x7002) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000040)={'geneve0\x00'}) 03:37:47 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xd, &(0x7f0000000340)=[r0], 0x1) 03:37:47 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 43) 03:37:47 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:37:47 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000080)={"e17495b1b2f2d3e464406f1192cf0e30", 0x0, 0x0, {0xdcb, 0x10000}, {0x367b, 0x81}, 0x4, [0x6, 0xffffffffffff0000, 0x7, 0x7, 0x0, 0x2, 0x7fff, 0x0, 0x52a, 0x7, 0x10000, 0xf502, 0x3ff, 0x2, 0x10001, 0x7]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000640)={'veth0_macvtap\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) copy_file_range(r1, 0x0, r1, &(0x7f0000000600)=0x400, 0x3ff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000180)={0x2, 0x1, 0x18, 0x8, 0x172, &(0x7f0000000200)="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"}) 03:37:47 executing program 2: ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0x1, 0xfeb4, 0x1, 0x5326b202, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d53, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1], 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="01000063a901000018000000", @ANYRES32, @ANYBLOB="03000000000000002e2f66696c653000"]) 03:37:47 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:37:47 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x43) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) lseek(0xffffffffffffffff, 0x13a6, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) [ 1532.601764] FAULT_INJECTION: forcing a failure. [ 1532.601764] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.604391] CPU: 0 PID: 11016 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1532.605973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1532.607893] Call Trace: [ 1532.608501] dump_stack+0x107/0x167 [ 1532.609337] should_fail.cold+0x5/0xa [ 1532.610214] ? create_object.isra.0+0x3a/0xa20 [ 1532.611276] should_failslab+0x5/0x20 [ 1532.612153] kmem_cache_alloc+0x5b/0x310 [ 1532.613093] create_object.isra.0+0x3a/0xa20 [ 1532.614100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1532.615278] kmem_cache_alloc+0x159/0x310 [ 1532.616244] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1532.617532] idr_get_free+0x4b5/0x8f0 [ 1532.618427] idr_alloc_u32+0x170/0x2d0 [ 1532.619333] ? __fprop_inc_percpu_max+0x130/0x130 [ 1532.620448] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1532.621685] ? lock_release+0x680/0x680 [ 1532.622606] idr_alloc+0xc2/0x130 [ 1532.623412] ? idr_alloc_u32+0x2d0/0x2d0 [ 1532.624341] ? rwlock_bug.part.0+0x90/0x90 [ 1532.625328] p9_client_prepare_req.part.0+0x612/0xac0 [ 1532.626523] p9_client_rpc+0x220/0x1370 [ 1532.627449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1532.628664] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1532.629892] ? pipe_poll+0x21b/0x7f0 [ 1532.630756] ? p9_fd_close+0x4a0/0x4a0 [ 1532.631650] ? anon_pipe_buf_release+0x280/0x280 [ 1532.632742] ? p9_fd_poll+0x1e0/0x2c0 [ 1532.633624] ? p9_fd_create+0x357/0x4a0 [ 1532.634542] ? p9_conn_create+0x510/0x510 [ 1532.635505] ? p9_client_create+0x798/0x1230 [ 1532.636516] ? kfree+0xd7/0x340 [ 1532.637285] p9_client_create+0xa76/0x1230 [ 1532.638272] ? p9_client_flush+0x430/0x430 [ 1532.639255] ? trace_hardirqs_on+0x5b/0x180 [ 1532.640250] ? lockdep_init_map_type+0x2c7/0x780 [ 1532.641343] ? __raw_spin_lock_init+0x36/0x110 [ 1532.642403] v9fs_session_init+0x1dd/0x1680 [ 1532.643408] ? lock_release+0x680/0x680 [ 1532.644333] ? kmem_cache_alloc_trace+0x151/0x320 [ 1532.645446] ? v9fs_show_options+0x690/0x690 [ 1532.646471] ? trace_hardirqs_on+0x5b/0x180 [ 1532.647472] ? kasan_unpoison_shadow+0x33/0x50 [ 1532.648527] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1532.649705] v9fs_mount+0x79/0x8f0 [ 1532.650524] ? v9fs_write_inode+0x60/0x60 [ 1532.651492] legacy_get_tree+0x105/0x220 [ 1532.652427] vfs_get_tree+0x8e/0x300 [ 1532.653284] path_mount+0x1429/0x2120 [ 1532.654164] ? strncpy_from_user+0x9e/0x470 [ 1532.655162] ? finish_automount+0xa90/0xa90 [ 1532.656151] ? getname_flags.part.0+0x1dd/0x4f0 [ 1532.657221] ? _copy_from_user+0xfb/0x1b0 [ 1532.658179] __x64_sys_mount+0x282/0x300 [ 1532.659118] ? copy_mnt_ns+0xa00/0xa00 [ 1532.660021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1532.661225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1532.662411] do_syscall_64+0x33/0x40 [ 1532.663284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1532.664462] RIP: 0033:0x7f5793fc9b19 [ 1532.665319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1532.669574] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1532.671331] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1532.672982] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1532.674621] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1532.676274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1532.677916] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:38:02 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="2b0200000000000005020006010700000000000000c204000000053f009b01da46ea23667f8797778aabb6d15141d7d4c5ea9ed8777bf440bdc7ac066341733c3b916ea4ee270c11b3438cbf2b997251bd08e602e19b765c3dc7898da57af4f60ec6879ad3211ed3e76733076f3b75c00043ba4b8d7def980f82cff4dc6cbf39005d82974932f29e3276257ed4bec5eb2fd2f26b4d8c1f7fb427bfd460ced13244ff4f31a9717f19db8ec8fd5c1bac3c6ee0bf8c3a7f933f06282919f9bf815b748a1e2f30ddcd7df1f1ed2db727c88d37867de9a975088b2a014be1c23182c5816ac40cc915d55aa22cb04aa7dfe7b2c07929fd5116a698fa8188edab7639051751f26a70e4ceb34883e69a4e316fbeda889e5407f1c4d237311924d9e15e453893acea503d5abad6207183979622a757badd7bc555394220872e409ce5dc848d8916b31900da2feaa8bc499b4fea53eea79367e0f2863097de9c054363ec57db5262d258de260e5708dc3216c36abf803b3ca7d22dff7b0ca4cf33bf486537c82f565f470f00015f4f711bc158679868c8cf716282701753d17a288c7879d4bba6e79b6cde4e349d041edb5a93d785fc0ab5731797d1d768b55442c3f9bb29fdf7b925e70055fbc0b6864617b6d7f7995a1458f816e00e155ed46190554b61a9f31fa605c32e15ff18bae19b578784a1398340bc66f1dd533a757f2a05b3f3672f25d68dfc2ab08884575fafe540447993606eb874df26133911d636d0abacfca58e64e67b5e285c6af3591ed3703a10b1cf1d07bd266dfdf52a8e2eaca8f8559453400c41b1a216cdf112862cf48966405b5432cc42eb6d365497266be6be054b9568a1946f324721b2d2171ef70a4582d26201a341c009ef4fbacd189eb1aaa4a2bc2e69a48927c3752174961c2a226707cdda3b50bec80c56d45c3495a32ad66cbe996f93235adf90a6c2ffca37dca1a8c936e33a8bfb2692c3554e8ae64c84a48995356bb83e9bbdc47d38babb6cb84246a3d799657d8faa63b3d6f0d7541cf25e8aeab413853adca91f56417a349c5e6d332542e23dbfed1baf6d8acc83f16a2cb23b80cd6c1b38d29ad64222d426bb5f55203c31d9b29e511e3041b4cf98c2914c85f1d1170167c8feff5ee3327a8e37daef07892aa74bb68aa098f1a5d4be9833dc17c99aae3fd16d155e69717f91a557b3d9ab249eba9d88bf320cdb59aacc3801808b6f53d1a2c99629c046a39f9ce790d80c44650a6cb475632f9df16d22a05b5d17e17b73e651efc0f56b8720681168acc51155031206511aaab4381a21ceb46b3b678556f2244688834abd3e4db1209f2b02f7e4d409ae56a68a3f7400a75cf19294d759a886c00d0a22882c77b794b1775d0ecf7c0de37082ebc3178a56a4d8f9b5efab6bbc1b6f59a0248e54e1fa0208e400636921992bfd211c37cb4b8159e0e65b9b47ae86f386d6396582c48312e882c15efbcb56ff3f1a8d4ca35fab1cfce760f9b508f528da0fe3f0baa72d940730ec62f71e496107d7522093fb08040782e488e70d12243a2b28157aff25ba6b040f2d6ad72109c59996551ea2816462307cfd6a82c804ac9f3cc86340182794c5802a087275422565d508861846b8357637be284024b074e16d0e74e0c7c95a0c0b09a192fae7158abfc82da9c30bc39203678a3ffadb81ea108d4ced11a0d872bb1d7c5d0a048ecfdfb30a538632eb1195c9fcf201b99b285ca276a3e91dfb82e39227c12471b8afc4445be15c1ed93ad32f44122a0e92e9f391f2c5a662a1050bc307a051be992f0de327c3751e5de775a62568ecd1089fc9e56eae850d5507781ef095386d3f0a7bc3fab82f3c51844086db3485116cf75dd4ef7af8109a8c91c3ac8cf8cd7cf601427ba55c401a420c95824e5fc495a435bf54b83dea41c68fff375497dea82b9655c7b67ff227863ce1c8401944deec55f6ab3fdeb33d14cecd1c9bc37dd34461cd14e932ea3f952c492807d158749ff40ce2751fcfe2dcc2ed49c9d81655499f054251f79063084cdd77b7f06459951b641fe0836f30614da0f04a7107b6db95dcc64d6e9c102c435de61287ca4b316e7c9b9a2c9276511b027e725631568c957f42d10100fe77f5c9e316811add3fcf2c56c48e212f2e3ee535962dd4c2ca03145fa731e1ca275cfee84e28d509576e5a954763a02054cc4ab0d4bf925b4713c98dcba018a12c6021a4b1a3438fc737f37b8f69a79a6054bd93bfa408fd2f0fe72a9353f1c58937fc7fc8fc516da084562375a764251aa576b71b795ce5b2db010ad5121ed19d61d7aebe481eb4e29118194bc86875e8e537ad1e40595e6c39f856565cdb9a9d0e84d512c39e8cb6351c75427d3a1b2bf723677169d92fc6c08807ea7a2771c764a9fa5bed13417e5e1a04680c62947236b6b498c1b6fdf0ea3a06a145e59fac5fb723b94e1ea6f2a3f81dde75026191564cd05b55ad30203af594e1526108ad104342a222cb12c49b0a5f099b5b0d0a81975bddfe97a49d07fcd619cf51b43296c9243071afbed2575001704809538544d85bf253b6a4e80a78ae1b7a4fb1b51ec83cb18d5bbbb7e9896d77e89b9a84bf88e2c9235bf3540c92d4d7ad43e16d8f98d0bdcd36f2f0c002add1f6f5f7d14d3f9cd18695817a83ac199894054c9ac0cbdfa4ed81fbae984aaf90e3672549bb526ce72b872930a58bd049881aecb66fc06b3330ad51bb4028734f67f6682c61040000003f958df8b0c2d283987c28c17972c735ff7d6585154145d5bced00c69cfe9239963fd7d326d0845b33e9d154fff7cedc9fa352e6967ae55482fa6d7a7b52e737226208c0b8e150c9b4978dda7e54a2b4c94d252d1d6bb4b0353dcb9b590c1bb87814b1cade5c569afe645ae7f84f4c41582cc00226dd5988ffb201d287139637288a53af1d9e700c593597e32bebe3bd9fe81364a512daadf1a1ccb89c3b93e2e4e851362c5b6e77e7138f4ea29e64e4009bc281625662f9dc722053c52ffd929001f50420aadeb3c01c53cf358dc5a68fecf0d519f47d38b45a19e470a09e3648c90f7826154fa88494866b6003102bbb4f6023201a3af0227a40730280103b2ddc61a36bbcc7412c7fa029e1830d1f4de01ae41c266936a8b2229e7895ec231bb1596690eb5363a6594ed8755a46b1ee78d0f0ed7299ecd01cce09011d38283b0cdc4b3decd6c1ef2008f1508d1685c3d9982535fa5f8ae5df8fb142efbd7be3900ead3508e5db22fda27495b5fa2efaf672ccce4668b92f709b119c9110033f4817fa09c7223f28ac11b9f64062b4de1a2d4ccdfc13736eea8be3b4864090edc02309f987653cb69fb110fa3f5e5ef5a8845b9636f6ca85f19427aa7f9dfb889ea2be577b25b4ad0e08e978f5a0ac506358460690f2e70746602c2b28e17c4b78f76883346ecde96a78e221222dfaf100b299e69dfdeb4209530e4e29276c1e0f5bf2f8f8c87dd2900ad943c04d462d1e9d63503cb2bc38fdccdfc6b209a2a1c764c6feb4ba6f834272ee7d1c826e1fca4aa31520cebb89f014a1445c86cedb1e1e5cc036fab3d9878b8f75344ee579f74c04bf8c54cc291c82c3021e6d561a51d248e7077ef7070da108230925bcf9491623ee7adda2c822c43e7328ee906dd2ca999c53a19ca201c59a096b6db0a6912fad75ee1ba53995278d0cdd778417e7dbe62d1dc6c70bfbc40938573b0ade13ed4074ad379b7a813a0a1d15f8d672a77263b8edd0f52fe0d88c76f6c1f52749a0c89bb0042566afe18ffd0f2dc837a41376e4769d4c1c9f2a8b180ee580655fdd9d7b5ee1606eb622151db50512e34337dff55515e4fed157f5adb20d2707e090bd495bf1a4eff3e4cf084152de472322bd0d2ef073d88ccd026d8c59988f919d7dc99c27e38e1c53ca372f4270b865c9524f0f5b74a55587411e3c423f76fb271d2e1afa8e0f85707cc2da9ab7c086cd814cc94563460f3eba363535ee6e513e26a929ab199e102d416e52afa60e42de83fc17fb3999b9dadd093ec2b70b353f72b8710ac6b84193a9bc82dd6c9a4bb00bc54287771b22633b5daf0c10e18ca8aba79aad06f9f5d21f9aecc022485a8859991cf6d0bf1744f3cde57341a920a60066caf2751d87f9003e3f44a990bef02cd27868d8d060c40be365f0e073f8ea0c36a883df12599fd3408869d624e19b98ff20c61c557b13fabb679fcd15eb1f9bd593f801754bad96c6aa9fe8396e0f9eb3f8dc5cc4a9eea341a06a284e0015f7b939b9f82a4e09a51087fa21b12a49d6d8417e4905bb1745cbeac8290db6510b5ca21ea99eccc2a550792f3a373f78f9ad38f33e4e5dcb9e9a5f3eeaf47342067e18a90b1550b2e0829bfb33a229c0c1691c172936207e4d0bb8f6c5c7dcfe677411b83f951f88b5fc279a83ee06e918fa44007ffb06270ca109879cf8ee17da2748068a9688787e8d30f8f4185f84afb848a3d0101fb2cb68b00faf9d25fd517c5d5b69f8aea8b2c5987f0f944bbc49012b65fbe08b389f926eecb998ac632ac2f90574b548e5dbf3be4b1dfe3ac0f507fab2bb364e637de62ec8dd835b7d151a392ae3324d5186a12ecb57bae6e14f7bae206ff83640d5df66733b993e94754d9587da6cf172254754164f9fec4c3296e3c4d20610cf6e04ed24757f938ab88cfb579bfe0acefa8802c9bd7e229b50ddb398cb5cacf4c986e137789528e368ec9207fc7fa13c13c2bd1d4b18e4e61b934b1b17986ee942711f19b6af8e98895e91ffa5458aebb57c4d29ae2a902f4d77d0865e951c60a6f23e67117e15231732f4d210046c83e9e73bc04822c56f63a46cab4d9ad543afb3c31e674556862dd9646241e03e60201e18571ef27ba9f9687796f423d38cb2f0874f8b45d4be75ba0cf11d3d7335f5226fda860449b7286c497120971983438bffcf2daaa6e56890b401abb0086dfd69a75111380cb516311009eafb77401f6c1570747761e647196d243ef6f2377f15231003f9896b67eeb66e583b30fd558a37358a478af882db19c2d72ba6e310f76ec449571a2c89d85317ac161205896227d0dea99ebd71e3d6b40e160a43ba7325c971e6a5c79760c9efcca56d447db32ce56c4c2edb9f544c444566a114f9ca6c41cbe0f96570cbdcda05615dcfb69f447736647b9c8bf0967a242a57c2b12021799e50f70fd1502632216ed00a1d492526b4bb65cbee7c4d78c19d4db5c54aaff7c0900518ef4af08d99615f8b6bd914dd1efbf0e31d0a21b72c13ac8988da8a0b3e912eedb8b9bb8bed246480d6fea90bd3741b23de7173d408a90f97117384f3e78c2f559eb1338512ca62d4d6ae7956ee36355d32738d7a0299a42906b7ec2405c034aae8727f6904ca2e91c9ed01dca9af5cb32e60f42b24a0200cf014d65533c4077f007d8dd5f8258f23ca3ec04c47a5d43046c203364afa6898a7b82d7e8ac48aed391f0345ad4557e02220e66063b07b1b152de8a45bbe17928bd2ca7b855998617283191e4a56351018e7efe2c05e6bb1f16c2378d810305758b86801f55900cb793f8962d6d11e21489258990fc7345ffb635823b1c2aae3ccda67713f98a1815f3a97641130868f27e56466a74f288f76804a96d3244d1407b902c308af2a3d5bed907f4d4974527bc6419b8953b54620ad8ccc9059a84d6712bef12e99e47fc74b1cc06edeecbf4ad591eb393e125c2e03147466502b83f3ee0598496ae02fc6a90a819dd52556198d07776ad97ea965f4649da678ff23b438c887e1f267852077d215c23d246398f0e30300daaa700fb57f388501928d00000000000000"], 0x1020) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod', 0x2001, 0xc4) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x1, 0x8, 0x9, 0x0, 0x8, 0x2040, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x180, 0x2, @perf_config_ext={0x6, 0x3}, 0xc225, 0x0, 0x100, 0x8, 0xffff, 0x7ff, 0x7f, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xd, r1, 0x1) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:38:02 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xe, &(0x7f0000000340)=[r0], 0x1) 03:38:02 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 44) 03:38:02 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:38:02 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:38:02 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x2, 0x400000, 0x0, 0xfffffffd, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x4, 0x401, 0x0, 0x7, 0x4, "88789dee911e1b0b01894fca94abc8ccdf38ea", 0x6, 0xffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) 03:38:02 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, '.\x00'}) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:38:02 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) syz_io_uring_setup(0x20d0, &(0x7f0000000080)={0x0, 0x53d0, 0x10, 0x1, 0x4c, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x7bb7, &(0x7f0000000180)={0x0, 0x4287, 0x10, 0x1, 0xee, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r0, 0x0, &(0x7f0000000440)="701d439220588b30c81abf74eb93a234c1f10c9a7b48874a42504b4835421c96d2c85de3fb8209f5f55577efcf708ded94f230af6eea03d62bdf6be6268ab21089108315deaeb0e4fe9d923e05aaa3ef23a48e3f23640016ec6c8bf3c0f800264b1005f9ea2af4f96ded281d01b087e1252ef372246b1c52a45212af92180bd96bc850e4d80f04d25664c929b83198e65a3b746347f75e0efdb71054bde90ad74a0de3aa07f83ee7df065fc8488da1e243981ec3ff506c645618d114e2d4f878ab184c1c58db76cbc91228a01d9fd82c44eb0e0374c529b187078659f29ddc52d329770f35cd1f90154c40", 0xeb, 0x40000000, 0x1}, 0x6) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000003c0)) r6 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r8, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000000740)=""/223, 0xdf}], 0x2, &(0x7f0000000880)=""/176, 0xb0}, 0x0, 0x100, 0x1, {0x2}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x110, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x800, 0x7) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x4, r5, 0x0, 0x7, 0x0) dup(r2) [ 1548.223160] FAULT_INJECTION: forcing a failure. [ 1548.223160] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.225717] CPU: 1 PID: 11142 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1548.227253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1548.229083] Call Trace: [ 1548.229669] dump_stack+0x107/0x167 [ 1548.230512] should_fail.cold+0x5/0xa [ 1548.231366] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1548.232650] should_failslab+0x5/0x20 [ 1548.233489] kmem_cache_alloc+0x5b/0x310 [ 1548.234396] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1548.235646] idr_get_free+0x4b5/0x8f0 [ 1548.236509] idr_alloc_u32+0x170/0x2d0 [ 1548.237384] ? __fprop_inc_percpu_max+0x130/0x130 [ 1548.238442] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1548.239620] ? lock_release+0x680/0x680 [ 1548.240512] idr_alloc+0xc2/0x130 [ 1548.241276] ? idr_alloc_u32+0x2d0/0x2d0 [ 1548.242181] ? rwlock_bug.part.0+0x90/0x90 [ 1548.243134] p9_client_prepare_req.part.0+0x612/0xac0 [ 1548.244303] p9_client_rpc+0x220/0x1370 [ 1548.245177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1548.246340] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1548.247532] ? pipe_poll+0x21b/0x7f0 [ 1548.248355] ? p9_fd_close+0x4a0/0x4a0 [ 1548.249211] ? anon_pipe_buf_release+0x280/0x280 [ 1548.250246] ? p9_fd_poll+0x1e0/0x2c0 [ 1548.251092] ? p9_fd_create+0x357/0x4a0 [ 1548.251964] ? p9_conn_create+0x510/0x510 [ 1548.252872] ? p9_client_create+0x798/0x1230 [ 1548.253842] ? kfree+0xd7/0x340 [ 1548.254577] p9_client_create+0xa76/0x1230 [ 1548.255514] ? p9_client_flush+0x430/0x430 [ 1548.256426] ? trace_hardirqs_on+0x5b/0x180 [ 1548.257372] ? lockdep_init_map_type+0x2c7/0x780 [ 1548.258420] ? __raw_spin_lock_init+0x36/0x110 [ 1548.259433] v9fs_session_init+0x1dd/0x1680 [ 1548.260420] ? lock_release+0x680/0x680 [ 1548.261333] ? kmem_cache_alloc_trace+0x151/0x320 [ 1548.262387] ? v9fs_show_options+0x690/0x690 [ 1548.263383] ? trace_hardirqs_on+0x5b/0x180 [ 1548.264369] ? kasan_unpoison_shadow+0x33/0x50 [ 1548.265407] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1548.266564] v9fs_mount+0x79/0x8f0 [ 1548.267357] ? v9fs_write_inode+0x60/0x60 [ 1548.268272] legacy_get_tree+0x105/0x220 [ 1548.269151] vfs_get_tree+0x8e/0x300 [ 1548.269964] path_mount+0x1429/0x2120 [ 1548.270805] ? strncpy_from_user+0x9e/0x470 [ 1548.271768] ? finish_automount+0xa90/0xa90 [ 1548.272737] ? getname_flags.part.0+0x1dd/0x4f0 [ 1548.273784] ? _copy_from_user+0xfb/0x1b0 [ 1548.274722] __x64_sys_mount+0x282/0x300 [ 1548.275643] ? copy_mnt_ns+0xa00/0xa00 [ 1548.276511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1548.277656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1548.278771] do_syscall_64+0x33/0x40 [ 1548.279602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1548.280721] RIP: 0033:0x7f5793fc9b19 [ 1548.281537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1548.285597] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1548.287291] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1548.288871] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1548.290423] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1548.292025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1548.293611] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:38:02 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syncfs(r0) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) setreuid(0xffffffffffffffff, r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200400, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',mmap,msize=0x0000000000000005,mmap,cachetag=&:.@%-#%U,dfltgid=', @ANYRESHEX=0xee00, @ANYBLOB=',access=', @ANYRESDEC=r3, @ANYBLOB=',cache=fscache,pcr=00000000000000000007,smackfstransmute=/dev/net/tun\x00,euid>', @ANYRESDEC=r4, @ANYBLOB=',d']) 03:38:02 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r2, 0x7002) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x1400}, 0x1, 0x0, 0x0, 0x8000}, 0x4048045) 03:38:02 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:38:02 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:38:02 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0xf, &(0x7f0000000340)=[r0], 0x1) 03:38:02 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'vcan0\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_vlan\x00'}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1\x00'}) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r2, 0x7002) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x80000000, 0xffffffff, 0x3, 0x1, 0xe17]}, &(0x7f0000000180)=0x54) r3 = dup3(r0, r0, 0x80000) write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x8809}, @val={0x1, 0x1, 0x0, 0x3ff, 0x0, 0x3}, @x25={0x3, 0x7b, 0x17, "303928844bb62ef167b5aaa40b25739c40e0eb8162869746dfae3a6064c5968c3973ac9465d2fc14c4dd5ebb94b20afacc527c3e5602a71f90aed6c5db975d07cc2493394efd39e861369549"}}, 0x5d) 03:38:03 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendfile(r1, r2, &(0x7f0000000000)=0x401, 0x7) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r4], 0x3) 03:38:03 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x8, 0x81, 0xf8, 0x60000}, {0x2b1, 0x81, 0x0, 0x7fffffff}, {0x5, 0x8, 0x1f, 0xf9}, {0xc3c, 0x9, 0x8, 0x4}, {0x312e, 0x7, 0x1, 0x80000001}, {0x9, 0x2, 0x1, 0x4}, {0x0, 0x9, 0x2, 0x1}]}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xa5) 03:38:03 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="df", 0x1}], 0x1}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/141, 0x8d, 0x0, 0x0}, &(0x7f0000000280)=0x40) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x3a2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file1\x00'}) recvfrom$inet6(r3, &(0x7f0000000440)=""/151, 0x97, 0x2, &(0x7f0000000300)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xa0c}, 0x1c) 03:38:03 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 45) 03:38:03 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) [ 1548.675120] FAULT_INJECTION: forcing a failure. [ 1548.675120] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.677891] CPU: 1 PID: 11386 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1548.679518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1548.681416] Call Trace: [ 1548.682020] dump_stack+0x107/0x167 [ 1548.682872] should_fail.cold+0x5/0xa [ 1548.683756] ? create_object.isra.0+0x3a/0xa20 [ 1548.684855] should_failslab+0x5/0x20 [ 1548.685758] kmem_cache_alloc+0x5b/0x310 [ 1548.686700] create_object.isra.0+0x3a/0xa20 [ 1548.687746] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1548.688906] kmem_cache_alloc+0x159/0x310 [ 1548.689875] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1548.691168] idr_get_free+0x4b5/0x8f0 [ 1548.692088] idr_alloc_u32+0x170/0x2d0 [ 1548.693005] ? __fprop_inc_percpu_max+0x130/0x130 [ 1548.694187] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1548.695472] ? lock_release+0x680/0x680 [ 1548.696396] idr_alloc+0xc2/0x130 [ 1548.697209] ? idr_alloc_u32+0x2d0/0x2d0 [ 1548.698163] ? rwlock_bug.part.0+0x90/0x90 [ 1548.699152] p9_client_prepare_req.part.0+0x612/0xac0 [ 1548.700356] p9_client_rpc+0x220/0x1370 [ 1548.701312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1548.702548] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1548.703794] ? pipe_poll+0x21b/0x7f0 [ 1548.704656] ? p9_fd_close+0x4a0/0x4a0 [ 1548.705556] ? anon_pipe_buf_release+0x280/0x280 [ 1548.706659] ? p9_fd_poll+0x1e0/0x2c0 [ 1548.707574] ? p9_fd_create+0x357/0x4a0 [ 1548.708520] ? p9_conn_create+0x510/0x510 [ 1548.709530] ? p9_client_create+0x798/0x1230 [ 1548.710616] ? kfree+0xd7/0x340 [ 1548.711449] p9_client_create+0xa76/0x1230 [ 1548.712497] ? p9_client_flush+0x430/0x430 [ 1548.713540] ? trace_hardirqs_on+0x5b/0x180 [ 1548.714601] ? lockdep_init_map_type+0x2c7/0x780 [ 1548.715784] ? __raw_spin_lock_init+0x36/0x110 [ 1548.716911] v9fs_session_init+0x1dd/0x1680 [ 1548.717973] ? lock_release+0x680/0x680 [ 1548.718965] ? kmem_cache_alloc_trace+0x151/0x320 [ 1548.720153] ? v9fs_show_options+0x690/0x690 [ 1548.721239] ? trace_hardirqs_on+0x5b/0x180 [ 1548.722298] ? kasan_unpoison_shadow+0x33/0x50 [ 1548.723432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1548.724684] v9fs_mount+0x79/0x8f0 [ 1548.725541] ? v9fs_write_inode+0x60/0x60 [ 1548.726500] legacy_get_tree+0x105/0x220 [ 1548.727446] vfs_get_tree+0x8e/0x300 [ 1548.728301] path_mount+0x1429/0x2120 [ 1548.729197] ? strncpy_from_user+0x9e/0x470 [ 1548.730214] ? finish_automount+0xa90/0xa90 [ 1548.731219] ? getname_flags.part.0+0x1dd/0x4f0 [ 1548.732323] ? _copy_from_user+0xfb/0x1b0 [ 1548.733300] __x64_sys_mount+0x282/0x300 [ 1548.734256] ? copy_mnt_ns+0xa00/0xa00 [ 1548.735173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1548.736432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1548.737671] do_syscall_64+0x33/0x40 [ 1548.738587] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1548.739856] RIP: 0033:0x7f5793fc9b19 [ 1548.740769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1548.745311] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1548.747180] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1548.748941] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1548.750693] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1548.752452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1548.754128] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:38:17 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 46) 03:38:17 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x48, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:38:17 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x800454e0, 0x0) 03:38:17 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:38:17 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x10, &(0x7f0000000340)=[r0], 0x1) 03:38:17 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0/../file0\x00', 0x5e3201, 0x141) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48aa02, 0x80) 03:38:17 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x1d}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) r3 = syz_io_uring_setup(0x3e62, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r3, 0xffffffffffffffff, r2], 0x3) 03:38:17 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x804, 0x0) fsetxattr$security_ima(r1, &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "7baf1e9f9bba3a36294ad517d312d1d323abe712"}, 0x15, 0x3) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'nr0\x00'}) [ 1562.741031] FAULT_INJECTION: forcing a failure. [ 1562.741031] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.743377] CPU: 1 PID: 11420 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1562.744820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1562.746561] Call Trace: [ 1562.747117] dump_stack+0x107/0x167 [ 1562.747890] should_fail.cold+0x5/0xa [ 1562.748892] ? create_object.isra.0+0x3a/0xa20 [ 1562.748950] should_failslab+0x5/0x20 [ 1562.748968] kmem_cache_alloc+0x5b/0x310 [ 1562.748991] create_object.isra.0+0x3a/0xa20 [ 1562.749006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1562.749029] kmem_cache_alloc+0x159/0x310 [ 1562.749057] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1562.749089] idr_get_free+0x4b5/0x8f0 [ 1562.756545] idr_alloc_u32+0x170/0x2d0 [ 1562.757362] ? __fprop_inc_percpu_max+0x130/0x130 [ 1562.758369] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1562.759486] ? lock_release+0x680/0x680 [ 1562.760328] idr_alloc+0xc2/0x130 [ 1562.761053] ? idr_alloc_u32+0x2d0/0x2d0 [ 1562.761895] ? rwlock_bug.part.0+0x90/0x90 [ 1562.762801] p9_client_prepare_req.part.0+0x612/0xac0 [ 1562.763899] p9_client_rpc+0x220/0x1370 [ 1562.764729] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1562.765836] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1562.766959] ? pipe_poll+0x21b/0x7f0 [ 1562.767754] ? p9_fd_close+0x4a0/0x4a0 [ 1562.768570] ? anon_pipe_buf_release+0x280/0x280 [ 1562.769567] ? p9_fd_poll+0x1e0/0x2c0 [ 1562.770376] ? p9_fd_create+0x357/0x4a0 [ 1562.771212] ? p9_conn_create+0x510/0x510 [ 1562.772092] ? p9_client_create+0x798/0x1230 [ 1562.773012] ? kfree+0xd7/0x340 [ 1562.773709] p9_client_create+0xa76/0x1230 [ 1562.774605] ? p9_client_flush+0x430/0x430 [ 1562.775497] ? trace_hardirqs_on+0x5b/0x180 [ 1562.776408] ? lockdep_init_map_type+0x2c7/0x780 [ 1562.777404] ? __raw_spin_lock_init+0x36/0x110 [ 1562.778366] v9fs_session_init+0x1dd/0x1680 [ 1562.779269] ? lock_release+0x680/0x680 [ 1562.780122] ? kmem_cache_alloc_trace+0x151/0x320 [ 1562.781128] ? v9fs_show_options+0x690/0x690 [ 1562.782059] ? trace_hardirqs_on+0x5b/0x180 [ 1562.782967] ? kasan_unpoison_shadow+0x33/0x50 [ 1562.783933] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1562.784993] v9fs_mount+0x79/0x8f0 [ 1562.785737] ? v9fs_write_inode+0x60/0x60 [ 1562.786606] legacy_get_tree+0x105/0x220 [ 1562.787455] vfs_get_tree+0x8e/0x300 [ 1562.788272] path_mount+0x1429/0x2120 [ 1562.789073] ? strncpy_from_user+0x9e/0x470 [ 1562.789970] ? finish_automount+0xa90/0xa90 [ 1562.790869] ? getname_flags.part.0+0x1dd/0x4f0 [ 1562.791848] ? _copy_from_user+0xfb/0x1b0 [ 1562.792734] __x64_sys_mount+0x282/0x300 [ 1562.793576] ? copy_mnt_ns+0xa00/0xa00 [ 1562.794390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1562.795480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1562.796572] do_syscall_64+0x33/0x40 [ 1562.797344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1562.798412] RIP: 0033:0x7f5793fc9b19 [ 1562.799188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1562.803043] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1562.804642] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1562.806142] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1562.807631] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1562.809132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1562.810620] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:38:17 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:38:17 executing program 2: r0 = accept$inet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000380)={@empty, @local}, &(0x7f00000003c0)=0xc) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x8) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1], 0x1) 03:38:17 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x11, &(0x7f0000000340)=[r0], 0x1) 03:38:17 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x10, 0x81, 0x3) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000, 0x400, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) move_mount(r5, &(0x7f0000000380)='./file0\x00', r2, &(0x7f00000003c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x7ff, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="60ea1ba6d3e60f0dbed85a23ec43734b429e83aebf6ca715f33cf6cf64bf23a2c48eda9ca3c457e99afb5a4c11ced4d8e596194a01da3a88c41fce0c8c1b284c844b6236c2cada4e229681cdc3c757ed81714666eaa0e41c93c54759963983d7948b46959b64f33366270d7ac4579a68416b0bda4e823d1aa16a6b020541603434463cc2268936a161f1597cafd41ad15b5f6cd17c0c7ec0ea069c3c3f7f52b5a6ec8c7ec0a73728870616d09a1f9b6182e31d09651546d4e23dfc61a60f8c151ba8be99", 0xc4, 0xb5}, {&(0x7f0000000440)="4d9798faaae21157961ba8a4ce7c56f5d3554739d091bdeb3d5bece07f28217e4d83c142367b3711cbf5906863308aa4e3b7d0fc6610fb8106e7553a0995ad73276ba9ad6c3ed96cadef5b5142d83b614b85d4592ec8baae4681844830754cc591e57406cfc6435ab11fc209c0bd509e1071b1aa4da6684cd20de84f92cac09ef6a6491f5e4cb366e215d3f1f683451cf2cab30583eff2f0a2807e8978939ae01829eabcf0871c6cf532c0b02ab7447887c5a7ab64425f40c45b21b30c041fa4d1bb257e615fd03e7f20b21f59891089a84267f44f6dc57b9c053255c3b7c35a80", 0xe1, 0x3}], 0x122002, &(0x7f00000002c0)={[{@fat=@gid={'gid', 0x3d, r4}}, {@utf8no}, {@utf8no}], [{@obj_user={'obj_user', 0x3d, '\x00'}}]}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r1], 0x3) [ 1562.992968] SELinux: duplicate or incompatible mount options 03:38:17 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:38:32 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x72441, 0x0) io_uring_enter(r2, 0x5b3e, 0xb332, 0x2, &(0x7f0000000080)={[0xda77]}, 0x8) 03:38:32 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'team0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:38:32 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:38:32 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 47) 03:38:32 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2, 0x248) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1, 0xffffffffffffffff, r3], 0x3) 03:38:32 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x68, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:38:32 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x12, &(0x7f0000000340)=[r0], 0x1) 03:38:32 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x7, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB='4\x00\x00i', @ANYRES16=r2, @ANYBLOB="01000000000000000000080000000c00018008000100", @ANYRES32=r4, @ANYBLOB="14000280100003800c0001800500020000000000"], 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa48dd69673d5748}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="046f69801f002cbd7000fddbdf251840000008000700aa00000005000600000000000000060001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8cdbb3fa", @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf25060000003400018008000600040000000500020002000000080003006401010208000700", @ANYRES32=r4, @ANYBLOB="050002008000000008000700", @ANYRES32=0x0, @ANYBLOB="08000300050000003c000180060005004e2100000800030064010102060005004e220000060005004e220000060005004e210000080006000400000008000700", @ANYRES32=r7, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4041) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r8, 0x800454e0, 0x0) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r9, 0x7002) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000040)={0x0, 0x5, 0xfff8, 0x1, 0x11, "d98944599292e3cc"}) [ 1578.430185] FAULT_INJECTION: forcing a failure. [ 1578.430185] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.432701] CPU: 0 PID: 11663 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1578.434253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1578.436111] Call Trace: [ 1578.436715] dump_stack+0x107/0x167 [ 1578.437531] should_fail.cold+0x5/0xa [ 1578.438386] ? create_object.isra.0+0x3a/0xa20 [ 1578.439414] should_failslab+0x5/0x20 [ 1578.440275] kmem_cache_alloc+0x5b/0x310 [ 1578.441209] create_object.isra.0+0x3a/0xa20 [ 1578.442192] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1578.443334] kmem_cache_alloc+0x159/0x310 [ 1578.444280] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1578.445544] idr_get_free+0x4b5/0x8f0 [ 1578.446409] idr_alloc_u32+0x170/0x2d0 [ 1578.447284] ? __fprop_inc_percpu_max+0x130/0x130 [ 1578.448380] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1578.449578] ? lock_release+0x680/0x680 [ 1578.450481] idr_alloc+0xc2/0x130 [ 1578.451264] ? idr_alloc_u32+0x2d0/0x2d0 [ 1578.452189] ? rwlock_bug.part.0+0x90/0x90 [ 1578.453157] p9_client_prepare_req.part.0+0x612/0xac0 [ 1578.454323] p9_client_rpc+0x220/0x1370 [ 1578.455212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1578.456406] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1578.457602] ? pipe_poll+0x21b/0x7f0 [ 1578.458440] ? p9_fd_close+0x4a0/0x4a0 [ 1578.459312] ? anon_pipe_buf_release+0x280/0x280 [ 1578.460387] ? p9_fd_poll+0x1e0/0x2c0 [ 1578.461249] ? p9_fd_create+0x357/0x4a0 [ 1578.462141] ? p9_conn_create+0x510/0x510 [ 1578.463071] ? p9_client_create+0x798/0x1230 [ 1578.464054] ? kfree+0xd7/0x340 [ 1578.464811] p9_client_create+0xa76/0x1230 [ 1578.465775] ? p9_client_flush+0x430/0x430 [ 1578.466725] ? trace_hardirqs_on+0x5b/0x180 [ 1578.467694] ? lockdep_init_map_type+0x2c7/0x780 [ 1578.468765] ? __raw_spin_lock_init+0x36/0x110 [ 1578.469791] v9fs_session_init+0x1dd/0x1680 [ 1578.470757] ? lock_release+0x680/0x680 [ 1578.471656] ? kmem_cache_alloc_trace+0x151/0x320 [ 1578.472745] ? v9fs_show_options+0x690/0x690 [ 1578.473740] ? trace_hardirqs_on+0x5b/0x180 [ 1578.474705] ? kasan_unpoison_shadow+0x33/0x50 [ 1578.475724] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1578.476886] v9fs_mount+0x79/0x8f0 [ 1578.477688] ? v9fs_write_inode+0x60/0x60 [ 1578.478613] legacy_get_tree+0x105/0x220 [ 1578.479528] vfs_get_tree+0x8e/0x300 [ 1578.480372] path_mount+0x1429/0x2120 [ 1578.481229] ? strncpy_from_user+0x9e/0x470 [ 1578.482193] ? finish_automount+0xa90/0xa90 [ 1578.483158] ? getname_flags.part.0+0x1dd/0x4f0 [ 1578.484199] ? _copy_from_user+0xfb/0x1b0 [ 1578.485149] __x64_sys_mount+0x282/0x300 [ 1578.486056] ? copy_mnt_ns+0xa00/0xa00 [ 1578.486931] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1578.488108] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1578.489279] do_syscall_64+0x33/0x40 [ 1578.490111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1578.491273] RIP: 0033:0x7f5793fc9b19 [ 1578.492108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:38:32 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) link(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1578.496263] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1578.498171] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1578.499777] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1578.501398] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1578.502997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1578.504604] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:38:32 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x9]}, 0x8, 0x80800) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x0, 0xed4c538a9c87da6b, 0x3d, 0x7, @scatter={0x5, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000100)=""/117, 0x75}, {&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000400)=""/226, 0xe2}]}, &(0x7f0000000580)="73884c7a641bfc3766a641e9307b132b78eeb69cd476c44cc8c496ef4bdcda122008b6b8a5eea9e057138eb009288c58bf26a42c42ff640d090562cf23", &(0x7f00000005c0)=""/15, 0x4, 0x30, 0x2, &(0x7f0000000600)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000080)={0x43, 0x20, 0x20}) ioctl$TUNSETOFFLOAD(r1, 0x800454e1, 0x0) 03:38:33 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:38:33 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:38:33 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:38:33 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000340)=[r0], 0x1) 03:38:33 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8000, 0x40000) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) 03:38:33 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[r2], 0x1) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x62) 03:38:33 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}], 0x48, 0x0, &(0x7f00000000c0)="a01d178afdfcda2acc1287307ffaed315e8acb8d500c053847c5c9111593fad8af735be529646f8885f551cdfd4c1d71e22efdcf265100070253e8c1cc9797758af6d6f7407825a2"}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'netdevsim0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:38:47 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:38:47 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 03:38:47 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 48) 03:38:47 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x74, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:38:47 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x14, &(0x7f0000000340)=[r0], 0x1) 03:38:47 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x12, r2, 0x8000000) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r3], 0x3) 03:38:47 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48a342, 0x0) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendfile(r2, r0, 0x0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000200)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r3, 0x80000001, 0x2) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000080)={"f5a66b26ebfc84daedee7dd3311b9db0", 0x0, 0x0, {0x8c}, {0xffffffff, 0x100}, 0x0, [0x5, 0x296, 0x100000001, 0x3, 0x1, 0x6, 0x54, 0x1, 0x3, 0xfffffffffffffffc, 0x80000000, 0x1, 0x1, 0x8, 0x7]}) 03:38:47 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x9, 0x3, &(0x7f00000002c0)=[{&(0x7f00000006c0)="f7a6cad65d194da9fc2f2b1573c30781ac2483359482cc2471803ad8c57b9ab30ea9fe939d6ba285851f3d3fafc2fbd9d8f39e78dad0b7390d15a02f63e58e101a519050c8697c46af3c9e5d386f74e539efa18d8a74149149046d1c83010107107c9fabfda96bde7cd06895fc226734e9507240c5ef2d43ae80c73aecff7b455cd137e3a5f2907c0973662300ba7f5d79c1b577f9e689ba1681a9d7ad220b26ec37e0ca0bd9c2c9cdfbd6570c49557276a85464b9e68e8acd58cf060681be2e0678326efe4ba51b49e0a6001efe65fc7f8620966983f6b0ccd92669a2e1d66d8d4ddce383aad4ebca", 0xe9, 0x9}, {&(0x7f0000000180)="664b6cf1dc83e8848d8cd1f781f2fdd9bd4ed75cd14ce5627d81fe6b324134d51c5a523f67f9ee27678e1405ebe5711a607269d87e08651ba03d48ea66a1f94a7794d8c03fcb6857d171eedd98a22c15cb919378b5375e8101114155", 0x5c, 0xc}, {&(0x7f0000000540)="31c51702d6af070e3d18cff8d304fde231a1ab9b2d69de83460de67affbd9ddc891345c1d3b731548442900ec4d100b3a5517a9fdd3a330e96dc6224153c4092e8e10455600797aaec0ae32b9ea99617a63c513632c195771c8c4e742a9b3b0158635915c2b9dae5c06a6b8e5c3878cdfd31237c7f6742ce4d2707adc0fd6b09c726715558e863f3fbccd5a0d66047c413a94c034ac389eff1cb390f2a7975858461557f6df6c1dddef725d682cc3652b9d931192e9b6e41a1e393d6d0dff4ee078db9fef021938e38307d", 0xcb, 0x8}], 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB='quiet,audit,dont_e=}].]:+$+{^,context=unconfined_u,defcontext=staff_u,\x00']) r1 = syz_io_uring_setup(0x75ff, &(0x7f0000000240)={0x0, 0xffffffff, 0x10, 0x22, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1593.112099] FAULT_INJECTION: forcing a failure. [ 1593.112099] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.113066] SELinux: duplicate or incompatible mount options [ 1593.115807] CPU: 1 PID: 11930 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1593.115819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.115825] Call Trace: [ 1593.115847] dump_stack+0x107/0x167 [ 1593.115866] should_fail.cold+0x5/0xa [ 1593.115887] ? p9pdu_readf+0xadb/0x1d40 [ 1593.115908] should_failslab+0x5/0x20 [ 1593.115924] __kmalloc+0x72/0x390 [ 1593.115947] p9pdu_readf+0xadb/0x1d40 [ 1593.115970] ? pipe_poll+0x21b/0x7f0 [ 1593.115989] ? p9pdu_writef+0x100/0x100 [ 1593.116008] ? p9_fd_poll+0x1e0/0x2c0 [ 1593.116032] ? p9_fd_create+0x357/0x4a0 [ 1593.116050] ? p9_conn_create+0x510/0x510 [ 1593.116066] ? p9_client_create+0x798/0x1230 [ 1593.116083] ? kfree+0xd7/0x340 [ 1593.116108] p9_client_create+0xaee/0x1230 [ 1593.116133] ? p9_client_flush+0x430/0x430 [ 1593.116153] ? trace_hardirqs_on+0x5b/0x180 [ 1593.116179] ? lockdep_init_map_type+0x2c7/0x780 [ 1593.116199] ? __raw_spin_lock_init+0x36/0x110 [ 1593.116222] v9fs_session_init+0x1dd/0x1680 [ 1593.116250] ? kmem_cache_alloc_trace+0x151/0x320 [ 1593.116267] ? v9fs_show_options+0x690/0x690 [ 1593.116292] ? trace_hardirqs_on+0x5b/0x180 [ 1593.116310] ? kasan_unpoison_shadow+0x33/0x50 [ 1593.116325] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1593.116354] v9fs_mount+0x79/0x8f0 [ 1593.144008] ? v9fs_write_inode+0x60/0x60 [ 1593.144847] legacy_get_tree+0x105/0x220 [ 1593.145669] vfs_get_tree+0x8e/0x300 [ 1593.146417] path_mount+0x1429/0x2120 [ 1593.147206] ? strncpy_from_user+0x9e/0x470 [ 1593.148078] ? finish_automount+0xa90/0xa90 [ 1593.148955] ? getname_flags.part.0+0x1dd/0x4f0 [ 1593.149907] ? _copy_from_user+0xfb/0x1b0 [ 1593.150766] __x64_sys_mount+0x282/0x300 [ 1593.151594] ? copy_mnt_ns+0xa00/0xa00 [ 1593.152395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1593.153479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1593.154530] do_syscall_64+0x33/0x40 [ 1593.155282] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1593.156336] RIP: 0033:0x7f5793fc9b19 [ 1593.157095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.160979] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1593.162877] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1593.164582] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1593.166350] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1593.168104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1593.169869] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:38:47 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2f800, &(0x7f0000000340)=[r0], 0x1) [ 1593.205592] SELinux: duplicate or incompatible mount options 03:38:47 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200280, 0xd1}, 0x18) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)={'ip6_vti0\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:38:47 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 03:38:47 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7a, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:38:47 executing program 0: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) 03:38:47 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1f, 0x20, 0xf7, 0xcb, 0x0, 0xfffffffffffeffff, 0x48800, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x50, 0x5ddb, 0x4, 0x67, 0x9e, 0x8000, 0x0, 0x85d, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:38:47 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 49) 03:38:47 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2, 0x20) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file1\x00') r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:38:47 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) [ 1593.460948] FAULT_INJECTION: forcing a failure. [ 1593.460948] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.463630] CPU: 0 PID: 12083 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1593.465234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.467185] Call Trace: [ 1593.467809] dump_stack+0x107/0x167 [ 1593.468663] should_fail.cold+0x5/0xa [ 1593.469565] ? create_object.isra.0+0x3a/0xa20 [ 1593.470635] should_failslab+0x5/0x20 [ 1593.471512] kmem_cache_alloc+0x5b/0x310 [ 1593.472455] create_object.isra.0+0x3a/0xa20 [ 1593.473477] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1593.474652] __kmalloc+0x16e/0x390 [ 1593.475481] p9pdu_readf+0xadb/0x1d40 [ 1593.476368] ? pipe_poll+0x21b/0x7f0 [ 1593.477239] ? p9pdu_writef+0x100/0x100 [ 1593.478159] ? wait_woken+0x250/0x250 [ 1593.479047] ? p9_fd_create+0x357/0x4a0 [ 1593.480020] ? p9_conn_create+0x510/0x510 [ 1593.480986] ? p9_client_create+0x798/0x1230 [ 1593.482027] ? kfree+0xd7/0x340 [ 1593.482841] p9_client_create+0xaee/0x1230 [ 1593.483824] ? p9_client_flush+0x430/0x430 [ 1593.484762] ? trace_hardirqs_on+0x5b/0x180 [ 1593.485752] ? lockdep_init_map_type+0x2c7/0x780 [ 1593.486841] ? __raw_spin_lock_init+0x36/0x110 [ 1593.487896] v9fs_session_init+0x1dd/0x1680 [ 1593.488897] ? lock_release+0x680/0x680 [ 1593.489822] ? kmem_cache_alloc_trace+0x151/0x320 [ 1593.490929] ? v9fs_show_options+0x690/0x690 [ 1593.491948] ? trace_hardirqs_on+0x5b/0x180 [ 1593.492949] ? kasan_unpoison_shadow+0x33/0x50 [ 1593.493997] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1593.495167] v9fs_mount+0x79/0x8f0 [ 1593.496057] ? v9fs_write_inode+0x60/0x60 [ 1593.497174] legacy_get_tree+0x105/0x220 [ 1593.498241] vfs_get_tree+0x8e/0x300 [ 1593.499217] path_mount+0x1429/0x2120 [ 1593.500222] ? strncpy_from_user+0x9e/0x470 [ 1593.501415] ? finish_automount+0xa90/0xa90 [ 1593.502578] ? getname_flags.part.0+0x1dd/0x4f0 [ 1593.503798] ? _copy_from_user+0xfb/0x1b0 [ 1593.504931] __x64_sys_mount+0x282/0x300 [ 1593.505995] ? copy_mnt_ns+0xa00/0xa00 [ 1593.507022] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1593.508392] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1593.509746] do_syscall_64+0x33/0x40 [ 1593.510714] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1593.512050] RIP: 0033:0x7f5793fc9b19 [ 1593.513022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.517807] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1593.519783] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1593.521645] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1593.523485] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1593.525332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1593.527168] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:39:02 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 50) 03:39:02 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x2) 03:39:02 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x200000) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/233) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r3], 0x3) 03:39:02 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:39:02 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_io_uring_setup(0x61be, &(0x7f0000000080)={0x0, 0x5355, 0x11, 0x0, 0xff, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:39:02 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0xb5, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e24, 0x0, 'lblcr\x00', 0x3e, 0x400, 0x2c}, 0x2c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="93ee39cc96146a5a59f13a14701e8cd160ae05de8ca1e617b53b8e936829f4c7b76c42d6d165ec9ca602dc518503d3a3a729fda7f1f44604dc34371fce06fa4be26ebd4de3a135c4944658267e1772987dc1b84b13f537988031c879e131cd9c6bf60bb652cc250d7576bd79144e", 0x6e}, {&(0x7f0000000140)="92cca59508645696c7b266ccd83308830636218902735b40675b744bb4e3b9263edca3c8965ac1bff4a81c395ff04ef94ef756d3327d3425600d2187c98f974a324dd54002b4a07928d2dd04fec51626ada9be6e29d4e5eb7e02bcbcadda188fa408acb56722bb881b9c2011460b2c2c8474593055df25c134", 0x79}, {&(0x7f0000000200)="af5ed7b9f2fcea2f885f72e472fa49ea87fb87631896b669b57a8b3a16bdf0242e2c5f9d90be601d961c6dad41b207ab089416c837a64657b144b00dc7582033631b4977258610be13d631a2da9222b61976ff3b621acbb104aaae9d7abd6e631884d2a83e22068475bec928ab2c2e63967df7a288ad4c993380a1b183b21017d3b1aa735fa5e6667beadc6f62e0c4", 0x8f}, {&(0x7f00000002c0)="a911f108adc021f6e2f1e21ff41350f60bd7850dfd432c8e03fbc2f6c9078c1e16c168284682a1f1e75df6d675dccbc584898c1b126c4a583570b86217c5368c1fe80402c3af9746ca19eedc6730f4", 0x4f}], 0x4, 0x6) 03:39:02 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1f1, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:39:02 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x10000, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$KDDISABIO(r0, 0x4b37) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x2881, 0x10a) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$TUNSETOFFLOAD(r1, 0x800454e0, 0x0) [ 1607.620823] FAULT_INJECTION: forcing a failure. [ 1607.620823] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.623081] CPU: 1 PID: 12190 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1607.624356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.625901] Call Trace: [ 1607.626391] dump_stack+0x107/0x167 [ 1607.627066] should_fail.cold+0x5/0xa [ 1607.627788] should_failslab+0x5/0x20 [ 1607.628492] __kmalloc_track_caller+0x79/0x370 [ 1607.629365] ? kasprintf+0xbb/0xf0 [ 1607.630026] ? __delete_object+0xb3/0x100 [ 1607.630790] kvasprintf+0xb5/0x150 [ 1607.631441] ? bust_spinlocks+0xe0/0xe0 [ 1607.632181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1607.633167] kasprintf+0xbb/0xf0 [ 1607.633806] ? kvasprintf_const+0x1a0/0x1a0 [ 1607.634600] ? kmem_cache_free+0x249/0x2d0 [ 1607.635391] ? p9_client_create+0xbfa/0x1230 [ 1607.636201] p9_client_create+0xc1b/0x1230 [ 1607.636987] ? p9_client_flush+0x430/0x430 [ 1607.637789] ? trace_hardirqs_on+0x5b/0x180 [ 1607.638582] ? lockdep_init_map_type+0x2c7/0x780 [ 1607.639451] ? __raw_spin_lock_init+0x36/0x110 [ 1607.640297] v9fs_session_init+0x1dd/0x1680 [ 1607.641088] ? lock_release+0x680/0x680 [ 1607.641849] ? kmem_cache_alloc_trace+0x151/0x320 [ 1607.642748] ? v9fs_show_options+0x690/0x690 [ 1607.643573] ? trace_hardirqs_on+0x5b/0x180 [ 1607.644381] ? kasan_unpoison_shadow+0x33/0x50 [ 1607.645236] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1607.646205] v9fs_mount+0x79/0x8f0 [ 1607.646869] ? v9fs_write_inode+0x60/0x60 [ 1607.647645] legacy_get_tree+0x105/0x220 [ 1607.648403] vfs_get_tree+0x8e/0x300 [ 1607.649100] path_mount+0x1429/0x2120 [ 1607.649855] ? strncpy_from_user+0x9e/0x470 [ 1607.650657] ? finish_automount+0xa90/0xa90 [ 1607.651466] ? getname_flags.part.0+0x1dd/0x4f0 [ 1607.652332] ? _copy_from_user+0xfb/0x1b0 [ 1607.653111] __x64_sys_mount+0x282/0x300 [ 1607.653888] ? copy_mnt_ns+0xa00/0xa00 [ 1607.654624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1607.655606] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1607.656566] do_syscall_64+0x33/0x40 [ 1607.657257] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1607.658228] RIP: 0033:0x7f5793fc9b19 [ 1607.658922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.662397] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1607.663831] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1607.665171] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1607.666529] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1607.667832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1607.669139] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:39:02 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002880)={'macvlan1\x00'}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001400)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) clock_gettime(0x0, &(0x7f00000027c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/143, 0x8f}], 0x1, &(0x7f0000000200)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f00000028c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001540)=""/24, 0x18}], 0x1, &(0x7f00000015c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001600)=""/10, 0xa}, {&(0x7f0000001640)=""/255, 0xff}, {&(0x7f0000001740)=""/203, 0xcb}, {&(0x7f0000001840)=""/158, 0x9e}], 0x4, &(0x7f0000001940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000001a40)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/203, 0xcb}], 0x1, &(0x7f0000001c00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001c40)=""/100, 0x64}, {&(0x7f0000001cc0)=""/216, 0xd8}, {&(0x7f0000001dc0)=""/152, 0x98}, {&(0x7f0000001e80)=""/169, 0xa9}, {&(0x7f0000001f40)=""/92, 0x5c}, {&(0x7f0000001fc0)=""/150, 0x96}, {&(0x7f0000002080)=""/14, 0xffffff40}], 0x7, &(0x7f0000002140)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f00000021c0), 0x6e, &(0x7f0000002500)=[{&(0x7f0000002240)=""/78, 0x4e}, {&(0x7f00000022c0)=""/255, 0xff}, {&(0x7f00000023c0)=""/41, 0x29}, {&(0x7f0000002400)=""/246, 0xf6}], 0x4, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x7, 0x2103, &(0x7f0000002800)={r1, r2+10000000}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) fcntl$setsig(r3, 0xa, 0x2c) 03:39:02 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x3) 03:39:02 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:39:02 executing program 6: ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x7, 'syzkaller1\x00', {}, 0x446}) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) fcntl$addseals(0xffffffffffffffff, 0x409, 0xf) 03:39:02 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 51) 03:39:02 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r0, r0], 0x2) r2 = timerfd_create(0x2, 0x0) close(r2) 03:39:02 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:39:02 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x251, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1607.855605] FAULT_INJECTION: forcing a failure. [ 1607.855605] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.857975] CPU: 1 PID: 12311 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1607.859316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.860926] Call Trace: [ 1607.861473] dump_stack+0x107/0x167 [ 1607.862181] should_fail.cold+0x5/0xa [ 1607.862929] should_failslab+0x5/0x20 [ 1607.863676] __kmalloc_track_caller+0x79/0x370 [ 1607.864562] ? kasprintf+0xbb/0xf0 [ 1607.865248] ? __delete_object+0xb3/0x100 [ 1607.866081] kvasprintf+0xb5/0x150 [ 1607.866769] ? bust_spinlocks+0xe0/0xe0 [ 1607.867539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1607.868566] kasprintf+0xbb/0xf0 [ 1607.869229] ? kvasprintf_const+0x1a0/0x1a0 [ 1607.870091] ? kmem_cache_free+0x249/0x2d0 [ 1607.870917] ? p9_client_create+0xbfa/0x1230 [ 1607.871774] p9_client_create+0xc1b/0x1230 [ 1607.872603] ? p9_client_flush+0x430/0x430 [ 1607.873449] ? trace_hardirqs_on+0x5b/0x180 [ 1607.874284] ? lockdep_init_map_type+0x2c7/0x780 [ 1607.875209] ? __raw_spin_lock_init+0x36/0x110 [ 1607.876102] v9fs_session_init+0x1dd/0x1680 [ 1607.876941] ? lock_release+0x680/0x680 [ 1607.877747] ? kmem_cache_alloc_trace+0x151/0x320 [ 1607.878679] ? v9fs_show_options+0x690/0x690 [ 1607.879534] ? trace_hardirqs_on+0x5b/0x180 [ 1607.880368] ? kasan_unpoison_shadow+0x33/0x50 [ 1607.881251] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1607.882264] v9fs_mount+0x79/0x8f0 [ 1607.882956] ? v9fs_write_inode+0x60/0x60 [ 1607.883766] legacy_get_tree+0x105/0x220 [ 1607.884558] vfs_get_tree+0x8e/0x300 [ 1607.885277] path_mount+0x1429/0x2120 [ 1607.886043] ? strncpy_from_user+0x9e/0x470 [ 1607.886879] ? finish_automount+0xa90/0xa90 [ 1607.887715] ? getname_flags.part.0+0x1dd/0x4f0 [ 1607.888617] ? _copy_from_user+0xfb/0x1b0 [ 1607.889458] __x64_sys_mount+0x282/0x300 [ 1607.890245] ? copy_mnt_ns+0xa00/0xa00 [ 1607.891003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1607.892027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1607.893030] do_syscall_64+0x33/0x40 [ 1607.893765] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1607.894748] RIP: 0033:0x7f5793fc9b19 [ 1607.895463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.899022] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1607.900488] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1607.901886] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1607.903259] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1607.904634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1607.906026] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:39:02 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x14) 03:39:16 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) acct(&(0x7f0000000000)='./file0\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:39:16 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x8) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_to_team\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) 03:39:16 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 52) 03:39:16 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:39:16 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) 03:39:16 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:39:16 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x300) 03:39:16 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x10) 03:39:16 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:39:16 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1300) [ 1621.740582] FAULT_INJECTION: forcing a failure. [ 1621.740582] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.743756] CPU: 1 PID: 12445 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1621.745217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1621.746950] Call Trace: [ 1621.747510] dump_stack+0x107/0x167 [ 1621.748267] should_fail.cold+0x5/0xa [ 1621.749075] should_failslab+0x5/0x20 [ 1621.749885] __kmalloc_track_caller+0x79/0x370 [ 1621.750835] ? kstrdup_const+0x53/0x80 [ 1621.751650] ? kasprintf+0xbb/0xf0 [ 1621.752395] kstrdup+0x36/0x70 [ 1621.753066] kstrdup_const+0x53/0x80 [ 1621.753847] kmem_cache_create_usercopy+0x12f/0x2f0 [ 1621.754891] p9_client_create+0xc6a/0x1230 [ 1621.755777] ? p9_client_flush+0x430/0x430 [ 1621.756658] ? trace_hardirqs_on+0x5b/0x180 [ 1621.757566] ? lockdep_init_map_type+0x2c7/0x780 [ 1621.758553] ? __raw_spin_lock_init+0x36/0x110 [ 1621.759507] v9fs_session_init+0x1dd/0x1680 [ 1621.760405] ? lock_release+0x680/0x680 [ 1621.761244] ? kmem_cache_alloc_trace+0x151/0x320 [ 1621.762258] ? v9fs_show_options+0x690/0x690 [ 1621.763172] ? trace_hardirqs_on+0x5b/0x180 [ 1621.764073] ? kasan_unpoison_shadow+0x33/0x50 [ 1621.765017] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1621.766079] v9fs_mount+0x79/0x8f0 [ 1621.766822] ? v9fs_write_inode+0x60/0x60 [ 1621.767679] legacy_get_tree+0x105/0x220 [ 1621.768525] vfs_get_tree+0x8e/0x300 [ 1621.769295] path_mount+0x1429/0x2120 [ 1621.770097] ? strncpy_from_user+0x9e/0x470 [ 1621.770979] ? finish_automount+0xa90/0xa90 [ 1621.771867] ? getname_flags.part.0+0x1dd/0x4f0 [ 1621.772836] ? _copy_from_user+0xfb/0x1b0 [ 1621.773699] __x64_sys_mount+0x282/0x300 [ 1621.774541] ? copy_mnt_ns+0xa00/0xa00 [ 1621.775347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1621.776432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1621.777504] do_syscall_64+0x33/0x40 [ 1621.778277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1621.779356] RIP: 0033:0x7f5793fc9b19 03:39:16 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1400) [ 1621.780132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.784225] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1621.785879] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1621.787420] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1621.788958] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1621.790505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1621.792041] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 [ 1621.794456] kmem_cache_create(9p-fcall-cache-192) failed with error -12 [ 1621.796025] CPU: 1 PID: 12445 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1621.797519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1621.799321] Call Trace: [ 1621.799886] dump_stack+0x107/0x167 [ 1621.800676] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1621.801814] p9_client_create+0xc6a/0x1230 [ 1621.802743] ? p9_client_flush+0x430/0x430 [ 1621.803655] ? trace_hardirqs_on+0x5b/0x180 [ 1621.804591] ? lockdep_init_map_type+0x2c7/0x780 [ 1621.805613] ? __raw_spin_lock_init+0x36/0x110 [ 1621.806614] v9fs_session_init+0x1dd/0x1680 [ 1621.807545] ? lock_release+0x680/0x680 [ 1621.808412] ? kmem_cache_alloc_trace+0x151/0x320 [ 1621.809455] ? v9fs_show_options+0x690/0x690 [ 1621.810423] ? trace_hardirqs_on+0x5b/0x180 [ 1621.811353] ? kasan_unpoison_shadow+0x33/0x50 [ 1621.812340] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1621.813438] v9fs_mount+0x79/0x8f0 [ 1621.814216] ? v9fs_write_inode+0x60/0x60 [ 1621.815108] legacy_get_tree+0x105/0x220 [ 1621.815983] vfs_get_tree+0x8e/0x300 [ 1621.816783] path_mount+0x1429/0x2120 [ 1621.817606] ? strncpy_from_user+0x9e/0x470 [ 1621.818642] ? finish_automount+0xa90/0xa90 [ 1621.819574] ? getname_flags.part.0+0x1dd/0x4f0 [ 1621.820571] ? _copy_from_user+0xfb/0x1b0 [ 1621.821469] __x64_sys_mount+0x282/0x300 [ 1621.822346] ? copy_mnt_ns+0xa00/0xa00 [ 1621.823187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1621.824312] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1621.825420] do_syscall_64+0x33/0x40 [ 1621.826247] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1621.827352] RIP: 0033:0x7f5793fc9b19 03:39:16 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x10000, 0x2, 0x94e}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1621.828152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.832325] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1621.833977] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1621.835513] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1621.837047] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1621.838589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1621.840124] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:39:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x4a8500, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) 03:39:16 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:39:28 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 53) 03:39:28 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x4000) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x247}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:39:28 executing program 1: r0 = gettid() pidfd_open(r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x20040) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x7c, 0x2, 0x2, 0x4b, 0x0, 0x52, 0x8400, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3, @perf_bp={&(0x7f0000000040), 0x1}, 0x1000, 0x1, 0x8, 0x7, 0xfffffffffffffffa, 0xfffffe01, 0xffc0, 0x0, 0x2, 0x0, 0x3}, r0, 0xe, r1, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r2, 0x800454e1, 0x0) [ 1634.286919] FAULT_INJECTION: forcing a failure. [ 1634.286919] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.289657] CPU: 0 PID: 12578 Comm: syz-executor.4 Not tainted 5.10.230 #1 03:39:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)={0x0, 0xfffffffffffff473, 0x6, 0x7f, 0x7, [{0x4, 0x2, 0x3, '\x00', 0x2080}, {0x2, 0x600000000, 0x0, '\x00', 0xb573f68f8cfab379}, {0x7, 0x6, 0x3ff, '\x00', 0x2000}, {0xa99, 0x3, 0xffff, '\x00', 0x102}, {0xad, 0x0, 0x20, '\x00', 0x2806}, {0x4, 0x1, 0x8, '\x00', 0x2000}, {0x8, 0x8, 0xff, '\x00', 0x2c00}]}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) 03:39:28 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = fsmount(r0, 0x1, 0x87) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000640)=""/249, 0xf9}], 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:39:28 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x362, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:39:28 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:39:28 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x8) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340)=[r2, 0xffffffffffffffff, r1], 0x3) [ 1634.291481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1634.293449] Call Trace: [ 1634.294070] dump_stack+0x107/0x167 [ 1634.294944] should_fail.cold+0x5/0xa [ 1634.295845] ? create_object.isra.0+0x3a/0xa20 [ 1634.296916] should_failslab+0x5/0x20 [ 1634.297834] kmem_cache_alloc+0x5b/0x310 [ 1634.298804] create_object.isra.0+0x3a/0xa20 [ 1634.299849] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1634.301058] __kmalloc_track_caller+0x177/0x370 [ 1634.302172] ? kstrdup_const+0x53/0x80 [ 1634.303120] kstrdup+0x36/0x70 [ 1634.303874] kstrdup_const+0x53/0x80 [ 1634.304761] kmem_cache_create_usercopy+0x12f/0x2f0 [ 1634.305940] p9_client_create+0xc6a/0x1230 [ 1634.306977] ? p9_client_flush+0x430/0x430 [ 1634.307984] ? trace_hardirqs_on+0x5b/0x180 [ 1634.309003] ? lockdep_init_map_type+0x2c7/0x780 [ 1634.310124] ? __raw_spin_lock_init+0x36/0x110 [ 1634.311244] v9fs_session_init+0x1dd/0x1680 [ 1634.312286] ? lock_release+0x680/0x680 [ 1634.313256] ? kmem_cache_alloc_trace+0x151/0x320 [ 1634.314408] ? v9fs_show_options+0x690/0x690 [ 1634.315454] ? trace_hardirqs_on+0x5b/0x180 [ 1634.316478] ? kasan_unpoison_shadow+0x33/0x50 [ 1634.317573] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1634.318795] v9fs_mount+0x79/0x8f0 [ 1634.319640] ? v9fs_write_inode+0x60/0x60 [ 1634.320627] legacy_get_tree+0x105/0x220 [ 1634.321595] vfs_get_tree+0x8e/0x300 [ 1634.322477] path_mount+0x1429/0x2120 [ 1634.323380] ? strncpy_from_user+0x9e/0x470 [ 1634.324406] ? finish_automount+0xa90/0xa90 [ 1634.325418] ? getname_flags.part.0+0x1dd/0x4f0 [ 1634.326524] ? _copy_from_user+0xfb/0x1b0 [ 1634.327515] __x64_sys_mount+0x282/0x300 [ 1634.328473] ? copy_mnt_ns+0xa00/0xa00 [ 1634.329407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1634.330655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1634.331879] do_syscall_64+0x33/0x40 [ 1634.332757] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1634.333988] RIP: 0033:0x7f5793fc9b19 [ 1634.334891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1634.339250] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1634.341045] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1634.342760] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1634.344452] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1634.346135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1634.348163] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:39:28 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3e0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:39:28 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000100)=0x1ff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000040)=0x5, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x95, 0x0, 0xff, "35ebeef0dcd84fe0f2edc513c1392f7b", "40c490b02056db7f6d8fff15b59ce95996109f467727d451d74df2b09df7613ea77c3f0da8371d62b372220579fb972f7057f52f567c7f8c0b2a9546e652a710053f9cd9f4f2980294414c06570b32b77babb5f204f05796954e2960567c14fae289e72f33fe72ddc01ea42ba133445e00b442c1a59dc95f710b933a35be9603"}, 0x95, 0x3) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0], 0x1) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)=""/170, 0xaa) 03:39:28 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:39:28 executing program 6: keyctl$link(0x8, 0x0, 0xfffffffffffffffd) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4c, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:39:28 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0/file0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0), 0x0) r2 = getpid() perf_event_open(0xffffffffffffffff, r2, 0x6, r0, 0x8) 03:39:28 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0x2, "7e00000000000000e700c899140300", 0x7}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:39:28 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 54) 03:39:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x305780, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) 03:39:28 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:39:28 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x8) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000380)='net/mcfilter\x00') sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20400000fdb4e461f6fc1056074d73df3185fef147d5ff9daf6e16bc2e6af9a7d139108595eaea36d42d441ed505e4bf715c238c4b0b4a630476fea2232c5f44a30787091b6c6efe9f0771f1240cb8fcb75f0f", @ANYRES16=0x0, @ANYBLOB="000829bd7000ffdbdf256b0000000a001a000802110000010000"], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x40001) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[r0], 0x1) [ 1634.532638] FAULT_INJECTION: forcing a failure. [ 1634.532638] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.534058] CPU: 1 PID: 12827 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1634.534879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1634.535835] Call Trace: [ 1634.536144] dump_stack+0x107/0x167 [ 1634.536566] should_fail.cold+0x5/0xa [ 1634.537008] ? create_object.isra.0+0x3a/0xa20 [ 1634.537536] should_failslab+0x5/0x20 [ 1634.537978] kmem_cache_alloc+0x5b/0x310 [ 1634.538464] create_object.isra.0+0x3a/0xa20 [ 1634.538968] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1634.539554] kmem_cache_alloc+0x159/0x310 [ 1634.540036] kmem_cache_create_usercopy+0x190/0x2f0 [ 1634.540617] p9_client_create+0xc6a/0x1230 [ 1634.541108] ? p9_client_flush+0x430/0x430 [ 1634.541599] ? trace_hardirqs_on+0x5b/0x180 [ 1634.542103] ? lockdep_init_map_type+0x2c7/0x780 [ 1634.542702] ? __raw_spin_lock_init+0x36/0x110 [ 1634.543237] v9fs_session_init+0x1dd/0x1680 [ 1634.543730] ? lock_release+0x680/0x680 [ 1634.544191] ? kmem_cache_alloc_trace+0x151/0x320 [ 1634.544743] ? v9fs_show_options+0x690/0x690 [ 1634.545256] ? trace_hardirqs_on+0x5b/0x180 [ 1634.545752] ? kasan_unpoison_shadow+0x33/0x50 [ 1634.546276] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1634.546885] v9fs_mount+0x79/0x8f0 [ 1634.547297] ? v9fs_write_inode+0x60/0x60 [ 1634.547781] legacy_get_tree+0x105/0x220 [ 1634.548249] vfs_get_tree+0x8e/0x300 [ 1634.548674] path_mount+0x1429/0x2120 [ 1634.549116] ? strncpy_from_user+0x9e/0x470 [ 1634.549611] ? finish_automount+0xa90/0xa90 [ 1634.550112] ? getname_flags.part.0+0x1dd/0x4f0 [ 1634.550667] ? _copy_from_user+0xfb/0x1b0 [ 1634.551145] __x64_sys_mount+0x282/0x300 [ 1634.551611] ? copy_mnt_ns+0xa00/0xa00 [ 1634.552062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1634.552663] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1634.553261] do_syscall_64+0x33/0x40 [ 1634.553691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1634.554282] RIP: 0033:0x7f5793fc9b19 [ 1634.554727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1634.556858] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1634.557733] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1634.558574] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1634.559391] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1634.560210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1634.561027] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:39:29 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r3, 0x7002) sendto$unix(r3, &(0x7f0000000080)="59af50ab80258b005345d1e430c256448c411f6338c9", 0x16, 0x10, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 03:39:29 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3ea, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:39:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8a200, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'tunl0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) sendfile(r2, r0, &(0x7f0000000100)=0x800, 0x8) 03:39:29 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x20004d4f, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:39:29 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000002c0)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x800454e1, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="d3df04ce73c0f136899f32ab357e5eab06a23a59f0f57589aeba6ff6ba0faff48394b978a997465646d309289797f6589da051e218aea95bedac21c9a6256264e3cd521ed8dfb497ccba743807d95175cc1a71f7fb221770c1b7c1f39f6a94a3b02eb26c7d5c83a78c64256fe5b8196b4aa4d9650faa25160a090d994396f389ffd3055db5fffdcf7a5e9a658003de9bd69014ac294d918d9f587d22aa6505", 0x9f, 0x5}], 0x1002, &(0x7f0000000200)={[{@nonumtail}, {@rodir}, {@nonumtail}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_role={'subj_role', 0x3d, '$\'{#&)#'}}]}) flock(r2, 0x4) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r3, 0x7002) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000280)={0x8502, 0x6, 0x2, 0x8, 0x6, "cd5ad94fe5b689f49a2e17443e727dd6a596a6"}) 03:39:29 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:39:29 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x3, 0x6, "77004a6efdff000000000800260001000100dd", 0x602a8ddd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20083, 0x0) socket$inet(0x2, 0x0, 0x9) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x16f5, &(0x7f0000000100)={0x0, 0x8bb2, 0x20, 0x1, 0x148, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000240)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}}, 0xdd1) 03:39:40 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = fsmount(0xffffffffffffffff, 0x1, 0xf0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1c7e, 0x4, 0x0, 0x48}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000340)=[r3], 0x1) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) close(r5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0xdc, r2, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xb4, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd09}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3d1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x47}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80010}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3dd000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5d}]}, 0xdc}, 0x1, 0x0, 0x0, 0x90}, 0x0) 03:39:40 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ac9, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r3], 0x3) 03:39:40 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:39:40 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 55) 03:39:40 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000030000000700000000000000bb080000000000002e080000000000008100000000000000000000000000000000000000000000000000000000000000d90000000008000001000000000000007f0000000000000007000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002500"/704]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:39:40 executing program 1: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, "77004a07fdff0000210008002600"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x800454e1, 0x0) 03:39:40 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x10040) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_vlan\x00'}) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r2}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r2}}, 0x2) 03:39:40 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) [ 1646.441837] FAULT_INJECTION: forcing a failure. [ 1646.441837] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.443257] CPU: 1 PID: 12985 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1646.444041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.444972] Call Trace: [ 1646.445279] dump_stack+0x107/0x167 [ 1646.445700] should_fail.cold+0x5/0xa [ 1646.446131] ? __kmem_cache_create+0x10e/0x520 [ 1646.446664] should_failslab+0x5/0x20 [ 1646.447111] kmem_cache_alloc_node+0x55/0x330 [ 1646.447616] __kmem_cache_create+0x10e/0x520 [ 1646.448113] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1646.448679] p9_client_create+0xc6a/0x1230 [ 1646.449155] ? p9_client_flush+0x430/0x430 [ 1646.449631] ? trace_hardirqs_on+0x5b/0x180 [ 1646.450113] ? lockdep_init_map_type+0x2c7/0x780 [ 1646.450644] ? __raw_spin_lock_init+0x36/0x110 [ 1646.451187] v9fs_session_init+0x1dd/0x1680 [ 1646.451666] ? lock_release+0x680/0x680 [ 1646.452124] ? kmem_cache_alloc_trace+0x151/0x320 [ 1646.452660] ? v9fs_show_options+0x690/0x690 [ 1646.453157] ? trace_hardirqs_on+0x5b/0x180 [ 1646.453639] ? kasan_unpoison_shadow+0x33/0x50 [ 1646.454149] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1646.454747] v9fs_mount+0x79/0x8f0 [ 1646.455167] ? v9fs_write_inode+0x60/0x60 [ 1646.455650] legacy_get_tree+0x105/0x220 [ 1646.456119] vfs_get_tree+0x8e/0x300 [ 1646.456548] path_mount+0x1429/0x2120 [ 1646.456986] ? strncpy_from_user+0x9e/0x470 [ 1646.457479] ? finish_automount+0xa90/0xa90 [ 1646.457976] ? getname_flags.part.0+0x1dd/0x4f0 [ 1646.458513] ? _copy_from_user+0xfb/0x1b0 [ 1646.459016] __x64_sys_mount+0x282/0x300 [ 1646.459482] ? copy_mnt_ns+0xa00/0xa00 [ 1646.459936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.460533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.461129] do_syscall_64+0x33/0x40 [ 1646.461554] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1646.462152] RIP: 0033:0x7f5793fc9b19 [ 1646.462580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.464725] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1646.465597] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1646.466416] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1646.467256] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1646.468079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1646.468890] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 [ 1646.469797] kmem_cache_create(9p-fcall-cache-195) failed with error -22 [ 1646.470577] CPU: 1 PID: 12985 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1646.471385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.472339] Call Trace: [ 1646.472637] dump_stack+0x107/0x167 [ 1646.473055] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1646.473652] p9_client_create+0xc6a/0x1230 [ 1646.474137] ? p9_client_flush+0x430/0x430 [ 1646.474616] ? trace_hardirqs_on+0x5b/0x180 [ 1646.475125] ? lockdep_init_map_type+0x2c7/0x780 [ 1646.475668] ? __raw_spin_lock_init+0x36/0x110 [ 1646.476195] v9fs_session_init+0x1dd/0x1680 [ 1646.476692] ? lock_release+0x680/0x680 [ 1646.477153] ? kmem_cache_alloc_trace+0x151/0x320 [ 1646.477708] ? v9fs_show_options+0x690/0x690 [ 1646.478218] ? trace_hardirqs_on+0x5b/0x180 [ 1646.478711] ? kasan_unpoison_shadow+0x33/0x50 [ 1646.479251] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1646.479834] v9fs_mount+0x79/0x8f0 [ 1646.480242] ? v9fs_write_inode+0x60/0x60 [ 1646.480716] legacy_get_tree+0x105/0x220 [ 1646.481182] vfs_get_tree+0x8e/0x300 [ 1646.481606] path_mount+0x1429/0x2120 [ 1646.482044] ? strncpy_from_user+0x9e/0x470 [ 1646.482536] ? finish_automount+0xa90/0xa90 [ 1646.483045] ? getname_flags.part.0+0x1dd/0x4f0 [ 1646.483577] ? _copy_from_user+0xfb/0x1b0 [ 1646.484058] __x64_sys_mount+0x282/0x300 [ 1646.484524] ? copy_mnt_ns+0xa00/0xa00 [ 1646.484972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.485573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.486164] do_syscall_64+0x33/0x40 [ 1646.486592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1646.487200] RIP: 0033:0x7f5793fc9b19 [ 1646.487630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.489750] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1646.490623] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1646.491459] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1646.492278] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1646.493096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1646.493917] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:39:40 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:39:41 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:39:41 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x800454e1, 0x0) 03:39:41 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r0, 0x7002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x23c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x220, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe2, 0xb, "aeb555642e468a68d879a0712d4b200790f8853bade7e438467062c3fabcb8e83622ecdc90ff5da398618f707e4957e310498381349302c9075ddd87d3853c32d187f65580a87a2ab4b701430c4de609afcd64a7446fec4b886257dfba9ec7b14d46a44c0790ab5fecce255c2063dad482803047b37e0179e62ecccd01ba0e20b02ffecece4338f661166910d7a4b00a69d5ddc600e1f0274ef5862a5deda9e8d115c7d8c6648fdc0b7268d0c8cf711a28999446611e5c67ba3c2fab6f82eb5caad498523d8462cb79928369df204972a85fa2887cae31f62595546864bc"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x124, 0xe, 0x0, 0x1, [{0x2d, 0x0, "d115d41784fbef754532016c564c1b552ef5e3d529a21be00dc8f5aa1525c039bbafc04787cdec8425"}, {0x59, 0x0, "1cc4924b8fa87c401af9b80372b4e1f850f397bea33787718c94706ffae3e5ebaaf55f3e5284e2d2aa75e405dafd06eaf9efb96ee013a1ab29a04d97f75dd3196008e3f6f065e0c1b565c2da780427333a7c1cb687"}, {0x6a, 0x0, "f8fa31e4909b9363f2550e9b56b937434001c79a8a2f7244b186027985975483163c33b1b56a8cdcab84f001f3b7fb57b4247dd8811db085c27b8360e2b95139d6c05155b7f5ef20e1d3cd25626cb7476f71785b5c1a345338d99733e3cb55a1cf7d4b402089"}, {0x28, 0x0, "7e179c7bf5e50ac46ce2e9ff887052607e80a65512529dbde01601261def9cde2c94f589"}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x5c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc070022, {0x1, 0x5, 0x54, 0x400}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x3, 0x1, 0x0, {0xb546, 0x1, 0x0, 0x20, 0x0, 0x0, 0x1}, 0x400, 0x85, 0xe7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008011}, 0x24000840) getsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000100)=""/154, &(0x7f00000001c0)=0x9a) r7 = syz_io_uring_setup(0x4d4f, &(0x7f0000000500)={0x0, 0xa3c2, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) ioctl$RTC_ALM_SET(r8, 0x40247007, &(0x7f00000001c0)={0x34, 0x19, 0x10, 0xf, 0x2, 0x4, 0x1, 0xe8, 0x1}) ioctl$RTC_UIE_ON(r8, 0x7003) creat(&(0x7f00000002c0)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000340)=[r2], 0x1) 03:39:54 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@dstopts={0x4, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}, @jumbo]}, 0x18) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) 03:39:54 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) chmod(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0xc32, 0x1, 0x6}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:39:54 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x5}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8, 0x40000) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x800454e1, 0x0) 03:39:54 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYBLOB="080000000000000000000000000000000500000000000000", @ANYRES32=r3, @ANYBLOB="00000000ae00000000000000000000000000000000000000000000009ae6c8830c5c7aa246", @ANYRES32=r0, @ANYBLOB="000000000300"/28, @ANYRES32=r4, @ANYBLOB="000000000500"/28, @ANYRES32=r1, @ANYBLOB="00000002663200"/28, @ANYRES32=r5, @ANYBLOB="00000000943e00"/28]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r6 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) r7 = syz_io_uring_setup(0x184a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x262}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20402, 0x1) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r7], 0x3) syz_io_uring_setup(0xe5, &(0x7f0000000080)={0x0, 0xd5ba, 0x20, 0x2, 0x3a1, 0x0, r7}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:39:54 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:39:54 executing program 2: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) 03:39:54 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:39:54 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 56) [ 1660.564462] FAULT_INJECTION: forcing a failure. [ 1660.564462] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.567147] CPU: 0 PID: 13232 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1660.568715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1660.570575] Call Trace: [ 1660.571175] dump_stack+0x107/0x167 [ 1660.572005] should_fail.cold+0x5/0xa [ 1660.572868] ? create_object.isra.0+0x3a/0xa20 [ 1660.573905] should_failslab+0x5/0x20 [ 1660.574759] kmem_cache_alloc+0x5b/0x310 [ 1660.575679] create_object.isra.0+0x3a/0xa20 [ 1660.576655] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1660.577794] kmem_cache_alloc_node+0x169/0x330 [ 1660.578831] __kmem_cache_create+0x10e/0x520 [ 1660.579836] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1660.580965] p9_client_create+0xc6a/0x1230 [ 1660.581921] ? p9_client_flush+0x430/0x430 [ 1660.582871] ? trace_hardirqs_on+0x5b/0x180 [ 1660.583845] ? lockdep_init_map_type+0x2c7/0x780 [ 1660.584914] ? __raw_spin_lock_init+0x36/0x110 [ 1660.585939] v9fs_session_init+0x1dd/0x1680 [ 1660.586911] ? lock_release+0x680/0x680 [ 1660.587816] ? kmem_cache_alloc_trace+0x151/0x320 [ 1660.588893] ? v9fs_show_options+0x690/0x690 [ 1660.589885] ? trace_hardirqs_on+0x5b/0x180 [ 1660.590846] ? kasan_unpoison_shadow+0x33/0x50 [ 1660.591867] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1660.593004] v9fs_mount+0x79/0x8f0 [ 1660.593794] ? v9fs_write_inode+0x60/0x60 [ 1660.594723] legacy_get_tree+0x105/0x220 [ 1660.595640] vfs_get_tree+0x8e/0x300 [ 1660.596470] path_mount+0x1429/0x2120 [ 1660.597337] ? strncpy_from_user+0x9e/0x470 [ 1660.598305] ? finish_automount+0xa90/0xa90 [ 1660.599275] ? getname_flags.part.0+0x1dd/0x4f0 [ 1660.600319] ? _copy_from_user+0xfb/0x1b0 [ 1660.601258] __x64_sys_mount+0x282/0x300 [ 1660.602170] ? copy_mnt_ns+0xa00/0xa00 [ 1660.603041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1660.604221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1660.605371] do_syscall_64+0x33/0x40 [ 1660.606199] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1660.607356] RIP: 0033:0x7f5793fc9b19 [ 1660.608185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1660.612310] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1660.614012] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1660.615614] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1660.617212] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1660.618811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1660.620423] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:39:55 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x400000, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:39:55 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x7fffffff, 0x3) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:40:08 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 57) 03:40:08 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:40:08 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:40:08 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:40:08 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x7, 0x15408000, &(0x7f0000000200)=""/4096, 0x1000, 0x2, 0x1}, 0xfa) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:40:08 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 03:40:08 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 03:40:08 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) 03:40:08 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) [ 1674.167085] FAULT_INJECTION: forcing a failure. [ 1674.167085] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.170200] CPU: 0 PID: 13357 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1674.171768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.173629] Call Trace: [ 1674.174225] dump_stack+0x107/0x167 [ 1674.175048] should_fail.cold+0x5/0xa [ 1674.175918] ? create_object.isra.0+0x3a/0xa20 [ 1674.176946] should_failslab+0x5/0x20 [ 1674.177797] kmem_cache_alloc+0x5b/0x310 [ 1674.178716] create_object.isra.0+0x3a/0xa20 [ 1674.179721] kmemleak_alloc_percpu+0xa0/0x100 [ 1674.180734] pcpu_alloc+0x4e2/0x1240 [ 1674.181588] __kmem_cache_create+0x35a/0x520 [ 1674.182578] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1674.183710] p9_client_create+0xc6a/0x1230 [ 1674.184681] ? p9_client_flush+0x430/0x430 [ 1674.185631] ? trace_hardirqs_on+0x5b/0x180 [ 1674.186602] ? lockdep_init_map_type+0x2c7/0x780 [ 1674.187665] ? __raw_spin_lock_init+0x36/0x110 [ 1674.188703] v9fs_session_init+0x1dd/0x1680 [ 1674.189667] ? lock_release+0x680/0x680 [ 1674.190564] ? kmem_cache_alloc_trace+0x151/0x320 [ 1674.191644] ? v9fs_show_options+0x690/0x690 [ 1674.192645] ? trace_hardirqs_on+0x5b/0x180 [ 1674.193617] ? kasan_unpoison_shadow+0x33/0x50 [ 1674.194633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1674.195794] v9fs_mount+0x79/0x8f0 [ 1674.196592] ? v9fs_write_inode+0x60/0x60 [ 1674.197527] legacy_get_tree+0x105/0x220 [ 1674.198440] vfs_get_tree+0x8e/0x300 [ 1674.199274] path_mount+0x1429/0x2120 [ 1674.200142] ? strncpy_from_user+0x9e/0x470 [ 1674.201106] ? finish_automount+0xa90/0xa90 [ 1674.202070] ? getname_flags.part.0+0x1dd/0x4f0 [ 1674.203111] ? _copy_from_user+0xfb/0x1b0 [ 1674.204060] __x64_sys_mount+0x282/0x300 [ 1674.204967] ? copy_mnt_ns+0xa00/0xa00 [ 1674.205839] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.207012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1674.208170] do_syscall_64+0x33/0x40 [ 1674.209007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.210166] RIP: 0033:0x7f5793fc9b19 [ 1674.210999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.215130] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1674.216867] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 03:40:08 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x40, 0xca) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) [ 1674.218502] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1674.220283] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1674.221879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.223490] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:40:08 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:40:08 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d51, &(0x7f0000000240)={0x0, 0x99a3, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:40:08 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:40:08 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x180) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)=0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r3, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r1, 0x100000000, &(0x7f0000000080)="db18264fce29b9b1d899c8b8ad308eedc5f317c5b34bc39fa2712510aa33e7846d1753cfeba15c29d60cb7ed0ed2fb89158bd84feda4f98a6c75d2175f7f3d45a9921f74bed310083d42360c1dc4f8d83b5c41aef036ce034c795c9fa61b", 0x5e, 0x0, 0x1}, 0xea1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:40:08 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x320) 03:40:08 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) [ 1690.471906] FAULT_INJECTION: forcing a failure. [ 1690.471906] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.474530] CPU: 0 PID: 13611 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1690.476079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1690.477957] Call Trace: [ 1690.478550] dump_stack+0x107/0x167 [ 1690.479371] should_fail.cold+0x5/0xa [ 1690.480230] ? __kmem_cache_create+0x10e/0x520 [ 1690.481261] should_failslab+0x5/0x20 [ 1690.482112] kmem_cache_alloc_node+0x55/0x330 [ 1690.483125] __kmem_cache_create+0x10e/0x520 [ 1690.484116] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1690.485252] p9_client_create+0xc6a/0x1230 [ 1690.486212] ? p9_client_flush+0x430/0x430 [ 1690.487166] ? trace_hardirqs_on+0x5b/0x180 [ 1690.488173] ? lockdep_init_map_type+0x2c7/0x780 [ 1690.489243] ? __raw_spin_lock_init+0x36/0x110 [ 1690.490271] v9fs_session_init+0x1dd/0x1680 [ 1690.491238] ? lock_release+0x680/0x680 [ 1690.492138] ? kmem_cache_alloc_trace+0x151/0x320 [ 1690.493225] ? v9fs_show_options+0x690/0x690 [ 1690.494219] ? trace_hardirqs_on+0x5b/0x180 [ 1690.495186] ? kasan_unpoison_shadow+0x33/0x50 [ 1690.496214] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1690.497364] v9fs_mount+0x79/0x8f0 [ 1690.498164] ? v9fs_write_inode+0x60/0x60 [ 1690.499095] legacy_get_tree+0x105/0x220 [ 1690.500008] vfs_get_tree+0x8e/0x300 [ 1690.500846] path_mount+0x1429/0x2120 [ 1690.501938] ? strncpy_from_user+0x9e/0x470 [ 1690.502906] ? finish_automount+0xa90/0xa90 [ 1690.503871] ? getname_flags.part.0+0x1dd/0x4f0 [ 1690.504917] ? _copy_from_user+0xfb/0x1b0 [ 1690.505849] __x64_sys_mount+0x282/0x300 [ 1690.506755] ? copy_mnt_ns+0xa00/0xa00 [ 1690.507628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1690.508811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1690.509969] do_syscall_64+0x33/0x40 [ 1690.510802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1690.511953] RIP: 0033:0x7f5793fc9b19 [ 1690.512791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.516911] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1690.518590] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1690.520185] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1690.521789] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1690.523386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1690.524989] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 [ 1690.527961] kmem_cache_create(9p-fcall-cache-198) failed with error -22 03:40:24 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x3, 0x20, 0x10000, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r3 = syz_io_uring_setup(0x4d50, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x1c12c1, 0x1a8, 0x13}, 0x18) fsetxattr$security_ima(r4, &(0x7f0000000140), &(0x7f0000000380)=@v2={0x6, 0x3, 0x0, 0x1, 0xf2, "de61c18ac5d3f8cf90258f0a0b145255ca50f7f3875d15b2c211cc6279e09653ca4bd11d4f3adb9be1cb1c1e8f28f8ef04bcc7d8e9a7b75cd3b37e984a0ec86e70b3cc5811f22b86d68ebc4341806f17d5237ca558441f98daafd92a72472040e0a5f10b756cd45b74b3247eb2a65a507500eba2c583d1b7cafcf81ed92ba3c0290453c8de435bb0cbf775e72bb774fdd16b6fe1733f5d6bce6539461cec475b60e24e8551a49354959c6180ae62831a98e03add1721a83cf7d9a28b890bd2fbe06285bb7fe5b79615470bf42b0928da1579946c1cb6ffc35a8cf06cb349aec46dd36feac937af74b5a4765176c88cadc800"}, 0xfb, 0x1) openat(r4, &(0x7f0000000000)='./file0\x00', 0x800, 0x4c) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r3], 0x3) 03:40:24 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:40:24 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x101, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:40:24 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:40:24 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:40:24 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0xc, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x1c12c1, 0x1a8, 0x13}, 0x18) fsetxattr$security_ima(r8, &(0x7f0000000140), &(0x7f0000000380)=@v2={0x6, 0x3, 0x0, 0x1, 0xf2, "de61c18ac5d3f8cf90258f0a0b145255ca50f7f3875d15b2c211cc6279e09653ca4bd11d4f3adb9be1cb1c1e8f28f8ef04bcc7d8e9a7b75cd3b37e984a0ec86e70b3cc5811f22b86d68ebc4341806f17d5237ca558441f98daafd92a72472040e0a5f10b756cd45b74b3247eb2a65a507500eba2c583d1b7cafcf81ed92ba3c0290453c8de435bb0cbf775e72bb774fdd16b6fe1733f5d6bce6539461cec475b60e24e8551a49354959c6180ae62831a98e03add1721a83cf7d9a28b890bd2fbe06285bb7fe5b79615470bf42b0928da1579946c1cb6ffc35a8cf06cb349aec46dd36feac937af74b5a4765176c88cadc800"}, 0xfb, 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r8, &(0x7f00000002c0)={0x250840, 0x44, 0x6}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r9}}, 0x8) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r10, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r7, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x3, &(0x7f0000000540)="6f8eb5de0afd7dae79c7e5ffeaa72ef7c5e8ad866033f76c22c786eb8fb1aa8c3ccac2655f50afd1ea2bd380c25fe6fdfc7b637db56be91f3612f42964b464d27de7b4f2280c69579a77cfca0c5761fc986783c3fc176bdf09d3f796fd1c107e35827dac43a30ee03915e25ac79cc463cd9385866c787f3c37270c638530385a0c9531cb78edc504882067c3759c4b0ffed651a5e8b466", 0x9, 0x0, 0x1, {0x2}}, 0x9) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f0000000300)=ANY=[], 0xc3, 0x0) fgetxattr(r2, &(0x7f00000004c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000500)=""/5, 0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x800a}}, './file0\x00'}) unlinkat(r11, &(0x7f00000000c0)='./file0\x00', 0x200) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0, r1, r1], 0x3) 03:40:24 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 58) 03:40:24 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x8001, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) [ 1690.530718] CPU: 0 PID: 13611 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1690.532281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1690.534144] Call Trace: [ 1690.534730] dump_stack+0x107/0x167 [ 1690.535543] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1690.536732] p9_client_create+0xc6a/0x1230 [ 1690.537686] ? p9_client_flush+0x430/0x430 [ 1690.538629] ? trace_hardirqs_on+0x5b/0x180 [ 1690.539592] ? lockdep_init_map_type+0x2c7/0x780 [ 1690.540658] ? __raw_spin_lock_init+0x36/0x110 [ 1690.541684] v9fs_session_init+0x1dd/0x1680 [ 1690.542645] ? lock_release+0x680/0x680 [ 1690.543540] ? kmem_cache_alloc_trace+0x151/0x320 [ 1690.544621] ? v9fs_show_options+0x690/0x690 [ 1690.545608] ? trace_hardirqs_on+0x5b/0x180 [ 1690.546586] ? kasan_unpoison_shadow+0x33/0x50 [ 1690.547606] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1690.548750] v9fs_mount+0x79/0x8f0 [ 1690.549543] ? v9fs_write_inode+0x60/0x60 [ 1690.550465] legacy_get_tree+0x105/0x220 [ 1690.551369] vfs_get_tree+0x8e/0x300 [ 1690.552197] path_mount+0x1429/0x2120 [ 1690.553059] ? strncpy_from_user+0x9e/0x470 [ 1690.554019] ? finish_automount+0xa90/0xa90 [ 1690.554979] ? getname_flags.part.0+0x1dd/0x4f0 [ 1690.556012] ? _copy_from_user+0xfb/0x1b0 [ 1690.556952] __x64_sys_mount+0x282/0x300 [ 1690.557855] ? copy_mnt_ns+0xa00/0xa00 [ 1690.558725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1690.559892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1690.561054] do_syscall_64+0x33/0x40 [ 1690.561883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1690.563022] RIP: 0033:0x7f5793fc9b19 [ 1690.563849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.567959] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1690.569662] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1690.571249] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1690.572848] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1690.574438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1690.576029] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:40:25 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:40:25 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 59) 03:40:25 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) io_uring_enter(r0, 0x7ff, 0xb63d, 0x2, &(0x7f0000000080)={[0x58a]}, 0x8) 03:40:25 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000440)=""/136, 0x88}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000380)=""/71, 0x47}, {&(0x7f00000001c0)=""/29, 0x1d}], 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="17b82849914ed7e1ccf2e686159895f627b35797ee915e6125c09a12109c4dfc5001cd3dc77ebb979136043324e52944136c1ca238", @ANYBLOB="08cdb4381a00b2ec94250007000100"/28, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x40000041) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) creat(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x7, 0x101, 0x0, 0xfff}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r2 = open_tree(r0, &(0x7f0000000640)='./file0\x00', 0x8000) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="40010000150008002abd7000fedbdf251d7f1b000100696e461f8c2250e909c3fdf14fb554bd0680b52f01dd320026000100a409bd55b20e6729b8dda0acbba5495a9832522edd679fd33b27dd7163bf9a07897c0000130001006c128e5160593ae60de5c4d95d6aac00d4000100ef4a68f93ce4f68bebac939d402be6bc245c9562bd9a7199f59efe77c69de55d04eb56ddea8503b11260791dbb49568dad810e8c3830443c3e29965deda7246e5f218a620bb1585dd63283ffd8e6b15f822a8d9b23dedfc71ce89c2d4214a554a192a38a7f4d0449e514fe41c62891fcf4f4bbe2e99aaf94a9515d1dd4e47759bf52b80def545b023556832f9e2457d28454a73c5c3037758cb079fde6f35acb17fb7f991512f724ce99c018fe953d4671ec560ab9d06875ea9ab34728dce76e2f8c4d13a502ab024f4abbdb8288c2cc0000b100aa16a572cf3607b55030f3"], 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) setreuid(0xffffffffffffffff, r3) mount$cgroup2(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x2002000, &(0x7f0000000a40)={[{@memory_localevents}], [{@fowner_lt={'fowner<', r3}}, {@appraise}, {@measure}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@fsname={'fsname', 0x3d, '%+('}}, {@pcr={'pcr', 0x3d, 0x3e}}]}) 03:40:25 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 03:40:25 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) get_robust_list(r0, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000080), 0x0, &(0x7f0000000200)={&(0x7f0000000180)}}, &(0x7f00000002c0)=0x18) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) creat(&(0x7f0000000300)='./file0\x00', 0x100) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r2, 0x800454e0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x1, 0x7, 0x1f, 0x0, 0xff, 0x10a2, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7fe00, 0x10000}, 0x2014, 0x8000, 0x3d3d, 0x4, 0x7, 0x3, 0x1cf8, 0x0, 0xfa, 0x0, 0x8}, r3, 0x3, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000340), &(0x7f0000000380)=@sha1={0x1, "451d33af9b06d7d4d51122d83f29fddeebe89405"}, 0x15, 0x2) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000040)={0x53d, 0x101}) 03:40:25 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:40:25 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 1690.814714] FAULT_INJECTION: forcing a failure. [ 1690.814714] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.817353] CPU: 0 PID: 13746 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1690.818914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1690.820780] Call Trace: [ 1690.821377] dump_stack+0x107/0x167 [ 1690.822195] should_fail.cold+0x5/0xa [ 1690.823056] ? create_object.isra.0+0x3a/0xa20 [ 1690.824088] should_failslab+0x5/0x20 [ 1690.824957] kmem_cache_alloc+0x5b/0x310 [ 1690.825875] ? mark_held_locks+0x9e/0xe0 [ 1690.826788] create_object.isra.0+0x3a/0xa20 [ 1690.827785] kmemleak_alloc_percpu+0xa0/0x100 [ 1690.828813] pcpu_alloc+0x4e2/0x1240 [ 1690.829671] __kmem_cache_create+0x35a/0x520 [ 1690.830668] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1690.831798] p9_client_create+0xc6a/0x1230 [ 1690.832763] ? p9_client_flush+0x430/0x430 [ 1690.833713] ? trace_hardirqs_on+0x5b/0x180 [ 1690.834703] ? lockdep_init_map_type+0x2c7/0x780 [ 1690.835767] ? __raw_spin_lock_init+0x36/0x110 [ 1690.836808] v9fs_session_init+0x1dd/0x1680 [ 1690.837780] ? lock_release+0x680/0x680 [ 1690.838681] ? kmem_cache_alloc_trace+0x151/0x320 [ 1690.839765] ? v9fs_show_options+0x690/0x690 [ 1690.840775] ? trace_hardirqs_on+0x5b/0x180 [ 1690.841742] ? kasan_unpoison_shadow+0x33/0x50 [ 1690.842761] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1690.843901] v9fs_mount+0x79/0x8f0 [ 1690.844725] ? v9fs_write_inode+0x60/0x60 [ 1690.845659] legacy_get_tree+0x105/0x220 [ 1690.846574] vfs_get_tree+0x8e/0x300 [ 1690.847411] path_mount+0x1429/0x2120 [ 1690.848270] ? strncpy_from_user+0x9e/0x470 [ 1690.849241] ? finish_automount+0xa90/0xa90 [ 1690.850207] ? getname_flags.part.0+0x1dd/0x4f0 [ 1690.851250] ? _copy_from_user+0xfb/0x1b0 [ 1690.852187] __x64_sys_mount+0x282/0x300 [ 1690.853106] ? copy_mnt_ns+0xa00/0xa00 [ 1690.853984] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1690.855162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1690.856346] do_syscall_64+0x33/0x40 [ 1690.857182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1690.858329] RIP: 0033:0x7f5793fc9b19 [ 1690.859160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.863292] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1690.865002] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1690.866597] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1690.868195] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1690.869806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1690.871405] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:40:25 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x1c12c1, 0x1a8, 0x13}, 0x18) fsetxattr$security_ima(r1, &(0x7f0000000140), &(0x7f0000000380)=@v2={0x6, 0x3, 0x0, 0x1, 0xf2, "de61c18ac5d3f8cf90258f0a0b145255ca50f7f3875d15b2c211cc6279e09653ca4bd11d4f3adb9be1cb1c1e8f28f8ef04bcc7d8e9a7b75cd3b37e984a0ec86e70b3cc5811f22b86d68ebc4341806f17d5237ca558441f98daafd92a72472040e0a5f10b756cd45b74b3247eb2a65a507500eba2c583d1b7cafcf81ed92ba3c0290453c8de435bb0cbf775e72bb774fdd16b6fe1733f5d6bce6539461cec475b60e24e8551a49354959c6180ae62831a98e03add1721a83cf7d9a28b890bd2fbe06285bb7fe5b79615470bf42b0928da1579946c1cb6ffc35a8cf06cb349aec46dd36feac937af74b5a4765176c88cadc800"}, 0xfb, 0x1) renameat(r1, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r2, 0x7002) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_AIE_ON(r3, 0x7001) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x9, @private1, 0x3ff}}, 0x0, 0x0, 0xf, 0x0, "7d8bbb55bb2699ac5dfd8de5666e7d4853a5ad6d9684b30d57943037828eae59650bf726925f957d1b84007032e5f4bfc5579b66faf9bea04c1da7690cbb88d69aca97ce6f8539d3d17f44da633350be"}, 0xd8) r4 = syz_io_uring_setup(0x84d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2c4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:40:38 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 60) 03:40:38 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r2], 0x3) 03:40:38 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000080)=0x2) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:40:38 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:40:38 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 03:40:38 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0xc0d8, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r2, r0], 0x2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = gettid() pidfd_open(r4, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x2, 0x4, 0xe78f, 0xe80, r4}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x305040, 0x0) copy_file_range(r1, &(0x7f0000000000)=0x5, r5, 0x0, 0x0, 0x0) 03:40:38 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:40:38 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x1, 0x0, 0x80, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000130001000000c7e1cfaac5ef8429da3f000000000000ffffffff000000000001000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b67221f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4901d5451f90d6cf4ec5a", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000001c00)) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="015e0000177d850225", @ANYBLOB="47ba592c2d9892a93caaf2b256c221253735ccc512b3a17fb3e629eb1e010000000000000010405e38508b"]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000093e907e1c00000000000000000000000000010000000000feffffff0000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffff"]) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xffe3) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000240)={0x5, {{0x2, 0x4e21, @empty}}}, 0x88) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) [ 1703.945579] FAULT_INJECTION: forcing a failure. [ 1703.945579] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.948873] CPU: 0 PID: 13882 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1703.950787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1703.953072] Call Trace: [ 1703.953799] dump_stack+0x107/0x167 [ 1703.954812] should_fail.cold+0x5/0xa [ 1703.955849] ? create_object.isra.0+0x3a/0xa20 [ 1703.957123] should_failslab+0x5/0x20 [ 1703.958166] kmem_cache_alloc+0x5b/0x310 [ 1703.959319] ? lock_downgrade+0x6d0/0x6d0 [ 1703.960450] create_object.isra.0+0x3a/0xa20 [ 1703.961695] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1703.963087] __kmalloc_track_caller+0x177/0x370 [ 1703.964334] ? kstrdup_const+0x53/0x80 [ 1703.965401] kstrdup+0x36/0x70 [ 1703.966277] kstrdup_const+0x53/0x80 [ 1703.967290] kvasprintf_const+0x10c/0x1a0 [ 1703.968400] kobject_set_name_vargs+0x56/0x150 [ 1703.969655] kobject_init_and_add+0xc9/0x160 [ 1703.970850] ? kobject_create_and_add+0xb0/0xb0 [ 1703.972106] ? wait_for_completion_io+0x270/0x270 [ 1703.973408] ? kernfs_name_hash+0xe7/0x110 [ 1703.974579] ? kernfs_find_ns+0x256/0x380 [ 1703.975703] sysfs_slab_add+0x172/0x200 [ 1703.976795] __kmem_cache_create+0x3db/0x520 [ 1703.977985] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1703.979341] p9_client_create+0xc6a/0x1230 [ 1703.980489] ? p9_client_flush+0x430/0x430 [ 1703.981641] ? trace_hardirqs_on+0x5b/0x180 [ 1703.982793] ? lockdep_init_map_type+0x2c7/0x780 [ 1703.984081] ? __raw_spin_lock_init+0x36/0x110 [ 1703.985326] v9fs_session_init+0x1dd/0x1680 [ 1703.986523] ? kmem_cache_alloc_trace+0x151/0x320 [ 1703.987810] ? v9fs_show_options+0x690/0x690 [ 1703.989025] ? trace_hardirqs_on+0x5b/0x180 [ 1703.990178] ? kasan_unpoison_shadow+0x33/0x50 [ 1703.991410] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1703.992815] v9fs_mount+0x79/0x8f0 [ 1703.993782] ? v9fs_write_inode+0x60/0x60 [ 1703.994891] legacy_get_tree+0x105/0x220 [ 1703.995989] vfs_get_tree+0x8e/0x300 [ 1703.997019] path_mount+0x1429/0x2120 [ 1703.998054] ? strncpy_from_user+0x9e/0x470 [ 1703.999208] ? finish_automount+0xa90/0xa90 [ 1704.000364] ? getname_flags.part.0+0x1dd/0x4f0 [ 1704.001631] ? _copy_from_user+0xfb/0x1b0 [ 1704.002735] __x64_sys_mount+0x282/0x300 [ 1704.003804] ? copy_mnt_ns+0xa00/0xa00 [ 1704.004865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1704.006242] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1704.007612] do_syscall_64+0x33/0x40 [ 1704.008617] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1704.009985] RIP: 0033:0x7f5793fc9b19 [ 1704.010967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1704.015870] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1704.017908] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1704.019791] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1704.021700] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1704.023588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1704.025498] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:40:38 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000600)='./file0\x00', 0x5cb840, 0x10) writev(r0, &(0x7f0000000640), 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1a0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000080)=@generic, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f00000002c0)=""/79, 0x4f}], 0x4, &(0x7f0000000380)=""/21, 0x15}, 0x40010000) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r1], 0x1) 03:40:38 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x34981, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:40:38 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x280090, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="742809009e4987b653a8b04c667b37b316a0a28e43dedeec99af191b5e6370d30300000000000000646e6d3d", @ANYRESHEX, @ANYBLOB=',version=9p2000.u,cache=none,dfltuid=', @ANYRESHEX, @ANYBLOB=',nodevmap,fscontext=staff_u,dont_appraise,audit,\x00']) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x290}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) lseek(r1, 0x35822be3, 0x4) 03:40:38 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 03:40:38 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:40:38 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) fchown(r0, r2, r3) 03:40:55 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x1000000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2002}) dup(r0) 03:40:55 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff17020071a400002e2f04c26c653100a8816e02ccbb6e4e7fd63e734a6edc00c158c73631e50364be8cdfb89a425167c54fa7566250e616b5e108b8ece4e2bcbc2ee518a8989b6c1492641dee6a23b6c2d277f0e80c73637f8c237ac2b712fb34798f160d17ff22db9fe1e1d94993da822c17f1620ec260605162815a62033010d356ee6ed500caa9da41f357763ab3cad91adc7d3558b93469fe25b2144be09d749606e65daacf7f6dde4fe3c6c67d3762b3c1e721fc1bfb6a238ff949e18f61baca42c55ba811713da58aa93cfa63095936477b1db5abcab2b22927019c413bfcc73ce431f9c294e3fa1e58ec555a90ca403627fdde4035bcd21fac115849b0987295800ce840f5ca6116f5697bf53fce6cab2a59d1a5dff877f7549ac7ec829d65b17221d0dc0cb8d89fe6aeed60fe648b590d7bb0076614a492"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:40:55 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setreuid(0xffffffffffffffff, r2) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) setreuid(0xffffffffffffffff, r3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000.u,access=', @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=r3, @ANYBLOB="00e5000000000000", @ANYRESDEC=r2, @ANYBLOB=',fsmagic=0x0000000000000a14,smackfsroot=:,\x00']) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r5 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, 0x4e23, 0x2, 0x4e22, 0x2aec, 0xa, 0x0, 0x20, 0x5e, 0x0, r5}, {0x1, 0xfffffffffffffff9, 0x2, 0x80, 0x401, 0x2, 0x6, 0x80000001}, {0x7, 0x5, 0x9, 0xc2d2}, 0x172, 0x6e6bb0, 0x2, 0x0, 0x3, 0x2}, {{@in6=@remote, 0x4d4, 0x3c}, 0x8, @in6=@rand_addr=' \x01\x00', 0x3502, 0x2, 0x3, 0x3f, 0x4, 0x1b1a, 0x32b}}, 0xe8) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:40:55 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008300b00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:40:55 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000100)=0x1ff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000040)=0x5, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x95, 0x0, 0xff, "35ebeef0dcd84fe0f2edc513c1392f7b", "40c490b02056db7f6d8fff15b59ce95996109f467727d451d74df2b09df7613ea77c3f0da8371d62b372220579fb972f7057f52f567c7f8c0b2a9546e652a710053f9cd9f4f2980294414c06570b32b77babb5f204f05796954e2960567c14fae289e72f33fe72ddc01ea42ba133445e00b442c1a59dc95f710b933a35be9603"}, 0x95, 0x3) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0], 0x1) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)=""/170, 0xaa) 03:40:55 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000140)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000440)="fa85a7e4c454c65d48e34089b56fd68087e539e8f1a2a891f348e36ba1d7b36d69e89041d68821072128ba22647b480800a54f8aff290a6145cd37a8d1c6bcfdc3a69c7ba1d59b375133b362b7f8c6d63e85645ac69e450c06d6b89a55a628852b70c62b7a2763c5c06ed4abf108a25a0198f232edd537ecad56c7bac0d7b250e286e35a562eeebefe99d7919b1fe02dab4b7ce843bc022aa5d427e3e343043d39bab722d4a21f557adb8d70", 0xac}, {&(0x7f00000002c0)="5c915035f2355b1b1c139233c223f87ab9d46503411472acdf213a63c386859f97218b74ee7bf49f47eee1ee1320025d8c84745648fb2615d65ccbdd5fd76622f7b7e2548dad7ddf501b325e1ce5348d27571086d1bdc61dc73e673b56c3cb896b815ebc16e29cefb76bdeb615f67014e2cc87cfb21f756895186e4f3587", 0x7e}, {&(0x7f0000000500)="2a36e351ab1a351a1a115dbbc76cd0318465b047c0e54eb8834e0599592615dbb13979a0c9145fd94436e1f0a43ce0be12d5629c4fb543dcf8296acdc3cca23938e2b2d49b44131d8ab782864953807eb1a445a4dcaa529eb764aa47ab878f4f49b5676651bd3a359391a74fad228948a2f00bb5f3688853e82df00f1554e49d35305cb5a36b3f89d4babc6a9bbcd1ac118518acfd78e3d7e07b559b8e4ad990bd2603203f42abfd52159392971aa37b34944758ba3d382f573c09781fae6501e4e671ea027414444a650650353accaab0676fd15f2d78d2a26e2e03b95d2be8e33da9c3ef1094a0437fa243e753a284f3d8822b0d9f1ee3f6f8202962da", 0xfe}, {&(0x7f00000001c0)="f6f6c1f4e44ec99d02459487713eddb016e1606d44a77db810a3433e700176f704", 0x21}], 0x4, &(0x7f0000000600)=[{0x1010, 0x104, 0xfff, "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"}], 0x1010}, 0x44051) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) perf_event_open(&(0x7f0000000080)={0xd4987f97154e978f, 0x80, 0x1, 0x4, 0x7, 0x3b, 0x0, 0x4, 0x180, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x80, 0x8001, 0x10, 0x6, 0x9, 0x5, 0x3ff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x2) openat(r0, &(0x7f0000000100)='./file0\x00', 0x80000, 0x11) 03:40:55 executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (fail_nth: 61) 03:40:55 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x901, 0x0) r2 = syz_io_uring_setup(0x5dbd, &(0x7f0000000080)={0x0, 0x2, 0x10, 0x1, 0x93, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r3], 0x3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb, 0x4010, r3, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r9}}, 0x6) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x9) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x4040, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r10, 0x7002) accept(r10, 0x0, &(0x7f0000000140)) [ 1720.873153] FAULT_INJECTION: forcing a failure. [ 1720.873153] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.875201] CPU: 1 PID: 14132 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1720.875237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1720.875242] Call Trace: [ 1720.875262] dump_stack+0x107/0x167 [ 1720.875277] should_fail.cold+0x5/0xa [ 1720.875306] should_failslab+0x5/0x20 [ 1720.880209] __kmalloc_track_caller+0x79/0x370 [ 1720.880904] ? kstrdup_const+0x53/0x80 [ 1720.881518] kstrdup+0x36/0x70 [ 1720.882007] kstrdup_const+0x53/0x80 [ 1720.882578] __kernfs_new_node+0x9d/0x860 [ 1720.883210] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1720.883928] ? lock_acquire+0x197/0x470 [ 1720.884526] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1720.885307] ? lock_release+0x680/0x680 [ 1720.885920] ? find_held_lock+0x2c/0x110 [ 1720.886543] kernfs_new_node+0x18d/0x250 [ 1720.887170] kernfs_create_dir_ns+0x49/0x160 [ 1720.887843] sysfs_create_dir_ns+0x127/0x290 [ 1720.888479] ? sysfs_create_mount_point+0xb0/0xb0 [ 1720.889167] ? rwlock_bug.part.0+0x90/0x90 [ 1720.889777] ? do_raw_spin_unlock+0x4f/0x220 [ 1720.890427] kobject_add_internal+0x25e/0xa30 [ 1720.891072] kobject_init_and_add+0x101/0x160 [ 1720.891732] ? kobject_create_and_add+0xb0/0xb0 [ 1720.892436] ? wait_for_completion_io+0x270/0x270 [ 1720.893150] ? kernfs_name_hash+0xe7/0x110 [ 1720.893798] ? kernfs_find_ns+0x256/0x380 [ 1720.894411] sysfs_slab_add+0x172/0x200 [ 1720.895005] __kmem_cache_create+0x3db/0x520 [ 1720.895676] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1720.896401] p9_client_create+0xc6a/0x1230 [ 1720.897028] ? p9_client_flush+0x430/0x430 [ 1720.897642] ? trace_hardirqs_on+0x5b/0x180 [ 1720.898300] ? lockdep_init_map_type+0x2c7/0x780 [ 1720.898976] ? __raw_spin_lock_init+0x36/0x110 [ 1720.899662] v9fs_session_init+0x1dd/0x1680 [ 1720.900304] ? lock_release+0x680/0x680 [ 1720.900910] ? kmem_cache_alloc_trace+0x151/0x320 [ 1720.901656] ? v9fs_show_options+0x690/0x690 [ 1720.902312] ? trace_hardirqs_on+0x5b/0x180 [ 1720.902967] ? kasan_unpoison_shadow+0x33/0x50 [ 1720.903673] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1720.904453] v9fs_mount+0x79/0x8f0 [ 1720.904963] ? v9fs_write_inode+0x60/0x60 [ 1720.905570] legacy_get_tree+0x105/0x220 [ 1720.906146] vfs_get_tree+0x8e/0x300 [ 1720.906699] path_mount+0x1429/0x2120 [ 1720.907247] ? strncpy_from_user+0x9e/0x470 [ 1720.907892] ? finish_automount+0xa90/0xa90 [ 1720.908530] ? getname_flags.part.0+0x1dd/0x4f0 [ 1720.909248] ? _copy_from_user+0xfb/0x1b0 [ 1720.909904] __x64_sys_mount+0x282/0x300 [ 1720.910530] ? copy_mnt_ns+0xa00/0xa00 [ 1720.911140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1720.911959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1720.912762] do_syscall_64+0x33/0x40 [ 1720.913336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1720.914120] RIP: 0033:0x7f5793fc9b19 [ 1720.914682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.917529] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1720.918691] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1720.919767] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1720.920852] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1720.921941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1720.923014] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 [ 1720.924728] kobject_add_internal failed for 9p-fcall-cache-201 (error: -12 parent: slab) [ 1720.926116] kmem_cache_create(9p-fcall-cache-201) failed with error -12 [ 1720.927168] CPU: 1 PID: 14132 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 1720.928214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1720.929464] Call Trace: [ 1720.929856] dump_stack+0x107/0x167 [ 1720.930407] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1720.931201] p9_client_create+0xc6a/0x1230 [ 1720.931835] ? p9_client_flush+0x430/0x430 [ 1720.932472] ? trace_hardirqs_on+0x5b/0x180 [ 1720.933113] ? lockdep_init_map_type+0x2c7/0x780 [ 1720.933831] ? __raw_spin_lock_init+0x36/0x110 [ 1720.934523] v9fs_session_init+0x1dd/0x1680 [ 1720.935165] ? lock_release+0x680/0x680 [ 1720.935767] ? kmem_cache_alloc_trace+0x151/0x320 [ 1720.936497] ? v9fs_show_options+0x690/0x690 [ 1720.937162] ? trace_hardirqs_on+0x5b/0x180 [ 1720.937814] ? kasan_unpoison_shadow+0x33/0x50 [ 1720.938491] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1720.939260] v9fs_mount+0x79/0x8f0 [ 1720.939796] ? v9fs_write_inode+0x60/0x60 [ 1720.940423] legacy_get_tree+0x105/0x220 [ 1720.941031] vfs_get_tree+0x8e/0x300 [ 1720.941598] path_mount+0x1429/0x2120 [ 1720.942167] ? strncpy_from_user+0x9e/0x470 [ 1720.942810] ? finish_automount+0xa90/0xa90 [ 1720.943452] ? getname_flags.part.0+0x1dd/0x4f0 [ 1720.944143] ? _copy_from_user+0xfb/0x1b0 [ 1720.944769] __x64_sys_mount+0x282/0x300 [ 1720.945377] ? copy_mnt_ns+0xa00/0xa00 [ 1720.945965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1720.946745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1720.947512] do_syscall_64+0x33/0x40 [ 1720.948065] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1720.948831] RIP: 0033:0x7f5793fc9b19 [ 1720.949392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.952126] RSP: 002b:00007f579153f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1720.953272] RAX: ffffffffffffffda RBX: 00007f57940dcf60 RCX: 00007f5793fc9b19 [ 1720.954349] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1720.955427] RBP: 00007f579153f1d0 R08: 0000000020000140 R09: 0000000000000000 [ 1720.956486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1720.957559] R13: 00007ffee35dabbf R14: 00007f579153f300 R15: 0000000000022000 03:40:55 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:40:55 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:40:55 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 03:40:55 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = eventfd(0x426) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0/file0', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, '$'}, {0x20, '#]$[\'{,)'}, {0x20, '*'}, {0x20, '[0+-$[(]\'[,${\x02\x1a'}, {0x20, '\\'}], 0xa, "80576786b5483d43b27f0df819d86eadee7841d1095ee4dad94ba1a6acd6f2a0c2660fc25adfa87cda0216e582c60f5f2bd85039b9b15b6566ee659c52161dfff0da6980745f02a5e9d8993d57bed481f727594c84c52db353c0268109e30c1f91585a9eb2f58d708e1a5ba59d3c7da60dc8292a"}, 0xa8) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) close_range(0xffffffffffffffff, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xceac3def8944e837, 0x4081010, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000340)=[r0], 0x1) 03:40:55 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3f, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2080, 0x10a) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffffe, 0x501000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x7, 0x7, 0x7, 0x0, 0x100000001, 0x44c0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x10001, 0x3}, 0x40008, 0x6, 0xff, 0x9, 0x56, 0x4814, 0x8, 0x0, 0x3afd4cf9, 0x0, 0x88}, 0x0, 0x4, r2, 0xa) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 03:40:55 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x8) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x131) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r3, 0x1ca8, 0xf7, 0x1, &(0x7f00000000c0)={[0x9000]}, 0x8) r4 = syz_io_uring_setup(0x4d50, &(0x7f0000000240)={0x0, 0x4, 0x2, 0x0, 0x60, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r4], 0x3) [ 1735.863913] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888008cb6a40 (size 32): comm "syz-executor.4", pid 14132, jiffies 4296387911 (age 22.220s) hex dump (first 32 bytes): 39 70 2d 66 63 61 6c 6c 2d 63 61 63 68 65 2d 32 9p-fcall-cache-2 30 31 00 08 80 88 ff ff 00 00 00 00 00 00 00 00 01.............. backtrace: [<00000000141ba483>] kstrdup+0x36/0x70 [<0000000052a2c0e9>] kstrdup_const+0x53/0x80 [<0000000011091657>] kvasprintf_const+0x10c/0x1a0 [<0000000075fb1a46>] kobject_set_name_vargs+0x56/0x150 [<00000000df7f2542>] kobject_init_and_add+0xc9/0x160 [<000000003fd9712c>] sysfs_slab_add+0x172/0x200 [<0000000039c4bcd6>] __kmem_cache_create+0x3db/0x520 [<00000000065cb736>] kmem_cache_create_usercopy+0x1db/0x2f0 [<00000000a97f63f6>] p9_client_create+0xc6a/0x1230 [<00000000b0dc6f1d>] v9fs_session_init+0x1dd/0x1680 [<000000002877b931>] v9fs_mount+0x79/0x8f0 [<000000004a56b4df>] legacy_get_tree+0x105/0x220 [<000000003745044b>] vfs_get_tree+0x8e/0x300 [<00000000f06a9f2e>] path_mount+0x1429/0x2120 [<000000009a051a4f>] __x64_sys_mount+0x282/0x300 [<0000000076c00783>] do_syscall_64+0x33/0x40 BUG: leak checking failed VM DIAGNOSIS: 03:41:17 Registers: info registers vcpu 0 RAX=ffffffff83e7c900 RBX=0000000000000000 RCX=ffffffff83e644dc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7cf08 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85677788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7c90e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff6eef3a00 CR3=000000000d542000 CR4=00350ef0 DR0=0000000100000000 DR1=0000000100000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=000000000011060a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004184b41280000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e7c900 RBX=0000000000000001 RCX=ffffffff83e644dc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7cf08 RBP=ffffed100112f000 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85677788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7c90e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f394bd4e020 CR3=000000000c9ea000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=3a29323320657a697328203034613662 XMM03=343120646970202c22342e726f747563 XMM04=6c6c6163662d70392020323320643220 XMM05=32206336206336203136203336203636 XMM06=73657479622032332074737269662820 XMM07=2e323220656761282031313937383336 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000