capacity change from 0 to 8388096 [ 2478.148726] nfs: Unknown parameter '-$' [ 2478.154769] 9pnet: Insufficient options for proto=fd 16:26:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2478.325548] FAULT_INJECTION: forcing a failure. [ 2478.325548] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.328114] CPU: 0 PID: 12808 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2478.329590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2478.331369] Call Trace: [ 2478.331944] dump_stack+0x107/0x167 [ 2478.332719] should_fail.cold+0x5/0xa [ 2478.333535] should_failslab+0x5/0x20 [ 2478.334343] __kmalloc_track_caller+0x79/0x370 [ 2478.335316] ? p9_client_create+0x51e/0x1230 [ 2478.336267] kmemdup_nul+0x2d/0xa0 [ 2478.337041] p9_client_create+0x51e/0x1230 [ 2478.337944] ? p9_client_flush+0x430/0x430 [ 2478.338838] ? trace_hardirqs_on+0x5b/0x180 [ 2478.339775] ? lockdep_init_map_type+0x2c7/0x780 [ 2478.340790] ? __raw_spin_lock_init+0x36/0x110 [ 2478.341775] v9fs_session_init+0x1dd/0x1680 [ 2478.342695] ? lock_release+0x680/0x680 [ 2478.343545] ? kmem_cache_alloc_trace+0x151/0x320 [ 2478.344577] ? v9fs_show_options+0x690/0x690 [ 2478.345524] ? trace_hardirqs_on+0x5b/0x180 [ 2478.346448] ? kasan_unpoison_shadow+0x33/0x50 [ 2478.347412] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2478.348492] v9fs_mount+0x79/0x8f0 [ 2478.349251] ? v9fs_write_inode+0x60/0x60 [ 2478.350134] legacy_get_tree+0x105/0x220 [ 2478.350999] vfs_get_tree+0x8e/0x300 [ 2478.351798] path_mount+0x1429/0x2120 [ 2478.352607] ? strncpy_from_user+0x9e/0x470 [ 2478.353516] ? finish_automount+0xa90/0xa90 [ 2478.354428] ? getname_flags.part.0+0x1dd/0x4f0 [ 2478.355417] ? _copy_from_user+0xfb/0x1b0 [ 2478.356316] __x64_sys_mount+0x282/0x300 [ 2478.357185] ? copy_mnt_ns+0xa00/0xa00 [ 2478.358016] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2478.359131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2478.360310] do_syscall_64+0x33/0x40 [ 2478.361109] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2478.362199] RIP: 0033:0x7fed66145b19 [ 2478.362995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.366931] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2478.368561] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2478.370083] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2478.371612] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2478.373131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2478.374676] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2478.376397] FAULT_INJECTION: forcing a failure. [ 2478.376397] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.377809] CPU: 1 PID: 12806 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2478.378606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2478.379576] Call Trace: [ 2478.379892] dump_stack+0x107/0x167 [ 2478.380377] should_fail.cold+0x5/0xa [ 2478.380829] should_failslab+0x5/0x20 [ 2478.381280] __kmalloc_track_caller+0x79/0x370 [ 2478.381808] ? v9fs_session_init+0xe9/0x1680 [ 2478.382321] ? kernel_text_address+0xf2/0x120 [ 2478.382854] kstrdup+0x36/0x70 [ 2478.383233] v9fs_session_init+0xe9/0x1680 [ 2478.383732] ? lock_release+0x680/0x680 [ 2478.384197] ? find_held_lock+0x2c/0x110 [ 2478.384670] ? kmem_cache_alloc_trace+0x151/0x320 [ 2478.385231] ? v9fs_show_options+0x690/0x690 [ 2478.385741] ? trace_hardirqs_on+0x5b/0x180 [ 2478.386243] ? kasan_unpoison_shadow+0x33/0x50 [ 2478.386775] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2478.387364] v9fs_mount+0x79/0x8f0 [ 2478.387774] ? v9fs_write_inode+0x60/0x60 [ 2478.388257] legacy_get_tree+0x105/0x220 [ 2478.388729] vfs_get_tree+0x8e/0x300 [ 2478.389159] path_mount+0x1429/0x2120 [ 2478.389600] ? strncpy_from_user+0x9e/0x470 [ 2478.390091] ? finish_automount+0xa90/0xa90 [ 2478.390584] ? getname_flags.part.0+0x1dd/0x4f0 [ 2478.391120] ? _copy_from_user+0xfb/0x1b0 [ 2478.391603] __x64_sys_mount+0x282/0x300 [ 2478.392065] ? copy_mnt_ns+0xa00/0xa00 [ 2478.392518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2478.393120] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2478.393718] do_syscall_64+0x33/0x40 [ 2478.394148] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2478.394741] RIP: 0033:0x7f52d9fa7b19 [ 2478.395176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.397302] RSP: 002b:00007f52d751d188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2478.398460] RAX: ffffffffffffffda RBX: 00007f52da0baf60 RCX: 00007f52d9fa7b19 [ 2478.399317] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2478.400411] RBP: 00007f52d751d1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2478.401473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2478.402299] R13: 00007ffece5b042f R14: 00007f52d751d300 R15: 0000000000022000 [ 2478.445467] loop5: detected capacity change from 0 to 8388096 [ 2478.446928] nfs: Unknown parameter '-$' [ 2478.457649] 9pnet: Insufficient options for proto=fd 16:27:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:12 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (fail_nth: 19) 16:27:12 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 20) 16:27:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:12 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 25) [ 2491.250079] FAULT_INJECTION: forcing a failure. [ 2491.250079] name failslab, interval 1, probability 0, space 0, times 0 [ 2491.252627] CPU: 1 PID: 12825 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2491.254136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2491.255923] Call Trace: [ 2491.256505] dump_stack+0x107/0x167 [ 2491.257291] should_fail.cold+0x5/0xa [ 2491.258126] ? p9_client_create+0xaf/0x1230 [ 2491.259051] should_failslab+0x5/0x20 [ 2491.259866] kmem_cache_alloc_trace+0x55/0x320 [ 2491.260839] ? find_held_lock+0x2c/0x110 [ 2491.261708] p9_client_create+0xaf/0x1230 [ 2491.262591] ? lock_downgrade+0x6d0/0x6d0 [ 2491.263475] ? p9_client_flush+0x430/0x430 [ 2491.264376] ? trace_hardirqs_on+0x5b/0x180 [ 2491.265286] ? lockdep_init_map_type+0x2c7/0x780 [ 2491.266460] ? __raw_spin_lock_init+0x36/0x110 [ 2491.267657] v9fs_session_init+0x1dd/0x1680 [ 2491.268595] ? lock_release+0x680/0x680 [ 2491.269475] ? kmem_cache_alloc_trace+0x151/0x320 [ 2491.270499] ? v9fs_show_options+0x690/0x690 [ 2491.271478] ? trace_hardirqs_on+0x5b/0x180 [ 2491.272441] ? kasan_unpoison_shadow+0x33/0x50 [ 2491.273447] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2491.274550] v9fs_mount+0x79/0x8f0 [ 2491.274877] loop5: detected capacity change from 0 to 8388096 [ 2491.275314] ? v9fs_write_inode+0x60/0x60 [ 2491.275336] legacy_get_tree+0x105/0x220 [ 2491.275356] vfs_get_tree+0x8e/0x300 [ 2491.275380] path_mount+0x1429/0x2120 [ 2491.277912] nfs: Unknown parameter '-$' [ 2491.278665] ? strncpy_from_user+0x9e/0x470 [ 2491.278684] ? finish_automount+0xa90/0xa90 [ 2491.278703] ? getname_flags.part.0+0x1dd/0x4f0 [ 2491.278721] ? _copy_from_user+0xfb/0x1b0 [ 2491.278745] __x64_sys_mount+0x282/0x300 [ 2491.278761] ? copy_mnt_ns+0xa00/0xa00 [ 2491.278784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2491.278804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2491.278884] do_syscall_64+0x33/0x40 [ 2491.278908] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2491.289940] RIP: 0033:0x7f7b14970b19 [ 2491.290729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2491.294754] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2491.296589] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2491.298256] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2491.299831] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2491.301412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2491.301739] FAULT_INJECTION: forcing a failure. [ 2491.301739] name failslab, interval 1, probability 0, space 0, times 0 [ 2491.302912] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2491.305350] CPU: 0 PID: 12831 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2491.306202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2491.307226] Call Trace: [ 2491.307552] dump_stack+0x107/0x167 [ 2491.308012] should_fail.cold+0x5/0xa [ 2491.308508] ? create_object.isra.0+0x3a/0xa20 [ 2491.309053] should_failslab+0x5/0x20 [ 2491.309524] kmem_cache_alloc+0x5b/0x310 [ 2491.310025] create_object.isra.0+0x3a/0xa20 [ 2491.310546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2491.311179] __kmalloc_track_caller+0x177/0x370 [ 2491.311762] ? v9fs_session_init+0xe9/0x1680 [ 2491.312316] ? kernel_text_address+0xf2/0x120 [ 2491.312872] kstrdup+0x36/0x70 [ 2491.313269] v9fs_session_init+0xe9/0x1680 [ 2491.313800] ? lock_release+0x680/0x680 [ 2491.314382] ? find_held_lock+0x2c/0x110 [ 2491.314941] ? kmem_cache_alloc_trace+0x151/0x320 [ 2491.315531] ? v9fs_show_options+0x690/0x690 [ 2491.316082] ? trace_hardirqs_on+0x5b/0x180 [ 2491.316587] ? kasan_unpoison_shadow+0x33/0x50 [ 2491.317124] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2491.317726] v9fs_mount+0x79/0x8f0 [ 2491.318161] ? v9fs_write_inode+0x60/0x60 [ 2491.318671] legacy_get_tree+0x105/0x220 [ 2491.319184] vfs_get_tree+0x8e/0x300 [ 2491.319642] path_mount+0x1429/0x2120 [ 2491.320129] ? strncpy_from_user+0x9e/0x470 [ 2491.320639] ? finish_automount+0xa90/0xa90 [ 2491.321169] ? getname_flags.part.0+0x1dd/0x4f0 [ 2491.321742] ? _copy_from_user+0xfb/0x1b0 [ 2491.322238] __x64_sys_mount+0x282/0x300 [ 2491.322737] ? copy_mnt_ns+0xa00/0xa00 [ 2491.323191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2491.323853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2491.324491] do_syscall_64+0x33/0x40 [ 2491.324995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2491.325615] RIP: 0033:0x7f52d9fa7b19 [ 2491.326072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2491.328318] RSP: 002b:00007f52d751d188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2491.329255] RAX: ffffffffffffffda RBX: 00007f52da0baf60 RCX: 00007f52d9fa7b19 [ 2491.330134] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2491.331018] RBP: 00007f52d751d1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2491.331884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2491.332711] R13: 00007ffece5b042f R14: 00007f52d751d300 R15: 0000000000022000 [ 2491.335869] loop4: detected capacity change from 0 to 8388096 [ 2491.337808] nfs: Unknown parameter '-$' [ 2491.341634] loop2: detected capacity change from 0 to 8388096 [ 2491.342799] nfs: Unknown parameter '-$' [ 2491.344202] FAULT_INJECTION: forcing a failure. [ 2491.344202] name failslab, interval 1, probability 0, space 0, times 0 [ 2491.346594] CPU: 1 PID: 12833 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2491.348075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2491.349817] Call Trace: [ 2491.350371] dump_stack+0x107/0x167 [ 2491.351138] should_fail.cold+0x5/0xa [ 2491.351952] ? create_object.isra.0+0x3a/0xa20 [ 2491.352912] should_failslab+0x5/0x20 [ 2491.353712] kmem_cache_alloc+0x5b/0x310 [ 2491.354573] create_object.isra.0+0x3a/0xa20 16:27:12 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 21) [ 2491.355500] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2491.356752] __kmalloc_track_caller+0x177/0x370 [ 2491.357741] ? p9_client_create+0x51e/0x1230 [ 2491.358682] kmemdup_nul+0x2d/0xa0 [ 2491.359439] p9_client_create+0x51e/0x1230 [ 2491.360383] ? p9_client_flush+0x430/0x430 [ 2491.361535] ? trace_hardirqs_on+0x5b/0x180 [ 2491.362566] ? lockdep_init_map_type+0x2c7/0x780 [ 2491.363810] ? __raw_spin_lock_init+0x36/0x110 [ 2491.365041] v9fs_session_init+0x1dd/0x1680 [ 2491.366119] ? lock_release+0x680/0x680 [ 2491.367186] ? kmem_cache_alloc_trace+0x151/0x320 [ 2491.368403] ? v9fs_show_options+0x690/0x690 [ 2491.369605] ? trace_hardirqs_on+0x5b/0x180 [ 2491.370763] ? kasan_unpoison_shadow+0x33/0x50 [ 2491.371856] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2491.373179] v9fs_mount+0x79/0x8f0 [ 2491.373935] ? v9fs_write_inode+0x60/0x60 [ 2491.374811] legacy_get_tree+0x105/0x220 [ 2491.375688] vfs_get_tree+0x8e/0x300 [ 2491.376482] path_mount+0x1429/0x2120 [ 2491.377293] ? strncpy_from_user+0x9e/0x470 [ 2491.378593] ? finish_automount+0xa90/0xa90 [ 2491.379651] ? getname_flags.part.0+0x1dd/0x4f0 [ 2491.380960] ? _copy_from_user+0xfb/0x1b0 [ 2491.382147] __x64_sys_mount+0x282/0x300 [ 2491.383173] ? copy_mnt_ns+0xa00/0xa00 [ 2491.384187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2491.385445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2491.386746] do_syscall_64+0x33/0x40 [ 2491.387537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2491.388696] RIP: 0033:0x7fed66145b19 [ 2491.389643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2491.393781] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2491.395406] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2491.396936] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2491.398449] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2491.399978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2491.401522] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 16:27:12 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2491.565877] FAULT_INJECTION: forcing a failure. [ 2491.565877] name failslab, interval 1, probability 0, space 0, times 0 [ 2491.568311] CPU: 1 PID: 12851 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2491.569783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2491.571548] Call Trace: [ 2491.572119] dump_stack+0x107/0x167 [ 2491.572886] should_fail.cold+0x5/0xa [ 2491.573704] ? create_object.isra.0+0x3a/0xa20 [ 2491.574665] should_failslab+0x5/0x20 [ 2491.575476] kmem_cache_alloc+0x5b/0x310 [ 2491.576342] ? kernel_text_address+0xf2/0x120 [ 2491.577292] create_object.isra.0+0x3a/0xa20 [ 2491.578229] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2491.579307] kmem_cache_alloc_trace+0x151/0x320 [ 2491.580304] ? find_held_lock+0x2c/0x110 [ 2491.581171] p9_client_create+0xaf/0x1230 [ 2491.582060] ? lock_downgrade+0x6d0/0x6d0 [ 2491.582940] ? p9_client_flush+0x430/0x430 [ 2491.583843] ? trace_hardirqs_on+0x5b/0x180 [ 2491.584758] ? lockdep_init_map_type+0x2c7/0x780 [ 2491.585765] ? __raw_spin_lock_init+0x36/0x110 [ 2491.586742] v9fs_session_init+0x1dd/0x1680 [ 2491.587654] ? lock_release+0x680/0x680 [ 2491.588504] ? kmem_cache_alloc_trace+0x151/0x320 [ 2491.589538] ? v9fs_show_options+0x690/0x690 [ 2491.590475] ? trace_hardirqs_on+0x5b/0x180 [ 2491.591384] ? kasan_unpoison_shadow+0x33/0x50 [ 2491.592376] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2491.593462] v9fs_mount+0x79/0x8f0 [ 2491.594215] ? v9fs_write_inode+0x60/0x60 [ 2491.595095] legacy_get_tree+0x105/0x220 [ 2491.595962] vfs_get_tree+0x8e/0x300 [ 2491.596819] path_mount+0x1429/0x2120 [ 2491.597634] ? strncpy_from_user+0x9e/0x470 [ 2491.598553] ? finish_automount+0xa90/0xa90 [ 2491.599466] ? getname_flags.part.0+0x1dd/0x4f0 [ 2491.600461] ? _copy_from_user+0xfb/0x1b0 [ 2491.601353] __x64_sys_mount+0x282/0x300 [ 2491.602216] ? copy_mnt_ns+0xa00/0xa00 [ 2491.603042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2491.604160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2491.605263] do_syscall_64+0x33/0x40 [ 2491.606049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2491.607129] RIP: 0033:0x7f7b14970b19 [ 2491.607940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2491.611881] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2491.613509] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2491.615043] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2491.616581] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2491.618110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2491.619619] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2491.646606] loop2: detected capacity change from 0 to 8388096 [ 2491.648492] nfs: Unknown parameter '-$' [ 2491.669378] loop3: detected capacity change from 0 to 8388096 [ 2491.686680] nfs: Unknown parameter '-$' 16:27:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2491.727453] loop4: detected capacity change from 0 to 8388096 [ 2491.729733] nfs: Unknown parameter '-$' [ 2491.776514] loop5: detected capacity change from 0 to 8388096 16:27:26 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 26) 16:27:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:26 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 22) 16:27:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:26 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (fail_nth: 20) [ 2506.058126] FAULT_INJECTION: forcing a failure. [ 2506.058126] name failslab, interval 1, probability 0, space 0, times 0 [ 2506.059542] CPU: 1 PID: 12880 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2506.060406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2506.061391] Call Trace: [ 2506.061719] dump_stack+0x107/0x167 [ 2506.062154] should_fail.cold+0x5/0xa [ 2506.062618] should_failslab+0x5/0x20 [ 2506.063081] __kmalloc_track_caller+0x79/0x370 [ 2506.063632] ? p9_client_create+0x598/0x1230 [ 2506.064181] ? kfree+0xd7/0x340 [ 2506.064576] kmemdup_nul+0x2d/0xa0 [ 2506.065007] p9_client_create+0x598/0x1230 [ 2506.065521] ? p9_client_flush+0x430/0x430 [ 2506.066029] ? trace_hardirqs_on+0x5b/0x180 [ 2506.066549] ? lockdep_init_map_type+0x2c7/0x780 [ 2506.067123] ? __raw_spin_lock_init+0x36/0x110 [ 2506.067684] v9fs_session_init+0x1dd/0x1680 [ 2506.068219] ? lock_release+0x680/0x680 [ 2506.068719] ? kmem_cache_alloc_trace+0x151/0x320 [ 2506.069318] ? v9fs_show_options+0x690/0x690 [ 2506.069860] ? trace_hardirqs_on+0x5b/0x180 [ 2506.070443] ? kasan_unpoison_shadow+0x33/0x50 [ 2506.071014] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2506.071646] v9fs_mount+0x79/0x8f0 [ 2506.072113] ? v9fs_write_inode+0x60/0x60 [ 2506.072653] legacy_get_tree+0x105/0x220 [ 2506.073169] vfs_get_tree+0x8e/0x300 [ 2506.073622] path_mount+0x1429/0x2120 [ 2506.074100] ? strncpy_from_user+0x9e/0x470 [ 2506.074625] ? finish_automount+0xa90/0xa90 [ 2506.075158] ? getname_flags.part.0+0x1dd/0x4f0 [ 2506.075727] ? _copy_from_user+0xfb/0x1b0 [ 2506.076257] __x64_sys_mount+0x282/0x300 [ 2506.076760] ? copy_mnt_ns+0xa00/0xa00 [ 2506.077253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2506.077908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2506.078556] do_syscall_64+0x33/0x40 [ 2506.079015] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2506.079657] RIP: 0033:0x7fed66145b19 [ 2506.080141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2506.082411] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2506.083326] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2506.084193] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2506.085049] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2506.085900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2506.086754] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2506.090905] loop4: detected capacity change from 0 to 8388096 [ 2506.092764] nfs: Unknown parameter '-$' [ 2506.094335] nfs: Unknown parameter '-$' [ 2506.101723] FAULT_INJECTION: forcing a failure. [ 2506.101723] name failslab, interval 1, probability 0, space 0, times 0 [ 2506.104165] CPU: 0 PID: 12884 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2506.105626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2506.107372] Call Trace: [ 2506.107942] dump_stack+0x107/0x167 [ 2506.108712] should_fail.cold+0x5/0xa [ 2506.109526] should_failslab+0x5/0x20 [ 2506.110330] __kmalloc_track_caller+0x79/0x370 [ 2506.111294] ? p9_client_create+0x41d/0x1230 [ 2506.112225] ? strlen+0x54/0xa0 [ 2506.112924] kstrdup+0x36/0x70 [ 2506.113601] p9_client_create+0x41d/0x1230 [ 2506.114501] ? lock_downgrade+0x6d0/0x6d0 [ 2506.115399] ? p9_client_flush+0x430/0x430 [ 2506.116326] ? trace_hardirqs_on+0x5b/0x180 [ 2506.117260] ? lockdep_init_map_type+0x2c7/0x780 [ 2506.118269] ? __raw_spin_lock_init+0x36/0x110 [ 2506.119238] v9fs_session_init+0x1dd/0x1680 [ 2506.120218] ? lock_release+0x680/0x680 [ 2506.121091] ? kmem_cache_alloc_trace+0x151/0x320 [ 2506.122112] ? v9fs_show_options+0x690/0x690 [ 2506.123042] ? trace_hardirqs_on+0x5b/0x180 [ 2506.123958] ? kasan_unpoison_shadow+0x33/0x50 [ 2506.124910] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2506.125984] v9fs_mount+0x79/0x8f0 [ 2506.126731] ? v9fs_write_inode+0x60/0x60 [ 2506.127611] legacy_get_tree+0x105/0x220 16:27:27 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 27) [ 2506.128561] vfs_get_tree+0x8e/0x300 [ 2506.129494] path_mount+0x1429/0x2120 [ 2506.130302] ? strncpy_from_user+0x9e/0x470 [ 2506.131207] ? finish_automount+0xa90/0xa90 [ 2506.132127] ? getname_flags.part.0+0x1dd/0x4f0 [ 2506.133108] ? _copy_from_user+0xfb/0x1b0 [ 2506.133983] __x64_sys_mount+0x282/0x300 [ 2506.134838] ? copy_mnt_ns+0xa00/0xa00 [ 2506.135677] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2506.136802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2506.137881] do_syscall_64+0x33/0x40 [ 2506.138668] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2506.139763] RIP: 0033:0x7f7b14970b19 [ 2506.140556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2506.144419] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2506.146016] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2506.147514] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2506.149023] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2506.150531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2506.152050] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2506.198817] loop3: detected capacity change from 0 to 8388096 16:27:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:27:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:27 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 23) [ 2506.203895] nfs: Unknown parameter '-$' 16:27:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2506.213749] loop2: detected capacity change from 0 to 8388096 [ 2506.215442] nfs: Unknown parameter '-$' 16:27:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:27 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2506.337511] FAULT_INJECTION: forcing a failure. [ 2506.337511] name failslab, interval 1, probability 0, space 0, times 0 [ 2506.341717] CPU: 0 PID: 12900 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2506.343475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2506.345339] Call Trace: [ 2506.345899] dump_stack+0x107/0x167 [ 2506.346718] should_fail.cold+0x5/0xa [ 2506.347559] ? create_object.isra.0+0x3a/0xa20 [ 2506.348550] should_failslab+0x5/0x20 [ 2506.349364] kmem_cache_alloc+0x5b/0x310 [ 2506.350252] create_object.isra.0+0x3a/0xa20 [ 2506.351188] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2506.352298] __kmalloc_track_caller+0x177/0x370 [ 2506.353286] ? p9_client_create+0x598/0x1230 [ 2506.354235] kmemdup_nul+0x2d/0xa0 [ 2506.355058] p9_client_create+0x598/0x1230 [ 2506.356000] ? p9_client_flush+0x430/0x430 [ 2506.356919] ? trace_hardirqs_on+0x5b/0x180 [ 2506.357849] ? lockdep_init_map_type+0x2c7/0x780 [ 2506.358864] ? __raw_spin_lock_init+0x36/0x110 [ 2506.359857] v9fs_session_init+0x1dd/0x1680 [ 2506.360797] ? lock_release+0x680/0x680 [ 2506.361657] ? kmem_cache_alloc_trace+0x151/0x320 [ 2506.362678] ? v9fs_show_options+0x690/0x690 [ 2506.363638] ? trace_hardirqs_on+0x5b/0x180 [ 2506.364613] ? kasan_unpoison_shadow+0x33/0x50 [ 2506.365602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2506.366707] v9fs_mount+0x79/0x8f0 [ 2506.367479] ? v9fs_write_inode+0x60/0x60 [ 2506.368384] legacy_get_tree+0x105/0x220 [ 2506.369269] vfs_get_tree+0x8e/0x300 [ 2506.370050] path_mount+0x1429/0x2120 [ 2506.370870] ? strncpy_from_user+0x9e/0x470 [ 2506.371802] ? finish_automount+0xa90/0xa90 [ 2506.372756] ? getname_flags.part.0+0x1dd/0x4f0 [ 2506.373756] ? _copy_from_user+0xfb/0x1b0 [ 2506.374659] __x64_sys_mount+0x282/0x300 [ 2506.375527] ? copy_mnt_ns+0xa00/0xa00 [ 2506.376380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2506.377522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2506.378632] do_syscall_64+0x33/0x40 [ 2506.379435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2506.380542] RIP: 0033:0x7fed66145b19 [ 2506.381344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2506.385309] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2506.386944] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2506.388520] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2506.390056] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2506.391609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2506.393176] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 16:27:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2506.415546] loop5: detected capacity change from 0 to 8388096 [ 2506.418164] nfs: Unknown parameter '-$' [ 2506.481191] FAULT_INJECTION: forcing a failure. [ 2506.481191] name failslab, interval 1, probability 0, space 0, times 0 [ 2506.483747] CPU: 0 PID: 12909 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2506.485273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2506.487068] Call Trace: [ 2506.487645] dump_stack+0x107/0x167 [ 2506.488457] should_fail.cold+0x5/0xa [ 2506.489294] ? create_object.isra.0+0x3a/0xa20 [ 2506.490292] should_failslab+0x5/0x20 [ 2506.491122] kmem_cache_alloc+0x5b/0x310 [ 2506.492093] ? lock_downgrade+0x6d0/0x6d0 [ 2506.492995] create_object.isra.0+0x3a/0xa20 [ 2506.493942] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2506.495045] __kmalloc_track_caller+0x177/0x370 [ 2506.496078] ? p9_client_create+0x41d/0x1230 [ 2506.497044] kstrdup+0x36/0x70 [ 2506.497744] p9_client_create+0x41d/0x1230 [ 2506.498665] ? lock_downgrade+0x6d0/0x6d0 [ 2506.499572] ? p9_client_flush+0x430/0x430 [ 2506.500501] ? trace_hardirqs_on+0x5b/0x180 [ 2506.501450] ? lockdep_init_map_type+0x2c7/0x780 [ 2506.502480] ? __raw_spin_lock_init+0x36/0x110 [ 2506.503480] v9fs_session_init+0x1dd/0x1680 [ 2506.504438] ? lock_release+0x680/0x680 [ 2506.505322] ? kmem_cache_alloc_trace+0x151/0x320 [ 2506.506358] ? v9fs_show_options+0x690/0x690 [ 2506.507319] ? trace_hardirqs_on+0x5b/0x180 [ 2506.508271] ? kasan_unpoison_shadow+0x33/0x50 [ 2506.509268] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2506.510371] v9fs_mount+0x79/0x8f0 [ 2506.511142] ? v9fs_write_inode+0x60/0x60 [ 2506.512047] legacy_get_tree+0x105/0x220 [ 2506.512929] vfs_get_tree+0x8e/0x300 [ 2506.513752] path_mount+0x1429/0x2120 [ 2506.514586] ? strncpy_from_user+0x9e/0x470 [ 2506.515520] ? finish_automount+0xa90/0xa90 [ 2506.516465] ? getname_flags.part.0+0x1dd/0x4f0 [ 2506.517479] ? _copy_from_user+0xfb/0x1b0 [ 2506.518396] __x64_sys_mount+0x282/0x300 [ 2506.519280] ? copy_mnt_ns+0xa00/0xa00 [ 2506.520153] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2506.521291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2506.522423] do_syscall_64+0x33/0x40 [ 2506.523234] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2506.524352] RIP: 0033:0x7f7b14970b19 [ 2506.525161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2506.529147] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2506.530778] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2506.532341] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2506.533881] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2506.535436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2506.536979] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 16:27:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x2, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2506.582549] loop4: detected capacity change from 0 to 8388096 [ 2506.602309] nfs: Unknown parameter '-$' [ 2506.615697] loop2: detected capacity change from 0 to 8388096 16:27:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2506.624410] loop3: detected capacity change from 0 to 8388096 [ 2506.628564] nfs: Unknown parameter '-$' [ 2506.631630] nfs: Unknown parameter '-$' 16:27:27 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2506.773534] loop5: detected capacity change from 0 to 8388096 [ 2506.790277] nfs: Unknown parameter '-$' [ 2506.817646] loop6: detected capacity change from 0 to 8388096 16:27:42 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 28) 16:27:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x3, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:27:42 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:42 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:42 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 24) [ 2521.524617] FAULT_INJECTION: forcing a failure. [ 2521.524617] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.527141] CPU: 1 PID: 12942 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2521.528684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2521.530588] Call Trace: [ 2521.531303] dump_stack+0x107/0x167 [ 2521.532270] should_fail.cold+0x5/0xa [ 2521.533438] should_failslab+0x5/0x20 [ 2521.534550] __kmalloc_track_caller+0x79/0x370 [ 2521.535557] ? p9_client_create+0x51e/0x1230 [ 2521.536532] kmemdup_nul+0x2d/0xa0 [ 2521.537310] p9_client_create+0x51e/0x1230 [ 2521.538237] ? p9_client_flush+0x430/0x430 [ 2521.539156] ? trace_hardirqs_on+0x5b/0x180 [ 2521.540103] ? lockdep_init_map_type+0x2c7/0x780 [ 2521.541123] ? __raw_spin_lock_init+0x36/0x110 [ 2521.542112] v9fs_session_init+0x1dd/0x1680 [ 2521.543216] ? lock_release+0x680/0x680 [ 2521.544251] ? kmem_cache_alloc_trace+0x151/0x320 [ 2521.544345] FAULT_INJECTION: forcing a failure. [ 2521.544345] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.545470] ? v9fs_show_options+0x690/0x690 [ 2521.545503] ? trace_hardirqs_on+0x5b/0x180 [ 2521.549613] ? kasan_unpoison_shadow+0x33/0x50 [ 2521.550578] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2521.551646] v9fs_mount+0x79/0x8f0 [ 2521.552412] ? v9fs_write_inode+0x60/0x60 [ 2521.553277] legacy_get_tree+0x105/0x220 [ 2521.554115] vfs_get_tree+0x8e/0x300 [ 2521.554897] path_mount+0x1429/0x2120 [ 2521.555700] ? strncpy_from_user+0x9e/0x470 [ 2521.556629] ? finish_automount+0xa90/0xa90 [ 2521.557521] ? getname_flags.part.0+0x1dd/0x4f0 [ 2521.558716] ? _copy_from_user+0xfb/0x1b0 [ 2521.559651] __x64_sys_mount+0x282/0x300 [ 2521.560527] ? copy_mnt_ns+0xa00/0xa00 [ 2521.561352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.562442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2521.563547] do_syscall_64+0x33/0x40 [ 2521.564516] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2521.565591] RIP: 0033:0x7f7b14970b19 [ 2521.566370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2521.570269] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2521.571919] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2521.573539] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2521.575349] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2521.576940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2521.578463] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2521.580155] CPU: 0 PID: 12947 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2521.581625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2521.583360] Call Trace: [ 2521.583907] dump_stack+0x107/0x167 [ 2521.584665] should_fail.cold+0x5/0xa [ 2521.585624] should_failslab+0x5/0x20 [ 2521.586406] __kmalloc_track_caller+0x79/0x370 [ 2521.587372] ? parse_opts.part.0+0x8e/0x340 [ 2521.588304] kstrdup+0x36/0x70 [ 2521.588956] parse_opts.part.0+0x8e/0x340 [ 2521.589800] ? p9_fd_show_options+0x1c0/0x1c0 [ 2521.590780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.591880] ? quarantine_put+0x8b/0x1a0 [ 2521.592744] ? trace_hardirqs_on+0x5b/0x180 [ 2521.593626] ? kfree+0xd7/0x340 [ 2521.594311] p9_fd_create+0x98/0x4a0 [ 2521.595087] ? p9_conn_create+0x510/0x510 [ 2521.595943] ? p9_client_create+0x798/0x1230 [ 2521.596849] ? kfree+0xd7/0x340 [ 2521.597527] p9_client_create+0x7ff/0x1230 [ 2521.598400] ? p9_client_flush+0x430/0x430 [ 2521.599295] ? trace_hardirqs_on+0x5b/0x180 [ 2521.600226] ? lockdep_init_map_type+0x2c7/0x780 [ 2521.601193] ? __raw_spin_lock_init+0x36/0x110 [ 2521.602174] v9fs_session_init+0x1dd/0x1680 [ 2521.603054] ? lock_release+0x680/0x680 [ 2521.603895] ? kmem_cache_alloc_trace+0x151/0x320 [ 2521.604922] ? v9fs_show_options+0x690/0x690 [ 2521.605847] ? trace_hardirqs_on+0x5b/0x180 [ 2521.606731] ? kasan_unpoison_shadow+0x33/0x50 [ 2521.607697] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2521.608767] v9fs_mount+0x79/0x8f0 [ 2521.609509] ? v9fs_write_inode+0x60/0x60 [ 2521.610393] legacy_get_tree+0x105/0x220 [ 2521.611255] vfs_get_tree+0x8e/0x300 [ 2521.612040] path_mount+0x1429/0x2120 [ 2521.612851] ? strncpy_from_user+0x9e/0x470 [ 2521.613725] ? finish_automount+0xa90/0xa90 [ 2521.614597] ? getname_flags.part.0+0x1dd/0x4f0 [ 2521.615583] ? _copy_from_user+0xfb/0x1b0 [ 2521.616479] __x64_sys_mount+0x282/0x300 [ 2521.617347] ? copy_mnt_ns+0xa00/0xa00 [ 2521.618187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.619348] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2521.620441] do_syscall_64+0x33/0x40 [ 2521.621215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2521.622277] RIP: 0033:0x7fed66145b19 [ 2521.623073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2521.626891] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2521.628522] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2521.630040] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2521.631493] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2521.633023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2521.634516] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2521.637331] 9pnet: Insufficient options for proto=fd [ 2521.645443] loop2: detected capacity change from 0 to 8388096 [ 2521.658971] nfs: Unknown parameter '-$' [ 2521.665235] loop4: detected capacity change from 0 to 8388096 [ 2521.667680] nfs: Unknown parameter '-$' 16:27:42 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 25) 16:27:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x4, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:27:42 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2521.839852] FAULT_INJECTION: forcing a failure. [ 2521.839852] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.842421] CPU: 1 PID: 12958 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2521.844086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2521.846074] Call Trace: [ 2521.846660] dump_stack+0x107/0x167 [ 2521.847456] should_fail.cold+0x5/0xa [ 2521.848292] ? create_object.isra.0+0x3a/0xa20 [ 2521.849383] should_failslab+0x5/0x20 [ 2521.850350] kmem_cache_alloc+0x5b/0x310 [ 2521.851381] create_object.isra.0+0x3a/0xa20 [ 2521.852518] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2521.853625] __kmalloc_track_caller+0x177/0x370 [ 2521.854587] ? p9_client_create+0x51e/0x1230 [ 2521.855711] kmemdup_nul+0x2d/0xa0 [ 2521.856558] p9_client_create+0x51e/0x1230 [ 2521.857635] ? p9_client_flush+0x430/0x430 [ 2521.858608] ? trace_hardirqs_on+0x5b/0x180 [ 2521.859713] ? lockdep_init_map_type+0x2c7/0x780 [ 2521.860814] ? __raw_spin_lock_init+0x36/0x110 [ 2521.861919] v9fs_session_init+0x1dd/0x1680 [ 2521.862872] ? lock_release+0x680/0x680 [ 2521.863788] ? kmem_cache_alloc_trace+0x151/0x320 [ 2521.865022] ? v9fs_show_options+0x690/0x690 [ 2521.865970] ? trace_hardirqs_on+0x5b/0x180 [ 2521.866921] ? kasan_unpoison_shadow+0x33/0x50 [ 2521.867867] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2521.868930] v9fs_mount+0x79/0x8f0 [ 2521.869664] ? v9fs_write_inode+0x60/0x60 [ 2521.870557] legacy_get_tree+0x105/0x220 [ 2521.871448] vfs_get_tree+0x8e/0x300 [ 2521.872333] path_mount+0x1429/0x2120 [ 2521.873159] ? strncpy_from_user+0x9e/0x470 [ 2521.874097] ? finish_automount+0xa90/0xa90 [ 2521.875118] ? getname_flags.part.0+0x1dd/0x4f0 [ 2521.876117] ? _copy_from_user+0xfb/0x1b0 [ 2521.877021] __x64_sys_mount+0x282/0x300 [ 2521.877898] ? copy_mnt_ns+0xa00/0xa00 [ 2521.878856] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.879950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2521.881205] do_syscall_64+0x33/0x40 [ 2521.882148] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2521.883242] RIP: 0033:0x7f7b14970b19 [ 2521.884209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2521.888918] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2521.890595] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2521.892174] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2521.893696] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2521.895219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2521.896934] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2521.980105] loop5: detected capacity change from 0 to 8388096 [ 2521.985980] nfs: Unknown parameter '-$' [ 2522.060380] loop6: detected capacity change from 0 to 8388096 [ 2522.081762] nfs: Unknown parameter '-$' 16:27:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:57 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:57 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:57 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 26) 16:27:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x5, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:27:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:57 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 29) [ 2536.323292] loop2: detected capacity change from 0 to 8388096 [ 2536.326487] nfs: Unknown parameter '-$' [ 2536.337198] loop6: detected capacity change from 0 to 8388096 [ 2536.338473] nfs: Unknown parameter '-$' [ 2536.351419] loop3: detected capacity change from 0 to 8388096 [ 2536.353252] nfs: Unknown parameter '-$' [ 2536.356472] FAULT_INJECTION: forcing a failure. [ 2536.356472] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.358023] CPU: 0 PID: 12987 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2536.358910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.360110] Call Trace: [ 2536.360464] dump_stack+0x107/0x167 [ 2536.360938] should_fail.cold+0x5/0xa [ 2536.361444] should_failslab+0x5/0x20 [ 2536.361934] __kmalloc_track_caller+0x79/0x370 [ 2536.362512] ? parse_opts.part.0+0x8e/0x340 [ 2536.363055] kstrdup+0x36/0x70 [ 2536.363455] parse_opts.part.0+0x8e/0x340 [ 2536.363971] ? p9_fd_show_options+0x1c0/0x1c0 [ 2536.364536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.365181] ? quarantine_put+0x8b/0x1a0 [ 2536.365684] ? trace_hardirqs_on+0x5b/0x180 [ 2536.366252] ? kfree+0xd7/0x340 [ 2536.366656] p9_fd_create+0x98/0x4a0 [ 2536.367121] ? p9_conn_create+0x510/0x510 [ 2536.367677] ? p9_client_create+0x798/0x1230 [ 2536.368233] ? kfree+0xd7/0x340 [ 2536.368633] ? do_raw_spin_unlock+0x4f/0x220 [ 2536.369192] p9_client_create+0x7ff/0x1230 [ 2536.369724] ? p9_client_flush+0x430/0x430 [ 2536.370243] ? trace_hardirqs_on+0x5b/0x180 [ 2536.370781] ? lockdep_init_map_type+0x2c7/0x780 [ 2536.371366] ? __raw_spin_lock_init+0x36/0x110 [ 2536.371933] v9fs_session_init+0x1dd/0x1680 [ 2536.372485] ? lock_release+0x680/0x680 [ 2536.373004] ? kmem_cache_alloc_trace+0x151/0x320 [ 2536.373628] ? v9fs_show_options+0x690/0x690 [ 2536.374189] ? trace_hardirqs_on+0x5b/0x180 [ 2536.374735] ? kasan_unpoison_shadow+0x33/0x50 [ 2536.375313] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2536.375952] v9fs_mount+0x79/0x8f0 [ 2536.376421] ? v9fs_write_inode+0x60/0x60 [ 2536.376941] legacy_get_tree+0x105/0x220 [ 2536.377473] vfs_get_tree+0x8e/0x300 [ 2536.377946] path_mount+0x1429/0x2120 [ 2536.378434] ? strncpy_from_user+0x9e/0x470 [ 2536.378986] ? finish_automount+0xa90/0xa90 [ 2536.379523] ? getname_flags.part.0+0x1dd/0x4f0 [ 2536.380130] ? _copy_from_user+0xfb/0x1b0 [ 2536.380650] __x64_sys_mount+0x282/0x300 [ 2536.381175] ? copy_mnt_ns+0xa00/0xa00 [ 2536.381659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.382349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.382999] do_syscall_64+0x33/0x40 [ 2536.383477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.384127] RIP: 0033:0x7f7b14970b19 [ 2536.384608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.386950] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2536.387935] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2536.388871] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2536.389736] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2536.390276] FAULT_INJECTION: forcing a failure. [ 2536.390276] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.390605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2536.390621] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2536.394705] CPU: 1 PID: 12989 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2536.394812] 9pnet: Insufficient options for proto=fd [ 2536.396176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.396193] Call Trace: [ 2536.396222] dump_stack+0x107/0x167 [ 2536.399816] should_fail.cold+0x5/0xa [ 2536.400685] ? create_object.isra.0+0x3a/0xa20 [ 2536.401635] should_failslab+0x5/0x20 [ 2536.402452] kmem_cache_alloc+0x5b/0x310 [ 2536.403291] create_object.isra.0+0x3a/0xa20 [ 2536.404211] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2536.405265] __kmalloc_track_caller+0x177/0x370 [ 2536.406240] ? p9_client_create+0x598/0x1230 [ 2536.407161] kmemdup_nul+0x2d/0xa0 [ 2536.407889] p9_client_create+0x598/0x1230 [ 2536.408780] ? p9_client_flush+0x430/0x430 [ 2536.409660] ? trace_hardirqs_on+0x5b/0x180 [ 2536.410549] ? lockdep_init_map_type+0x2c7/0x780 [ 2536.411531] ? __raw_spin_lock_init+0x36/0x110 [ 2536.412498] v9fs_session_init+0x1dd/0x1680 [ 2536.413391] ? lock_release+0x680/0x680 [ 2536.414222] ? kmem_cache_alloc_trace+0x151/0x320 [ 2536.415207] ? v9fs_show_options+0x690/0x690 [ 2536.416137] ? trace_hardirqs_on+0x5b/0x180 [ 2536.417035] ? kasan_unpoison_shadow+0x33/0x50 [ 2536.417998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2536.419034] v9fs_mount+0x79/0x8f0 [ 2536.419770] ? v9fs_write_inode+0x60/0x60 [ 2536.420661] legacy_get_tree+0x105/0x220 [ 2536.421510] vfs_get_tree+0x8e/0x300 [ 2536.422283] path_mount+0x1429/0x2120 [ 2536.423079] ? strncpy_from_user+0x9e/0x470 [ 2536.423978] ? finish_automount+0xa90/0xa90 [ 2536.424886] ? getname_flags.part.0+0x1dd/0x4f0 [ 2536.425878] ? _copy_from_user+0xfb/0x1b0 [ 2536.426744] __x64_sys_mount+0x282/0x300 [ 2536.427583] ? copy_mnt_ns+0xa00/0xa00 [ 2536.428403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.429516] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.430607] do_syscall_64+0x33/0x40 [ 2536.431402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.432470] RIP: 0033:0x7fed66145b19 [ 2536.433246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.437070] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2536.438689] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2536.440202] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2536.441673] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2536.443136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2536.444614] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 16:27:57 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x6, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:27:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:57 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 27) 16:27:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:57 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:27:57 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 30) [ 2536.734095] FAULT_INJECTION: forcing a failure. [ 2536.734095] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.735462] CPU: 0 PID: 13016 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2536.736285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.737268] Call Trace: [ 2536.737594] dump_stack+0x107/0x167 [ 2536.738085] should_fail.cold+0x5/0xa [ 2536.738549] ? create_object.isra.0+0x3a/0xa20 [ 2536.739092] should_failslab+0x5/0x20 [ 2536.739528] kmem_cache_alloc+0x5b/0x310 [ 2536.739995] ? legacy_get_tree+0x105/0x220 [ 2536.740479] ? vfs_get_tree+0x8e/0x300 [ 2536.740931] create_object.isra.0+0x3a/0xa20 [ 2536.741437] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2536.742027] __kmalloc_track_caller+0x177/0x370 [ 2536.742560] ? parse_opts.part.0+0x8e/0x340 [ 2536.743065] kstrdup+0x36/0x70 [ 2536.743441] parse_opts.part.0+0x8e/0x340 [ 2536.743919] ? p9_fd_show_options+0x1c0/0x1c0 [ 2536.744457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.745064] ? quarantine_put+0x8b/0x1a0 [ 2536.745537] ? trace_hardirqs_on+0x5b/0x180 [ 2536.746033] ? kfree+0xd7/0x340 [ 2536.746410] p9_fd_create+0x98/0x4a0 [ 2536.746839] ? p9_conn_create+0x510/0x510 [ 2536.747316] ? p9_client_create+0x798/0x1230 [ 2536.747820] ? kfree+0xd7/0x340 [ 2536.748203] ? do_raw_spin_unlock+0x4f/0x220 [ 2536.748715] p9_client_create+0x7ff/0x1230 [ 2536.749210] ? p9_client_flush+0x430/0x430 [ 2536.749697] ? trace_hardirqs_on+0x5b/0x180 [ 2536.750194] ? lockdep_init_map_type+0x2c7/0x780 [ 2536.750738] ? __raw_spin_lock_init+0x36/0x110 [ 2536.751274] v9fs_session_init+0x1dd/0x1680 [ 2536.751765] ? lock_release+0x680/0x680 [ 2536.752240] ? kmem_cache_alloc_trace+0x151/0x320 [ 2536.752788] ? v9fs_show_options+0x690/0x690 [ 2536.753295] ? trace_hardirqs_on+0x5b/0x180 [ 2536.753782] ? kasan_unpoison_shadow+0x33/0x50 [ 2536.754308] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2536.754897] v9fs_mount+0x79/0x8f0 [ 2536.755311] ? v9fs_write_inode+0x60/0x60 [ 2536.755786] legacy_get_tree+0x105/0x220 [ 2536.756260] vfs_get_tree+0x8e/0x300 [ 2536.756691] path_mount+0x1429/0x2120 [ 2536.757149] ? strncpy_from_user+0x9e/0x470 [ 2536.757652] ? finish_automount+0xa90/0xa90 [ 2536.758149] ? getname_flags.part.0+0x1dd/0x4f0 [ 2536.758687] ? _copy_from_user+0xfb/0x1b0 [ 2536.759168] __x64_sys_mount+0x282/0x300 [ 2536.759634] ? copy_mnt_ns+0xa00/0xa00 [ 2536.760080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.760687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.761316] do_syscall_64+0x33/0x40 [ 2536.761753] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.762366] RIP: 0033:0x7f7b14970b19 [ 2536.762792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.765103] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2536.765998] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2536.766836] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2536.767660] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2536.768499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2536.769335] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2536.771239] loop5: detected capacity change from 0 to 8388096 [ 2536.772393] nfs: Unknown parameter '-$' [ 2536.799382] loop4: detected capacity change from 0 to 8388096 [ 2536.800614] nfs: Unknown parameter '-$' [ 2536.831177] FAULT_INJECTION: forcing a failure. [ 2536.831177] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.833723] CPU: 1 PID: 13021 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2536.835216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.837099] Call Trace: [ 2536.837155] loop6: detected capacity change from 0 to 8388096 [ 2536.837660] dump_stack+0x107/0x167 [ 2536.837685] should_fail.cold+0x5/0xa [ 2536.838906] nfs: Unknown parameter '-$' [ 2536.839156] should_failslab+0x5/0x20 [ 2536.839177] __kmalloc_track_caller+0x79/0x370 [ 2536.839196] ? match_number+0xaf/0x1d0 [ 2536.839221] kmemdup_nul+0x2d/0xa0 [ 2536.839240] match_number+0xaf/0x1d0 [ 2536.839259] ? match_u64+0x190/0x190 [ 2536.839276] ? __kmalloc_track_caller+0x2c6/0x370 [ 2536.839294] ? memcpy+0x39/0x60 [ 2536.839314] parse_opts.part.0+0x1f3/0x340 [ 2536.839332] ? p9_fd_show_options+0x1c0/0x1c0 [ 2536.839358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.849919] ? trace_hardirqs_on+0x5b/0x180 [ 2536.850827] ? kfree+0xd7/0x340 [ 2536.851526] p9_fd_create+0x98/0x4a0 [ 2536.852320] ? p9_conn_create+0x510/0x510 [ 2536.853210] ? p9_client_create+0x798/0x1230 [ 2536.854148] ? kfree+0xd7/0x340 [ 2536.854837] p9_client_create+0x7ff/0x1230 [ 2536.855740] ? p9_client_flush+0x430/0x430 [ 2536.856645] ? trace_hardirqs_on+0x5b/0x180 [ 2536.857572] ? lockdep_init_map_type+0x2c7/0x780 [ 2536.858583] ? __raw_spin_lock_init+0x36/0x110 [ 2536.859550] v9fs_session_init+0x1dd/0x1680 [ 2536.860446] ? lock_release+0x680/0x680 [ 2536.861332] ? kmem_cache_alloc_trace+0x151/0x320 [ 2536.862359] ? v9fs_show_options+0x690/0x690 [ 2536.863271] ? trace_hardirqs_on+0x5b/0x180 [ 2536.864184] ? kasan_unpoison_shadow+0x33/0x50 [ 2536.865164] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2536.866203] v9fs_mount+0x79/0x8f0 [ 2536.866962] ? v9fs_write_inode+0x60/0x60 [ 2536.867834] legacy_get_tree+0x105/0x220 [ 2536.868705] vfs_get_tree+0x8e/0x300 [ 2536.869474] path_mount+0x1429/0x2120 [ 2536.870305] ? strncpy_from_user+0x9e/0x470 [ 2536.871191] ? finish_automount+0xa90/0xa90 [ 2536.872103] ? getname_flags.part.0+0x1dd/0x4f0 [ 2536.873062] ? _copy_from_user+0xfb/0x1b0 [ 2536.873945] __x64_sys_mount+0x282/0x300 [ 2536.874796] ? copy_mnt_ns+0xa00/0xa00 [ 2536.875632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.876755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.877848] do_syscall_64+0x33/0x40 [ 2536.878638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.879712] RIP: 0033:0x7fed66145b19 [ 2536.880485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.884310] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2536.885866] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2536.887340] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2536.888830] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2536.890297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2536.891774] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2536.897905] 9pnet: Insufficient options for proto=fd 16:28:10 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 31) 16:28:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x7, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:28:10 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:10 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 28) 16:28:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2549.408110] FAULT_INJECTION: forcing a failure. [ 2549.408110] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.411137] CPU: 1 PID: 13040 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2549.412608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.414334] Call Trace: [ 2549.414890] dump_stack+0x107/0x167 [ 2549.415650] should_fail.cold+0x5/0xa [ 2549.416462] ? create_object.isra.0+0x3a/0xa20 [ 2549.417418] should_failslab+0x5/0x20 [ 2549.418206] kmem_cache_alloc+0x5b/0x310 [ 2549.419063] create_object.isra.0+0x3a/0xa20 [ 2549.419983] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2549.421050] __kmalloc_track_caller+0x177/0x370 [ 2549.422186] ? match_number+0xaf/0x1d0 [ 2549.423007] kmemdup_nul+0x2d/0xa0 [ 2549.423820] match_number+0xaf/0x1d0 [ 2549.424829] ? match_u64+0x190/0x190 [ 2549.425601] ? __kmalloc_track_caller+0x2c6/0x370 [ 2549.426606] ? memcpy+0x39/0x60 [ 2549.427334] parse_opts.part.0+0x1f3/0x340 [ 2549.428225] ? p9_fd_show_options+0x1c0/0x1c0 [ 2549.428404] FAULT_INJECTION: forcing a failure. [ 2549.428404] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.429180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.429196] ? trace_hardirqs_on+0x5b/0x180 [ 2549.429221] ? kfree+0xd7/0x340 [ 2549.434196] p9_fd_create+0x98/0x4a0 [ 2549.434976] ? p9_conn_create+0x510/0x510 [ 2549.435845] ? p9_client_create+0x798/0x1230 [ 2549.436785] ? kfree+0xd7/0x340 [ 2549.437503] p9_client_create+0x7ff/0x1230 [ 2549.438421] ? p9_client_flush+0x430/0x430 [ 2549.439328] ? trace_hardirqs_on+0x5b/0x180 [ 2549.440255] ? lockdep_init_map_type+0x2c7/0x780 [ 2549.441274] ? __raw_spin_lock_init+0x36/0x110 [ 2549.442257] v9fs_session_init+0x1dd/0x1680 [ 2549.443184] ? lock_release+0x680/0x680 [ 2549.444041] ? kmem_cache_alloc_trace+0x151/0x320 [ 2549.445082] ? v9fs_show_options+0x690/0x690 [ 2549.446028] ? trace_hardirqs_on+0x5b/0x180 [ 2549.446947] ? kasan_unpoison_shadow+0x33/0x50 [ 2549.447922] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2549.449012] v9fs_mount+0x79/0x8f0 [ 2549.449771] ? v9fs_write_inode+0x60/0x60 [ 2549.450657] legacy_get_tree+0x105/0x220 [ 2549.451524] vfs_get_tree+0x8e/0x300 [ 2549.452315] path_mount+0x1429/0x2120 [ 2549.453141] ? strncpy_from_user+0x9e/0x470 [ 2549.454062] ? finish_automount+0xa90/0xa90 [ 2549.454986] ? getname_flags.part.0+0x1dd/0x4f0 [ 2549.455975] ? _copy_from_user+0xfb/0x1b0 [ 2549.456876] __x64_sys_mount+0x282/0x300 [ 2549.457743] ? copy_mnt_ns+0xa00/0xa00 [ 2549.458579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.459704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.460813] do_syscall_64+0x33/0x40 [ 2549.461609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2549.462707] RIP: 0033:0x7fed66145b19 [ 2549.463502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2549.467447] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2549.469077] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2549.470600] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2549.472121] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2549.473649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2549.475185] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2549.476751] CPU: 0 PID: 13041 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2549.478296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.480100] Call Trace: [ 2549.480686] dump_stack+0x107/0x167 [ 2549.481477] should_fail.cold+0x5/0xa [ 2549.482319] should_failslab+0x5/0x20 [ 2549.483145] __kmalloc_track_caller+0x79/0x370 [ 2549.484135] ? match_number+0xaf/0x1d0 [ 2549.485018] kmemdup_nul+0x2d/0xa0 [ 2549.485806] match_number+0xaf/0x1d0 [ 2549.486626] ? match_u64+0x190/0x190 [ 2549.487447] ? __kmalloc_track_caller+0x2c6/0x370 [ 2549.488547] ? memcpy+0x39/0x60 [ 2549.489287] parse_opts.part.0+0x1f3/0x340 [ 2549.490221] ? p9_fd_show_options+0x1c0/0x1c0 [ 2549.491208] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.492353] ? trace_hardirqs_on+0x5b/0x180 [ 2549.493292] ? kfree+0xd7/0x340 [ 2549.494010] p9_fd_create+0x98/0x4a0 [ 2549.494814] ? p9_conn_create+0x510/0x510 [ 2549.495710] ? p9_client_create+0x798/0x1230 [ 2549.496674] ? kfree+0xd7/0x340 [ 2549.497386] ? do_raw_spin_unlock+0x4f/0x220 [ 2549.498348] p9_client_create+0x7ff/0x1230 [ 2549.499275] ? p9_client_flush+0x430/0x430 [ 2549.500197] ? trace_hardirqs_on+0x5b/0x180 [ 2549.501146] ? lockdep_init_map_type+0x2c7/0x780 [ 2549.502174] ? __raw_spin_lock_init+0x36/0x110 [ 2549.503170] v9fs_session_init+0x1dd/0x1680 [ 2549.504105] ? lock_release+0x680/0x680 [ 2549.504986] ? kmem_cache_alloc_trace+0x151/0x320 [ 2549.506029] ? v9fs_show_options+0x690/0x690 [ 2549.506986] ? trace_hardirqs_on+0x5b/0x180 [ 2549.507918] ? kasan_unpoison_shadow+0x33/0x50 [ 2549.508917] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2549.510019] v9fs_mount+0x79/0x8f0 [ 2549.510788] ? v9fs_write_inode+0x60/0x60 [ 2549.511687] legacy_get_tree+0x105/0x220 [ 2549.512584] vfs_get_tree+0x8e/0x300 [ 2549.513390] path_mount+0x1429/0x2120 [ 2549.514219] ? strncpy_from_user+0x9e/0x470 [ 2549.515153] ? finish_automount+0xa90/0xa90 [ 2549.516087] ? getname_flags.part.0+0x1dd/0x4f0 [ 2549.517102] ? _copy_from_user+0xfb/0x1b0 [ 2549.518016] __x64_sys_mount+0x282/0x300 [ 2549.518908] ? copy_mnt_ns+0xa00/0xa00 [ 2549.519752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.520895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.522052] do_syscall_64+0x33/0x40 [ 2549.522857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2549.523987] RIP: 0033:0x7f7b14970b19 [ 2549.524818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2549.528841] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2549.530502] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2549.532059] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2549.533618] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2549.535171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2549.536730] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2549.569634] loop4: detected capacity change from 0 to 8388096 [ 2549.585786] loop2: detected capacity change from 0 to 8388096 [ 2549.590458] nfs: Unknown parameter '-$' [ 2549.593384] nfs: Unknown parameter '-$' [ 2549.596674] loop3: detected capacity change from 0 to 8388096 [ 2549.599668] nfs: Unknown parameter '-$' [ 2549.605587] loop6: detected capacity change from 0 to 8388096 [ 2549.609285] nfs: Unknown parameter '-$' [ 2549.618404] 9pnet: Insufficient options for proto=fd 16:28:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x8, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:28:10 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 32) [ 2549.673308] loop5: detected capacity change from 0 to 8388096 [ 2549.685242] nfs: Unknown parameter '-$' 16:28:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:10 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 29) 16:28:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2549.837189] FAULT_INJECTION: forcing a failure. [ 2549.837189] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.839802] CPU: 1 PID: 13063 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2549.841283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.843038] Call Trace: [ 2549.843640] dump_stack+0x107/0x167 [ 2549.844436] should_fail.cold+0x5/0xa [ 2549.845245] ? create_object.isra.0+0x3a/0xa20 [ 2549.846211] should_failslab+0x5/0x20 [ 2549.847013] kmem_cache_alloc+0x5b/0x310 [ 2549.847909] create_object.isra.0+0x3a/0xa20 [ 2549.848861] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2549.849933] __kmalloc_track_caller+0x177/0x370 [ 2549.850922] ? match_number+0xaf/0x1d0 [ 2549.851792] kmemdup_nul+0x2d/0xa0 [ 2549.852557] match_number+0xaf/0x1d0 [ 2549.853342] ? match_u64+0x190/0x190 [ 2549.854129] ? __kmalloc_track_caller+0x2c6/0x370 [ 2549.855182] ? memcpy+0x39/0x60 [ 2549.855894] parse_opts.part.0+0x1f3/0x340 [ 2549.856812] ? p9_fd_show_options+0x1c0/0x1c0 [ 2549.857769] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.858882] ? trace_hardirqs_on+0x5b/0x180 [ 2549.859838] ? kfree+0xd7/0x340 [ 2549.860555] p9_fd_create+0x98/0x4a0 [ 2549.861538] ? p9_conn_create+0x510/0x510 [ 2549.862537] ? p9_client_create+0x798/0x1230 [ 2549.863490] ? kfree+0xd7/0x340 [ 2549.864215] p9_client_create+0x7ff/0x1230 [ 2549.865173] ? p9_client_flush+0x430/0x430 [ 2549.866082] ? trace_hardirqs_on+0x5b/0x180 [ 2549.867008] ? lockdep_init_map_type+0x2c7/0x780 [ 2549.868038] ? __raw_spin_lock_init+0x36/0x110 [ 2549.869040] v9fs_session_init+0x1dd/0x1680 [ 2549.869982] ? lock_release+0x680/0x680 [ 2549.870852] ? kmem_cache_alloc_trace+0x151/0x320 [ 2549.871889] ? v9fs_show_options+0x690/0x690 [ 2549.872865] ? trace_hardirqs_on+0x5b/0x180 [ 2549.873797] ? kasan_unpoison_shadow+0x33/0x50 [ 2549.874795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2549.875889] v9fs_mount+0x79/0x8f0 [ 2549.876702] ? v9fs_write_inode+0x60/0x60 [ 2549.877614] legacy_get_tree+0x105/0x220 [ 2549.878513] vfs_get_tree+0x8e/0x300 [ 2549.879324] path_mount+0x1429/0x2120 [ 2549.880159] ? strncpy_from_user+0x9e/0x470 [ 2549.881107] ? finish_automount+0xa90/0xa90 [ 2549.882024] ? getname_flags.part.0+0x1dd/0x4f0 [ 2549.883018] ? _copy_from_user+0xfb/0x1b0 [ 2549.883931] __x64_sys_mount+0x282/0x300 [ 2549.884822] ? copy_mnt_ns+0xa00/0xa00 [ 2549.885672] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.886805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.887920] do_syscall_64+0x33/0x40 [ 2549.888749] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2549.889846] RIP: 0033:0x7fed66145b19 [ 2549.890647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2549.894633] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2549.896276] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2549.897818] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2549.899356] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2549.900905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2549.902444] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 16:28:10 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x9, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:28:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2550.049781] FAULT_INJECTION: forcing a failure. [ 2550.049781] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.052402] CPU: 1 PID: 13072 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2550.053907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2550.055677] Call Trace: [ 2550.056242] dump_stack+0x107/0x167 [ 2550.057029] should_fail.cold+0x5/0xa [ 2550.057882] ? create_object.isra.0+0x3a/0xa20 [ 2550.058853] should_failslab+0x5/0x20 [ 2550.059657] kmem_cache_alloc+0x5b/0x310 [ 2550.060542] create_object.isra.0+0x3a/0xa20 [ 2550.061576] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2550.062666] __kmalloc_track_caller+0x177/0x370 [ 2550.063658] ? match_number+0xaf/0x1d0 [ 2550.064497] kmemdup_nul+0x2d/0xa0 [ 2550.065290] match_number+0xaf/0x1d0 [ 2550.066262] ? match_u64+0x190/0x190 [ 2550.067210] ? __kmalloc_track_caller+0x2c6/0x370 [ 2550.068256] ? memcpy+0x39/0x60 [ 2550.068979] parse_opts.part.0+0x1f3/0x340 [ 2550.069918] ? p9_fd_show_options+0x1c0/0x1c0 [ 2550.070875] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2550.071983] ? trace_hardirqs_on+0x5b/0x180 [ 2550.072948] ? kfree+0xd7/0x340 [ 2550.073656] p9_fd_create+0x98/0x4a0 [ 2550.074439] ? p9_conn_create+0x510/0x510 [ 2550.075317] ? p9_client_create+0x798/0x1230 [ 2550.076290] ? kfree+0xd7/0x340 [ 2550.077003] ? do_raw_spin_unlock+0x4f/0x220 [ 2550.077944] p9_client_create+0x7ff/0x1230 [ 2550.078848] ? p9_client_flush+0x430/0x430 [ 2550.079744] ? trace_hardirqs_on+0x5b/0x180 [ 2550.080704] ? lockdep_init_map_type+0x2c7/0x780 [ 2550.081710] ? __raw_spin_lock_init+0x36/0x110 [ 2550.082686] v9fs_session_init+0x1dd/0x1680 [ 2550.083598] ? lock_release+0x680/0x680 [ 2550.084501] ? kmem_cache_alloc_trace+0x151/0x320 [ 2550.085530] ? v9fs_show_options+0x690/0x690 [ 2550.086472] ? trace_hardirqs_on+0x5b/0x180 [ 2550.087424] ? kasan_unpoison_shadow+0x33/0x50 [ 2550.088432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2550.089524] v9fs_mount+0x79/0x8f0 [ 2550.090294] ? v9fs_write_inode+0x60/0x60 [ 2550.091198] legacy_get_tree+0x105/0x220 [ 2550.092075] vfs_get_tree+0x8e/0x300 [ 2550.092910] path_mount+0x1429/0x2120 [ 2550.093743] ? strncpy_from_user+0x9e/0x470 [ 2550.094670] ? finish_automount+0xa90/0xa90 [ 2550.095603] ? getname_flags.part.0+0x1dd/0x4f0 [ 2550.096629] ? _copy_from_user+0xfb/0x1b0 [ 2550.097531] __x64_sys_mount+0x282/0x300 [ 2550.098412] ? copy_mnt_ns+0xa00/0xa00 [ 2550.099263] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2550.100414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2550.101534] do_syscall_64+0x33/0x40 [ 2550.102338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2550.103437] RIP: 0033:0x7f7b14970b19 [ 2550.104286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2550.108276] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2550.109915] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2550.111470] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2550.113016] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2550.114555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2550.116096] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2550.142365] loop3: detected capacity change from 0 to 8388096 [ 2550.148464] nfs: Unknown parameter '-$' [ 2550.196672] loop2: detected capacity change from 0 to 8388096 [ 2550.205508] nfs: Unknown parameter '-$' [ 2550.264551] loop5: detected capacity change from 0 to 8388096 [ 2550.266856] nfs: Unknown parameter '-$' [ 2550.285816] loop6: detected capacity change from 0 to 8388096 [ 2550.287836] nfs: Unknown parameter '-$' [ 2550.338334] loop4: detected capacity change from 0 to 8388096 [ 2550.341697] nfs: Unknown parameter '-$' 16:28:31 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 33) 16:28:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0xa, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:28:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:31 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:31 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 30) [ 2570.335294] FAULT_INJECTION: forcing a failure. [ 2570.335294] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.336835] CPU: 0 PID: 13098 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2570.337674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.338660] Call Trace: [ 2570.338984] dump_stack+0x107/0x167 [ 2570.339428] should_fail.cold+0x5/0xa [ 2570.339894] ? create_object.isra.0+0x3a/0xa20 [ 2570.340570] should_failslab+0x5/0x20 [ 2570.341024] kmem_cache_alloc+0x5b/0x310 [ 2570.341503] create_object.isra.0+0x3a/0xa20 [ 2570.342021] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2570.342628] __kmalloc_track_caller+0x177/0x370 [ 2570.343164] ? match_number+0xaf/0x1d0 [ 2570.343630] kmemdup_nul+0x2d/0xa0 [ 2570.344058] match_number+0xaf/0x1d0 [ 2570.344495] ? match_u64+0x190/0x190 [ 2570.344928] ? __kmalloc_track_caller+0x2c6/0x370 [ 2570.345496] ? memcpy+0x39/0x60 [ 2570.345874] parse_opts.part.0+0x1f3/0x340 [ 2570.346367] ? p9_fd_show_options+0x1c0/0x1c0 [ 2570.346887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.347493] ? trace_hardirqs_on+0x5b/0x180 [ 2570.347990] ? kfree+0xd7/0x340 [ 2570.348377] p9_fd_create+0x98/0x4a0 [ 2570.348808] ? p9_conn_create+0x510/0x510 [ 2570.349283] ? p9_client_create+0x798/0x1230 [ 2570.349786] ? kfree+0xd7/0x340 [ 2570.350174] p9_client_create+0x7ff/0x1230 [ 2570.350659] ? p9_client_flush+0x430/0x430 [ 2570.351147] ? trace_hardirqs_on+0x5b/0x180 [ 2570.351698] ? lockdep_init_map_type+0x2c7/0x780 [ 2570.352246] ? __raw_spin_lock_init+0x36/0x110 [ 2570.352781] v9fs_session_init+0x1dd/0x1680 [ 2570.353277] ? lock_release+0x680/0x680 [ 2570.353739] ? kmem_cache_alloc_trace+0x151/0x320 [ 2570.354306] ? v9fs_show_options+0x690/0x690 [ 2570.354822] ? trace_hardirqs_on+0x5b/0x180 [ 2570.355321] ? kasan_unpoison_shadow+0x33/0x50 [ 2570.355861] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2570.356452] v9fs_mount+0x79/0x8f0 [ 2570.356867] ? v9fs_write_inode+0x60/0x60 [ 2570.357346] legacy_get_tree+0x105/0x220 [ 2570.357821] vfs_get_tree+0x8e/0x300 [ 2570.358248] path_mount+0x1429/0x2120 [ 2570.358693] ? strncpy_from_user+0x9e/0x470 [ 2570.359185] ? finish_automount+0xa90/0xa90 [ 2570.359688] ? getname_flags.part.0+0x1dd/0x4f0 [ 2570.360225] ? _copy_from_user+0xfb/0x1b0 [ 2570.360717] __x64_sys_mount+0x282/0x300 [ 2570.361188] ? copy_mnt_ns+0xa00/0xa00 [ 2570.361635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.362247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.362844] do_syscall_64+0x33/0x40 [ 2570.363280] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2570.363870] RIP: 0033:0x7fed66145b19 [ 2570.364305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2570.366447] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2570.367326] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2570.368151] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2570.368991] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2570.369828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2570.370652] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2570.395742] loop4: detected capacity change from 0 to 8388096 [ 2570.398131] nfs: Unknown parameter '-$' [ 2570.412833] loop2: detected capacity change from 0 to 8388096 [ 2570.421523] nfs: Unknown parameter '-$' 16:28:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0xb, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2570.427717] loop3: detected capacity change from 0 to 8388096 [ 2570.428837] nfs: Unknown parameter '-$' [ 2570.434770] loop6: detected capacity change from 0 to 8388096 [ 2570.438519] FAULT_INJECTION: forcing a failure. [ 2570.438519] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.442442] CPU: 1 PID: 13108 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2570.443983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.445881] Call Trace: [ 2570.446491] dump_stack+0x107/0x167 [ 2570.447322] should_fail.cold+0x5/0xa [ 2570.448268] should_failslab+0x5/0x20 [ 2570.449149] __kmalloc_track_caller+0x79/0x370 [ 2570.450198] ? match_number+0xaf/0x1d0 [ 2570.451074] ? kfree+0xd7/0x340 [ 2570.451827] kmemdup_nul+0x2d/0xa0 [ 2570.452641] match_number+0xaf/0x1d0 [ 2570.453468] ? match_u64+0x190/0x190 [ 2570.454317] ? __kmalloc_track_caller+0x2c6/0x370 [ 2570.455389] ? memcpy+0x39/0x60 [ 2570.456108] parse_opts.part.0+0x1f3/0x340 [ 2570.457064] ? p9_fd_show_options+0x1c0/0x1c0 [ 2570.458044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.459211] ? trace_hardirqs_on+0x5b/0x180 [ 2570.460192] ? kfree+0xd7/0x340 [ 2570.460943] p9_fd_create+0x98/0x4a0 [ 2570.461769] ? p9_conn_create+0x510/0x510 [ 2570.462710] ? p9_client_create+0x798/0x1230 [ 2570.463699] ? kfree+0xd7/0x340 [ 2570.464456] ? do_raw_spin_unlock+0x4f/0x220 [ 2570.465456] p9_client_create+0x7ff/0x1230 [ 2570.466406] ? p9_client_flush+0x430/0x430 [ 2570.467333] ? trace_hardirqs_on+0x5b/0x180 [ 2570.468315] ? lockdep_init_map_type+0x2c7/0x780 [ 2570.469398] ? __raw_spin_lock_init+0x36/0x110 [ 2570.470435] v9fs_session_init+0x1dd/0x1680 [ 2570.471417] ? lock_release+0x680/0x680 [ 2570.472313] ? kmem_cache_alloc_trace+0x151/0x320 [ 2570.473602] ? v9fs_show_options+0x690/0x690 [ 2570.474738] ? trace_hardirqs_on+0x5b/0x180 [ 2570.475828] ? kasan_unpoison_shadow+0x33/0x50 [ 2570.477003] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2570.478104] v9fs_mount+0x79/0x8f0 [ 2570.478850] ? v9fs_write_inode+0x60/0x60 [ 2570.479710] legacy_get_tree+0x105/0x220 [ 2570.480573] vfs_get_tree+0x8e/0x300 [ 2570.481344] path_mount+0x1429/0x2120 [ 2570.482143] ? strncpy_from_user+0x9e/0x470 [ 2570.483035] ? finish_automount+0xa90/0xa90 [ 2570.483935] ? getname_flags.part.0+0x1dd/0x4f0 [ 2570.484895] ? _copy_from_user+0xfb/0x1b0 [ 2570.485757] __x64_sys_mount+0x282/0x300 [ 2570.486603] ? copy_mnt_ns+0xa00/0xa00 [ 2570.487414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.488505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.489576] do_syscall_64+0x33/0x40 [ 2570.490353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2570.491437] RIP: 0033:0x7f7b14970b19 [ 2570.491541] nfs: Unknown parameter '-$' [ 2570.492236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2570.492252] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2570.498144] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2570.499617] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2570.501103] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2570.502581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2570.504052] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2570.505846] 9pnet: Insufficient options for proto=fd 16:28:31 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 34) 16:28:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:31 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 31) 16:28:31 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2570.677389] FAULT_INJECTION: forcing a failure. [ 2570.677389] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.678707] CPU: 0 PID: 13125 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2570.679492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.680433] Call Trace: [ 2570.680741] dump_stack+0x107/0x167 [ 2570.681157] should_fail.cold+0x5/0xa [ 2570.681585] ? p9_fd_create+0x161/0x4a0 [ 2570.682040] should_failslab+0x5/0x20 [ 2570.682473] kmem_cache_alloc_trace+0x55/0x320 [ 2570.682991] p9_fd_create+0x161/0x4a0 [ 2570.683421] ? p9_conn_create+0x510/0x510 [ 2570.683894] ? p9_client_create+0x798/0x1230 [ 2570.684395] ? kfree+0xd7/0x340 [ 2570.684782] p9_client_create+0x7ff/0x1230 [ 2570.685267] ? p9_client_flush+0x430/0x430 [ 2570.685747] ? trace_hardirqs_on+0x5b/0x180 [ 2570.686239] ? lockdep_init_map_type+0x2c7/0x780 [ 2570.686778] ? __raw_spin_lock_init+0x36/0x110 [ 2570.687306] v9fs_session_init+0x1dd/0x1680 [ 2570.687792] ? lock_release+0x680/0x680 [ 2570.688252] ? kmem_cache_alloc_trace+0x151/0x320 [ 2570.688816] ? v9fs_show_options+0x690/0x690 [ 2570.689324] ? trace_hardirqs_on+0x5b/0x180 [ 2570.689814] ? kasan_unpoison_shadow+0x33/0x50 [ 2570.690337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2570.690915] v9fs_mount+0x79/0x8f0 [ 2570.691319] ? v9fs_write_inode+0x60/0x60 [ 2570.691790] legacy_get_tree+0x105/0x220 [ 2570.692255] vfs_get_tree+0x8e/0x300 [ 2570.692685] path_mount+0x1429/0x2120 [ 2570.693122] ? strncpy_from_user+0x9e/0x470 [ 2570.693609] ? finish_automount+0xa90/0xa90 [ 2570.694104] ? getname_flags.part.0+0x1dd/0x4f0 [ 2570.694633] ? _copy_from_user+0xfb/0x1b0 [ 2570.695110] __x64_sys_mount+0x282/0x300 [ 2570.695572] ? copy_mnt_ns+0xa00/0xa00 [ 2570.696018] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.696623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.697212] do_syscall_64+0x33/0x40 [ 2570.697694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2570.698280] RIP: 0033:0x7fed66145b19 [ 2570.698710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2570.700806] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2570.701673] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2570.702488] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2570.703298] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2570.704105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2570.704928] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2570.754685] loop5: detected capacity change from 0 to 8388096 [ 2570.756565] nfs: Unknown parameter '-$' [ 2570.761510] loop4: detected capacity change from 0 to 8388096 [ 2570.764525] nfs: Unknown parameter '-$' [ 2570.809107] FAULT_INJECTION: forcing a failure. [ 2570.809107] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.811510] CPU: 1 PID: 13137 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2570.812945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.814666] Call Trace: [ 2570.815231] dump_stack+0x107/0x167 [ 2570.816002] should_fail.cold+0x5/0xa [ 2570.816806] ? create_object.isra.0+0x3a/0xa20 [ 2570.817766] should_failslab+0x5/0x20 [ 2570.818568] kmem_cache_alloc+0x5b/0x310 [ 2570.819414] create_object.isra.0+0x3a/0xa20 [ 2570.820338] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2570.821414] __kmalloc_track_caller+0x177/0x370 [ 2570.822386] ? match_number+0xaf/0x1d0 [ 2570.823205] kmemdup_nul+0x2d/0xa0 [ 2570.823966] match_number+0xaf/0x1d0 [ 2570.824928] ? match_u64+0x190/0x190 [ 2570.825713] ? __kmalloc_track_caller+0x2c6/0x370 [ 2570.826717] ? memcpy+0x39/0x60 [ 2570.827570] parse_opts.part.0+0x1f3/0x340 [ 2570.828461] ? p9_fd_show_options+0x1c0/0x1c0 [ 2570.829630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.830729] ? trace_hardirqs_on+0x5b/0x180 [ 2570.831840] ? kfree+0xd7/0x340 [ 2570.832541] p9_fd_create+0x98/0x4a0 [ 2570.833516] ? p9_conn_create+0x510/0x510 [ 2570.834386] ? p9_client_create+0x798/0x1230 [ 2570.835319] ? kfree+0xd7/0x340 [ 2570.836172] ? do_raw_spin_unlock+0x4f/0x220 [ 2570.837113] p9_client_create+0x7ff/0x1230 [ 2570.838012] ? p9_client_flush+0x430/0x430 [ 2570.838902] ? trace_hardirqs_on+0x5b/0x180 [ 2570.839796] ? lockdep_init_map_type+0x2c7/0x780 [ 2570.840822] ? __raw_spin_lock_init+0x36/0x110 [ 2570.841808] v9fs_session_init+0x1dd/0x1680 [ 2570.842716] ? lock_release+0x680/0x680 [ 2570.843557] ? kmem_cache_alloc_trace+0x151/0x320 [ 2570.844559] ? v9fs_show_options+0x690/0x690 [ 2570.845503] ? trace_hardirqs_on+0x5b/0x180 [ 2570.846406] ? kasan_unpoison_shadow+0x33/0x50 [ 2570.847360] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2570.848429] v9fs_mount+0x79/0x8f0 [ 2570.849192] ? v9fs_write_inode+0x60/0x60 [ 2570.850088] legacy_get_tree+0x105/0x220 [ 2570.850933] vfs_get_tree+0x8e/0x300 [ 2570.851714] path_mount+0x1429/0x2120 [ 2570.852515] ? strncpy_from_user+0x9e/0x470 [ 2570.853418] ? finish_automount+0xa90/0xa90 [ 2570.854530] ? getname_flags.part.0+0x1dd/0x4f0 [ 2570.855635] ? _copy_from_user+0xfb/0x1b0 [ 2570.856556] __x64_sys_mount+0x282/0x300 [ 2570.857418] ? copy_mnt_ns+0xa00/0xa00 [ 2570.858253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.859380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.860475] do_syscall_64+0x33/0x40 [ 2570.861279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2570.862362] RIP: 0033:0x7f7b14970b19 [ 2570.863146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2570.866991] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2570.868612] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2570.870095] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2570.871562] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2570.873086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2570.874598] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2570.898354] loop2: detected capacity change from 0 to 8388096 [ 2570.903336] nfs: Unknown parameter '-$' [ 2570.967228] loop3: detected capacity change from 0 to 8388096 [ 2570.981575] nfs: Unknown parameter '-$' 16:28:48 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:48 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:48 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 32) 16:28:48 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 35) 16:28:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x10, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2587.285707] FAULT_INJECTION: forcing a failure. [ 2587.285707] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.288180] CPU: 1 PID: 13159 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2587.289447] loop5: detected capacity change from 0 to 8388096 [ 2587.289682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2587.289697] Call Trace: [ 2587.293262] dump_stack+0x107/0x167 [ 2587.294033] should_fail.cold+0x5/0xa [ 2587.294846] ? create_object.isra.0+0x3a/0xa20 [ 2587.295836] should_failslab+0x5/0x20 [ 2587.296651] kmem_cache_alloc+0x5b/0x310 [ 2587.297522] ? p9_fd_show_options+0x1c0/0x1c0 [ 2587.297955] nfs: Unknown parameter '-$' [ 2587.298482] create_object.isra.0+0x3a/0xa20 [ 2587.298560] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2587.298584] kmem_cache_alloc_trace+0x151/0x320 [ 2587.298606] p9_fd_create+0x161/0x4a0 [ 2587.298621] ? p9_conn_create+0x510/0x510 [ 2587.298637] ? p9_client_create+0x798/0x1230 [ 2587.298654] ? kfree+0xd7/0x340 [ 2587.298680] p9_client_create+0x7ff/0x1230 [ 2587.298706] ? p9_client_flush+0x430/0x430 [ 2587.298725] ? trace_hardirqs_on+0x5b/0x180 [ 2587.298755] ? lockdep_init_map_type+0x2c7/0x780 [ 2587.309385] ? __raw_spin_lock_init+0x36/0x110 [ 2587.310354] v9fs_session_init+0x1dd/0x1680 [ 2587.311264] ? lock_release+0x680/0x680 [ 2587.312111] ? kmem_cache_alloc_trace+0x151/0x320 [ 2587.313135] ? v9fs_show_options+0x690/0x690 [ 2587.314070] ? trace_hardirqs_on+0x5b/0x180 [ 2587.314975] ? kasan_unpoison_shadow+0x33/0x50 [ 2587.315939] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2587.317022] v9fs_mount+0x79/0x8f0 [ 2587.317780] ? v9fs_write_inode+0x60/0x60 [ 2587.318663] legacy_get_tree+0x105/0x220 [ 2587.319530] vfs_get_tree+0x8e/0x300 [ 2587.320318] path_mount+0x1429/0x2120 [ 2587.321133] ? strncpy_from_user+0x9e/0x470 [ 2587.322041] ? finish_automount+0xa90/0xa90 [ 2587.322952] ? getname_flags.part.0+0x1dd/0x4f0 [ 2587.323933] ? _copy_from_user+0xfb/0x1b0 [ 2587.324825] __x64_sys_mount+0x282/0x300 [ 2587.325683] ? copy_mnt_ns+0xa00/0xa00 [ 2587.326513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2587.327626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2587.328736] do_syscall_64+0x33/0x40 [ 2587.329523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2587.330630] RIP: 0033:0x7fed66145b19 [ 2587.331581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2587.335804] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2587.337445] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2587.338949] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2587.340469] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2587.341982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2587.343482] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2587.356355] loop3: detected capacity change from 0 to 8388096 [ 2587.372648] FAULT_INJECTION: forcing a failure. [ 2587.372648] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.375239] CPU: 1 PID: 13161 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2587.376713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2587.377625] nfs: Unknown parameter 'rfdno' [ 2587.378517] Call Trace: [ 2587.378539] dump_stack+0x107/0x167 [ 2587.378558] should_fail.cold+0x5/0xa [ 2587.378581] ? p9_fd_create+0x161/0x4a0 [ 2587.382382] should_failslab+0x5/0x20 [ 2587.383189] kmem_cache_alloc_trace+0x55/0x320 [ 2587.384163] p9_fd_create+0x161/0x4a0 [ 2587.384980] ? p9_conn_create+0x510/0x510 [ 2587.385862] ? p9_client_create+0x798/0x1230 [ 2587.386800] ? kfree+0xd7/0x340 [ 2587.387494] ? do_raw_spin_unlock+0x4f/0x220 [ 2587.388421] p9_client_create+0x7ff/0x1230 [ 2587.389330] ? p9_client_flush+0x430/0x430 [ 2587.390227] ? trace_hardirqs_on+0x5b/0x180 [ 2587.391143] ? lockdep_init_map_type+0x2c7/0x780 [ 2587.392147] ? __raw_spin_lock_init+0x36/0x110 [ 2587.393120] v9fs_session_init+0x1dd/0x1680 [ 2587.394043] ? lock_release+0x680/0x680 [ 2587.394893] ? kmem_cache_alloc_trace+0x151/0x320 [ 2587.395909] ? v9fs_show_options+0x690/0x690 [ 2587.396854] ? trace_hardirqs_on+0x5b/0x180 [ 2587.397760] ? kasan_unpoison_shadow+0x33/0x50 [ 2587.398720] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2587.399790] v9fs_mount+0x79/0x8f0 [ 2587.400540] ? v9fs_write_inode+0x60/0x60 [ 2587.401433] legacy_get_tree+0x105/0x220 [ 2587.402290] vfs_get_tree+0x8e/0x300 [ 2587.403077] path_mount+0x1429/0x2120 [ 2587.403887] ? strncpy_from_user+0x9e/0x470 [ 2587.404803] ? finish_automount+0xa90/0xa90 [ 2587.405713] ? getname_flags.part.0+0x1dd/0x4f0 [ 2587.406695] ? _copy_from_user+0xfb/0x1b0 [ 2587.407585] __x64_sys_mount+0x282/0x300 [ 2587.408449] ? copy_mnt_ns+0xa00/0xa00 [ 2587.409297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2587.410403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2587.411492] do_syscall_64+0x33/0x40 [ 2587.412280] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2587.413490] RIP: 0033:0x7f7b14970b19 [ 2587.414415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2587.418622] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2587.420257] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2587.421827] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2587.423335] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2587.424843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2587.426362] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2587.459614] loop4: detected capacity change from 0 to 8388096 [ 2587.465820] nfs: Unknown parameter '-$' [ 2587.487512] loop6: detected capacity change from 0 to 8388096 [ 2587.495516] nfs: Unknown parameter '-$' 16:28:48 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 33) 16:28:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x18, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:28:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:48 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:48 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 36) 16:28:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:28:48 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2587.735296] FAULT_INJECTION: forcing a failure. [ 2587.735296] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.737179] CPU: 1 PID: 13184 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2587.738293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2587.739587] Call Trace: [ 2587.740016] dump_stack+0x107/0x167 [ 2587.740583] should_fail.cold+0x5/0xa [ 2587.741184] ? create_object.isra.0+0x3a/0xa20 [ 2587.741918] should_failslab+0x5/0x20 [ 2587.742514] kmem_cache_alloc+0x5b/0x310 [ 2587.743148] ? p9_fd_show_options+0x1c0/0x1c0 [ 2587.743850] create_object.isra.0+0x3a/0xa20 [ 2587.744541] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2587.745364] kmem_cache_alloc_trace+0x151/0x320 [ 2587.746108] p9_fd_create+0x161/0x4a0 [ 2587.746709] ? p9_conn_create+0x510/0x510 [ 2587.747352] ? p9_client_create+0x798/0x1230 [ 2587.748059] ? kfree+0xd7/0x340 [ 2587.748571] ? do_raw_spin_unlock+0x4f/0x220 [ 2587.749290] p9_client_create+0x7ff/0x1230 [ 2587.749959] ? p9_client_flush+0x430/0x430 [ 2587.750615] ? trace_hardirqs_on+0x5b/0x180 [ 2587.751288] ? lockdep_init_map_type+0x2c7/0x780 [ 2587.752033] ? __raw_spin_lock_init+0x36/0x110 [ 2587.752761] v9fs_session_init+0x1dd/0x1680 [ 2587.753470] ? lock_release+0x680/0x680 [ 2587.754114] ? kmem_cache_alloc_trace+0x151/0x320 [ 2587.754861] ? v9fs_show_options+0x690/0x690 [ 2587.755571] ? trace_hardirqs_on+0x5b/0x180 [ 2587.756233] ? kasan_unpoison_shadow+0x33/0x50 [ 2587.756957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2587.757750] v9fs_mount+0x79/0x8f0 [ 2587.758303] ? v9fs_write_inode+0x60/0x60 [ 2587.758955] legacy_get_tree+0x105/0x220 [ 2587.759590] vfs_get_tree+0x8e/0x300 [ 2587.760175] path_mount+0x1429/0x2120 [ 2587.760773] ? strncpy_from_user+0x9e/0x470 [ 2587.761465] ? finish_automount+0xa90/0xa90 [ 2587.762151] ? getname_flags.part.0+0x1dd/0x4f0 [ 2587.762903] ? _copy_from_user+0xfb/0x1b0 [ 2587.763562] __x64_sys_mount+0x282/0x300 [ 2587.764192] ? copy_mnt_ns+0xa00/0xa00 [ 2587.764809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2587.765620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2587.766500] do_syscall_64+0x33/0x40 [ 2587.767087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2587.767877] RIP: 0033:0x7f7b14970b19 [ 2587.768462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2587.771336] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2587.772510] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2587.773631] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2587.774729] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2587.775834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2587.776953] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 16:28:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x2e, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2587.838429] FAULT_INJECTION: forcing a failure. [ 2587.838429] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.840526] CPU: 0 PID: 13189 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2587.841809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2587.843343] Call Trace: [ 2587.843826] dump_stack+0x107/0x167 [ 2587.844569] should_fail.cold+0x5/0xa [ 2587.845299] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 2587.846269] should_failslab+0x5/0x20 [ 2587.846971] kmem_cache_alloc+0x5b/0x310 [ 2587.847729] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2587.848676] p9_client_rpc+0x220/0x1370 [ 2587.849429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2587.850400] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2587.851383] ? pipe_poll+0x21b/0x800 [ 2587.852069] ? p9_fd_close+0x4a0/0x4a0 [ 2587.852779] ? wait_for_partner+0x3c0/0x3c0 [ 2587.853569] ? p9_fd_poll+0x1e0/0x2c0 [ 2587.854273] ? p9_fd_create+0x357/0x4a0 [ 2587.855005] ? p9_conn_create+0x510/0x510 [ 2587.855778] ? p9_client_create+0x798/0x1230 [ 2587.856591] ? kfree+0xd7/0x340 [ 2587.857200] p9_client_create+0xa76/0x1230 [ 2587.857988] ? p9_client_flush+0x430/0x430 [ 2587.858767] ? trace_hardirqs_on+0x5b/0x180 [ 2587.859565] ? lockdep_init_map_type+0x2c7/0x780 [ 2587.860433] ? __raw_spin_lock_init+0x36/0x110 [ 2587.861270] v9fs_session_init+0x1dd/0x1680 [ 2587.862066] ? lock_release+0x680/0x680 [ 2587.862812] ? kmem_cache_alloc_trace+0x151/0x320 [ 2587.863690] ? v9fs_show_options+0x690/0x690 [ 2587.864502] ? trace_hardirqs_on+0x5b/0x180 [ 2587.865294] ? kasan_unpoison_shadow+0x33/0x50 [ 2587.866122] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2587.867043] v9fs_mount+0x79/0x8f0 [ 2587.867684] ? v9fs_write_inode+0x60/0x60 [ 2587.868439] legacy_get_tree+0x105/0x220 [ 2587.869200] vfs_get_tree+0x8e/0x300 [ 2587.869905] path_mount+0x1429/0x2120 [ 2587.870608] ? strncpy_from_user+0x9e/0x470 [ 2587.871405] ? finish_automount+0xa90/0xa90 [ 2587.872196] ? getname_flags.part.0+0x1dd/0x4f0 [ 2587.873054] ? _copy_from_user+0xfb/0x1b0 [ 2587.873817] __x64_sys_mount+0x282/0x300 [ 2587.874547] ? copy_mnt_ns+0xa00/0xa00 [ 2587.875251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2587.876203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2587.877153] do_syscall_64+0x33/0x40 [ 2587.877832] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2587.878755] RIP: 0033:0x7fed66145b19 [ 2587.879428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2587.882816] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2587.884204] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2587.885498] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2587.886795] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2587.888091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2587.889394] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2587.916305] loop4: detected capacity change from 0 to 8388096 [ 2587.918514] nfs: Unknown parameter '-$' [ 2587.919357] loop2: detected capacity change from 0 to 8388096 [ 2587.922543] nfs: Unknown parameter '-$' 16:28:48 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 37) [ 2587.929817] loop5: detected capacity change from 0 to 8388096 [ 2587.932682] nfs: Unknown parameter '-$' 16:28:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2588.014748] loop6: detected capacity change from 0 to 8388096 [ 2588.032435] nfs: Unknown parameter '-$' 16:28:48 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 34) [ 2588.094024] FAULT_INJECTION: forcing a failure. [ 2588.094024] name failslab, interval 1, probability 0, space 0, times 0 [ 2588.095842] CPU: 1 PID: 13202 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2588.096948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2588.098240] Call Trace: [ 2588.098649] dump_stack+0x107/0x167 [ 2588.099236] should_fail.cold+0x5/0xa [ 2588.099840] ? create_object.isra.0+0x3a/0xa20 [ 2588.100587] should_failslab+0x5/0x20 [ 2588.101193] kmem_cache_alloc+0x5b/0x310 [ 2588.101836] create_object.isra.0+0x3a/0xa20 [ 2588.102525] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2588.103317] kmem_cache_alloc+0x159/0x310 [ 2588.103963] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2588.104757] p9_client_rpc+0x220/0x1370 [ 2588.105396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.106227] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2588.107067] ? pipe_poll+0x21b/0x800 [ 2588.107638] ? p9_fd_close+0x4a0/0x4a0 [ 2588.108256] ? wait_for_partner+0x3c0/0x3c0 [ 2588.108982] ? p9_fd_poll+0x1e0/0x2c0 [ 2588.109575] ? p9_fd_create+0x357/0x4a0 [ 2588.110195] ? p9_conn_create+0x510/0x510 [ 2588.110832] ? p9_client_create+0x798/0x1230 [ 2588.111544] ? kfree+0xd7/0x340 [ 2588.112079] p9_client_create+0xa76/0x1230 [ 2588.112911] ? p9_client_flush+0x430/0x430 [ 2588.113568] ? trace_hardirqs_on+0x5b/0x180 [ 2588.114232] ? lockdep_init_map_type+0x2c7/0x780 [ 2588.114977] ? __raw_spin_lock_init+0x36/0x110 [ 2588.115686] v9fs_session_init+0x1dd/0x1680 [ 2588.116371] ? lock_release+0x680/0x680 [ 2588.117010] ? kmem_cache_alloc_trace+0x151/0x320 [ 2588.117774] ? v9fs_show_options+0x690/0x690 [ 2588.118485] ? trace_hardirqs_on+0x5b/0x180 [ 2588.119189] ? kasan_unpoison_shadow+0x33/0x50 [ 2588.119923] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2588.120723] v9fs_mount+0x79/0x8f0 [ 2588.121313] ? v9fs_write_inode+0x60/0x60 [ 2588.121973] legacy_get_tree+0x105/0x220 [ 2588.122629] vfs_get_tree+0x8e/0x300 [ 2588.123231] path_mount+0x1429/0x2120 [ 2588.123820] ? strncpy_from_user+0x9e/0x470 [ 2588.124519] ? finish_automount+0xa90/0xa90 [ 2588.125204] ? getname_flags.part.0+0x1dd/0x4f0 [ 2588.125957] ? _copy_from_user+0xfb/0x1b0 [ 2588.126602] __x64_sys_mount+0x282/0x300 [ 2588.127225] ? copy_mnt_ns+0xa00/0xa00 [ 2588.127834] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.128658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2588.129489] do_syscall_64+0x33/0x40 [ 2588.130083] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2588.130902] RIP: 0033:0x7fed66145b19 [ 2588.131499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2588.134433] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2588.135644] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2588.136745] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2588.137843] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2588.138959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2588.140100] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2588.238363] loop2: detected capacity change from 0 to 8388096 [ 2588.243780] FAULT_INJECTION: forcing a failure. [ 2588.243780] name failslab, interval 1, probability 0, space 0, times 0 [ 2588.245579] CPU: 0 PID: 13206 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2588.246645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2588.247801] Call Trace: [ 2588.248176] dump_stack+0x107/0x167 [ 2588.248691] should_fail.cold+0x5/0xa [ 2588.249298] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 2588.250052] should_failslab+0x5/0x20 [ 2588.250590] kmem_cache_alloc+0x5b/0x310 [ 2588.251167] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2588.251870] p9_client_rpc+0x220/0x1370 [ 2588.252422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.253158] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2588.253899] ? pipe_poll+0x21b/0x800 [ 2588.254409] ? p9_fd_close+0x4a0/0x4a0 [ 2588.254944] ? wait_for_partner+0x3c0/0x3c0 [ 2588.255538] ? p9_fd_poll+0x1e0/0x2c0 [ 2588.256066] ? p9_fd_create+0x357/0x4a0 [ 2588.256611] ? p9_conn_create+0x510/0x510 [ 2588.257192] ? p9_client_create+0x798/0x1230 [ 2588.257793] ? kfree+0xd7/0x340 [ 2588.258243] ? do_raw_spin_unlock+0x4f/0x220 [ 2588.258846] p9_client_create+0xa76/0x1230 [ 2588.259428] ? p9_client_flush+0x430/0x430 [ 2588.260006] ? trace_hardirqs_on+0x5b/0x180 [ 2588.260595] ? lockdep_init_map_type+0x2c7/0x780 [ 2588.261251] ? __raw_spin_lock_init+0x36/0x110 [ 2588.261876] v9fs_session_init+0x1dd/0x1680 [ 2588.262465] ? lock_release+0x680/0x680 [ 2588.263014] ? kmem_cache_alloc_trace+0x151/0x320 [ 2588.263679] ? v9fs_show_options+0x690/0x690 [ 2588.264285] ? trace_hardirqs_on+0x5b/0x180 [ 2588.264879] ? kasan_unpoison_shadow+0x33/0x50 [ 2588.265512] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2588.266209] v9fs_mount+0x79/0x8f0 [ 2588.266697] ? v9fs_write_inode+0x60/0x60 [ 2588.267263] legacy_get_tree+0x105/0x220 [ 2588.267817] vfs_get_tree+0x8e/0x300 [ 2588.268326] path_mount+0x1429/0x2120 [ 2588.268854] ? strncpy_from_user+0x9e/0x470 [ 2588.269441] ? finish_automount+0xa90/0xa90 [ 2588.270032] ? getname_flags.part.0+0x1dd/0x4f0 [ 2588.270659] ? _copy_from_user+0xfb/0x1b0 [ 2588.271229] __x64_sys_mount+0x282/0x300 [ 2588.271778] ? copy_mnt_ns+0xa00/0xa00 [ 2588.272313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.273033] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2588.273728] do_syscall_64+0x33/0x40 [ 2588.274235] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2588.274925] RIP: 0033:0x7f7b14970b19 [ 2588.275433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2588.277953] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2588.279002] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2588.279990] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2588.280965] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2588.281957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2588.282450] nfs: Unknown parameter '-$' [ 2588.282925] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 16:29:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x48, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:29:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:03 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:03 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 38) 16:29:03 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 35) 16:29:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2602.232967] loop5: detected capacity change from 0 to 8388096 [ 2602.235177] nfs: Unknown parameter '-$' [ 2602.248478] FAULT_INJECTION: forcing a failure. [ 2602.248478] name failslab, interval 1, probability 0, space 0, times 0 [ 2602.249297] loop2: detected capacity change from 0 to 8388096 [ 2602.250967] CPU: 0 PID: 13230 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2602.252617] nfs: Unknown parameter '-$' [ 2602.253085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2602.253091] Call Trace: [ 2602.253115] dump_stack+0x107/0x167 [ 2602.253136] should_fail.cold+0x5/0xa [ 2602.257396] ? p9_fcall_init+0x97/0x290 [ 2602.258236] should_failslab+0x5/0x20 [ 2602.259030] __kmalloc+0x72/0x390 [ 2602.259770] p9_fcall_init+0x97/0x290 [ 2602.260589] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2602.261677] p9_client_rpc+0x220/0x1370 [ 2602.262510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2602.263646] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2602.264777] ? pipe_poll+0x21b/0x800 [ 2602.265560] ? p9_fd_close+0x4a0/0x4a0 [ 2602.266383] ? wait_for_partner+0x3c0/0x3c0 [ 2602.267299] ? p9_fd_poll+0x1e0/0x2c0 [ 2602.268096] ? p9_fd_create+0x357/0x4a0 [ 2602.268958] ? p9_conn_create+0x510/0x510 [ 2602.269841] ? p9_client_create+0x798/0x1230 [ 2602.270761] ? kfree+0xd7/0x340 [ 2602.271458] p9_client_create+0xa76/0x1230 [ 2602.272355] ? p9_client_flush+0x430/0x430 [ 2602.273252] ? trace_hardirqs_on+0x5b/0x180 [ 2602.274159] ? lockdep_init_map_type+0x2c7/0x780 [ 2602.275170] ? __raw_spin_lock_init+0x36/0x110 [ 2602.276131] v9fs_session_init+0x1dd/0x1680 [ 2602.277055] ? lock_release+0x680/0x680 [ 2602.277890] ? kmem_cache_alloc_trace+0x151/0x320 [ 2602.278878] FAULT_INJECTION: forcing a failure. [ 2602.278878] name failslab, interval 1, probability 0, space 0, times 0 [ 2602.281185] ? v9fs_show_options+0x690/0x690 [ 2602.282109] ? trace_hardirqs_on+0x5b/0x180 [ 2602.283025] ? kasan_unpoison_shadow+0x33/0x50 [ 2602.283983] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2602.285055] v9fs_mount+0x79/0x8f0 [ 2602.285796] ? v9fs_write_inode+0x60/0x60 [ 2602.286742] legacy_get_tree+0x105/0x220 [ 2602.287592] vfs_get_tree+0x8e/0x300 [ 2602.288386] path_mount+0x1429/0x2120 [ 2602.289205] ? strncpy_from_user+0x9e/0x470 [ 2602.290097] ? finish_automount+0xa90/0xa90 [ 2602.290998] ? getname_flags.part.0+0x1dd/0x4f0 [ 2602.291971] ? _copy_from_user+0xfb/0x1b0 [ 2602.292846] __x64_sys_mount+0x282/0x300 [ 2602.293710] ? copy_mnt_ns+0xa00/0xa00 [ 2602.294542] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2602.295656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2602.296730] do_syscall_64+0x33/0x40 [ 2602.297512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2602.298590] RIP: 0033:0x7fed66145b19 [ 2602.299376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2602.303256] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2602.304862] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2602.306378] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2602.307873] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2602.309378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2602.310878] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2602.312398] CPU: 1 PID: 13231 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2602.313219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2602.314227] Call Trace: [ 2602.314535] dump_stack+0x107/0x167 [ 2602.314946] should_fail.cold+0x5/0xa [ 2602.315415] ? create_object.isra.0+0x3a/0xa20 [ 2602.315935] should_failslab+0x5/0x20 [ 2602.316372] kmem_cache_alloc+0x5b/0x310 [ 2602.316832] create_object.isra.0+0x3a/0xa20 [ 2602.317387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2602.317973] kmem_cache_alloc+0x159/0x310 [ 2602.318487] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2602.319206] p9_client_rpc+0x220/0x1370 [ 2602.319659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2602.320257] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2602.320865] ? pipe_poll+0x21b/0x800 [ 2602.321292] ? p9_fd_close+0x4a0/0x4a0 [ 2602.321728] ? wait_for_partner+0x3c0/0x3c0 [ 2602.322242] ? p9_fd_poll+0x1e0/0x2c0 [ 2602.322677] ? p9_fd_create+0x357/0x4a0 [ 2602.323122] ? p9_conn_create+0x510/0x510 [ 2602.323620] ? p9_client_create+0x798/0x1230 [ 2602.324117] ? kfree+0xd7/0x340 [ 2602.324485] ? do_raw_spin_unlock+0x4f/0x220 [ 2602.324999] p9_client_create+0xa76/0x1230 [ 2602.325477] ? p9_client_flush+0x430/0x430 [ 2602.326015] ? trace_hardirqs_on+0x5b/0x180 [ 2602.326501] ? lockdep_init_map_type+0x2c7/0x780 [ 2602.327035] ? __raw_spin_lock_init+0x36/0x110 [ 2602.327583] v9fs_session_init+0x1dd/0x1680 [ 2602.328067] ? lock_release+0x680/0x680 [ 2602.328519] ? kmem_cache_alloc_trace+0x151/0x320 [ 2602.329099] ? v9fs_show_options+0x690/0x690 [ 2602.329605] ? trace_hardirqs_on+0x5b/0x180 [ 2602.330130] ? kasan_unpoison_shadow+0x33/0x50 [ 2602.330649] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2602.331264] v9fs_mount+0x79/0x8f0 [ 2602.331670] ? v9fs_write_inode+0x60/0x60 [ 2602.332180] legacy_get_tree+0x105/0x220 [ 2602.332637] vfs_get_tree+0x8e/0x300 [ 2602.333096] path_mount+0x1429/0x2120 [ 2602.333528] ? strncpy_from_user+0x9e/0x470 [ 2602.334045] ? finish_automount+0xa90/0xa90 [ 2602.334538] ? getname_flags.part.0+0x1dd/0x4f0 [ 2602.335103] ? _copy_from_user+0xfb/0x1b0 [ 2602.335585] __x64_sys_mount+0x282/0x300 [ 2602.336068] ? copy_mnt_ns+0xa00/0xa00 [ 2602.336511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2602.337151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2602.337735] do_syscall_64+0x33/0x40 [ 2602.338181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2602.338759] RIP: 0033:0x7f7b14970b19 [ 2602.339203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2602.341389] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2602.342243] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2602.343040] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2602.343833] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2602.344625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2602.345451] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2602.349759] loop6: detected capacity change from 0 to 8388096 16:29:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x4c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:29:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:03 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 39) 16:29:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2602.572489] FAULT_INJECTION: forcing a failure. [ 2602.572489] name failslab, interval 1, probability 0, space 0, times 0 [ 2602.574909] CPU: 0 PID: 13251 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2602.576392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2602.578181] Call Trace: [ 2602.578754] dump_stack+0x107/0x167 [ 2602.579560] should_fail.cold+0x5/0xa [ 2602.580380] ? create_object.isra.0+0x3a/0xa20 [ 2602.581358] should_failslab+0x5/0x20 [ 2602.582160] kmem_cache_alloc+0x5b/0x310 [ 2602.583028] create_object.isra.0+0x3a/0xa20 [ 2602.583960] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2602.585046] __kmalloc+0x16e/0x390 [ 2602.585878] p9_fcall_init+0x97/0x290 [ 2602.586687] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2602.587772] p9_client_rpc+0x220/0x1370 [ 2602.588617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2602.589749] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2602.590868] ? pipe_poll+0x21b/0x800 [ 2602.591645] ? p9_fd_close+0x4a0/0x4a0 [ 2602.592471] ? wait_for_partner+0x3c0/0x3c0 [ 2602.593383] ? p9_fd_poll+0x1e0/0x2c0 [ 2602.594188] ? p9_fd_create+0x357/0x4a0 [ 2602.595024] ? p9_conn_create+0x510/0x510 [ 2602.595899] ? p9_client_create+0x798/0x1230 [ 2602.596833] ? kfree+0xd7/0x340 [ 2602.597546] p9_client_create+0xa76/0x1230 [ 2602.598461] ? p9_client_flush+0x430/0x430 [ 2602.599362] ? trace_hardirqs_on+0x5b/0x180 [ 2602.600271] ? lockdep_init_map_type+0x2c7/0x780 [ 2602.601280] ? __raw_spin_lock_init+0x36/0x110 [ 2602.602246] v9fs_session_init+0x1dd/0x1680 [ 2602.603164] ? lock_release+0x680/0x680 [ 2602.604018] ? kmem_cache_alloc_trace+0x151/0x320 [ 2602.605039] ? v9fs_show_options+0x690/0x690 [ 2602.605972] ? trace_hardirqs_on+0x5b/0x180 [ 2602.606885] ? kasan_unpoison_shadow+0x33/0x50 [ 2602.607851] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2602.608941] v9fs_mount+0x79/0x8f0 [ 2602.609690] ? v9fs_write_inode+0x60/0x60 [ 2602.610571] legacy_get_tree+0x105/0x220 [ 2602.611436] vfs_get_tree+0x8e/0x300 [ 2602.612218] path_mount+0x1429/0x2120 [ 2602.613078] ? strncpy_from_user+0x9e/0x470 [ 2602.613991] ? finish_automount+0xa90/0xa90 [ 2602.614907] ? getname_flags.part.0+0x1dd/0x4f0 [ 2602.615890] ? _copy_from_user+0xfb/0x1b0 [ 2602.616773] __x64_sys_mount+0x282/0x300 [ 2602.617639] ? copy_mnt_ns+0xa00/0xa00 [ 2602.618478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2602.619585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2602.620683] do_syscall_64+0x33/0x40 [ 2602.621488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2602.622571] RIP: 0033:0x7fed66145b19 [ 2602.623352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2602.627276] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2602.628924] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2602.630437] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2602.631949] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2602.633484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2602.635022] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2602.656945] loop3: detected capacity change from 0 to 8388096 [ 2602.663435] nfs: Unknown parameter '-$' [ 2602.708685] loop5: detected capacity change from 0 to 8388096 [ 2602.719695] nfs: Unknown parameter '-$' 16:29:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x68, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:29:15 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:15 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 36) 16:29:15 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 40) [ 2614.920365] FAULT_INJECTION: forcing a failure. [ 2614.920365] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.920929] FAULT_INJECTION: forcing a failure. [ 2614.920929] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.923120] CPU: 1 PID: 13271 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2614.926579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.928346] Call Trace: [ 2614.928911] dump_stack+0x107/0x167 [ 2614.929696] should_fail.cold+0x5/0xa [ 2614.930510] ? p9_fcall_init+0x97/0x290 [ 2614.931358] should_failslab+0x5/0x20 [ 2614.932169] __kmalloc+0x72/0x390 [ 2614.932908] p9_fcall_init+0x97/0x290 [ 2614.933735] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2614.934815] p9_client_rpc+0x220/0x1370 [ 2614.935670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.936789] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2614.937943] ? pipe_poll+0x21b/0x800 [ 2614.938729] ? p9_fd_close+0x4a0/0x4a0 [ 2614.939567] ? wait_for_partner+0x3c0/0x3c0 [ 2614.940495] ? p9_fd_poll+0x1e0/0x2c0 [ 2614.941327] ? p9_fd_create+0x357/0x4a0 [ 2614.942179] ? p9_conn_create+0x510/0x510 [ 2614.943077] ? p9_client_create+0x798/0x1230 [ 2614.944077] ? kfree+0xd7/0x340 [ 2614.944797] ? do_raw_spin_unlock+0x4f/0x220 [ 2614.945778] p9_client_create+0xa76/0x1230 [ 2614.946715] ? p9_client_flush+0x430/0x430 [ 2614.947643] ? trace_hardirqs_on+0x5b/0x180 [ 2614.948591] ? lockdep_init_map_type+0x2c7/0x780 [ 2614.949641] ? __raw_spin_lock_init+0x36/0x110 [ 2614.950648] v9fs_session_init+0x1dd/0x1680 [ 2614.951595] ? lock_release+0x680/0x680 [ 2614.952475] ? kmem_cache_alloc_trace+0x151/0x320 [ 2614.953540] ? v9fs_show_options+0x690/0x690 [ 2614.954511] ? trace_hardirqs_on+0x5b/0x180 [ 2614.955457] ? kasan_unpoison_shadow+0x33/0x50 [ 2614.956455] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2614.957574] v9fs_mount+0x79/0x8f0 [ 2614.958352] ? v9fs_write_inode+0x60/0x60 [ 2614.959263] legacy_get_tree+0x105/0x220 [ 2614.960153] vfs_get_tree+0x8e/0x300 [ 2614.960967] path_mount+0x1429/0x2120 [ 2614.961884] ? strncpy_from_user+0x9e/0x470 [ 2614.962831] ? finish_automount+0xa90/0xa90 [ 2614.963774] ? getname_flags.part.0+0x1dd/0x4f0 [ 2614.964796] ? _copy_from_user+0xfb/0x1b0 [ 2614.965723] __x64_sys_mount+0x282/0x300 [ 2614.966609] ? copy_mnt_ns+0xa00/0xa00 [ 2614.967466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.968617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.969758] do_syscall_64+0x33/0x40 [ 2614.970575] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2614.971699] RIP: 0033:0x7f7b14970b19 [ 2614.972513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2614.976557] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2614.978235] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2614.979801] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2614.981376] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2614.982942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2614.984526] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2614.986130] CPU: 0 PID: 13274 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2614.987653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.989480] Call Trace: [ 2614.990060] dump_stack+0x107/0x167 [ 2614.990853] should_fail.cold+0x5/0xa [ 2614.991685] ? create_object.isra.0+0x3a/0xa20 [ 2614.992694] should_failslab+0x5/0x20 [ 2614.993536] kmem_cache_alloc+0x5b/0x310 [ 2614.994427] create_object.isra.0+0x3a/0xa20 [ 2614.995489] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2614.996602] __kmalloc+0x16e/0x390 [ 2614.997406] p9_fcall_init+0x97/0x290 [ 2614.998243] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2614.999364] p9_client_rpc+0x220/0x1370 [ 2615.000231] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2615.001385] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2615.002560] ? pipe_poll+0x21b/0x800 [ 2615.003366] ? p9_fd_close+0x4a0/0x4a0 [ 2615.004211] ? wait_for_partner+0x3c0/0x3c0 [ 2615.005155] ? p9_fd_poll+0x1e0/0x2c0 [ 2615.005989] ? p9_fd_create+0x357/0x4a0 [ 2615.006852] ? p9_conn_create+0x510/0x510 [ 2615.007751] ? p9_client_create+0x798/0x1230 [ 2615.008707] ? kfree+0xd7/0x340 [ 2615.009448] p9_client_create+0xa76/0x1230 [ 2615.010377] ? p9_client_flush+0x430/0x430 [ 2615.011299] ? trace_hardirqs_on+0x5b/0x180 [ 2615.012237] ? lockdep_init_map_type+0x2c7/0x780 [ 2615.013275] ? __raw_spin_lock_init+0x36/0x110 [ 2615.014346] v9fs_session_init+0x1dd/0x1680 [ 2615.015287] ? lock_release+0x680/0x680 [ 2615.016160] ? kmem_cache_alloc_trace+0x151/0x320 [ 2615.017221] ? v9fs_show_options+0x690/0x690 [ 2615.018186] ? trace_hardirqs_on+0x5b/0x180 [ 2615.019123] ? kasan_unpoison_shadow+0x33/0x50 [ 2615.020111] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2615.021223] v9fs_mount+0x79/0x8f0 [ 2615.021994] ? v9fs_write_inode+0x60/0x60 [ 2615.022895] legacy_get_tree+0x105/0x220 [ 2615.023775] vfs_get_tree+0x8e/0x300 [ 2615.024582] path_mount+0x1429/0x2120 [ 2615.025423] ? strncpy_from_user+0x9e/0x470 [ 2615.026360] ? finish_automount+0xa90/0xa90 [ 2615.027300] ? getname_flags.part.0+0x1dd/0x4f0 [ 2615.028311] ? _copy_from_user+0xfb/0x1b0 [ 2615.029227] __x64_sys_mount+0x282/0x300 [ 2615.030108] ? copy_mnt_ns+0xa00/0xa00 [ 2615.030956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2615.032096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2615.033234] do_syscall_64+0x33/0x40 [ 2615.034046] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2615.035161] RIP: 0033:0x7fed66145b19 [ 2615.035969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2615.039985] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2615.041649] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2615.043201] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2615.044751] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2615.046345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2615.047911] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 16:29:16 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 37) [ 2615.062813] loop5: detected capacity change from 0 to 8388096 [ 2615.101457] loop6: detected capacity change from 0 to 8388096 [ 2615.112369] nfs: Unknown parameter 'rfdno' [ 2615.122389] loop3: detected capacity change from 0 to 8388096 16:29:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2615.128279] nfs: Unknown parameter '-$' 16:29:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x6c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:29:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2615.238509] FAULT_INJECTION: forcing a failure. [ 2615.238509] name failslab, interval 1, probability 0, space 0, times 0 [ 2615.241192] CPU: 0 PID: 13286 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2615.242728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2615.244571] Call Trace: [ 2615.245175] dump_stack+0x107/0x167 [ 2615.245991] should_fail.cold+0x5/0xa [ 2615.246852] ? create_object.isra.0+0x3a/0xa20 [ 2615.247876] should_failslab+0x5/0x20 [ 2615.248724] kmem_cache_alloc+0x5b/0x310 [ 2615.249706] create_object.isra.0+0x3a/0xa20 [ 2615.250681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2615.251857] __kmalloc+0x16e/0x390 [ 2615.252639] p9_fcall_init+0x97/0x290 [ 2615.253489] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2615.254588] p9_client_rpc+0x220/0x1370 [ 2615.255464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2615.256603] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2615.257783] ? pipe_poll+0x21b/0x800 [ 2615.258579] ? p9_fd_close+0x4a0/0x4a0 [ 2615.259419] ? wait_for_partner+0x3c0/0x3c0 [ 2615.260334] ? p9_fd_poll+0x1e0/0x2c0 [ 2615.261162] ? p9_fd_create+0x357/0x4a0 [ 2615.262009] ? p9_conn_create+0x510/0x510 [ 2615.262886] ? p9_client_create+0x798/0x1230 [ 2615.263811] ? kfree+0xd7/0x340 [ 2615.264506] ? do_raw_spin_unlock+0x4f/0x220 [ 2615.265490] p9_client_create+0xa76/0x1230 [ 2615.266398] ? p9_client_flush+0x430/0x430 [ 2615.267301] ? trace_hardirqs_on+0x5b/0x180 [ 2615.268215] ? lockdep_init_map_type+0x2c7/0x780 [ 2615.269238] ? __raw_spin_lock_init+0x36/0x110 [ 2615.270209] v9fs_session_init+0x1dd/0x1680 [ 2615.271120] ? lock_release+0x680/0x680 [ 2615.271976] ? kmem_cache_alloc_trace+0x151/0x320 [ 2615.273003] ? v9fs_show_options+0x690/0x690 [ 2615.273956] ? trace_hardirqs_on+0x5b/0x180 [ 2615.274875] ? kasan_unpoison_shadow+0x33/0x50 [ 2615.275838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2615.276919] v9fs_mount+0x79/0x8f0 [ 2615.277689] ? v9fs_write_inode+0x60/0x60 [ 2615.278556] legacy_get_tree+0x105/0x220 [ 2615.279416] vfs_get_tree+0x8e/0x300 [ 2615.280204] path_mount+0x1429/0x2120 [ 2615.281015] ? strncpy_from_user+0x9e/0x470 [ 2615.281939] ? finish_automount+0xa90/0xa90 [ 2615.282849] ? getname_flags.part.0+0x1dd/0x4f0 [ 2615.283835] ? _copy_from_user+0xfb/0x1b0 [ 2615.284720] __x64_sys_mount+0x282/0x300 [ 2615.285590] ? copy_mnt_ns+0xa00/0xa00 [ 2615.286418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2615.287532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2615.288625] do_syscall_64+0x33/0x40 [ 2615.289437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2615.290524] RIP: 0033:0x7f7b14970b19 [ 2615.291320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2615.295232] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2615.296840] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2615.298354] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2615.299895] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2615.301414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2615.302926] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 16:29:16 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:16 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 41) [ 2615.430456] loop2: detected capacity change from 0 to 8388096 [ 2615.433261] nfs: Unknown parameter '-$' [ 2615.463571] loop4: detected capacity change from 0 to 8388096 16:29:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x74, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2615.486254] nfs: Unknown parameter '-$' [ 2615.488345] loop5: detected capacity change from 0 to 8388096 [ 2615.491417] nfs: Unknown parameter '-$' [ 2615.635270] FAULT_INJECTION: forcing a failure. [ 2615.635270] name failslab, interval 1, probability 0, space 0, times 0 [ 2615.637879] CPU: 1 PID: 13302 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2615.639322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2615.639975] loop6: detected capacity change from 0 to 8388096 [ 2615.641065] Call Trace: [ 2615.641092] dump_stack+0x107/0x167 [ 2615.641112] should_fail.cold+0x5/0xa [ 2615.641133] ? create_object.isra.0+0x3a/0xa20 [ 2615.641154] should_failslab+0x5/0x20 [ 2615.641180] kmem_cache_alloc+0x5b/0x310 [ 2615.643555] nfs: Unknown parameter 'rfdno' [ 2615.643653] create_object.isra.0+0x3a/0xa20 [ 2615.649480] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2615.650723] __kmalloc+0x16e/0x390 [ 2615.651727] p9_fcall_init+0x97/0x290 [ 2615.652678] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2615.653993] p9_client_rpc+0x220/0x1370 [ 2615.655038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2615.656233] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2615.657340] ? pipe_poll+0x21b/0x800 [ 2615.658107] ? p9_fd_close+0x4a0/0x4a0 [ 2615.658902] ? wait_for_partner+0x3c0/0x3c0 [ 2615.659789] ? p9_fd_poll+0x1e0/0x2c0 [ 2615.660580] ? p9_fd_create+0x357/0x4a0 [ 2615.661400] ? p9_conn_create+0x510/0x510 [ 2615.662246] ? p9_client_create+0x798/0x1230 [ 2615.663142] ? kfree+0xd7/0x340 [ 2615.663825] p9_client_create+0xa76/0x1230 [ 2615.664703] ? p9_client_flush+0x430/0x430 [ 2615.665587] ? trace_hardirqs_on+0x5b/0x180 [ 2615.666478] ? lockdep_init_map_type+0x2c7/0x780 [ 2615.667448] ? __raw_spin_lock_init+0x36/0x110 [ 2615.668378] v9fs_session_init+0x1dd/0x1680 [ 2615.669269] ? lock_release+0x680/0x680 [ 2615.670089] ? kmem_cache_alloc_trace+0x151/0x320 [ 2615.671070] ? v9fs_show_options+0x690/0x690 [ 2615.671972] ? trace_hardirqs_on+0x5b/0x180 [ 2615.672925] ? kasan_unpoison_shadow+0x33/0x50 [ 2615.673865] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2615.674905] v9fs_mount+0x79/0x8f0 [ 2615.675632] ? v9fs_write_inode+0x60/0x60 [ 2615.676475] legacy_get_tree+0x105/0x220 [ 2615.677323] vfs_get_tree+0x8e/0x300 [ 2615.678077] path_mount+0x1429/0x2120 [ 2615.678864] ? strncpy_from_user+0x9e/0x470 [ 2615.679747] ? finish_automount+0xa90/0xa90 [ 2615.680625] ? getname_flags.part.0+0x1dd/0x4f0 [ 2615.681636] ? _copy_from_user+0xfb/0x1b0 [ 2615.682685] __x64_sys_mount+0x282/0x300 [ 2615.683714] ? copy_mnt_ns+0xa00/0xa00 [ 2615.684554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2615.685970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2615.687107] do_syscall_64+0x33/0x40 [ 2615.688027] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2615.689345] RIP: 0033:0x7fed66145b19 [ 2615.690253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2615.694789] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2615.696812] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2615.698492] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2615.700239] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2615.701911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2615.703625] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2615.814599] loop3: detected capacity change from 0 to 8388096 [ 2615.817761] nfs: Unknown parameter '-$' 16:29:29 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 38) 16:29:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:29 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 42) 16:29:29 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x7a, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:29:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2628.104355] FAULT_INJECTION: forcing a failure. [ 2628.104355] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.106795] CPU: 1 PID: 13328 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2628.108256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2628.110000] Call Trace: [ 2628.110555] dump_stack+0x107/0x167 [ 2628.111324] should_fail.cold+0x5/0xa [ 2628.112121] ? create_object.isra.0+0x3a/0xa20 [ 2628.113080] should_failslab+0x5/0x20 [ 2628.113888] kmem_cache_alloc+0x5b/0x310 [ 2628.114755] create_object.isra.0+0x3a/0xa20 [ 2628.115681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2628.116751] __kmalloc+0x16e/0x390 [ 2628.117511] p9_fcall_init+0x97/0x290 [ 2628.118319] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2628.119397] p9_client_rpc+0x220/0x1370 [ 2628.120245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2628.121365] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2628.122481] ? pipe_poll+0x21b/0x800 [ 2628.123263] ? p9_fd_close+0x4a0/0x4a0 [ 2628.124086] ? wait_for_partner+0x3c0/0x3c0 [ 2628.125050] ? p9_fd_poll+0x1e0/0x2c0 [ 2628.125864] ? p9_fd_create+0x357/0x4a0 [ 2628.126699] ? p9_conn_create+0x510/0x510 [ 2628.127570] ? p9_client_create+0x798/0x1230 [ 2628.128489] ? kfree+0xd7/0x340 [ 2628.129250] ? do_raw_spin_unlock+0x4f/0x220 [ 2628.130180] p9_client_create+0xa76/0x1230 [ 2628.131090] ? p9_client_flush+0x430/0x430 [ 2628.131977] ? trace_hardirqs_on+0x5b/0x180 [ 2628.132894] ? lockdep_init_map_type+0x2c7/0x780 [ 2628.133890] ? __raw_spin_lock_init+0x36/0x110 [ 2628.134853] v9fs_session_init+0x1dd/0x1680 [ 2628.135760] ? lock_release+0x680/0x680 [ 2628.136608] ? kmem_cache_alloc_trace+0x151/0x320 [ 2628.137619] ? v9fs_show_options+0x690/0x690 [ 2628.138545] ? trace_hardirqs_on+0x5b/0x180 [ 2628.139468] ? kasan_unpoison_shadow+0x33/0x50 [ 2628.140428] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2628.141499] v9fs_mount+0x79/0x8f0 [ 2628.142252] ? v9fs_write_inode+0x60/0x60 [ 2628.143118] legacy_get_tree+0x105/0x220 [ 2628.143973] vfs_get_tree+0x8e/0x300 [ 2628.144753] path_mount+0x1429/0x2120 [ 2628.145563] ? strncpy_from_user+0x9e/0x470 [ 2628.146470] ? finish_automount+0xa90/0xa90 [ 2628.147382] ? getname_flags.part.0+0x1dd/0x4f0 [ 2628.148365] ? _copy_from_user+0xfb/0x1b0 [ 2628.149245] __x64_sys_mount+0x282/0x300 [ 2628.150094] ? copy_mnt_ns+0xa00/0xa00 [ 2628.150922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2628.152025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2628.153118] do_syscall_64+0x33/0x40 [ 2628.153905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2628.154982] RIP: 0033:0x7f7b14970b19 [ 2628.155762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2628.159639] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2628.161265] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2628.162776] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2628.164290] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2628.165816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2628.167308] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2628.178898] FAULT_INJECTION: forcing a failure. [ 2628.178898] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.181322] CPU: 1 PID: 13332 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2628.182809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2628.184594] Call Trace: [ 2628.185224] dump_stack+0x107/0x167 [ 2628.186019] should_fail.cold+0x5/0xa [ 2628.186877] ? p9_fcall_init+0x97/0x290 [ 2628.187735] should_failslab+0x5/0x20 [ 2628.188553] __kmalloc+0x72/0x390 [ 2628.189300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2628.190378] p9_fcall_init+0x97/0x290 [ 2628.191184] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2628.192273] p9_client_rpc+0x220/0x1370 [ 2628.193116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2628.194246] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2628.195380] ? pipe_poll+0x21b/0x800 [ 2628.195678] loop2: detected capacity change from 0 to 8388096 [ 2628.196176] ? p9_fd_close+0x4a0/0x4a0 [ 2628.196194] ? wait_for_partner+0x3c0/0x3c0 [ 2628.196212] ? p9_fd_poll+0x1e0/0x2c0 [ 2628.197626] nfs: Unknown parameter '-$' [ 2628.197778] ? p9_fd_create+0x357/0x4a0 [ 2628.200749] ? p9_conn_create+0x510/0x510 [ 2628.201652] ? p9_client_create+0x798/0x1230 [ 2628.202586] ? kfree+0xd7/0x340 [ 2628.203296] p9_client_create+0xa76/0x1230 [ 2628.204205] ? p9_client_flush+0x430/0x430 [ 2628.205112] ? trace_hardirqs_on+0x5b/0x180 [ 2628.206038] ? lockdep_init_map_type+0x2c7/0x780 [ 2628.207056] ? __raw_spin_lock_init+0x36/0x110 [ 2628.208029] v9fs_session_init+0x1dd/0x1680 [ 2628.208949] ? lock_release+0x680/0x680 [ 2628.209797] ? kmem_cache_alloc_trace+0x151/0x320 [ 2628.210820] ? v9fs_show_options+0x690/0x690 [ 2628.211762] ? trace_hardirqs_on+0x5b/0x180 [ 2628.212684] ? kasan_unpoison_shadow+0x33/0x50 [ 2628.213656] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2628.214730] v9fs_mount+0x79/0x8f0 [ 2628.215474] ? v9fs_write_inode+0x60/0x60 [ 2628.216361] legacy_get_tree+0x105/0x220 [ 2628.217230] vfs_get_tree+0x8e/0x300 [ 2628.218021] path_mount+0x1429/0x2120 [ 2628.218825] ? strncpy_from_user+0x9e/0x470 [ 2628.219743] ? finish_automount+0xa90/0xa90 [ 2628.220648] ? getname_flags.part.0+0x1dd/0x4f0 [ 2628.221656] ? _copy_from_user+0xfb/0x1b0 [ 2628.222540] __x64_sys_mount+0x282/0x300 [ 2628.223404] ? copy_mnt_ns+0xa00/0xa00 [ 2628.224237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2628.225359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2628.226460] do_syscall_64+0x33/0x40 [ 2628.227255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2628.228378] RIP: 0033:0x7fed66145b19 [ 2628.229186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2628.233083] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2628.234708] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2628.236234] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2628.237763] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2628.239289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2628.240806] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2628.260563] loop5: detected capacity change from 0 to 8388096 [ 2628.262547] nfs: Unknown parameter '-$' 16:29:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x148, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:29:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:29 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2628.320682] loop3: detected capacity change from 0 to 8388096 [ 2628.322160] nfs: Unknown parameter '-$' 16:29:29 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 39) 16:29:29 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 43) 16:29:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2628.495737] loop6: detected capacity change from 0 to 8388096 [ 2628.497448] nfs: Unknown parameter '-$' [ 2628.505382] loop2: detected capacity change from 0 to 8388096 [ 2628.508330] nfs: Unknown parameter '-$' [ 2628.512482] FAULT_INJECTION: forcing a failure. [ 2628.512482] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.514941] CPU: 1 PID: 13355 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2628.516715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2628.518665] Call Trace: [ 2628.519244] dump_stack+0x107/0x167 [ 2628.520035] should_fail.cold+0x5/0xa [ 2628.520860] ? create_object.isra.0+0x3a/0xa20 [ 2628.521960] should_failslab+0x5/0x20 [ 2628.522933] kmem_cache_alloc+0x5b/0x310 [ 2628.523828] create_object.isra.0+0x3a/0xa20 [ 2628.524864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2628.525950] __kmalloc+0x16e/0x390 [ 2628.526719] p9_fcall_init+0x97/0x290 [ 2628.527531] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2628.528810] p9_client_rpc+0x220/0x1370 [ 2628.529772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2628.530890] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2628.530935] FAULT_INJECTION: forcing a failure. [ 2628.530935] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.532018] ? pipe_poll+0x21b/0x800 [ 2628.532036] ? p9_fd_close+0x4a0/0x4a0 [ 2628.532053] ? wait_for_partner+0x3c0/0x3c0 [ 2628.535820] ? p9_fd_poll+0x1e0/0x2c0 [ 2628.536635] ? p9_fd_create+0x357/0x4a0 [ 2628.537478] ? p9_conn_create+0x510/0x510 [ 2628.538348] ? p9_client_create+0x798/0x1230 [ 2628.539272] ? kfree+0xd7/0x340 [ 2628.539964] ? do_raw_spin_unlock+0x4f/0x220 [ 2628.540904] p9_client_create+0xa76/0x1230 [ 2628.541819] ? p9_client_flush+0x430/0x430 [ 2628.542715] ? trace_hardirqs_on+0x5b/0x180 [ 2628.543620] ? lockdep_init_map_type+0x2c7/0x780 [ 2628.544689] ? __raw_spin_lock_init+0x36/0x110 [ 2628.545675] v9fs_session_init+0x1dd/0x1680 [ 2628.546587] ? lock_release+0x680/0x680 [ 2628.547428] ? kmem_cache_alloc_trace+0x151/0x320 [ 2628.548445] ? v9fs_show_options+0x690/0x690 [ 2628.549399] ? trace_hardirqs_on+0x5b/0x180 [ 2628.550311] ? kasan_unpoison_shadow+0x33/0x50 [ 2628.551272] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2628.552345] v9fs_mount+0x79/0x8f0 [ 2628.553096] ? v9fs_write_inode+0x60/0x60 [ 2628.553984] legacy_get_tree+0x105/0x220 [ 2628.554851] vfs_get_tree+0x8e/0x300 [ 2628.555624] path_mount+0x1429/0x2120 [ 2628.556432] ? strncpy_from_user+0x9e/0x470 [ 2628.557351] ? finish_automount+0xa90/0xa90 [ 2628.558257] ? getname_flags.part.0+0x1dd/0x4f0 [ 2628.559236] ? _copy_from_user+0xfb/0x1b0 [ 2628.560119] __x64_sys_mount+0x282/0x300 [ 2628.560976] ? copy_mnt_ns+0xa00/0xa00 [ 2628.561805] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2628.562913] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2628.563989] do_syscall_64+0x33/0x40 [ 2628.564778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2628.565865] RIP: 0033:0x7f7b14970b19 [ 2628.566646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2628.570550] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2628.572154] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2628.573674] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2628.575179] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2628.576679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2628.578196] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2628.579731] CPU: 0 PID: 13359 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2628.580536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2628.581508] Call Trace: [ 2628.581822] dump_stack+0x107/0x167 [ 2628.582244] should_fail.cold+0x5/0xa [ 2628.582810] ? create_object.isra.0+0x3a/0xa20 [ 2628.583363] should_failslab+0x5/0x20 [ 2628.583801] kmem_cache_alloc+0x5b/0x310 [ 2628.584268] create_object.isra.0+0x3a/0xa20 [ 2628.584769] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2628.585364] kmem_cache_alloc+0x159/0x310 [ 2628.585822] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2628.586470] idr_get_free+0x4b5/0x8f0 [ 2628.586893] idr_alloc_u32+0x170/0x2d0 [ 2628.587342] ? __fprop_inc_percpu_max+0x130/0x130 [ 2628.587959] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2628.588579] ? lock_release+0x680/0x680 [ 2628.589044] idr_alloc+0xc2/0x130 [ 2628.589430] ? idr_alloc_u32+0x2d0/0x2d0 [ 2628.589890] ? rwlock_bug.part.0+0x90/0x90 [ 2628.590354] p9_client_prepare_req.part.0+0x612/0xac0 [ 2628.590948] p9_client_rpc+0x220/0x1370 [ 2628.591404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2628.592015] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2628.592630] ? pipe_poll+0x21b/0x800 [ 2628.593032] ? p9_fd_close+0x4a0/0x4a0 [ 2628.593487] ? wait_for_partner+0x3c0/0x3c0 [ 2628.593953] ? p9_fd_poll+0x1e0/0x2c0 [ 2628.594396] ? p9_fd_create+0x357/0x4a0 [ 2628.594849] ? p9_conn_create+0x510/0x510 [ 2628.595295] ? p9_client_create+0x798/0x1230 [ 2628.595798] ? kfree+0xd7/0x340 [ 2628.596165] p9_client_create+0xa76/0x1230 [ 2628.596656] ? p9_client_flush+0x430/0x430 [ 2628.597117] ? trace_hardirqs_on+0x5b/0x180 [ 2628.597619] ? lockdep_init_map_type+0x2c7/0x780 [ 2628.598162] ? __raw_spin_lock_init+0x36/0x110 [ 2628.598687] v9fs_session_init+0x1dd/0x1680 [ 2628.599155] ? lock_release+0x680/0x680 [ 2628.599613] ? kmem_cache_alloc_trace+0x151/0x320 [ 2628.600168] ? v9fs_show_options+0x690/0x690 [ 2628.600645] ? trace_hardirqs_on+0x5b/0x180 [ 2628.601144] ? kasan_unpoison_shadow+0x33/0x50 [ 2628.601669] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2628.602250] v9fs_mount+0x79/0x8f0 [ 2628.602657] ? v9fs_write_inode+0x60/0x60 [ 2628.603103] legacy_get_tree+0x105/0x220 [ 2628.603568] vfs_get_tree+0x8e/0x300 [ 2628.603972] path_mount+0x1429/0x2120 [ 2628.604418] ? strncpy_from_user+0x9e/0x470 [ 2628.604913] ? finish_automount+0xa90/0xa90 [ 2628.605384] ? getname_flags.part.0+0x1dd/0x4f0 [ 2628.605922] ? _copy_from_user+0xfb/0x1b0 [ 2628.606373] __x64_sys_mount+0x282/0x300 [ 2628.606807] ? copy_mnt_ns+0xa00/0xa00 [ 2628.607226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2628.607787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2628.608379] do_syscall_64+0x33/0x40 [ 2628.608782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2628.609378] RIP: 0033:0x7fed66145b19 [ 2628.609778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2628.611886] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2628.612774] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2628.613601] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2628.614420] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2628.615238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2628.616058] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2628.637424] loop4: detected capacity change from 0 to 8388096 [ 2628.645318] nfs: Unknown parameter '-$' 16:29:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:43 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 40) 16:29:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x291, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:29:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:43 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:43 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 44) 16:29:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2642.629997] FAULT_INJECTION: forcing a failure. [ 2642.629997] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.632469] CPU: 0 PID: 13379 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2642.633985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2642.635809] Call Trace: [ 2642.636390] dump_stack+0x107/0x167 [ 2642.637183] should_fail.cold+0x5/0xa [ 2642.638204] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2642.639480] should_failslab+0x5/0x20 [ 2642.640308] kmem_cache_alloc+0x5b/0x310 [ 2642.641201] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2642.642433] idr_get_free+0x4b5/0x8f0 [ 2642.643272] idr_alloc_u32+0x170/0x2d0 [ 2642.644122] ? __fprop_inc_percpu_max+0x130/0x130 [ 2642.645178] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2642.646356] ? lock_release+0x680/0x680 [ 2642.647223] idr_alloc+0xc2/0x130 [ 2642.647973] ? idr_alloc_u32+0x2d0/0x2d0 [ 2642.648854] ? rwlock_bug.part.0+0x90/0x90 [ 2642.649803] p9_client_prepare_req.part.0+0x612/0xac0 [ 2642.650931] p9_client_rpc+0x220/0x1370 [ 2642.651798] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2642.652945] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2642.654114] ? pipe_poll+0x21b/0x800 [ 2642.654905] ? p9_fd_close+0x4a0/0x4a0 [ 2642.655747] ? wait_for_partner+0x3c0/0x3c0 [ 2642.656682] ? p9_fd_poll+0x1e0/0x2c0 [ 2642.657528] ? p9_fd_create+0x357/0x4a0 [ 2642.658391] ? p9_conn_create+0x510/0x510 [ 2642.659293] ? p9_client_create+0x798/0x1230 [ 2642.660258] ? kfree+0xd7/0x340 [ 2642.660987] p9_client_create+0xa76/0x1230 [ 2642.661929] ? p9_client_flush+0x430/0x430 [ 2642.662855] ? trace_hardirqs_on+0x5b/0x180 [ 2642.663804] ? lockdep_init_map_type+0x2c7/0x780 [ 2642.664842] ? __raw_spin_lock_init+0x36/0x110 [ 2642.665856] v9fs_session_init+0x1dd/0x1680 [ 2642.666796] ? lock_release+0x680/0x680 [ 2642.667676] ? kmem_cache_alloc_trace+0x151/0x320 [ 2642.668734] ? v9fs_show_options+0x690/0x690 [ 2642.669765] ? trace_hardirqs_on+0x5b/0x180 [ 2642.670712] ? kasan_unpoison_shadow+0x33/0x50 [ 2642.671715] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2642.672822] v9fs_mount+0x79/0x8f0 [ 2642.673619] ? v9fs_write_inode+0x60/0x60 [ 2642.674541] legacy_get_tree+0x105/0x220 [ 2642.675427] vfs_get_tree+0x8e/0x300 [ 2642.676237] path_mount+0x1429/0x2120 [ 2642.677079] ? strncpy_from_user+0x9e/0x470 [ 2642.678028] ? finish_automount+0xa90/0xa90 [ 2642.678972] ? getname_flags.part.0+0x1dd/0x4f0 [ 2642.679990] ? _copy_from_user+0xfb/0x1b0 [ 2642.680904] __x64_sys_mount+0x282/0x300 [ 2642.681799] ? copy_mnt_ns+0xa00/0xa00 [ 2642.682655] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2642.683804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2642.684936] do_syscall_64+0x33/0x40 [ 2642.685758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2642.686881] RIP: 0033:0x7fed66145b19 [ 2642.687695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2642.691734] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2642.693409] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2642.694967] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2642.696526] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2642.698090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2642.699659] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2642.718462] loop5: detected capacity change from 0 to 8388096 [ 2642.720620] nfs: Unknown parameter '-$' [ 2642.724728] FAULT_INJECTION: forcing a failure. [ 2642.724728] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.727187] CPU: 1 PID: 13382 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2642.728970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2642.730791] Call Trace: [ 2642.731372] dump_stack+0x107/0x167 [ 2642.732168] should_fail.cold+0x5/0xa [ 2642.733002] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2642.734268] should_failslab+0x5/0x20 [ 2642.735102] kmem_cache_alloc+0x5b/0x310 [ 2642.735996] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2642.737230] idr_get_free+0x4b5/0x8f0 [ 2642.738090] idr_alloc_u32+0x170/0x2d0 [ 2642.738931] ? __fprop_inc_percpu_max+0x130/0x130 [ 2642.739960] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2642.741108] ? lock_release+0x680/0x680 [ 2642.741961] idr_alloc+0xc2/0x130 [ 2642.742704] ? idr_alloc_u32+0x2d0/0x2d0 [ 2642.743559] ? rwlock_bug.part.0+0x90/0x90 [ 2642.744470] p9_client_prepare_req.part.0+0x612/0xac0 [ 2642.745586] p9_client_rpc+0x220/0x1370 [ 2642.746428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2642.747557] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2642.748698] ? pipe_poll+0x21b/0x800 [ 2642.749505] ? p9_fd_close+0x4a0/0x4a0 [ 2642.750335] ? wait_for_partner+0x3c0/0x3c0 [ 2642.751264] ? p9_fd_poll+0x1e0/0x2c0 [ 2642.752078] ? p9_fd_create+0x357/0x4a0 [ 2642.752934] ? p9_conn_create+0x510/0x510 [ 2642.753835] ? p9_client_create+0x798/0x1230 [ 2642.754784] ? kfree+0xd7/0x340 [ 2642.755491] ? do_raw_spin_unlock+0x4f/0x220 [ 2642.756443] p9_client_create+0xa76/0x1230 [ 2642.757379] ? p9_client_flush+0x430/0x430 [ 2642.758304] ? trace_hardirqs_on+0x5b/0x180 [ 2642.759253] ? lockdep_init_map_type+0x2c7/0x780 [ 2642.760292] ? __raw_spin_lock_init+0x36/0x110 [ 2642.761297] v9fs_session_init+0x1dd/0x1680 [ 2642.762254] ? lock_release+0x680/0x680 [ 2642.763137] ? kmem_cache_alloc_trace+0x151/0x320 [ 2642.764193] ? v9fs_show_options+0x690/0x690 [ 2642.765171] ? trace_hardirqs_on+0x5b/0x180 [ 2642.766133] ? kasan_unpoison_shadow+0x33/0x50 [ 2642.767133] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2642.768251] v9fs_mount+0x79/0x8f0 [ 2642.769034] ? v9fs_write_inode+0x60/0x60 [ 2642.769955] legacy_get_tree+0x105/0x220 [ 2642.770847] vfs_get_tree+0x8e/0x300 [ 2642.771664] path_mount+0x1429/0x2120 [ 2642.772504] ? strncpy_from_user+0x9e/0x470 [ 2642.773459] ? finish_automount+0xa90/0xa90 [ 2642.774405] ? getname_flags.part.0+0x1dd/0x4f0 [ 2642.775425] ? _copy_from_user+0xfb/0x1b0 [ 2642.776351] __x64_sys_mount+0x282/0x300 [ 2642.777240] ? copy_mnt_ns+0xa00/0xa00 [ 2642.778106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2642.779258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2642.780396] do_syscall_64+0x33/0x40 [ 2642.781215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2642.782350] RIP: 0033:0x7f7b14970b19 [ 2642.783169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2642.787234] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2642.788906] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2642.790488] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2642.792063] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2642.793643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2642.795222] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2642.813686] loop6: detected capacity change from 0 to 8388096 [ 2642.839877] nfs: Unknown parameter '-$' 16:29:43 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 45) 16:29:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x300, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:29:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x0, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2643.011787] FAULT_INJECTION: forcing a failure. [ 2643.011787] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.014374] CPU: 0 PID: 13398 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2643.015831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2643.017580] Call Trace: [ 2643.018146] dump_stack+0x107/0x167 [ 2643.018912] should_fail.cold+0x5/0xa [ 2643.019715] ? create_object.isra.0+0x3a/0xa20 [ 2643.020671] should_failslab+0x5/0x20 [ 2643.021485] kmem_cache_alloc+0x5b/0x310 [ 2643.022345] create_object.isra.0+0x3a/0xa20 [ 2643.023266] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2643.024327] kmem_cache_alloc+0x159/0x310 [ 2643.025206] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2643.026392] idr_get_free+0x4b5/0x8f0 [ 2643.027200] idr_alloc_u32+0x170/0x2d0 [ 2643.028024] ? __fprop_inc_percpu_max+0x130/0x130 [ 2643.029030] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2643.030162] ? lock_release+0x680/0x680 [ 2643.031003] idr_alloc+0xc2/0x130 [ 2643.031729] ? idr_alloc_u32+0x2d0/0x2d0 [ 2643.032584] ? rwlock_bug.part.0+0x90/0x90 [ 2643.033486] p9_client_prepare_req.part.0+0x612/0xac0 [ 2643.034576] p9_client_rpc+0x220/0x1370 [ 2643.035399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2643.036498] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2643.037626] ? pipe_poll+0x21b/0x800 [ 2643.038417] ? p9_fd_close+0x4a0/0x4a0 [ 2643.039251] ? wait_for_partner+0x3c0/0x3c0 [ 2643.040170] ? p9_fd_poll+0x1e0/0x2c0 [ 2643.040986] ? p9_fd_create+0x357/0x4a0 [ 2643.041851] ? p9_conn_create+0x510/0x510 [ 2643.042740] ? p9_client_create+0x798/0x1230 [ 2643.043678] ? kfree+0xd7/0x340 [ 2643.044391] p9_client_create+0xa76/0x1230 [ 2643.045301] ? p9_client_flush+0x430/0x430 [ 2643.046212] ? trace_hardirqs_on+0x5b/0x180 [ 2643.047134] ? lockdep_init_map_type+0x2c7/0x780 [ 2643.048149] ? __raw_spin_lock_init+0x36/0x110 [ 2643.049126] v9fs_session_init+0x1dd/0x1680 [ 2643.050052] ? lock_release+0x680/0x680 [ 2643.050909] ? kmem_cache_alloc_trace+0x151/0x320 [ 2643.051937] ? v9fs_show_options+0x690/0x690 [ 2643.052886] ? trace_hardirqs_on+0x5b/0x180 [ 2643.053810] ? kasan_unpoison_shadow+0x33/0x50 [ 2643.054780] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2643.055863] v9fs_mount+0x79/0x8f0 [ 2643.056624] ? v9fs_write_inode+0x60/0x60 [ 2643.057521] legacy_get_tree+0x105/0x220 [ 2643.058391] vfs_get_tree+0x8e/0x300 [ 2643.059184] path_mount+0x1429/0x2120 [ 2643.060006] ? strncpy_from_user+0x9e/0x470 [ 2643.060930] ? finish_automount+0xa90/0xa90 [ 2643.061903] ? getname_flags.part.0+0x1dd/0x4f0 [ 2643.062896] ? _copy_from_user+0xfb/0x1b0 [ 2643.063790] __x64_sys_mount+0x282/0x300 [ 2643.064654] ? copy_mnt_ns+0xa00/0xa00 [ 2643.065497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2643.066615] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2643.067716] do_syscall_64+0x33/0x40 [ 2643.068511] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2643.069616] RIP: 0033:0x7fed66145b19 [ 2643.070409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2643.074340] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2643.075960] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2643.077488] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2643.079009] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2643.080528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2643.082056] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 16:29:43 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r0, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:44 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:44 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 41) [ 2643.275405] loop3: detected capacity change from 0 to 8388096 16:29:44 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 46) [ 2643.293583] nfs: Unknown parameter '-$' [ 2643.300754] loop2: detected capacity change from 0 to 8388096 [ 2643.304300] nfs: Unknown parameter '-$' [ 2643.319925] loop4: detected capacity change from 0 to 8388096 16:29:44 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x3c5, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2643.331497] nfs: Unknown parameter '-$' [ 2643.371753] loop5: detected capacity change from 0 to 8388096 [ 2643.379346] nfs: Unknown parameter '-$' [ 2643.424750] FAULT_INJECTION: forcing a failure. [ 2643.424750] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.427122] CPU: 0 PID: 13417 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2643.428525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2643.430234] Call Trace: [ 2643.430781] dump_stack+0x107/0x167 [ 2643.431533] should_fail.cold+0x5/0xa [ 2643.432319] ? create_object.isra.0+0x3a/0xa20 [ 2643.433244] should_failslab+0x5/0x20 [ 2643.434028] kmem_cache_alloc+0x5b/0x310 [ 2643.434852] create_object.isra.0+0x3a/0xa20 [ 2643.435735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2643.436762] kmem_cache_alloc+0x159/0x310 [ 2643.437621] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2643.438754] idr_get_free+0x4b5/0x8f0 [ 2643.439535] idr_alloc_u32+0x170/0x2d0 [ 2643.440330] ? __fprop_inc_percpu_max+0x130/0x130 [ 2643.441312] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2643.442388] ? lock_release+0x680/0x680 [ 2643.443191] idr_alloc+0xc2/0x130 [ 2643.443884] ? idr_alloc_u32+0x2d0/0x2d0 [ 2643.444692] ? rwlock_bug.part.0+0x90/0x90 [ 2643.445565] p9_client_prepare_req.part.0+0x612/0xac0 [ 2643.446615] p9_client_rpc+0x220/0x1370 [ 2643.447408] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2643.448468] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2643.449552] ? pipe_poll+0x21b/0x800 [ 2643.450292] ? p9_fd_close+0x4a0/0x4a0 [ 2643.451070] ? wait_for_partner+0x3c0/0x3c0 [ 2643.451931] ? p9_fd_poll+0x1e0/0x2c0 [ 2643.452697] ? p9_fd_create+0x357/0x4a0 [ 2643.453497] ? p9_conn_create+0x510/0x510 [ 2643.454326] ? p9_client_create+0x798/0x1230 [ 2643.455220] ? kfree+0xd7/0x340 [ 2643.455886] ? do_raw_spin_unlock+0x4f/0x220 [ 2643.456793] p9_client_create+0xa76/0x1230 [ 2643.457667] ? p9_client_flush+0x430/0x430 [ 2643.458526] ? trace_hardirqs_on+0x5b/0x180 [ 2643.459399] ? lockdep_init_map_type+0x2c7/0x780 [ 2643.460361] ? __raw_spin_lock_init+0x36/0x110 [ 2643.461286] v9fs_session_init+0x1dd/0x1680 [ 2643.462161] ? lock_release+0x680/0x680 [ 2643.462965] ? kmem_cache_alloc_trace+0x151/0x320 [ 2643.463930] ? v9fs_show_options+0x690/0x690 [ 2643.464808] ? trace_hardirqs_on+0x5b/0x180 [ 2643.465673] ? kasan_unpoison_shadow+0x33/0x50 [ 2643.466577] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2643.467580] v9fs_mount+0x79/0x8f0 [ 2643.468283] ? v9fs_write_inode+0x60/0x60 [ 2643.469110] legacy_get_tree+0x105/0x220 [ 2643.469921] vfs_get_tree+0x8e/0x300 [ 2643.470657] path_mount+0x1429/0x2120 [ 2643.471415] ? strncpy_from_user+0x9e/0x470 [ 2643.472277] ? finish_automount+0xa90/0xa90 [ 2643.473135] ? getname_flags.part.0+0x1dd/0x4f0 [ 2643.474067] ? _copy_from_user+0xfb/0x1b0 [ 2643.474891] __x64_sys_mount+0x282/0x300 [ 2643.475691] ? copy_mnt_ns+0xa00/0xa00 [ 2643.476464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2643.477518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2643.478544] do_syscall_64+0x33/0x40 [ 2643.479281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2643.480296] RIP: 0033:0x7f7b14970b19 [ 2643.481038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2643.484693] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2643.486199] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2643.487602] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2643.489002] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2643.490410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2643.491813] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2643.510568] loop6: detected capacity change from 0 to 8388096 [ 2643.519715] nfs: Unknown parameter '-$' [ 2643.564305] FAULT_INJECTION: forcing a failure. [ 2643.564305] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.566631] CPU: 1 PID: 13420 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2643.568080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2643.569845] Call Trace: [ 2643.570406] dump_stack+0x107/0x167 [ 2643.571181] should_fail.cold+0x5/0xa [ 2643.571979] ? create_object.isra.0+0x3a/0xa20 [ 2643.572939] should_failslab+0x5/0x20 [ 2643.573738] kmem_cache_alloc+0x5b/0x310 [ 2643.574592] create_object.isra.0+0x3a/0xa20 [ 2643.575515] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2643.576577] kmem_cache_alloc+0x159/0x310 [ 2643.577469] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2643.578638] idr_get_free+0x4b5/0x8f0 [ 2643.579440] idr_alloc_u32+0x170/0x2d0 [ 2643.580242] ? __fprop_inc_percpu_max+0x130/0x130 [ 2643.581237] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2643.582347] ? lock_release+0x680/0x680 [ 2643.583166] idr_alloc+0xc2/0x130 [ 2643.583872] ? idr_alloc_u32+0x2d0/0x2d0 [ 2643.584701] ? rwlock_bug.part.0+0x90/0x90 [ 2643.585591] p9_client_prepare_req.part.0+0x612/0xac0 [ 2643.586656] p9_client_rpc+0x220/0x1370 [ 2643.587470] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2643.588561] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2643.589666] ? pipe_poll+0x21b/0x800 [ 2643.590426] ? p9_fd_close+0x4a0/0x4a0 [ 2643.591225] ? wait_for_partner+0x3c0/0x3c0 [ 2643.592129] ? p9_fd_poll+0x1e0/0x2c0 [ 2643.593119] ? p9_fd_create+0x357/0x4a0 [ 2643.593941] ? p9_conn_create+0x510/0x510 [ 2643.594791] ? p9_client_create+0x798/0x1230 [ 2643.595691] ? kfree+0xd7/0x340 [ 2643.596376] p9_client_create+0xa76/0x1230 [ 2643.597256] ? p9_client_flush+0x430/0x430 [ 2643.598131] ? trace_hardirqs_on+0x5b/0x180 [ 2643.599018] ? lockdep_init_map_type+0x2c7/0x780 [ 2643.599988] ? __raw_spin_lock_init+0x36/0x110 [ 2643.600929] v9fs_session_init+0x1dd/0x1680 [ 2643.601827] ? lock_release+0x680/0x680 [ 2643.602648] ? kmem_cache_alloc_trace+0x151/0x320 [ 2643.603631] ? v9fs_show_options+0x690/0x690 [ 2643.604540] ? trace_hardirqs_on+0x5b/0x180 [ 2643.605426] ? kasan_unpoison_shadow+0x33/0x50 [ 2643.606350] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2643.607377] v9fs_mount+0x79/0x8f0 [ 2643.608270] ? v9fs_write_inode+0x60/0x60 [ 2643.609107] legacy_get_tree+0x105/0x220 [ 2643.609939] vfs_get_tree+0x8e/0x300 [ 2643.610692] path_mount+0x1429/0x2120 [ 2643.611474] ? strncpy_from_user+0x9e/0x470 [ 2643.612349] ? finish_automount+0xa90/0xa90 [ 2643.613225] ? getname_flags.part.0+0x1dd/0x4f0 [ 2643.614175] ? _copy_from_user+0xfb/0x1b0 [ 2643.615016] __x64_sys_mount+0x282/0x300 [ 2643.615831] ? copy_mnt_ns+0xa00/0xa00 [ 2643.616623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2643.617692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2643.618737] do_syscall_64+0x33/0x40 [ 2643.619490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2643.620525] RIP: 0033:0x7fed66145b19 [ 2643.621280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2643.625015] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2643.626567] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2643.628019] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2643.629466] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2643.630886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2643.632307] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 16:29:59 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 42) 16:29:59 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 47) 16:29:59 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:59 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x0, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x3f8, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:29:59 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r0, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2658.084471] FAULT_INJECTION: forcing a failure. [ 2658.084471] name failslab, interval 1, probability 0, space 0, times 0 [ 2658.085913] CPU: 0 PID: 13439 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2658.086778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2658.087812] Call Trace: [ 2658.088146] dump_stack+0x107/0x167 [ 2658.088624] should_fail.cold+0x5/0xa [ 2658.089119] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2658.089859] should_failslab+0x5/0x20 [ 2658.090339] kmem_cache_alloc+0x5b/0x310 [ 2658.090845] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2658.091542] idr_get_free+0x4b5/0x8f0 [ 2658.092028] idr_alloc_u32+0x170/0x2d0 [ 2658.092515] ? __fprop_inc_percpu_max+0x130/0x130 [ 2658.093110] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2658.093772] ? lock_release+0x680/0x680 [ 2658.094275] idr_alloc+0xc2/0x130 [ 2658.094712] ? idr_alloc_u32+0x2d0/0x2d0 [ 2658.095213] ? rwlock_bug.part.0+0x90/0x90 [ 2658.095737] p9_client_prepare_req.part.0+0x612/0xac0 [ 2658.096373] p9_client_rpc+0x220/0x1370 [ 2658.096861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2658.097517] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2658.098168] ? pipe_poll+0x21b/0x800 [ 2658.098622] ? p9_fd_close+0x4a0/0x4a0 [ 2658.099097] ? wait_for_partner+0x3c0/0x3c0 [ 2658.099646] ? p9_fd_poll+0x1e0/0x2c0 [ 2658.100136] ? p9_fd_create+0x357/0x4a0 [ 2658.100634] ? p9_conn_create+0x510/0x510 [ 2658.101137] ? p9_client_create+0x798/0x1230 [ 2658.101681] ? kfree+0xd7/0x340 [ 2658.102085] ? do_raw_spin_unlock+0x4f/0x220 [ 2658.102624] p9_client_create+0xa76/0x1230 [ 2658.103146] ? p9_client_flush+0x430/0x430 [ 2658.103662] ? trace_hardirqs_on+0x5b/0x180 [ 2658.104191] ? lockdep_init_map_type+0x2c7/0x780 [ 2658.104769] ? __raw_spin_lock_init+0x36/0x110 [ 2658.105329] v9fs_session_init+0x1dd/0x1680 [ 2658.105861] ? lock_release+0x680/0x680 [ 2658.106359] ? kmem_cache_alloc_trace+0x151/0x320 [ 2658.106942] ? v9fs_show_options+0x690/0x690 [ 2658.107499] ? trace_hardirqs_on+0x5b/0x180 [ 2658.108036] ? kasan_unpoison_shadow+0x33/0x50 [ 2658.108595] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2658.109213] v9fs_mount+0x79/0x8f0 [ 2658.109685] ? v9fs_write_inode+0x60/0x60 [ 2658.110321] legacy_get_tree+0x105/0x220 [ 2658.110815] vfs_get_tree+0x8e/0x300 [ 2658.111273] path_mount+0x1429/0x2120 [ 2658.111735] ? strncpy_from_user+0x9e/0x470 [ 2658.112273] ? finish_automount+0xa90/0xa90 [ 2658.112794] ? getname_flags.part.0+0x1dd/0x4f0 [ 2658.113366] ? _copy_from_user+0xfb/0x1b0 [ 2658.113882] __x64_sys_mount+0x282/0x300 [ 2658.114383] ? copy_mnt_ns+0xa00/0xa00 [ 2658.114862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2658.115499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2658.116125] do_syscall_64+0x33/0x40 [ 2658.116583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2658.117209] RIP: 0033:0x7f7b14970b19 [ 2658.117671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2658.119898] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2658.120822] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2658.121685] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2658.122550] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2658.123410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2658.124270] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2658.144339] FAULT_INJECTION: forcing a failure. [ 2658.144339] name failslab, interval 1, probability 0, space 0, times 0 [ 2658.146739] CPU: 1 PID: 13441 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2658.148216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2658.149977] Call Trace: [ 2658.150553] dump_stack+0x107/0x167 [ 2658.151337] should_fail.cold+0x5/0xa [ 2658.152175] ? create_object.isra.0+0x3a/0xa20 [ 2658.153134] should_failslab+0x5/0x20 [ 2658.153945] kmem_cache_alloc+0x5b/0x310 [ 2658.154813] create_object.isra.0+0x3a/0xa20 [ 2658.155744] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2658.156825] kmem_cache_alloc+0x159/0x310 [ 2658.157899] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2658.159370] idr_get_free+0x4b5/0x8f0 [ 2658.160198] idr_alloc_u32+0x170/0x2d0 [ 2658.161028] ? __fprop_inc_percpu_max+0x130/0x130 [ 2658.162069] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2658.163234] ? lock_release+0x680/0x680 [ 2658.164112] idr_alloc+0xc2/0x130 [ 2658.164851] ? idr_alloc_u32+0x2d0/0x2d0 [ 2658.165893] ? rwlock_bug.part.0+0x90/0x90 [ 2658.166995] p9_client_prepare_req.part.0+0x612/0xac0 [ 2658.168231] p9_client_rpc+0x220/0x1370 [ 2658.169202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2658.170484] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2658.172013] ? pipe_poll+0x21b/0x800 [ 2658.173061] ? p9_fd_close+0x4a0/0x4a0 [ 2658.173919] ? wait_for_partner+0x3c0/0x3c0 [ 2658.174871] ? p9_fd_poll+0x1e0/0x2c0 [ 2658.175717] ? p9_fd_create+0x357/0x4a0 [ 2658.176585] ? p9_conn_create+0x510/0x510 [ 2658.177533] ? p9_client_create+0x798/0x1230 [ 2658.178768] ? kfree+0xd7/0x340 [ 2658.179672] p9_client_create+0xa76/0x1230 [ 2658.180795] ? p9_client_flush+0x430/0x430 [ 2658.181944] ? trace_hardirqs_on+0x5b/0x180 [ 2658.183102] ? lockdep_init_map_type+0x2c7/0x780 [ 2658.184416] ? __raw_spin_lock_init+0x36/0x110 [ 2658.185676] v9fs_session_init+0x1dd/0x1680 [ 2658.186907] ? lock_release+0x680/0x680 [ 2658.187977] ? kmem_cache_alloc_trace+0x151/0x320 [ 2658.189298] ? v9fs_show_options+0x690/0x690 [ 2658.190510] ? trace_hardirqs_on+0x5b/0x180 [ 2658.191714] ? kasan_unpoison_shadow+0x33/0x50 [ 2658.192975] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2658.194283] v9fs_mount+0x79/0x8f0 [ 2658.195237] ? v9fs_write_inode+0x60/0x60 [ 2658.196387] legacy_get_tree+0x105/0x220 [ 2658.197369] vfs_get_tree+0x8e/0x300 [ 2658.198202] path_mount+0x1429/0x2120 [ 2658.199294] ? strncpy_from_user+0x9e/0x470 [ 2658.200434] ? finish_automount+0xa90/0xa90 [ 2658.201606] ? getname_flags.part.0+0x1dd/0x4f0 [ 2658.202850] ? _copy_from_user+0xfb/0x1b0 [ 2658.203851] __x64_sys_mount+0x282/0x300 [ 2658.204844] ? copy_mnt_ns+0xa00/0xa00 [ 2658.205825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2658.207182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2658.208496] do_syscall_64+0x33/0x40 [ 2658.209496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2658.210843] RIP: 0033:0x7fed66145b19 [ 2658.211870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2658.216792] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2658.218838] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2658.220816] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2658.222721] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2658.224582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2658.226628] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2658.240744] loop3: detected capacity change from 0 to 8388096 [ 2658.241939] nfs: Unknown parameter '-$' [ 2658.254375] loop5: detected capacity change from 0 to 8388096 [ 2658.255577] nfs: Unknown parameter '-$' [ 2658.298742] loop6: detected capacity change from 0 to 8388096 [ 2658.303500] nfs: Unknown parameter '-$' [ 2658.305815] loop2: detected capacity change from 0 to 8388096 [ 2658.307358] nfs: Unknown parameter '-$' [ 2658.319401] loop4: detected capacity change from 0 to 8388096 [ 2658.321418] nfs: Unknown parameter '-$' 16:29:59 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 48) 16:29:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x500, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:29:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:59 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 43) 16:29:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x0, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:59 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x0, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:29:59 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2658.468387] FAULT_INJECTION: forcing a failure. [ 2658.468387] name failslab, interval 1, probability 0, space 0, times 0 [ 2658.471378] CPU: 1 PID: 13465 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2658.472846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2658.474995] Call Trace: [ 2658.475555] dump_stack+0x107/0x167 [ 2658.476328] should_fail.cold+0x5/0xa [ 2658.477139] ? p9pdu_readf+0xadb/0x1d40 [ 2658.478043] should_failslab+0x5/0x20 [ 2658.478993] __kmalloc+0x72/0x390 [ 2658.479895] p9pdu_readf+0xadb/0x1d40 [ 2658.480711] ? pipe_poll+0x21b/0x800 [ 2658.481509] ? p9pdu_writef+0x100/0x100 [ 2658.482354] ? p9_fd_poll+0x1e0/0x2c0 [ 2658.483365] ? p9_fd_create+0x357/0x4a0 [ 2658.484343] ? p9_conn_create+0x510/0x510 [ 2658.485220] ? p9_client_create+0x798/0x1230 [ 2658.486161] ? kfree+0xd7/0x340 [ 2658.486874] p9_client_create+0xaee/0x1230 [ 2658.487904] ? p9_client_flush+0x430/0x430 [ 2658.489052] ? trace_hardirqs_on+0x5b/0x180 [ 2658.489988] ? lockdep_init_map_type+0x2c7/0x780 [ 2658.490988] ? __raw_spin_lock_init+0x36/0x110 [ 2658.491962] v9fs_session_init+0x1dd/0x1680 [ 2658.492998] ? lock_release+0x680/0x680 [ 2658.494106] ? kmem_cache_alloc_trace+0x151/0x320 [ 2658.495277] ? v9fs_show_options+0x690/0x690 [ 2658.496215] ? trace_hardirqs_on+0x5b/0x180 [ 2658.497127] ? kasan_unpoison_shadow+0x33/0x50 [ 2658.498109] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2658.499299] v9fs_mount+0x79/0x8f0 [ 2658.500286] ? v9fs_write_inode+0x60/0x60 [ 2658.501173] legacy_get_tree+0x105/0x220 [ 2658.502033] vfs_get_tree+0x8e/0x300 [ 2658.502847] path_mount+0x1429/0x2120 [ 2658.503858] ? strncpy_from_user+0x9e/0x470 [ 2658.504844] ? finish_automount+0xa90/0xa90 [ 2658.505758] ? getname_flags.part.0+0x1dd/0x4f0 [ 2658.507097] ? _copy_from_user+0xfb/0x1b0 [ 2658.508078] __x64_sys_mount+0x282/0x300 [ 2658.509200] ? copy_mnt_ns+0xa00/0xa00 [ 2658.510234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2658.511600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2658.512926] do_syscall_64+0x33/0x40 [ 2658.513972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2658.515210] RIP: 0033:0x7fed66145b19 [ 2658.516120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2658.520576] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2658.522203] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2658.523712] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2658.525224] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2658.526746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2658.528265] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2658.605502] loop2: detected capacity change from 0 to 8388096 [ 2658.609657] nfs: Unknown parameter '-$' [ 2658.642934] FAULT_INJECTION: forcing a failure. [ 2658.642934] name failslab, interval 1, probability 0, space 0, times 0 [ 2658.644253] CPU: 0 PID: 13474 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2658.645063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2658.646049] Call Trace: [ 2658.646376] dump_stack+0x107/0x167 [ 2658.646818] should_fail.cold+0x5/0xa [ 2658.647288] ? create_object.isra.0+0x3a/0xa20 [ 2658.647818] should_failslab+0x5/0x20 [ 2658.648254] kmem_cache_alloc+0x5b/0x310 [ 2658.648728] create_object.isra.0+0x3a/0xa20 [ 2658.649229] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2658.649821] kmem_cache_alloc+0x159/0x310 [ 2658.650300] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2658.650937] idr_get_free+0x4b5/0x8f0 [ 2658.651382] idr_alloc_u32+0x170/0x2d0 [ 2658.651831] ? __fprop_inc_percpu_max+0x130/0x130 [ 2658.652387] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2658.653003] ? lock_release+0x680/0x680 [ 2658.653461] idr_alloc+0xc2/0x130 [ 2658.653868] ? idr_alloc_u32+0x2d0/0x2d0 [ 2658.654334] ? rwlock_bug.part.0+0x90/0x90 [ 2658.654826] p9_client_prepare_req.part.0+0x612/0xac0 [ 2658.655426] p9_client_rpc+0x220/0x1370 [ 2658.655879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2658.656486] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2658.657099] ? pipe_poll+0x21b/0x800 [ 2658.657531] ? p9_fd_close+0x4a0/0x4a0 [ 2658.657988] ? wait_for_partner+0x3c0/0x3c0 [ 2658.658486] ? p9_fd_poll+0x1e0/0x2c0 [ 2658.658924] ? p9_fd_create+0x357/0x4a0 [ 2658.659378] ? p9_conn_create+0x510/0x510 [ 2658.659854] ? p9_client_create+0x798/0x1230 [ 2658.660356] ? kfree+0xd7/0x340 [ 2658.660735] ? do_raw_spin_unlock+0x4f/0x220 [ 2658.661246] p9_client_create+0xa76/0x1230 [ 2658.661739] ? p9_client_flush+0x430/0x430 [ 2658.662229] ? trace_hardirqs_on+0x5b/0x180 [ 2658.662722] ? lockdep_init_map_type+0x2c7/0x780 [ 2658.663266] ? __raw_spin_lock_init+0x36/0x110 [ 2658.663791] v9fs_session_init+0x1dd/0x1680 [ 2658.664288] ? lock_release+0x680/0x680 [ 2658.664744] ? kmem_cache_alloc_trace+0x151/0x320 [ 2658.665299] ? v9fs_show_options+0x690/0x690 [ 2658.665816] ? trace_hardirqs_on+0x5b/0x180 [ 2658.666311] ? kasan_unpoison_shadow+0x33/0x50 [ 2658.666830] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2658.667415] v9fs_mount+0x79/0x8f0 [ 2658.667818] ? v9fs_write_inode+0x60/0x60 [ 2658.668292] legacy_get_tree+0x105/0x220 [ 2658.668758] vfs_get_tree+0x8e/0x300 [ 2658.669193] path_mount+0x1429/0x2120 [ 2658.669648] ? strncpy_from_user+0x9e/0x470 [ 2658.670147] ? finish_automount+0xa90/0xa90 [ 2658.670647] ? getname_flags.part.0+0x1dd/0x4f0 [ 2658.671183] ? _copy_from_user+0xfb/0x1b0 [ 2658.671660] __x64_sys_mount+0x282/0x300 [ 2658.672126] ? copy_mnt_ns+0xa00/0xa00 [ 2658.672575] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2658.673181] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2658.673786] do_syscall_64+0x33/0x40 [ 2658.674213] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2658.674800] RIP: 0033:0x7f7b14970b19 [ 2658.675229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2658.677340] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2658.678226] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2658.679042] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2658.679855] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2658.680664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2658.681486] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2658.704400] loop6: detected capacity change from 0 to 8388096 [ 2658.706529] nfs: Unknown parameter '-$' [ 2658.715595] loop4: detected capacity change from 0 to 8388096 [ 2658.718457] nfs: Unknown parameter '-$' [ 2658.754801] loop3: detected capacity change from 0 to 8388096 [ 2658.756664] nfs: Unknown parameter '-$' 16:30:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x0, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:12 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r0, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xc76cc000) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:12 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x600, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:30:12 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 49) 16:30:12 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 44) 16:30:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x0, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2671.516057] FAULT_INJECTION: forcing a failure. [ 2671.516057] name failslab, interval 1, probability 0, space 0, times 0 [ 2671.518638] CPU: 0 PID: 13496 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2671.520126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2671.521917] Call Trace: [ 2671.522492] dump_stack+0x107/0x167 [ 2671.523283] should_fail.cold+0x5/0xa [ 2671.524098] ? create_object.isra.0+0x3a/0xa20 [ 2671.525073] should_failslab+0x5/0x20 [ 2671.525913] kmem_cache_alloc+0x5b/0x310 [ 2671.526802] create_object.isra.0+0x3a/0xa20 [ 2671.527736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2671.528686] FAULT_INJECTION: forcing a failure. [ 2671.528686] name failslab, interval 1, probability 0, space 0, times 0 [ 2671.528812] __kmalloc+0x16e/0x390 [ 2671.531936] p9pdu_readf+0xadb/0x1d40 [ 2671.532745] ? pipe_poll+0x21b/0x800 [ 2671.533529] ? p9pdu_writef+0x100/0x100 [ 2671.534377] ? p9_fd_poll+0x1e0/0x2c0 [ 2671.535181] ? p9_fd_create+0x357/0x4a0 [ 2671.536020] ? p9_conn_create+0x510/0x510 [ 2671.536889] ? p9_client_create+0x798/0x1230 [ 2671.537829] ? kfree+0xd7/0x340 [ 2671.538533] p9_client_create+0xaee/0x1230 [ 2671.539431] ? p9_client_flush+0x430/0x430 [ 2671.540325] ? trace_hardirqs_on+0x5b/0x180 [ 2671.541238] ? lockdep_init_map_type+0x2c7/0x780 [ 2671.542247] ? __raw_spin_lock_init+0x36/0x110 [ 2671.543216] v9fs_session_init+0x1dd/0x1680 [ 2671.544125] ? lock_release+0x680/0x680 [ 2671.544967] ? kmem_cache_alloc_trace+0x151/0x320 [ 2671.545990] ? v9fs_show_options+0x690/0x690 [ 2671.546922] ? trace_hardirqs_on+0x5b/0x180 [ 2671.547828] ? kasan_unpoison_shadow+0x33/0x50 [ 2671.548787] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2671.549862] v9fs_mount+0x79/0x8f0 [ 2671.550611] ? v9fs_write_inode+0x60/0x60 [ 2671.551488] legacy_get_tree+0x105/0x220 [ 2671.552344] vfs_get_tree+0x8e/0x300 [ 2671.553130] path_mount+0x1429/0x2120 [ 2671.553950] ? strncpy_from_user+0x9e/0x470 [ 2671.554860] ? finish_automount+0xa90/0xa90 [ 2671.555766] ? getname_flags.part.0+0x1dd/0x4f0 [ 2671.556743] ? _copy_from_user+0xfb/0x1b0 [ 2671.557631] __x64_sys_mount+0x282/0x300 [ 2671.558484] ? copy_mnt_ns+0xa00/0xa00 [ 2671.559315] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2671.560420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2671.561507] do_syscall_64+0x33/0x40 [ 2671.562300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2671.563379] RIP: 0033:0x7fed66145b19 [ 2671.564172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2671.568049] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2671.569669] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2671.571177] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2671.572681] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2671.574204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2671.575714] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2671.577246] CPU: 1 PID: 13498 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2671.578741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2671.580510] Call Trace: [ 2671.581107] dump_stack+0x107/0x167 [ 2671.582096] should_fail.cold+0x5/0xa [ 2671.583189] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2671.584524] should_failslab+0x5/0x20 [ 2671.585340] kmem_cache_alloc+0x5b/0x310 [ 2671.586226] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2671.587414] idr_get_free+0x4b5/0x8f0 [ 2671.588240] idr_alloc_u32+0x170/0x2d0 [ 2671.589070] ? __fprop_inc_percpu_max+0x130/0x130 [ 2671.590116] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2671.591250] ? lock_release+0x680/0x680 [ 2671.592102] idr_alloc+0xc2/0x130 [ 2671.592836] ? idr_alloc_u32+0x2d0/0x2d0 [ 2671.593710] ? rwlock_bug.part.0+0x90/0x90 [ 2671.594624] p9_client_prepare_req.part.0+0x612/0xac0 [ 2671.595747] p9_client_rpc+0x220/0x1370 [ 2671.596594] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2671.597728] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2671.598874] ? pipe_poll+0x21b/0x800 [ 2671.599660] ? p9_fd_close+0x4a0/0x4a0 [ 2671.600485] ? wait_for_partner+0x3c0/0x3c0 [ 2671.601400] ? p9_fd_poll+0x1e0/0x2c0 [ 2671.602223] ? p9_fd_create+0x357/0x4a0 [ 2671.603065] ? p9_conn_create+0x510/0x510 [ 2671.603943] ? p9_client_create+0x798/0x1230 [ 2671.604872] ? kfree+0xd7/0x340 [ 2671.605568] ? do_raw_spin_unlock+0x4f/0x220 [ 2671.606521] p9_client_create+0xa76/0x1230 [ 2671.607428] ? p9_client_flush+0x430/0x430 [ 2671.608341] ? trace_hardirqs_on+0x5b/0x180 [ 2671.609271] ? lockdep_init_map_type+0x2c7/0x780 [ 2671.610294] ? __raw_spin_lock_init+0x36/0x110 [ 2671.611274] v9fs_session_init+0x1dd/0x1680 [ 2671.612199] ? lock_release+0x680/0x680 [ 2671.613050] ? kmem_cache_alloc_trace+0x151/0x320 [ 2671.614083] ? v9fs_show_options+0x690/0x690 [ 2671.615029] ? trace_hardirqs_on+0x5b/0x180 [ 2671.615940] ? kasan_unpoison_shadow+0x33/0x50 [ 2671.616907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2671.618010] v9fs_mount+0x79/0x8f0 [ 2671.618770] ? v9fs_write_inode+0x60/0x60 [ 2671.619663] legacy_get_tree+0x105/0x220 [ 2671.620532] vfs_get_tree+0x8e/0x300 [ 2671.621330] path_mount+0x1429/0x2120 [ 2671.622153] ? strncpy_from_user+0x9e/0x470 [ 2671.623077] ? finish_automount+0xa90/0xa90 [ 2671.623992] ? getname_flags.part.0+0x1dd/0x4f0 [ 2671.624989] ? _copy_from_user+0xfb/0x1b0 [ 2671.625895] __x64_sys_mount+0x282/0x300 [ 2671.626760] ? copy_mnt_ns+0xa00/0xa00 [ 2671.627598] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2671.628725] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2671.629843] do_syscall_64+0x33/0x40 [ 2671.630641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2671.631746] RIP: 0033:0x7f7b14970b19 [ 2671.632551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2671.636621] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2671.638275] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2671.639809] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2671.641343] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2671.642882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2671.644413] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2671.663938] loop5: detected capacity change from 0 to 8388096 [ 2671.686763] nfs: Unknown parameter '-$' 16:30:12 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 50) 16:30:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x0, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:12 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x700, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:30:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x0, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2671.908764] FAULT_INJECTION: forcing a failure. [ 2671.908764] name failslab, interval 1, probability 0, space 0, times 0 [ 2671.911105] CPU: 1 PID: 13512 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2671.912483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2671.914148] Call Trace: [ 2671.914676] dump_stack+0x107/0x167 [ 2671.915404] should_fail.cold+0x5/0xa [ 2671.916163] ? create_object.isra.0+0x3a/0xa20 [ 2671.917075] should_failslab+0x5/0x20 [ 2671.917843] kmem_cache_alloc+0x5b/0x310 [ 2671.918652] create_object.isra.0+0x3a/0xa20 [ 2671.919536] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2671.920559] __kmalloc+0x16e/0x390 [ 2671.921278] p9pdu_readf+0xadb/0x1d40 [ 2671.922048] ? pipe_poll+0x21b/0x800 [ 2671.922794] ? p9pdu_writef+0x100/0x100 [ 2671.923589] ? p9_fd_poll+0x1e0/0x2c0 [ 2671.924351] ? p9_fd_create+0x357/0x4a0 [ 2671.925139] ? p9_conn_create+0x510/0x510 [ 2671.925972] ? p9_client_create+0x798/0x1230 [ 2671.926841] ? kfree+0xd7/0x340 [ 2671.927503] p9_client_create+0xaee/0x1230 [ 2671.928349] ? p9_client_flush+0x430/0x430 [ 2671.929199] ? trace_hardirqs_on+0x5b/0x180 [ 2671.930055] ? lockdep_init_map_type+0x2c7/0x780 [ 2671.930996] ? __raw_spin_lock_init+0x36/0x110 [ 2671.931898] v9fs_session_init+0x1dd/0x1680 [ 2671.932745] ? lock_release+0x680/0x680 [ 2671.933531] ? kmem_cache_alloc_trace+0x151/0x320 [ 2671.934485] ? v9fs_show_options+0x690/0x690 [ 2671.935363] ? trace_hardirqs_on+0x5b/0x180 [ 2671.936211] ? kasan_unpoison_shadow+0x33/0x50 [ 2671.937116] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2671.938121] v9fs_mount+0x79/0x8f0 [ 2671.938816] ? v9fs_write_inode+0x60/0x60 [ 2671.939636] legacy_get_tree+0x105/0x220 [ 2671.940437] vfs_get_tree+0x8e/0x300 [ 2671.941176] path_mount+0x1429/0x2120 [ 2671.941943] ? strncpy_from_user+0x9e/0x470 [ 2671.942793] ? finish_automount+0xa90/0xa90 [ 2671.943649] ? getname_flags.part.0+0x1dd/0x4f0 [ 2671.944564] ? _copy_from_user+0xfb/0x1b0 [ 2671.945390] __x64_sys_mount+0x282/0x300 [ 2671.946201] ? copy_mnt_ns+0xa00/0xa00 [ 2671.946971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2671.947997] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2671.949008] do_syscall_64+0x33/0x40 [ 2671.949747] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2671.950751] RIP: 0033:0x7fed66145b19 [ 2671.951478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2671.955072] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2671.956557] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2671.957959] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2671.959355] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2671.960744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2671.962140] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 16:30:12 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 45) [ 2671.997536] loop2: detected capacity change from 0 to 8388096 [ 2671.999674] nfs: Unknown parameter '-$' [ 2672.060574] loop5: detected capacity change from 0 to 8388096 [ 2672.063380] nfs: Unknown parameter '-$' [ 2672.109656] loop6: detected capacity change from 0 to 8388096 [ 2672.111960] nfs: Unknown parameter '-$' [ 2672.136398] loop3: detected capacity change from 0 to 8388096 [ 2672.138537] nfs: Unknown parameter '-$' [ 2672.186183] FAULT_INJECTION: forcing a failure. [ 2672.186183] name failslab, interval 1, probability 0, space 0, times 0 [ 2672.188314] CPU: 1 PID: 13531 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2672.189526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2672.191315] Call Trace: [ 2672.191946] dump_stack+0x107/0x167 [ 2672.192593] should_fail.cold+0x5/0xa [ 2672.193247] ? create_object.isra.0+0x3a/0xa20 [ 2672.194043] should_failslab+0x5/0x20 [ 2672.194684] kmem_cache_alloc+0x5b/0x310 [ 2672.195385] create_object.isra.0+0x3a/0xa20 [ 2672.196269] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2672.197343] kmem_cache_alloc+0x159/0x310 [ 2672.198118] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2672.199282] idr_get_free+0x4b5/0x8f0 [ 2672.199941] idr_alloc_u32+0x170/0x2d0 [ 2672.200612] ? __fprop_inc_percpu_max+0x130/0x130 [ 2672.201454] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2672.202638] ? lock_release+0x680/0x680 [ 2672.203519] idr_alloc+0xc2/0x130 [ 2672.204140] ? idr_alloc_u32+0x2d0/0x2d0 [ 2672.204826] ? rwlock_bug.part.0+0x90/0x90 [ 2672.205560] p9_client_prepare_req.part.0+0x612/0xac0 [ 2672.206468] p9_client_rpc+0x220/0x1370 [ 2672.207145] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2672.208252] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2672.209448] ? pipe_poll+0x21b/0x800 [ 2672.210187] ? p9_fd_close+0x4a0/0x4a0 [ 2672.210847] ? wait_for_partner+0x3c0/0x3c0 [ 2672.211572] ? p9_fd_poll+0x1e0/0x2c0 [ 2672.212230] ? p9_fd_create+0x357/0x4a0 [ 2672.212906] ? p9_conn_create+0x510/0x510 [ 2672.213608] ? p9_client_create+0x798/0x1230 [ 2672.214353] ? kfree+0xd7/0x340 [ 2672.215105] ? do_raw_spin_unlock+0x4f/0x220 [ 2672.215973] p9_client_create+0xa76/0x1230 [ 2672.216867] ? p9_client_flush+0x430/0x430 [ 2672.217589] ? trace_hardirqs_on+0x5b/0x180 [ 2672.218320] ? lockdep_init_map_type+0x2c7/0x780 [ 2672.219120] ? __raw_spin_lock_init+0x36/0x110 [ 2672.219901] v9fs_session_init+0x1dd/0x1680 [ 2672.220698] ? lock_release+0x680/0x680 [ 2672.221551] ? kmem_cache_alloc_trace+0x151/0x320 [ 2672.222667] ? v9fs_show_options+0x690/0x690 [ 2672.223408] ? trace_hardirqs_on+0x5b/0x180 [ 2672.224158] ? kasan_unpoison_shadow+0x33/0x50 [ 2672.224926] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2672.225788] v9fs_mount+0x79/0x8f0 [ 2672.226395] ? v9fs_write_inode+0x60/0x60 [ 2672.227089] legacy_get_tree+0x105/0x220 [ 2672.227946] vfs_get_tree+0x8e/0x300 [ 2672.228712] path_mount+0x1429/0x2120 [ 2672.229579] ? strncpy_from_user+0x9e/0x470 [ 2672.230298] ? finish_automount+0xa90/0xa90 [ 2672.231014] ? getname_flags.part.0+0x1dd/0x4f0 [ 2672.231802] ? _copy_from_user+0xfb/0x1b0 [ 2672.232499] __x64_sys_mount+0x282/0x300 [ 2672.233181] ? copy_mnt_ns+0xa00/0xa00 [ 2672.233893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2672.234959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2672.236000] do_syscall_64+0x33/0x40 [ 2672.236621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2672.237475] RIP: 0033:0x7f7b14970b19 [ 2672.238114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2672.241337] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2672.242941] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2672.244134] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2672.245315] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2672.246532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2672.247938] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 16:30:27 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 51) 16:30:27 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 46) 16:30:27 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x0, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x900, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:30:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x0, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2686.552519] FAULT_INJECTION: forcing a failure. [ 2686.552519] name failslab, interval 1, probability 0, space 0, times 0 [ 2686.555075] CPU: 0 PID: 13549 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2686.556549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2686.558349] Call Trace: [ 2686.558921] dump_stack+0x107/0x167 [ 2686.559713] should_fail.cold+0x5/0xa [ 2686.560534] ? create_object.isra.0+0x3a/0xa20 [ 2686.561531] should_failslab+0x5/0x20 [ 2686.562360] kmem_cache_alloc+0x5b/0x310 [ 2686.563232] ? vsnprintf+0x4ba/0x1600 [ 2686.564054] create_object.isra.0+0x3a/0xa20 [ 2686.565009] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2686.566130] __kmalloc_track_caller+0x177/0x370 [ 2686.567141] ? kasprintf+0xbb/0xf0 [ 2686.567915] kvasprintf+0xb5/0x150 [ 2686.568696] ? bust_spinlocks+0xe0/0xe0 [ 2686.568833] loop4: detected capacity change from 0 to 8388096 [ 2686.569546] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2686.569579] kasprintf+0xbb/0xf0 [ 2686.569599] ? kvasprintf_const+0x1a0/0x1a0 [ 2686.569620] ? kmem_cache_free+0x249/0x2d0 [ 2686.569646] ? p9_client_create+0xbfa/0x1230 [ 2686.569681] p9_client_create+0xc1b/0x1230 [ 2686.576372] ? p9_client_flush+0x430/0x430 [ 2686.577271] ? trace_hardirqs_on+0x5b/0x180 [ 2686.578202] ? lockdep_init_map_type+0x2c7/0x780 [ 2686.579232] ? __raw_spin_lock_init+0x36/0x110 [ 2686.579374] nfs: Unknown parameter '-$' [ 2686.580210] v9fs_session_init+0x1dd/0x1680 [ 2686.580230] ? lock_release+0x680/0x680 [ 2686.580257] ? kmem_cache_alloc_trace+0x151/0x320 [ 2686.580276] ? v9fs_show_options+0x690/0x690 [ 2686.580304] ? trace_hardirqs_on+0x5b/0x180 [ 2686.585708] ? kasan_unpoison_shadow+0x33/0x50 [ 2686.586689] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2686.587774] v9fs_mount+0x79/0x8f0 [ 2686.588540] ? v9fs_write_inode+0x60/0x60 [ 2686.589428] legacy_get_tree+0x105/0x220 [ 2686.590309] vfs_get_tree+0x8e/0x300 [ 2686.591100] path_mount+0x1429/0x2120 [ 2686.591917] ? strncpy_from_user+0x9e/0x470 [ 2686.592850] ? finish_automount+0xa90/0xa90 [ 2686.593785] ? getname_flags.part.0+0x1dd/0x4f0 [ 2686.594780] ? _copy_from_user+0xfb/0x1b0 [ 2686.595677] __x64_sys_mount+0x282/0x300 [ 2686.596555] ? copy_mnt_ns+0xa00/0xa00 [ 2686.597391] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2686.598534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2686.599643] do_syscall_64+0x33/0x40 [ 2686.600445] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2686.601541] RIP: 0033:0x7fed66145b19 [ 2686.602354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2686.606322] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2686.607966] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2686.609498] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2686.611058] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2686.612597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2686.614129] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2686.645562] FAULT_INJECTION: forcing a failure. [ 2686.645562] name failslab, interval 1, probability 0, space 0, times 0 [ 2686.648309] CPU: 1 PID: 13552 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2686.650063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2686.651838] Call Trace: [ 2686.652416] dump_stack+0x107/0x167 [ 2686.653215] should_fail.cold+0x5/0xa [ 2686.654030] ? p9pdu_readf+0xadb/0x1d40 [ 2686.654889] should_failslab+0x5/0x20 [ 2686.655703] __kmalloc+0x72/0x390 [ 2686.656452] p9pdu_readf+0xadb/0x1d40 [ 2686.657273] ? pipe_poll+0x21b/0x800 [ 2686.658079] ? p9pdu_writef+0x100/0x100 [ 2686.658938] ? p9_fd_poll+0x1e0/0x2c0 [ 2686.659776] ? p9_fd_create+0x357/0x4a0 [ 2686.660636] ? p9_conn_create+0x510/0x510 [ 2686.661536] ? p9_client_create+0x798/0x1230 [ 2686.662505] ? kfree+0xd7/0x340 [ 2686.663225] ? do_raw_spin_unlock+0x4f/0x220 [ 2686.664186] p9_client_create+0xaee/0x1230 [ 2686.665103] ? p9_client_flush+0x430/0x430 [ 2686.666022] ? trace_hardirqs_on+0x5b/0x180 [ 2686.666961] ? lockdep_init_map_type+0x2c7/0x780 [ 2686.667986] ? __raw_spin_lock_init+0x36/0x110 [ 2686.668992] v9fs_session_init+0x1dd/0x1680 [ 2686.669923] ? lock_release+0x680/0x680 [ 2686.670782] ? kmem_cache_alloc_trace+0x151/0x320 [ 2686.671811] ? v9fs_show_options+0x690/0x690 [ 2686.672760] ? trace_hardirqs_on+0x5b/0x180 [ 2686.673678] ? kasan_unpoison_shadow+0x33/0x50 [ 2686.674659] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2686.675746] v9fs_mount+0x79/0x8f0 [ 2686.676507] ? v9fs_write_inode+0x60/0x60 [ 2686.677394] legacy_get_tree+0x105/0x220 [ 2686.678268] vfs_get_tree+0x8e/0x300 [ 2686.679060] path_mount+0x1429/0x2120 [ 2686.679874] ? strncpy_from_user+0x9e/0x470 [ 2686.680791] ? finish_automount+0xa90/0xa90 [ 2686.681710] ? getname_flags.part.0+0x1dd/0x4f0 [ 2686.682711] ? _copy_from_user+0xfb/0x1b0 [ 2686.683600] __x64_sys_mount+0x282/0x300 [ 2686.684459] ? copy_mnt_ns+0xa00/0xa00 [ 2686.685290] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2686.686417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2686.687523] do_syscall_64+0x33/0x40 [ 2686.688327] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2686.689419] RIP: 0033:0x7f7b14970b19 [ 2686.690220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2686.694188] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2686.695824] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2686.697344] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2686.698875] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2686.700396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2686.701933] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2686.710657] loop2: detected capacity change from 0 to 8388096 [ 2686.817081] loop5: detected capacity change from 0 to 8388096 16:30:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0xa00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2686.825581] nfs: Unknown parameter '-$' 16:30:27 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 47) 16:30:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x0, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:27 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x0, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:27 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 52) 16:30:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2687.025969] FAULT_INJECTION: forcing a failure. [ 2687.025969] name failslab, interval 1, probability 0, space 0, times 0 [ 2687.028772] CPU: 0 PID: 13573 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2687.030324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2687.032080] Call Trace: [ 2687.032649] dump_stack+0x107/0x167 [ 2687.033422] should_fail.cold+0x5/0xa [ 2687.034241] ? p9pdu_readf+0xadb/0x1d40 [ 2687.035094] should_failslab+0x5/0x20 [ 2687.035897] __kmalloc+0x72/0x390 [ 2687.036632] p9pdu_readf+0xadb/0x1d40 [ 2687.037444] ? pipe_poll+0x21b/0x800 [ 2687.038240] ? p9pdu_writef+0x100/0x100 [ 2687.039079] ? p9_fd_poll+0x1e0/0x2c0 [ 2687.039886] ? p9_fd_create+0x357/0x4a0 [ 2687.040730] ? p9_conn_create+0x510/0x510 [ 2687.041611] ? p9_client_create+0x798/0x1230 [ 2687.042549] ? kfree+0xd7/0x340 [ 2687.043242] ? do_raw_spin_unlock+0x4f/0x220 [ 2687.044177] p9_client_create+0xaee/0x1230 [ 2687.045076] ? p9_client_flush+0x430/0x430 [ 2687.045971] ? trace_hardirqs_on+0x5b/0x180 [ 2687.046886] ? lockdep_init_map_type+0x2c7/0x780 [ 2687.047888] ? __raw_spin_lock_init+0x36/0x110 [ 2687.048861] v9fs_session_init+0x1dd/0x1680 [ 2687.049772] ? lock_release+0x680/0x680 [ 2687.050630] ? kmem_cache_alloc_trace+0x151/0x320 [ 2687.051645] ? v9fs_show_options+0x690/0x690 [ 2687.052583] ? trace_hardirqs_on+0x5b/0x180 [ 2687.053490] ? kasan_unpoison_shadow+0x33/0x50 [ 2687.054465] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2687.055529] v9fs_mount+0x79/0x8f0 [ 2687.056285] ? v9fs_write_inode+0x60/0x60 [ 2687.057162] legacy_get_tree+0x105/0x220 [ 2687.058026] vfs_get_tree+0x8e/0x300 [ 2687.058808] path_mount+0x1429/0x2120 [ 2687.059615] ? strncpy_from_user+0x9e/0x470 [ 2687.060525] ? finish_automount+0xa90/0xa90 [ 2687.061435] ? getname_flags.part.0+0x1dd/0x4f0 [ 2687.062427] ? _copy_from_user+0xfb/0x1b0 [ 2687.063310] __x64_sys_mount+0x282/0x300 [ 2687.064161] ? copy_mnt_ns+0xa00/0xa00 [ 2687.064980] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2687.066099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2687.067200] do_syscall_64+0x33/0x40 [ 2687.067989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2687.069081] RIP: 0033:0x7f7b14970b19 [ 2687.069873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2687.073753] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2687.075377] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2687.076881] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2687.078426] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2687.079934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2687.081442] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2687.117473] loop6: detected capacity change from 0 to 8388096 [ 2687.119757] nfs: Unknown parameter '-$' [ 2687.145464] loop3: detected capacity change from 0 to 8388096 [ 2687.147945] nfs: Unknown parameter '-$' [ 2687.190856] loop4: detected capacity change from 0 to 8388096 [ 2687.198945] nfs: Unknown parameter '-$' [ 2687.287523] loop5: detected capacity change from 0 to 8388096 [ 2687.289612] nfs: Unknown parameter '-$' [ 2687.309043] FAULT_INJECTION: forcing a failure. [ 2687.309043] name failslab, interval 1, probability 0, space 0, times 0 [ 2687.311754] CPU: 0 PID: 13584 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2687.313168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2687.314876] Call Trace: [ 2687.315423] dump_stack+0x107/0x167 [ 2687.316174] should_fail.cold+0x5/0xa [ 2687.316965] should_failslab+0x5/0x20 [ 2687.317741] __kmalloc_track_caller+0x79/0x370 [ 2687.318694] ? kstrdup_const+0x53/0x80 [ 2687.319495] kstrdup+0x36/0x70 [ 2687.320154] kstrdup_const+0x53/0x80 [ 2687.320917] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2687.321941] p9_client_create+0xc6a/0x1230 [ 2687.322805] ? p9_client_flush+0x430/0x430 [ 2687.323661] ? trace_hardirqs_on+0x5b/0x180 [ 2687.324540] ? lockdep_init_map_type+0x2c7/0x780 [ 2687.325498] ? __raw_spin_lock_init+0x36/0x110 [ 2687.326440] v9fs_session_init+0x1dd/0x1680 [ 2687.327316] ? lock_release+0x680/0x680 [ 2687.328129] ? kmem_cache_alloc_trace+0x151/0x320 [ 2687.329102] ? v9fs_show_options+0x690/0x690 [ 2687.330010] ? trace_hardirqs_on+0x5b/0x180 [ 2687.330878] ? kasan_unpoison_shadow+0x33/0x50 [ 2687.331795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2687.332826] v9fs_mount+0x79/0x8f0 [ 2687.333546] ? v9fs_write_inode+0x60/0x60 [ 2687.334391] legacy_get_tree+0x105/0x220 [ 2687.335211] vfs_get_tree+0x8e/0x300 [ 2687.335958] path_mount+0x1429/0x2120 [ 2687.336729] ? strncpy_from_user+0x9e/0x470 [ 2687.337596] ? finish_automount+0xa90/0xa90 [ 2687.338470] ? getname_flags.part.0+0x1dd/0x4f0 [ 2687.339413] ? _copy_from_user+0xfb/0x1b0 [ 2687.340264] __x64_sys_mount+0x282/0x300 [ 2687.341092] ? copy_mnt_ns+0xa00/0xa00 [ 2687.341889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2687.342944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2687.343990] do_syscall_64+0x33/0x40 [ 2687.344745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2687.345777] RIP: 0033:0x7fed66145b19 [ 2687.346540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2687.350234] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2687.351754] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2687.353179] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2687.354614] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2687.356035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2687.357456] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2687.358967] kmem_cache_create(9p-fcall-cache-1394) failed with error -12 [ 2687.360633] CPU: 0 PID: 13584 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2687.362051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2687.363710] Call Trace: [ 2687.364237] dump_stack+0x107/0x167 [ 2687.364970] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2687.366041] p9_client_create+0xc6a/0x1230 [ 2687.366901] ? p9_client_flush+0x430/0x430 [ 2687.367749] ? trace_hardirqs_on+0x5b/0x180 [ 2687.368615] ? lockdep_init_map_type+0x2c7/0x780 [ 2687.369564] ? __raw_spin_lock_init+0x36/0x110 [ 2687.370500] v9fs_session_init+0x1dd/0x1680 [ 2687.371379] ? lock_release+0x680/0x680 [ 2687.372191] ? kmem_cache_alloc_trace+0x151/0x320 [ 2687.373143] ? v9fs_show_options+0x690/0x690 [ 2687.374028] ? trace_hardirqs_on+0x5b/0x180 [ 2687.374901] ? kasan_unpoison_shadow+0x33/0x50 [ 2687.375807] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2687.376820] v9fs_mount+0x79/0x8f0 [ 2687.377529] ? v9fs_write_inode+0x60/0x60 [ 2687.378389] legacy_get_tree+0x105/0x220 [ 2687.379193] vfs_get_tree+0x8e/0x300 [ 2687.379920] path_mount+0x1429/0x2120 [ 2687.380672] ? strncpy_from_user+0x9e/0x470 [ 2687.381525] ? finish_automount+0xa90/0xa90 [ 2687.382386] ? getname_flags.part.0+0x1dd/0x4f0 [ 2687.383311] ? _copy_from_user+0xfb/0x1b0 [ 2687.384141] __x64_sys_mount+0x282/0x300 [ 2687.384940] ? copy_mnt_ns+0xa00/0xa00 [ 2687.385717] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2687.386755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2687.387781] do_syscall_64+0x33/0x40 [ 2687.388520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2687.389543] RIP: 0033:0x7fed66145b19 [ 2687.390294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2687.393929] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2687.395417] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2687.396807] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2687.398208] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2687.399598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2687.400994] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2687.407211] loop2: detected capacity change from 0 to 8388096 16:30:41 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 53) 16:30:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0xb00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:30:41 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:41 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 48) 16:30:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x0, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x0, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2700.811548] FAULT_INJECTION: forcing a failure. [ 2700.811548] name failslab, interval 1, probability 0, space 0, times 0 [ 2700.814399] CPU: 1 PID: 13604 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2700.815883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2700.817648] Call Trace: [ 2700.818222] dump_stack+0x107/0x167 [ 2700.818998] should_fail.cold+0x5/0xa [ 2700.819814] ? create_object.isra.0+0x3a/0xa20 [ 2700.820785] should_failslab+0x5/0x20 [ 2700.821591] kmem_cache_alloc+0x5b/0x310 [ 2700.822475] create_object.isra.0+0x3a/0xa20 [ 2700.823409] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2700.824492] __kmalloc+0x16e/0x390 [ 2700.825248] p9pdu_readf+0xadb/0x1d40 [ 2700.826071] ? pipe_poll+0x21b/0x800 [ 2700.826874] ? p9pdu_writef+0x100/0x100 [ 2700.827718] ? p9_fd_poll+0x1e0/0x2c0 [ 2700.828537] ? p9_fd_create+0x357/0x4a0 [ 2700.829384] ? p9_conn_create+0x510/0x510 [ 2700.830272] ? p9_client_create+0x798/0x1230 [ 2700.831215] ? kfree+0xd7/0x340 [ 2700.831911] ? do_raw_spin_unlock+0x4f/0x220 [ 2700.832855] p9_client_create+0xaee/0x1230 [ 2700.833762] ? p9_client_flush+0x430/0x430 [ 2700.834678] ? trace_hardirqs_on+0x5b/0x180 [ 2700.835604] ? lockdep_init_map_type+0x2c7/0x780 [ 2700.836623] ? __raw_spin_lock_init+0x36/0x110 [ 2700.837602] v9fs_session_init+0x1dd/0x1680 [ 2700.838583] ? lock_release+0x680/0x680 [ 2700.839438] ? kmem_cache_alloc_trace+0x151/0x320 [ 2700.840469] ? v9fs_show_options+0x690/0x690 [ 2700.841418] ? trace_hardirqs_on+0x5b/0x180 [ 2700.842342] ? kasan_unpoison_shadow+0x33/0x50 [ 2700.843307] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2700.844383] v9fs_mount+0x79/0x8f0 [ 2700.845143] ? v9fs_write_inode+0x60/0x60 [ 2700.846035] legacy_get_tree+0x105/0x220 [ 2700.846901] vfs_get_tree+0x8e/0x300 [ 2700.847696] path_mount+0x1429/0x2120 [ 2700.848517] ? strncpy_from_user+0x9e/0x470 [ 2700.849430] ? finish_automount+0xa90/0xa90 [ 2700.850364] ? getname_flags.part.0+0x1dd/0x4f0 [ 2700.851356] ? _copy_from_user+0xfb/0x1b0 [ 2700.852256] __x64_sys_mount+0x282/0x300 [ 2700.853129] ? copy_mnt_ns+0xa00/0xa00 [ 2700.853968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2700.855102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2700.856198] do_syscall_64+0x33/0x40 [ 2700.856998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2700.858094] RIP: 0033:0x7f7b14970b19 [ 2700.858883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2700.863165] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2700.864786] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2700.866302] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2700.867819] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2700.869332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2700.870853] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2700.879783] FAULT_INJECTION: forcing a failure. [ 2700.879783] name failslab, interval 1, probability 0, space 0, times 0 [ 2700.882230] CPU: 1 PID: 13606 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2700.883711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2700.885450] Call Trace: [ 2700.886018] dump_stack+0x107/0x167 [ 2700.886802] should_fail.cold+0x5/0xa [ 2700.887622] should_failslab+0x5/0x20 [ 2700.888435] __kmalloc_track_caller+0x79/0x370 [ 2700.889405] ? kstrdup_const+0x53/0x80 [ 2700.890241] ? kasprintf+0xbb/0xf0 [ 2700.891005] kstrdup+0x36/0x70 [ 2700.891697] kstrdup_const+0x53/0x80 [ 2700.892505] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2700.893572] p9_client_create+0xc6a/0x1230 [ 2700.894497] ? p9_client_flush+0x430/0x430 [ 2700.895400] ? trace_hardirqs_on+0x5b/0x180 [ 2700.896319] ? lockdep_init_map_type+0x2c7/0x780 [ 2700.897322] ? __raw_spin_lock_init+0x36/0x110 [ 2700.898307] v9fs_session_init+0x1dd/0x1680 [ 2700.899232] ? lock_release+0x680/0x680 [ 2700.900089] ? kmem_cache_alloc_trace+0x151/0x320 [ 2700.901123] ? v9fs_show_options+0x690/0x690 [ 2700.902075] ? trace_hardirqs_on+0x5b/0x180 [ 2700.902993] ? kasan_unpoison_shadow+0x33/0x50 [ 2700.903967] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2700.905051] v9fs_mount+0x79/0x8f0 [ 2700.905805] ? v9fs_write_inode+0x60/0x60 [ 2700.906703] legacy_get_tree+0x105/0x220 [ 2700.907572] vfs_get_tree+0x8e/0x300 [ 2700.908361] path_mount+0x1429/0x2120 [ 2700.909173] ? strncpy_from_user+0x9e/0x470 [ 2700.910099] ? finish_automount+0xa90/0xa90 [ 2700.911019] ? getname_flags.part.0+0x1dd/0x4f0 [ 2700.912011] ? _copy_from_user+0xfb/0x1b0 [ 2700.912911] __x64_sys_mount+0x282/0x300 [ 2700.913777] ? copy_mnt_ns+0xa00/0xa00 [ 2700.914626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2700.915744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2700.916858] do_syscall_64+0x33/0x40 [ 2700.917659] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2700.918757] RIP: 0033:0x7fed66145b19 [ 2700.919551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2700.923497] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2700.925123] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2700.926662] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2700.928190] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2700.929717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2700.931258] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2700.934326] kmem_cache_create(9p-fcall-cache-1397) failed with error -12 [ 2700.936062] CPU: 1 PID: 13606 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2700.937542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2700.939345] Call Trace: [ 2700.939915] dump_stack+0x107/0x167 [ 2700.940699] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2700.941846] p9_client_create+0xc6a/0x1230 [ 2700.942788] ? p9_client_flush+0x430/0x430 [ 2700.943695] ? trace_hardirqs_on+0x5b/0x180 [ 2700.944637] ? lockdep_init_map_type+0x2c7/0x780 [ 2700.945668] ? __raw_spin_lock_init+0x36/0x110 [ 2700.946653] v9fs_session_init+0x1dd/0x1680 [ 2700.947589] ? lock_release+0x680/0x680 [ 2700.948456] ? kmem_cache_alloc_trace+0x151/0x320 [ 2700.949491] ? v9fs_show_options+0x690/0x690 [ 2700.950465] ? trace_hardirqs_on+0x5b/0x180 [ 2700.951405] ? kasan_unpoison_shadow+0x33/0x50 [ 2700.952388] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2700.953508] v9fs_mount+0x79/0x8f0 [ 2700.954288] ? v9fs_write_inode+0x60/0x60 [ 2700.955191] legacy_get_tree+0x105/0x220 [ 2700.956064] vfs_get_tree+0x8e/0x300 [ 2700.956868] path_mount+0x1429/0x2120 [ 2700.957698] ? strncpy_from_user+0x9e/0x470 [ 2700.958642] ? finish_automount+0xa90/0xa90 [ 2700.959578] ? getname_flags.part.0+0x1dd/0x4f0 [ 2700.960595] ? _copy_from_user+0xfb/0x1b0 [ 2700.961500] __x64_sys_mount+0x282/0x300 [ 2700.962385] ? copy_mnt_ns+0xa00/0xa00 [ 2700.963229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2700.964354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2700.965485] do_syscall_64+0x33/0x40 [ 2700.966311] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2700.967425] RIP: 0033:0x7fed66145b19 [ 2700.968236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2700.972218] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2700.973868] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2700.975428] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2700.976955] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2700.978502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2700.980029] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 16:30:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x1020, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2701.019537] loop3: detected capacity change from 0 to 8388096 [ 2701.022477] nfs: Unknown parameter '-$' [ 2701.043329] loop2: detected capacity change from 0 to 8388096 [ 2701.046496] nfs: Unknown parameter '-$' 16:30:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2701.082289] loop6: detected capacity change from 0 to 8388096 [ 2701.085499] nfs: Unknown parameter '-$' [ 2701.090685] loop4: detected capacity change from 0 to 8388096 [ 2701.093860] nfs: Unknown parameter '-$' 16:30:42 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 49) 16:30:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x0, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2701.302315] loop5: detected capacity change from 0 to 8388096 [ 2701.314331] FAULT_INJECTION: forcing a failure. [ 2701.314331] name failslab, interval 1, probability 0, space 0, times 0 [ 2701.316822] CPU: 0 PID: 13625 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2701.318308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2701.320094] Call Trace: [ 2701.320670] dump_stack+0x107/0x167 [ 2701.321296] nfs: Unknown parameter '-$' [ 2701.321464] should_fail.cold+0x5/0xa [ 2701.321492] ? create_object.isra.0+0x3a/0xa20 [ 2701.324115] should_failslab+0x5/0x20 [ 2701.324924] kmem_cache_alloc+0x5b/0x310 [ 2701.325806] ? vsnprintf+0x4ba/0x1600 [ 2701.326602] create_object.isra.0+0x3a/0xa20 [ 2701.327572] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2701.328642] __kmalloc_track_caller+0x177/0x370 [ 2701.329643] ? kasprintf+0xbb/0xf0 [ 2701.330560] kvasprintf+0xb5/0x150 [ 2701.331505] ? bust_spinlocks+0xe0/0xe0 [ 2701.332546] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2701.333908] kasprintf+0xbb/0xf0 [ 2701.334798] ? kvasprintf_const+0x1a0/0x1a0 [ 2701.335931] ? kmem_cache_free+0x249/0x2d0 [ 2701.336884] ? p9_client_create+0xbfa/0x1230 [ 2701.338032] p9_client_create+0xc1b/0x1230 [ 2701.339134] ? p9_client_flush+0x430/0x430 [ 2701.340217] ? trace_hardirqs_on+0x5b/0x180 [ 2701.341320] ? lockdep_init_map_type+0x2c7/0x780 [ 2701.342553] ? __raw_spin_lock_init+0x36/0x110 [ 2701.343718] v9fs_session_init+0x1dd/0x1680 [ 2701.344811] ? lock_release+0x680/0x680 [ 2701.345833] ? kmem_cache_alloc_trace+0x151/0x320 [ 2701.346886] ? v9fs_show_options+0x690/0x690 [ 2701.347829] ? trace_hardirqs_on+0x5b/0x180 [ 2701.348722] ? kasan_unpoison_shadow+0x33/0x50 [ 2701.349679] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2701.350743] v9fs_mount+0x79/0x8f0 [ 2701.351493] ? v9fs_write_inode+0x60/0x60 [ 2701.352388] legacy_get_tree+0x105/0x220 [ 2701.353424] vfs_get_tree+0x8e/0x300 [ 2701.354271] path_mount+0x1429/0x2120 [ 2701.355240] ? strncpy_from_user+0x9e/0x470 [ 2701.356184] ? finish_automount+0xa90/0xa90 [ 2701.357125] ? getname_flags.part.0+0x1dd/0x4f0 [ 2701.358155] ? _copy_from_user+0xfb/0x1b0 [ 2701.359043] __x64_sys_mount+0x282/0x300 [ 2701.359927] ? copy_mnt_ns+0xa00/0xa00 [ 2701.360784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2701.361920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2701.363066] do_syscall_64+0x33/0x40 [ 2701.363883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2701.365006] RIP: 0033:0x7f7b14970b19 [ 2701.365818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2701.369988] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2701.371571] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2701.373056] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2701.374549] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2701.376046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2701.377691] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2701.559494] loop2: detected capacity change from 0 to 8388096 [ 2701.563280] nfs: Unknown parameter '-$' [ 2701.604795] loop3: detected capacity change from 0 to 8388096 [ 2701.610777] nfs: Unknown parameter '-$' 16:30:57 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x1800, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:30:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x0, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:57 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:57 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 54) 16:30:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x0, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:57 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 50) [ 2716.278482] loop3: detected capacity change from 0 to 8388096 [ 2716.285278] FAULT_INJECTION: forcing a failure. [ 2716.285278] name failslab, interval 1, probability 0, space 0, times 0 [ 2716.287453] nfs: Unknown parameter '-$' [ 2716.288095] CPU: 1 PID: 13653 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2716.290478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2716.292439] Call Trace: [ 2716.293065] dump_stack+0x107/0x167 [ 2716.293929] should_fail.cold+0x5/0xa [ 2716.294858] ? create_object.isra.0+0x3a/0xa20 [ 2716.295947] should_failslab+0x5/0x20 [ 2716.296849] kmem_cache_alloc+0x5b/0x310 [ 2716.297818] ? lock_acquire+0x197/0x470 [ 2716.298782] create_object.isra.0+0x3a/0xa20 [ 2716.299822] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2716.301035] __kmalloc_track_caller+0x177/0x370 [ 2716.302156] ? kstrdup_const+0x53/0x80 [ 2716.303089] ? kasprintf+0xbb/0xf0 [ 2716.303945] kstrdup+0x36/0x70 [ 2716.304709] kstrdup_const+0x53/0x80 [ 2716.305612] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2716.306824] p9_client_create+0xc6a/0x1230 [ 2716.307837] ? p9_client_flush+0x430/0x430 [ 2716.308834] ? trace_hardirqs_on+0x5b/0x180 [ 2716.309860] ? lockdep_init_map_type+0x2c7/0x780 [ 2716.310986] ? __raw_spin_lock_init+0x36/0x110 [ 2716.312062] v9fs_session_init+0x1dd/0x1680 [ 2716.313070] ? lock_release+0x680/0x680 [ 2716.314019] ? kmem_cache_alloc_trace+0x151/0x320 [ 2716.315156] ? v9fs_show_options+0x690/0x690 [ 2716.316195] ? trace_hardirqs_on+0x5b/0x180 [ 2716.317210] ? kasan_unpoison_shadow+0x33/0x50 [ 2716.318310] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2716.319511] v9fs_mount+0x79/0x8f0 [ 2716.320372] ? v9fs_write_inode+0x60/0x60 [ 2716.321350] legacy_get_tree+0x105/0x220 [ 2716.322339] vfs_get_tree+0x8e/0x300 [ 2716.323233] path_mount+0x1429/0x2120 [ 2716.324145] ? strncpy_from_user+0x9e/0x470 [ 2716.325174] ? finish_automount+0xa90/0xa90 [ 2716.326215] ? getname_flags.part.0+0x1dd/0x4f0 [ 2716.327315] ? _copy_from_user+0xfb/0x1b0 [ 2716.328315] __x64_sys_mount+0x282/0x300 [ 2716.329285] ? copy_mnt_ns+0xa00/0xa00 [ 2716.330239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2716.331491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2716.332717] do_syscall_64+0x33/0x40 [ 2716.333612] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2716.334839] RIP: 0033:0x7fed66145b19 [ 2716.335700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2716.339944] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2716.341704] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2716.343365] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2716.345006] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2716.346656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2716.348302] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2716.382650] loop5: detected capacity change from 0 to 8388096 [ 2716.386526] nfs: Unknown parameter '-$' [ 2716.390638] loop2: detected capacity change from 0 to 8388096 [ 2716.395296] nfs: Unknown parameter '-$' [ 2716.399237] loop6: detected capacity change from 0 to 8388096 [ 2716.402930] nfs: Unknown parameter '-$' 16:30:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x2000, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2716.408375] loop4: detected capacity change from 0 to 8388096 [ 2716.411721] nfs: Unknown parameter '-$' [ 2716.427320] FAULT_INJECTION: forcing a failure. [ 2716.427320] name failslab, interval 1, probability 0, space 0, times 0 [ 2716.430046] CPU: 1 PID: 13656 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2716.431668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2716.433606] Call Trace: [ 2716.434231] dump_stack+0x107/0x167 [ 2716.435086] should_fail.cold+0x5/0xa [ 2716.435975] should_failslab+0x5/0x20 [ 2716.436858] __kmalloc_track_caller+0x79/0x370 [ 2716.437922] ? kstrdup_const+0x53/0x80 [ 2716.438846] kstrdup+0x36/0x70 [ 2716.439594] kstrdup_const+0x53/0x80 [ 2716.440472] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2716.441637] p9_client_create+0xc6a/0x1230 [ 2716.442632] ? p9_client_flush+0x430/0x430 [ 2716.443798] ? trace_hardirqs_on+0x5b/0x180 [ 2716.444954] ? lockdep_init_map_type+0x2c7/0x780 [ 2716.446172] ? __raw_spin_lock_init+0x36/0x110 [ 2716.447429] v9fs_session_init+0x1dd/0x1680 [ 2716.448520] ? lock_release+0x680/0x680 [ 2716.449591] ? kmem_cache_alloc_trace+0x151/0x320 [ 2716.450805] ? v9fs_show_options+0x690/0x690 [ 2716.452031] ? trace_hardirqs_on+0x5b/0x180 [ 2716.453206] ? kasan_unpoison_shadow+0x33/0x50 [ 2716.454363] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2716.455738] v9fs_mount+0x79/0x8f0 [ 2716.456643] ? v9fs_write_inode+0x60/0x60 [ 2716.457695] legacy_get_tree+0x105/0x220 [ 2716.458679] vfs_get_tree+0x8e/0x300 [ 2716.459619] path_mount+0x1429/0x2120 [ 2716.460681] ? strncpy_from_user+0x9e/0x470 [ 2716.461661] ? finish_automount+0xa90/0xa90 [ 2716.462782] ? getname_flags.part.0+0x1dd/0x4f0 [ 2716.463862] ? _copy_from_user+0xfb/0x1b0 [ 2716.464900] __x64_sys_mount+0x282/0x300 [ 2716.465821] ? copy_mnt_ns+0xa00/0xa00 [ 2716.466722] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2716.467917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2716.469086] do_syscall_64+0x33/0x40 [ 2716.469930] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2716.471207] RIP: 0033:0x7f7b14970b19 [ 2716.472051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2716.476419] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2716.478141] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2716.479743] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2716.481352] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2716.482980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2716.484782] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2716.486715] kmem_cache_create(9p-fcall-cache-1407) failed with error -12 [ 2716.488302] CPU: 1 PID: 13656 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2716.489897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2716.491790] Call Trace: [ 2716.492398] dump_stack+0x107/0x167 [ 2716.493252] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2716.494467] p9_client_create+0xc6a/0x1230 [ 2716.495453] ? p9_client_flush+0x430/0x430 [ 2716.496404] ? trace_hardirqs_on+0x5b/0x180 [ 2716.497394] ? lockdep_init_map_type+0x2c7/0x780 [ 2716.498477] ? __raw_spin_lock_init+0x36/0x110 [ 2716.499543] v9fs_session_init+0x1dd/0x1680 [ 2716.500528] ? lock_release+0x680/0x680 [ 2716.501448] ? kmem_cache_alloc_trace+0x151/0x320 [ 2716.502569] ? v9fs_show_options+0x690/0x690 [ 2716.503586] ? trace_hardirqs_on+0x5b/0x180 [ 2716.504521] ? kasan_unpoison_shadow+0x33/0x50 [ 2716.505565] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2716.506748] v9fs_mount+0x79/0x8f0 [ 2716.507589] ? v9fs_write_inode+0x60/0x60 [ 2716.508565] legacy_get_tree+0x105/0x220 [ 2716.509508] vfs_get_tree+0x8e/0x300 [ 2716.510374] path_mount+0x1429/0x2120 [ 2716.511269] ? strncpy_from_user+0x9e/0x470 [ 2716.512277] ? finish_automount+0xa90/0xa90 [ 2716.513278] ? getname_flags.part.0+0x1dd/0x4f0 [ 2716.514696] ? _copy_from_user+0xfb/0x1b0 [ 2716.515861] __x64_sys_mount+0x282/0x300 [ 2716.516964] ? copy_mnt_ns+0xa00/0xa00 [ 2716.517895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2716.519386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2716.520785] do_syscall_64+0x33/0x40 [ 2716.521675] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2716.522988] RIP: 0033:0x7f7b14970b19 [ 2716.523860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2716.529026] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2716.531058] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2716.532814] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2716.534880] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2716.536750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2716.538814] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 16:30:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:57 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x0, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:57 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 51) 16:30:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:30:57 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 55) 16:30:57 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2716.788747] loop6: detected capacity change from 0 to 8388096 16:30:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x2010, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2716.802405] nfs: Unknown parameter '-$' [ 2716.806569] loop4: detected capacity change from 0 to 8388096 [ 2716.811298] nfs: Unknown parameter '-$' [ 2716.912771] loop2: detected capacity change from 0 to 8388096 [ 2716.919228] nfs: Unknown parameter '-$' [ 2716.940775] FAULT_INJECTION: forcing a failure. [ 2716.940775] name failslab, interval 1, probability 0, space 0, times 0 [ 2716.943618] CPU: 1 PID: 13684 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2716.945274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2716.947081] Call Trace: [ 2716.947658] dump_stack+0x107/0x167 [ 2716.948459] should_fail.cold+0x5/0xa [ 2716.949290] should_failslab+0x5/0x20 [ 2716.950106] __kmalloc_track_caller+0x79/0x370 [ 2716.951074] ? kstrdup_const+0x53/0x80 [ 2716.951899] ? kasprintf+0xbb/0xf0 [ 2716.952656] kstrdup+0x36/0x70 [ 2716.953334] kstrdup_const+0x53/0x80 [ 2716.954129] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2716.955201] p9_client_create+0xc6a/0x1230 [ 2716.956109] ? p9_client_flush+0x430/0x430 [ 2716.957010] ? trace_hardirqs_on+0x5b/0x180 [ 2716.957923] ? lockdep_init_map_type+0x2c7/0x780 [ 2716.958927] ? __raw_spin_lock_init+0x36/0x110 [ 2716.959894] v9fs_session_init+0x1dd/0x1680 [ 2716.960812] ? lock_release+0x680/0x680 [ 2716.961664] ? kmem_cache_alloc_trace+0x151/0x320 [ 2716.962690] ? v9fs_show_options+0x690/0x690 [ 2716.963627] ? trace_hardirqs_on+0x5b/0x180 [ 2716.964552] ? kasan_unpoison_shadow+0x33/0x50 [ 2716.965525] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2716.966609] v9fs_mount+0x79/0x8f0 [ 2716.967366] ? v9fs_write_inode+0x60/0x60 [ 2716.968257] legacy_get_tree+0x105/0x220 [ 2716.969127] vfs_get_tree+0x8e/0x300 [ 2716.969908] path_mount+0x1429/0x2120 [ 2716.970854] ? strncpy_from_user+0x9e/0x470 [ 2716.972008] ? finish_automount+0xa90/0xa90 [ 2716.973076] ? getname_flags.part.0+0x1dd/0x4f0 [ 2716.974059] ? _copy_from_user+0xfb/0x1b0 [ 2716.974957] __x64_sys_mount+0x282/0x300 [ 2716.975822] ? copy_mnt_ns+0xa00/0xa00 [ 2716.976659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2716.977790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2716.978928] do_syscall_64+0x33/0x40 [ 2716.979837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2716.981158] RIP: 0033:0x7f7b14970b19 [ 2716.981965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2716.986108] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2716.987742] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2716.989269] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2716.990792] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2716.992334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2716.994338] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2716.996078] kmem_cache_create(9p-fcall-cache-1411) failed with error -12 [ 2716.996150] FAULT_INJECTION: forcing a failure. [ 2716.996150] name failslab, interval 1, probability 0, space 0, times 0 [ 2716.997554] CPU: 1 PID: 13684 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2716.997564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2716.997569] Call Trace: [ 2716.997588] dump_stack+0x107/0x167 [ 2716.997618] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2717.005531] p9_client_create+0xc6a/0x1230 [ 2717.006445] ? p9_client_flush+0x430/0x430 [ 2717.007342] ? trace_hardirqs_on+0x5b/0x180 [ 2717.008271] ? lockdep_init_map_type+0x2c7/0x780 [ 2717.009277] ? __raw_spin_lock_init+0x36/0x110 [ 2717.010252] v9fs_session_init+0x1dd/0x1680 [ 2717.011164] ? lock_release+0x680/0x680 [ 2717.012022] ? kmem_cache_alloc_trace+0x151/0x320 [ 2717.013033] ? v9fs_show_options+0x690/0x690 [ 2717.013970] ? trace_hardirqs_on+0x5b/0x180 [ 2717.014876] ? kasan_unpoison_shadow+0x33/0x50 [ 2717.015851] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2717.016929] v9fs_mount+0x79/0x8f0 [ 2717.017680] ? v9fs_write_inode+0x60/0x60 [ 2717.018562] legacy_get_tree+0x105/0x220 [ 2717.019416] vfs_get_tree+0x8e/0x300 [ 2717.020207] path_mount+0x1429/0x2120 [ 2717.021014] ? strncpy_from_user+0x9e/0x470 [ 2717.021928] ? finish_automount+0xa90/0xa90 [ 2717.022852] ? getname_flags.part.0+0x1dd/0x4f0 [ 2717.023835] ? _copy_from_user+0xfb/0x1b0 [ 2717.024715] __x64_sys_mount+0x282/0x300 [ 2717.025571] ? copy_mnt_ns+0xa00/0xa00 [ 2717.026409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2717.027512] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2717.028603] do_syscall_64+0x33/0x40 [ 2717.029391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2717.030481] RIP: 0033:0x7f7b14970b19 [ 2717.031274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2717.035198] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2717.036807] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2717.038325] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2717.039844] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2717.041343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2717.042848] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2717.044415] CPU: 0 PID: 13686 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2717.045902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2717.047672] Call Trace: [ 2717.048248] dump_stack+0x107/0x167 [ 2717.049031] should_fail.cold+0x5/0xa [ 2717.049844] ? create_object.isra.0+0x3a/0xa20 [ 2717.050827] should_failslab+0x5/0x20 [ 2717.051637] kmem_cache_alloc+0x5b/0x310 [ 2717.052522] create_object.isra.0+0x3a/0xa20 [ 2717.053447] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2717.054542] kmem_cache_alloc+0x159/0x310 [ 2717.055435] kmem_cache_create_usercopy+0x190/0x2f0 [ 2717.056666] p9_client_create+0xc6a/0x1230 [ 2717.057585] ? p9_client_flush+0x430/0x430 [ 2717.058499] ? trace_hardirqs_on+0x5b/0x180 [ 2717.059426] ? lockdep_init_map_type+0x2c7/0x780 [ 2717.060445] ? __raw_spin_lock_init+0x36/0x110 [ 2717.061424] v9fs_session_init+0x1dd/0x1680 [ 2717.062365] ? lock_release+0x680/0x680 [ 2717.063218] ? kmem_cache_alloc_trace+0x151/0x320 [ 2717.064247] ? v9fs_show_options+0x690/0x690 [ 2717.065196] ? trace_hardirqs_on+0x5b/0x180 [ 2717.066116] ? kasan_unpoison_shadow+0x33/0x50 [ 2717.067098] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2717.068183] v9fs_mount+0x79/0x8f0 [ 2717.068939] ? v9fs_write_inode+0x60/0x60 [ 2717.069825] legacy_get_tree+0x105/0x220 [ 2717.070694] vfs_get_tree+0x8e/0x300 [ 2717.071506] path_mount+0x1429/0x2120 [ 2717.072333] ? strncpy_from_user+0x9e/0x470 [ 2717.073257] ? finish_automount+0xa90/0xa90 [ 2717.074180] ? getname_flags.part.0+0x1dd/0x4f0 [ 2717.075173] ? _copy_from_user+0xfb/0x1b0 [ 2717.076068] __x64_sys_mount+0x282/0x300 [ 2717.076931] ? copy_mnt_ns+0xa00/0xa00 [ 2717.077764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2717.078899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2717.080012] do_syscall_64+0x33/0x40 [ 2717.080823] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2717.081921] RIP: 0033:0x7fed66145b19 [ 2717.082728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2717.086666] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2717.088302] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2717.089827] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2717.091364] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2717.092877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2717.094429] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 16:30:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2717.158633] loop3: detected capacity change from 0 to 8388096 16:30:58 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2717.181595] nfs: Unknown parameter '-$' [ 2717.367443] loop6: detected capacity change from 0 to 8388096 [ 2717.372686] nfs: Unknown parameter '-$' [ 2717.398748] loop5: detected capacity change from 0 to 8388096 [ 2717.404767] nfs: Unknown parameter '-$' 16:31:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:11 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:11 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 56) 16:31:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x2e00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:31:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:11 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 52) 16:31:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2730.274451] FAULT_INJECTION: forcing a failure. [ 2730.274451] name failslab, interval 1, probability 0, space 0, times 0 [ 2730.277152] CPU: 0 PID: 13724 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2730.278343] loop2: detected capacity change from 0 to 8388096 [ 2730.278748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2730.278758] Call Trace: [ 2730.278791] dump_stack+0x107/0x167 [ 2730.282683] should_fail.cold+0x5/0xa [ 2730.283522] ? create_object.isra.0+0x3a/0xa20 [ 2730.283765] nfs: Unknown parameter '-$' [ 2730.284502] should_failslab+0x5/0x20 [ 2730.284522] kmem_cache_alloc+0x5b/0x310 [ 2730.284546] create_object.isra.0+0x3a/0xa20 [ 2730.284562] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2730.284588] kmem_cache_alloc+0x159/0x310 [ 2730.289650] kmem_cache_create_usercopy+0x190/0x2f0 [ 2730.290732] p9_client_create+0xc6a/0x1230 [ 2730.291637] ? p9_client_flush+0x430/0x430 [ 2730.292537] ? trace_hardirqs_on+0x5b/0x180 [ 2730.293452] ? lockdep_init_map_type+0x2c7/0x780 [ 2730.294464] ? __raw_spin_lock_init+0x36/0x110 [ 2730.295439] v9fs_session_init+0x1dd/0x1680 [ 2730.296353] ? lock_release+0x680/0x680 [ 2730.297201] ? kmem_cache_alloc_trace+0x151/0x320 [ 2730.298227] ? v9fs_show_options+0x690/0x690 [ 2730.299189] ? trace_hardirqs_on+0x5b/0x180 [ 2730.300118] ? kasan_unpoison_shadow+0x33/0x50 [ 2730.301090] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2730.302164] v9fs_mount+0x79/0x8f0 [ 2730.302927] ? v9fs_write_inode+0x60/0x60 [ 2730.303809] legacy_get_tree+0x105/0x220 [ 2730.304679] vfs_get_tree+0x8e/0x300 [ 2730.305461] path_mount+0x1429/0x2120 [ 2730.306275] ? strncpy_from_user+0x9e/0x470 [ 2730.307208] ? finish_automount+0xa90/0xa90 [ 2730.308139] ? getname_flags.part.0+0x1dd/0x4f0 [ 2730.309146] ? _copy_from_user+0xfb/0x1b0 [ 2730.310050] __x64_sys_mount+0x282/0x300 [ 2730.310930] ? copy_mnt_ns+0xa00/0xa00 [ 2730.311772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2730.312887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2730.313969] do_syscall_64+0x33/0x40 [ 2730.314784] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2730.315892] RIP: 0033:0x7f7b14970b19 [ 2730.316700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2730.320673] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2730.322342] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2730.323915] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2730.325447] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2730.326971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2730.328520] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2730.350181] loop3: detected capacity change from 0 to 8388096 [ 2730.351253] FAULT_INJECTION: forcing a failure. [ 2730.351253] name failslab, interval 1, probability 0, space 0, times 0 [ 2730.352778] CPU: 1 PID: 13718 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2730.353715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2730.354841] Call Trace: [ 2730.355213] dump_stack+0x107/0x167 [ 2730.355705] should_fail.cold+0x5/0xa [ 2730.356232] ? create_object.isra.0+0x3a/0xa20 [ 2730.356852] should_failslab+0x5/0x20 [ 2730.357377] kmem_cache_alloc+0x5b/0x310 [ 2730.357929] create_object.isra.0+0x3a/0xa20 [ 2730.358528] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2730.359226] kmem_cache_alloc_node+0x169/0x330 [ 2730.359852] __kmem_cache_create+0x10e/0x520 [ 2730.360456] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2730.361149] p9_client_create+0xc6a/0x1230 [ 2730.361729] ? p9_client_flush+0x430/0x430 [ 2730.362308] ? trace_hardirqs_on+0x5b/0x180 [ 2730.362896] ? lockdep_init_map_type+0x2c7/0x780 [ 2730.363540] ? __raw_spin_lock_init+0x36/0x110 [ 2730.364184] v9fs_session_init+0x1dd/0x1680 [ 2730.364770] ? lock_release+0x680/0x680 [ 2730.365317] ? kmem_cache_alloc_trace+0x151/0x320 [ 2730.365970] ? v9fs_show_options+0x690/0x690 [ 2730.366589] ? trace_hardirqs_on+0x5b/0x180 [ 2730.367174] ? kasan_unpoison_shadow+0x33/0x50 [ 2730.367795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2730.368491] v9fs_mount+0x79/0x8f0 [ 2730.368980] ? v9fs_write_inode+0x60/0x60 [ 2730.369544] legacy_get_tree+0x105/0x220 [ 2730.370099] vfs_get_tree+0x8e/0x300 [ 2730.370610] path_mount+0x1429/0x2120 [ 2730.371137] ? strncpy_from_user+0x9e/0x470 [ 2730.371724] ? finish_automount+0xa90/0xa90 [ 2730.372310] ? getname_flags.part.0+0x1dd/0x4f0 [ 2730.372947] ? _copy_from_user+0xfb/0x1b0 [ 2730.373515] __x64_sys_mount+0x282/0x300 [ 2730.374072] ? copy_mnt_ns+0xa00/0xa00 [ 2730.374607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2730.375298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2730.375978] do_syscall_64+0x33/0x40 [ 2730.376470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2730.377141] RIP: 0033:0x7fed66145b19 [ 2730.377630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2730.380054] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2730.381095] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2730.382055] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2730.383022] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2730.383978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2730.384946] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2730.386617] nfs: Unknown parameter '-$' [ 2730.406825] loop4: detected capacity change from 0 to 8388096 [ 2730.408465] nfs: Unknown parameter '-$' [ 2730.417473] loop5: detected capacity change from 0 to 8388096 [ 2730.421263] nfs: Unknown parameter '-$' [ 2730.435339] loop6: detected capacity change from 0 to 8388096 16:31:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x3f00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2730.443461] nfs: Unknown parameter '-$' 16:31:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:11 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 57) 16:31:11 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:11 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 53) 16:31:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2730.658728] FAULT_INJECTION: forcing a failure. [ 2730.658728] name failslab, interval 1, probability 0, space 0, times 0 [ 2730.660197] CPU: 1 PID: 13749 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2730.661044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2730.662073] Call Trace: [ 2730.662409] dump_stack+0x107/0x167 [ 2730.662848] should_fail.cold+0x5/0xa [ 2730.663311] ? create_object.isra.0+0x3a/0xa20 [ 2730.663863] should_failslab+0x5/0x20 [ 2730.664319] kmem_cache_alloc+0x5b/0x310 [ 2730.664808] create_object.isra.0+0x3a/0xa20 [ 2730.665338] kmemleak_alloc_percpu+0xa0/0x100 [ 2730.665881] pcpu_alloc+0x4e2/0x1240 [ 2730.666346] __kmem_cache_create+0x35a/0x520 [ 2730.666880] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2730.667484] p9_client_create+0xc6a/0x1230 [ 2730.668000] ? p9_client_flush+0x430/0x430 [ 2730.668516] ? trace_hardirqs_on+0x5b/0x180 [ 2730.669033] ? lockdep_init_map_type+0x2c7/0x780 [ 2730.669601] ? __raw_spin_lock_init+0x36/0x110 [ 2730.670152] v9fs_session_init+0x1dd/0x1680 [ 2730.670680] ? lock_release+0x680/0x680 [ 2730.671159] ? kmem_cache_alloc_trace+0x151/0x320 [ 2730.671747] ? v9fs_show_options+0x690/0x690 [ 2730.672277] ? trace_hardirqs_on+0x5b/0x180 [ 2730.672796] ? kasan_unpoison_shadow+0x33/0x50 [ 2730.673339] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2730.673951] v9fs_mount+0x79/0x8f0 [ 2730.674383] ? v9fs_write_inode+0x60/0x60 [ 2730.674872] legacy_get_tree+0x105/0x220 [ 2730.675364] vfs_get_tree+0x8e/0x300 [ 2730.675807] path_mount+0x1429/0x2120 [ 2730.676270] ? strncpy_from_user+0x9e/0x470 [ 2730.676785] ? finish_automount+0xa90/0xa90 [ 2730.677302] ? getname_flags.part.0+0x1dd/0x4f0 [ 2730.677851] ? _copy_from_user+0xfb/0x1b0 [ 2730.678360] __x64_sys_mount+0x282/0x300 [ 2730.678841] ? copy_mnt_ns+0xa00/0xa00 [ 2730.679311] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2730.679943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2730.680560] do_syscall_64+0x33/0x40 [ 2730.681004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2730.681621] RIP: 0033:0x7fed66145b19 [ 2730.682066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2730.684245] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2730.685151] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2730.686005] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2730.686861] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2730.687712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2730.688576] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2730.718916] loop6: detected capacity change from 0 to 8388096 [ 2730.725964] nfs: Unknown parameter '-$' [ 2730.729620] loop2: detected capacity change from 0 to 8388096 [ 2730.766484] nfs: Unknown parameter '-$' [ 2730.770511] FAULT_INJECTION: forcing a failure. [ 2730.770511] name failslab, interval 1, probability 0, space 0, times 0 [ 2730.773104] CPU: 0 PID: 13757 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2730.774680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2730.776434] Call Trace: [ 2730.777000] dump_stack+0x107/0x167 [ 2730.777780] should_fail.cold+0x5/0xa [ 2730.778621] ? __kmem_cache_create+0x10e/0x520 [ 2730.779587] should_failslab+0x5/0x20 [ 2730.780419] kmem_cache_alloc_node+0x55/0x330 [ 2730.781383] __kmem_cache_create+0x10e/0x520 [ 2730.782339] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2730.783429] p9_client_create+0xc6a/0x1230 [ 2730.784321] ? p9_client_flush+0x430/0x430 [ 2730.785213] ? trace_hardirqs_on+0x5b/0x180 [ 2730.786109] ? lockdep_init_map_type+0x2c7/0x780 [ 2730.787138] ? __raw_spin_lock_init+0x36/0x110 [ 2730.788106] v9fs_session_init+0x1dd/0x1680 [ 2730.788879] loop3: detected capacity change from 0 to 8388096 [ 2730.789020] ? lock_release+0x680/0x680 [ 2730.789050] ? kmem_cache_alloc_trace+0x151/0x320 [ 2730.789069] ? v9fs_show_options+0x690/0x690 [ 2730.789097] ? trace_hardirqs_on+0x5b/0x180 [ 2730.789117] ? kasan_unpoison_shadow+0x33/0x50 [ 2730.789135] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2730.789158] v9fs_mount+0x79/0x8f0 [ 2730.790450] nfs: Unknown parameter '-$' [ 2730.790716] ? v9fs_write_inode+0x60/0x60 [ 2730.797493] legacy_get_tree+0x105/0x220 [ 2730.798375] vfs_get_tree+0x8e/0x300 [ 2730.799176] path_mount+0x1429/0x2120 [ 2730.799989] ? strncpy_from_user+0x9e/0x470 [ 2730.800931] ? finish_automount+0xa90/0xa90 [ 2730.801853] ? getname_flags.part.0+0x1dd/0x4f0 [ 2730.802854] ? _copy_from_user+0xfb/0x1b0 [ 2730.803735] __x64_sys_mount+0x282/0x300 [ 2730.804608] ? copy_mnt_ns+0xa00/0xa00 [ 2730.805451] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2730.806587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2730.807695] do_syscall_64+0x33/0x40 [ 2730.808497] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2730.809589] RIP: 0033:0x7f7b14970b19 [ 2730.810397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2730.814325] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2730.815943] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2730.817435] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2730.818951] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2730.820461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2730.821984] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2730.823738] kmem_cache_create(9p-fcall-cache-1419) failed with error -22 [ 2730.825412] CPU: 0 PID: 13757 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2730.827009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2730.828760] Call Trace: [ 2730.829312] dump_stack+0x107/0x167 [ 2730.830076] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2730.831202] p9_client_create+0xc6a/0x1230 [ 2730.832115] ? p9_client_flush+0x430/0x430 [ 2730.832998] ? trace_hardirqs_on+0x5b/0x180 [ 2730.833904] ? lockdep_init_map_type+0x2c7/0x780 [ 2730.834938] ? __raw_spin_lock_init+0x36/0x110 [ 2730.835901] v9fs_session_init+0x1dd/0x1680 [ 2730.836802] ? lock_release+0x680/0x680 [ 2730.837637] ? kmem_cache_alloc_trace+0x151/0x320 [ 2730.838662] ? v9fs_show_options+0x690/0x690 [ 2730.839653] ? trace_hardirqs_on+0x5b/0x180 [ 2730.840585] ? kasan_unpoison_shadow+0x33/0x50 [ 2730.841581] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2730.842676] v9fs_mount+0x79/0x8f0 [ 2730.843418] ? v9fs_write_inode+0x60/0x60 [ 2730.844287] legacy_get_tree+0x105/0x220 [ 2730.845134] vfs_get_tree+0x8e/0x300 [ 2730.845910] path_mount+0x1429/0x2120 [ 2730.846720] ? strncpy_from_user+0x9e/0x470 [ 2730.847618] ? finish_automount+0xa90/0xa90 [ 2730.848522] ? getname_flags.part.0+0x1dd/0x4f0 [ 2730.849508] ? _copy_from_user+0xfb/0x1b0 [ 2730.850396] __x64_sys_mount+0x282/0x300 [ 2730.851248] ? copy_mnt_ns+0xa00/0xa00 [ 2730.852078] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2730.853191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2730.854294] do_syscall_64+0x33/0x40 [ 2730.855080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2730.856153] RIP: 0033:0x7f7b14970b19 [ 2730.856947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2730.860818] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2730.862437] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2730.863957] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2730.865505] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2730.867044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2730.868522] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2730.910364] loop5: detected capacity change from 0 to 8388096 [ 2730.918503] nfs: Unknown parameter '-$' 16:31:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x4000, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:31:24 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 54) 16:31:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:24 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:24 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 58) [ 2743.487866] loop3: detected capacity change from 0 to 8388096 [ 2743.490881] FAULT_INJECTION: forcing a failure. [ 2743.490881] name failslab, interval 1, probability 0, space 0, times 0 [ 2743.493759] CPU: 1 PID: 13779 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2743.494247] nfs: Unknown parameter '-$' [ 2743.495374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2743.495381] Call Trace: [ 2743.495407] dump_stack+0x107/0x167 [ 2743.495431] should_fail.cold+0x5/0xa [ 2743.500106] ? create_object.isra.0+0x3a/0xa20 [ 2743.501157] should_failslab+0x5/0x20 [ 2743.502042] kmem_cache_alloc+0x5b/0x310 [ 2743.502991] create_object.isra.0+0x3a/0xa20 [ 2743.504024] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2743.505231] kmem_cache_alloc_node+0x169/0x330 [ 2743.506419] __kmem_cache_create+0x10e/0x520 [ 2743.507439] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2743.508600] p9_client_create+0xc6a/0x1230 [ 2743.509654] ? p9_client_flush+0x430/0x430 [ 2743.510731] ? trace_hardirqs_on+0x5b/0x180 [ 2743.511739] ? lockdep_init_map_type+0x2c7/0x780 [ 2743.512833] ? __raw_spin_lock_init+0x36/0x110 [ 2743.513889] v9fs_session_init+0x1dd/0x1680 [ 2743.514996] ? lock_release+0x680/0x680 [ 2743.516042] ? kmem_cache_alloc_trace+0x151/0x320 [ 2743.517152] ? v9fs_show_options+0x690/0x690 16:31:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x4084, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2743.518194] ? trace_hardirqs_on+0x5b/0x180 [ 2743.519381] ? kasan_unpoison_shadow+0x33/0x50 [ 2743.520546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2743.521839] v9fs_mount+0x79/0x8f0 [ 2743.522765] ? v9fs_write_inode+0x60/0x60 [ 2743.523810] legacy_get_tree+0x105/0x220 [ 2743.524854] vfs_get_tree+0x8e/0x300 [ 2743.525819] path_mount+0x1429/0x2120 [ 2743.526764] ? strncpy_from_user+0x9e/0x470 [ 2743.527890] ? finish_automount+0xa90/0xa90 [ 2743.529023] ? getname_flags.part.0+0x1dd/0x4f0 [ 2743.530153] ? _copy_from_user+0xfb/0x1b0 [ 2743.531228] __x64_sys_mount+0x282/0x300 [ 2743.532288] ? copy_mnt_ns+0xa00/0xa00 [ 2743.533241] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2743.534623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2743.535937] do_syscall_64+0x33/0x40 [ 2743.536922] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2743.538180] RIP: 0033:0x7f7b14970b19 [ 2743.539138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2743.543485] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2743.545227] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2743.546872] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2743.548503] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2743.550133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2743.551770] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2743.560543] FAULT_INJECTION: forcing a failure. [ 2743.560543] name failslab, interval 1, probability 0, space 0, times 0 [ 2743.561874] CPU: 0 PID: 13786 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2743.562681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2743.563637] Call Trace: [ 2743.563947] dump_stack+0x107/0x167 [ 2743.564364] should_fail.cold+0x5/0xa [ 2743.564804] ? create_object.isra.0+0x3a/0xa20 [ 2743.565327] should_failslab+0x5/0x20 [ 2743.565764] kmem_cache_alloc+0x5b/0x310 [ 2743.566231] ? mark_held_locks+0x9e/0xe0 [ 2743.566713] create_object.isra.0+0x3a/0xa20 [ 2743.567223] kmemleak_alloc_percpu+0xa0/0x100 [ 2743.567734] pcpu_alloc+0x4e2/0x1240 [ 2743.568170] __kmem_cache_create+0x35a/0x520 [ 2743.568675] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2743.569246] p9_client_create+0xc6a/0x1230 [ 2743.569738] ? p9_client_flush+0x430/0x430 [ 2743.570218] ? trace_hardirqs_on+0x5b/0x180 [ 2743.570720] ? lockdep_init_map_type+0x2c7/0x780 [ 2743.571264] ? __raw_spin_lock_init+0x36/0x110 [ 2743.571791] v9fs_session_init+0x1dd/0x1680 [ 2743.572287] ? lock_release+0x680/0x680 [ 2743.572744] ? kmem_cache_alloc_trace+0x151/0x320 [ 2743.573292] ? v9fs_show_options+0x690/0x690 [ 2743.573793] ? trace_hardirqs_on+0x5b/0x180 [ 2743.574288] ? kasan_unpoison_shadow+0x33/0x50 [ 2743.574863] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2743.575441] v9fs_mount+0x79/0x8f0 [ 2743.575842] ? v9fs_write_inode+0x60/0x60 [ 2743.576316] legacy_get_tree+0x105/0x220 [ 2743.576730] loop5: detected capacity change from 0 to 8388096 [ 2743.576783] vfs_get_tree+0x8e/0x300 [ 2743.578512] path_mount+0x1429/0x2120 [ 2743.578949] ? strncpy_from_user+0x9e/0x470 [ 2743.579441] ? finish_automount+0xa90/0xa90 [ 2743.579690] nfs: Unknown parameter '-$' [ 2743.579937] ? getname_flags.part.0+0x1dd/0x4f0 [ 2743.579947] ? _copy_from_user+0xfb/0x1b0 [ 2743.579962] __x64_sys_mount+0x282/0x300 [ 2743.579971] ? copy_mnt_ns+0xa00/0xa00 [ 2743.579983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2743.579993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2743.580004] do_syscall_64+0x33/0x40 [ 2743.580014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2743.580028] RIP: 0033:0x7fed66145b19 [ 2743.585337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2743.587428] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2743.588295] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2743.589112] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2743.589922] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2743.590749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2743.591566] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2743.598245] loop2: detected capacity change from 0 to 8388096 [ 2743.601319] nfs: Unknown parameter '-$' [ 2743.608779] loop6: detected capacity change from 0 to 8388096 [ 2743.622477] nfs: Unknown parameter '-$' [ 2743.653706] loop4: detected capacity change from 0 to 8388096 [ 2743.657235] nfs: Unknown parameter '-$' 16:31:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:24 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 55) [ 2743.871344] loop2: detected capacity change from 0 to 8388096 [ 2743.875838] nfs: Unknown parameter '-$' [ 2743.922285] FAULT_INJECTION: forcing a failure. [ 2743.922285] name failslab, interval 1, probability 0, space 0, times 0 [ 2743.924782] CPU: 0 PID: 13807 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2743.926267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2743.928070] Call Trace: [ 2743.928645] dump_stack+0x107/0x167 [ 2743.929452] should_fail.cold+0x5/0xa [ 2743.930262] ? create_object.isra.0+0x3a/0xa20 [ 2743.931251] should_failslab+0x5/0x20 [ 2743.932064] kmem_cache_alloc+0x5b/0x310 [ 2743.932930] create_object.isra.0+0x3a/0xa20 [ 2743.933876] kmemleak_alloc_percpu+0xa0/0x100 [ 2743.934841] pcpu_alloc+0x4e2/0x1240 [ 2743.935651] __kmem_cache_create+0x35a/0x520 [ 2743.936594] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2743.937674] p9_client_create+0xc6a/0x1230 [ 2743.938582] ? p9_client_flush+0x430/0x430 [ 2743.939474] ? trace_hardirqs_on+0x5b/0x180 [ 2743.940390] ? lockdep_init_map_type+0x2c7/0x780 [ 2743.941398] ? __raw_spin_lock_init+0x36/0x110 [ 2743.942370] v9fs_session_init+0x1dd/0x1680 [ 2743.943292] ? lock_release+0x680/0x680 [ 2743.944170] ? kmem_cache_alloc_trace+0x151/0x320 [ 2743.945197] ? v9fs_show_options+0x690/0x690 [ 2743.946148] ? trace_hardirqs_on+0x5b/0x180 [ 2743.947094] ? kasan_unpoison_shadow+0x33/0x50 [ 2743.948078] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2743.949177] v9fs_mount+0x79/0x8f0 [ 2743.949928] ? v9fs_write_inode+0x60/0x60 [ 2743.950815] legacy_get_tree+0x105/0x220 [ 2743.951679] vfs_get_tree+0x8e/0x300 [ 2743.952461] path_mount+0x1429/0x2120 [ 2743.953276] ? strncpy_from_user+0x9e/0x470 [ 2743.954188] ? finish_automount+0xa90/0xa90 [ 2743.955134] ? getname_flags.part.0+0x1dd/0x4f0 [ 2743.956119] ? _copy_from_user+0xfb/0x1b0 [ 2743.957006] __x64_sys_mount+0x282/0x300 [ 2743.957861] ? copy_mnt_ns+0xa00/0xa00 [ 2743.958712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2743.959821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2743.960930] do_syscall_64+0x33/0x40 [ 2743.961712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2743.962821] RIP: 0033:0x7f7b14970b19 [ 2743.963607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2743.967518] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2743.969140] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2743.970653] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2743.972161] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2743.973671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2743.975193] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 16:31:38 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 56) 16:31:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x4800, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:31:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:38 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 59) 16:31:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:38 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2757.457509] FAULT_INJECTION: forcing a failure. [ 2757.457509] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.460052] CPU: 1 PID: 13823 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2757.461533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2757.463306] Call Trace: [ 2757.463875] dump_stack+0x107/0x167 [ 2757.464662] should_fail.cold+0x5/0xa [ 2757.465478] ? create_object.isra.0+0x3a/0xa20 [ 2757.466465] should_failslab+0x5/0x20 [ 2757.467285] kmem_cache_alloc+0x5b/0x310 [ 2757.468154] create_object.isra.0+0x3a/0xa20 [ 2757.469086] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.470169] kmem_cache_alloc_node+0x169/0x330 [ 2757.471154] __kmem_cache_create+0x10e/0x520 [ 2757.472094] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2757.473165] p9_client_create+0xc6a/0x1230 [ 2757.474080] ? p9_client_flush+0x430/0x430 [ 2757.474989] ? trace_hardirqs_on+0x5b/0x180 [ 2757.475907] ? lockdep_init_map_type+0x2c7/0x780 [ 2757.476924] ? __raw_spin_lock_init+0x36/0x110 [ 2757.477909] v9fs_session_init+0x1dd/0x1680 [ 2757.478838] ? lock_release+0x680/0x680 [ 2757.479703] ? kmem_cache_alloc_trace+0x151/0x320 [ 2757.480730] ? v9fs_show_options+0x690/0x690 [ 2757.481674] ? trace_hardirqs_on+0x5b/0x180 [ 2757.482599] ? kasan_unpoison_shadow+0x33/0x50 [ 2757.483573] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.484653] v9fs_mount+0x79/0x8f0 [ 2757.485413] ? v9fs_write_inode+0x60/0x60 [ 2757.486298] legacy_get_tree+0x105/0x220 [ 2757.487165] vfs_get_tree+0x8e/0x300 [ 2757.487957] path_mount+0x1429/0x2120 [ 2757.488772] ? strncpy_from_user+0x9e/0x470 [ 2757.489691] ? finish_automount+0xa90/0xa90 [ 2757.490616] ? getname_flags.part.0+0x1dd/0x4f0 [ 2757.491605] ? _copy_from_user+0xfb/0x1b0 [ 2757.492506] __x64_sys_mount+0x282/0x300 [ 2757.493380] ? copy_mnt_ns+0xa00/0xa00 [ 2757.494212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2757.495333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.496430] do_syscall_64+0x33/0x40 [ 2757.497224] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2757.498314] RIP: 0033:0x7f7b14970b19 [ 2757.499111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.503044] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2757.504662] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2757.506179] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2757.507709] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2757.509224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.510772] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2757.546380] loop2: detected capacity change from 0 to 8388096 [ 2757.556161] nfs: Unknown parameter '-$' [ 2757.560722] loop3: detected capacity change from 0 to 8388096 [ 2757.563751] nfs: Unknown parameter '-$' [ 2757.568520] loop4: detected capacity change from 0 to 8388096 [ 2757.570911] nfs: Unknown parameter '-$' [ 2757.579568] FAULT_INJECTION: forcing a failure. [ 2757.579568] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.581042] CPU: 0 PID: 13828 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2757.581903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2757.582956] Call Trace: [ 2757.583310] dump_stack+0x107/0x167 [ 2757.583780] should_fail.cold+0x5/0xa [ 2757.584266] should_failslab+0x5/0x20 [ 2757.584737] __kmalloc_track_caller+0x79/0x370 [ 2757.585311] ? kstrdup_const+0x53/0x80 [ 2757.585796] kstrdup+0x36/0x70 [ 2757.586203] kstrdup_const+0x53/0x80 [ 2757.586678] kvasprintf_const+0x10c/0x1a0 [ 2757.587192] kobject_set_name_vargs+0x56/0x150 [ 2757.587756] kobject_init_and_add+0xc9/0x160 [ 2757.588302] ? kobject_create_and_add+0xb0/0xb0 [ 2757.588879] ? wait_for_completion_io+0x270/0x270 [ 2757.589480] ? kernfs_name_hash+0xe7/0x110 [ 2757.590030] ? kernfs_find_ns+0x256/0x380 [ 2757.590555] sysfs_slab_add+0x172/0x200 [ 2757.591067] __kmem_cache_create+0x3db/0x520 [ 2757.591622] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2757.592251] p9_client_create+0xc6a/0x1230 [ 2757.592778] ? p9_client_flush+0x430/0x430 [ 2757.593310] ? trace_hardirqs_on+0x5b/0x180 [ 2757.593845] ? lockdep_init_map_type+0x2c7/0x780 [ 2757.594441] ? __raw_spin_lock_init+0x36/0x110 [ 2757.595017] v9fs_session_init+0x1dd/0x1680 [ 2757.595549] ? lock_release+0x680/0x680 [ 2757.596056] ? kmem_cache_alloc_trace+0x151/0x320 [ 2757.596650] ? v9fs_show_options+0x690/0x690 [ 2757.597199] ? trace_hardirqs_on+0x5b/0x180 [ 2757.597836] ? kasan_unpoison_shadow+0x33/0x50 [ 2757.598447] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.599092] v9fs_mount+0x79/0x8f0 [ 2757.599531] ? v9fs_write_inode+0x60/0x60 [ 2757.600043] legacy_get_tree+0x105/0x220 [ 2757.600556] vfs_get_tree+0x8e/0x300 [ 2757.601015] path_mount+0x1429/0x2120 [ 2757.601486] ? strncpy_from_user+0x9e/0x470 [ 2757.602021] ? finish_automount+0xa90/0xa90 [ 2757.602571] ? getname_flags.part.0+0x1dd/0x4f0 [ 2757.603146] ? _copy_from_user+0xfb/0x1b0 [ 2757.603665] __x64_sys_mount+0x282/0x300 [ 2757.604169] ? copy_mnt_ns+0xa00/0xa00 [ 2757.604645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2757.605294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.605928] do_syscall_64+0x33/0x40 [ 2757.606389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2757.607026] RIP: 0033:0x7fed66145b19 [ 2757.607487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.609739] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2757.610692] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2757.611576] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2757.612452] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2757.613325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.614198] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2757.615233] kobject: can not set name properly! [ 2757.615860] kmem_cache_create(9p-fcall-cache-1427) failed with error -12 [ 2757.616716] CPU: 0 PID: 13828 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2757.617563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2757.618599] Call Trace: [ 2757.618922] dump_stack+0x107/0x167 [ 2757.619379] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2757.620028] p9_client_create+0xc6a/0x1230 [ 2757.620575] ? p9_client_flush+0x430/0x430 [ 2757.621095] ? trace_hardirqs_on+0x5b/0x180 [ 2757.621629] ? lockdep_init_map_type+0x2c7/0x780 [ 2757.622210] ? __raw_spin_lock_init+0x36/0x110 [ 2757.622791] v9fs_session_init+0x1dd/0x1680 [ 2757.623320] ? lock_release+0x680/0x680 [ 2757.623810] ? kmem_cache_alloc_trace+0x151/0x320 [ 2757.624420] ? v9fs_show_options+0x690/0x690 [ 2757.624964] ? trace_hardirqs_on+0x5b/0x180 [ 2757.625492] ? kasan_unpoison_shadow+0x33/0x50 [ 2757.626048] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.626674] v9fs_mount+0x79/0x8f0 [ 2757.627111] ? v9fs_write_inode+0x60/0x60 [ 2757.627615] legacy_get_tree+0x105/0x220 [ 2757.628114] vfs_get_tree+0x8e/0x300 [ 2757.628564] path_mount+0x1429/0x2120 [ 2757.629029] ? strncpy_from_user+0x9e/0x470 [ 2757.629551] ? finish_automount+0xa90/0xa90 [ 2757.630079] ? getname_flags.part.0+0x1dd/0x4f0 [ 2757.630657] ? _copy_from_user+0xfb/0x1b0 [ 2757.631169] __x64_sys_mount+0x282/0x300 [ 2757.631660] ? copy_mnt_ns+0xa00/0xa00 [ 2757.632146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2757.632781] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.633416] do_syscall_64+0x33/0x40 [ 2757.633864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2757.634493] RIP: 0033:0x7fed66145b19 [ 2757.634946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.637186] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2757.638112] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2757.638990] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2757.639849] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2757.640734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.641615] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2757.642874] loop6: detected capacity change from 0 to 8388096 [ 2757.644347] nfs: Unknown parameter '-$' 16:31:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x4801, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:31:38 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 57) [ 2757.670312] loop5: detected capacity change from 0 to 8388096 [ 2757.672764] nfs: Unknown parameter '-$' 16:31:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:38 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:38 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 60) [ 2757.870715] FAULT_INJECTION: forcing a failure. [ 2757.870715] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.872085] CPU: 0 PID: 13850 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2757.872908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2757.873886] Call Trace: [ 2757.874218] dump_stack+0x107/0x167 [ 2757.874655] should_fail.cold+0x5/0xa [ 2757.875100] should_failslab+0x5/0x20 [ 2757.875539] __kmalloc_track_caller+0x79/0x370 [ 2757.876070] ? kstrdup_const+0x53/0x80 [ 2757.876520] kstrdup+0x36/0x70 [ 2757.876893] kstrdup_const+0x53/0x80 [ 2757.877323] kvasprintf_const+0x10c/0x1a0 [ 2757.877807] kobject_set_name_vargs+0x56/0x150 [ 2757.878333] kobject_init_and_add+0xc9/0x160 [ 2757.878849] ? kobject_create_and_add+0xb0/0xb0 [ 2757.879386] ? wait_for_completion_io+0x270/0x270 [ 2757.879939] ? kernfs_name_hash+0xe7/0x110 [ 2757.880429] ? kernfs_find_ns+0x256/0x380 [ 2757.880915] sysfs_slab_add+0x172/0x200 [ 2757.881375] __kmem_cache_create+0x3db/0x520 [ 2757.881880] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2757.882459] p9_client_create+0xc6a/0x1230 [ 2757.882955] ? p9_client_flush+0x430/0x430 [ 2757.883442] ? trace_hardirqs_on+0x5b/0x180 [ 2757.883942] ? lockdep_init_map_type+0x2c7/0x780 [ 2757.884492] ? __raw_spin_lock_init+0x36/0x110 [ 2757.885025] v9fs_session_init+0x1dd/0x1680 [ 2757.885524] ? lock_release+0x680/0x680 [ 2757.885988] ? kmem_cache_alloc_trace+0x151/0x320 [ 2757.886553] ? v9fs_show_options+0x690/0x690 [ 2757.887073] ? trace_hardirqs_on+0x5b/0x180 [ 2757.887572] ? kasan_unpoison_shadow+0x33/0x50 [ 2757.888100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.888686] v9fs_mount+0x79/0x8f0 [ 2757.889098] ? v9fs_write_inode+0x60/0x60 [ 2757.889576] legacy_get_tree+0x105/0x220 [ 2757.890050] vfs_get_tree+0x8e/0x300 [ 2757.890480] path_mount+0x1429/0x2120 [ 2757.890925] ? strncpy_from_user+0x9e/0x470 [ 2757.891427] ? finish_automount+0xa90/0xa90 [ 2757.891920] ? getname_flags.part.0+0x1dd/0x4f0 [ 2757.892457] ? _copy_from_user+0xfb/0x1b0 [ 2757.892935] __x64_sys_mount+0x282/0x300 [ 2757.893408] ? copy_mnt_ns+0xa00/0xa00 [ 2757.893858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2757.894474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.895082] do_syscall_64+0x33/0x40 [ 2757.895512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2757.896107] RIP: 0033:0x7f7b14970b19 [ 2757.896537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.898670] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2757.899549] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2757.900373] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2757.901198] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2757.902017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.902854] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2757.903803] kobject: can not set name properly! [ 2757.904411] kmem_cache_create(9p-fcall-cache-1428) failed with error -12 [ 2757.905211] CPU: 0 PID: 13850 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2757.906008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2757.906960] Call Trace: [ 2757.907261] dump_stack+0x107/0x167 [ 2757.907681] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2757.908289] p9_client_create+0xc6a/0x1230 [ 2757.908778] ? p9_client_flush+0x430/0x430 [ 2757.909268] ? trace_hardirqs_on+0x5b/0x180 [ 2757.909763] ? lockdep_init_map_type+0x2c7/0x780 [ 2757.910309] ? __raw_spin_lock_init+0x36/0x110 [ 2757.910841] v9fs_session_init+0x1dd/0x1680 [ 2757.911339] ? lock_release+0x680/0x680 [ 2757.911798] ? kmem_cache_alloc_trace+0x151/0x320 [ 2757.912352] ? v9fs_show_options+0x690/0x690 [ 2757.912855] ? trace_hardirqs_on+0x5b/0x180 [ 2757.913351] ? kasan_unpoison_shadow+0x33/0x50 [ 2757.913874] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.914458] v9fs_mount+0x79/0x8f0 [ 2757.914875] ? v9fs_write_inode+0x60/0x60 [ 2757.915356] legacy_get_tree+0x105/0x220 [ 2757.915826] vfs_get_tree+0x8e/0x300 [ 2757.916255] path_mount+0x1429/0x2120 [ 2757.916694] ? strncpy_from_user+0x9e/0x470 [ 2757.917199] ? finish_automount+0xa90/0xa90 [ 2757.917695] ? getname_flags.part.0+0x1dd/0x4f0 [ 2757.918236] ? _copy_from_user+0xfb/0x1b0 [ 2757.918727] __x64_sys_mount+0x282/0x300 [ 2757.919196] ? copy_mnt_ns+0xa00/0xa00 [ 2757.919646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2757.920251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.920851] do_syscall_64+0x33/0x40 [ 2757.921284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2757.921887] RIP: 0033:0x7f7b14970b19 [ 2757.922316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.924458] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2757.925333] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2757.926152] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2757.926981] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2757.927805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.928623] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 16:31:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x4c00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:31:38 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 58) [ 2758.013496] loop3: detected capacity change from 0 to 8388096 [ 2758.015885] nfs: Unknown parameter '-$' [ 2758.024651] loop5: detected capacity change from 0 to 8388096 [ 2758.048255] nfs: Unknown parameter '-$' [ 2758.054527] loop6: detected capacity change from 0 to 8388096 [ 2758.058766] nfs: Unknown parameter '-$' [ 2758.061019] FAULT_INJECTION: forcing a failure. [ 2758.061019] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.062424] CPU: 0 PID: 13868 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2758.063294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.064324] Call Trace: [ 2758.064652] dump_stack+0x107/0x167 [ 2758.065091] should_fail.cold+0x5/0xa [ 2758.065534] should_failslab+0x5/0x20 [ 2758.065982] __kmalloc_track_caller+0x79/0x370 [ 2758.066508] ? kstrdup_const+0x53/0x80 [ 2758.066967] kstrdup+0x36/0x70 [ 2758.067344] kstrdup_const+0x53/0x80 [ 2758.067774] kvasprintf_const+0x10c/0x1a0 [ 2758.068255] kobject_set_name_vargs+0x56/0x150 [ 2758.068783] kobject_init_and_add+0xc9/0x160 [ 2758.069298] ? kobject_create_and_add+0xb0/0xb0 [ 2758.069843] ? wait_for_completion_io+0x270/0x270 [ 2758.070404] ? kernfs_name_hash+0xe7/0x110 [ 2758.070902] ? kernfs_find_ns+0x256/0x380 [ 2758.071387] sysfs_slab_add+0x172/0x200 [ 2758.071847] __kmem_cache_create+0x3db/0x520 [ 2758.072359] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2758.072940] p9_client_create+0xc6a/0x1230 [ 2758.073434] ? p9_client_flush+0x430/0x430 [ 2758.073925] ? trace_hardirqs_on+0x5b/0x180 [ 2758.074438] ? lockdep_init_map_type+0x2c7/0x780 [ 2758.074991] ? __raw_spin_lock_init+0x36/0x110 [ 2758.075525] v9fs_session_init+0x1dd/0x1680 [ 2758.076023] ? lock_release+0x680/0x680 [ 2758.076489] ? kmem_cache_alloc_trace+0x151/0x320 [ 2758.077047] ? v9fs_show_options+0x690/0x690 [ 2758.077565] ? trace_hardirqs_on+0x5b/0x180 [ 2758.078063] ? kasan_unpoison_shadow+0x33/0x50 [ 2758.078597] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.079182] v9fs_mount+0x79/0x8f0 [ 2758.079591] ? v9fs_write_inode+0x60/0x60 [ 2758.080091] legacy_get_tree+0x105/0x220 [ 2758.080562] vfs_get_tree+0x8e/0x300 [ 2758.080997] path_mount+0x1429/0x2120 [ 2758.081440] ? strncpy_from_user+0x9e/0x470 [ 2758.081932] ? finish_automount+0xa90/0xa90 [ 2758.082435] ? getname_flags.part.0+0x1dd/0x4f0 [ 2758.082980] ? _copy_from_user+0xfb/0x1b0 [ 2758.083465] __x64_sys_mount+0x282/0x300 [ 2758.083940] ? copy_mnt_ns+0xa00/0xa00 [ 2758.084407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.085015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.085613] do_syscall_64+0x33/0x40 [ 2758.086044] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2758.086645] RIP: 0033:0x7fed66145b19 [ 2758.087078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.089203] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2758.090086] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2758.090912] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2758.091740] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2758.092582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2758.093417] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2758.094332] kobject: can not set name properly! [ 2758.094921] kmem_cache_create(9p-fcall-cache-1429) failed with error -12 [ 2758.095731] CPU: 0 PID: 13868 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2758.096532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.097485] Call Trace: [ 2758.097791] dump_stack+0x107/0x167 [ 2758.098219] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2758.098835] p9_client_create+0xc6a/0x1230 [ 2758.099331] ? p9_client_flush+0x430/0x430 [ 2758.099819] ? trace_hardirqs_on+0x5b/0x180 [ 2758.100325] ? lockdep_init_map_type+0x2c7/0x780 [ 2758.100871] ? __raw_spin_lock_init+0x36/0x110 [ 2758.101409] v9fs_session_init+0x1dd/0x1680 [ 2758.101908] ? lock_release+0x680/0x680 [ 2758.102382] ? kmem_cache_alloc_trace+0x151/0x320 [ 2758.102948] ? v9fs_show_options+0x690/0x690 [ 2758.103461] ? trace_hardirqs_on+0x5b/0x180 [ 2758.103958] ? kasan_unpoison_shadow+0x33/0x50 [ 2758.104492] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.105089] v9fs_mount+0x79/0x8f0 [ 2758.105502] ? v9fs_write_inode+0x60/0x60 [ 2758.105984] legacy_get_tree+0x105/0x220 [ 2758.106454] vfs_get_tree+0x8e/0x300 [ 2758.106901] path_mount+0x1429/0x2120 [ 2758.107345] ? strncpy_from_user+0x9e/0x470 [ 2758.107844] ? finish_automount+0xa90/0xa90 [ 2758.108346] ? getname_flags.part.0+0x1dd/0x4f0 [ 2758.108887] ? _copy_from_user+0xfb/0x1b0 [ 2758.109373] __x64_sys_mount+0x282/0x300 [ 2758.109839] ? copy_mnt_ns+0xa00/0xa00 [ 2758.110298] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.110912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.111533] do_syscall_64+0x33/0x40 [ 2758.111975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2758.112574] RIP: 0033:0x7fed66145b19 [ 2758.113007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.115139] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2758.116017] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2758.116846] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2758.117672] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2758.118503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2758.119544] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2758.145402] loop4: detected capacity change from 0 to 8388096 [ 2758.147680] nfs: Unknown parameter '-$' 16:31:39 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 61) 16:31:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2758.212841] FAULT_INJECTION: forcing a failure. [ 2758.212841] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.215523] CPU: 1 PID: 13878 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2758.217001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.218786] Call Trace: [ 2758.219361] dump_stack+0x107/0x167 [ 2758.220148] should_fail.cold+0x5/0xa [ 2758.220959] ? create_object.isra.0+0x3a/0xa20 [ 2758.222098] should_failslab+0x5/0x20 [ 2758.223160] kmem_cache_alloc+0x5b/0x310 [ 2758.224024] ? lock_release+0x680/0x680 [ 2758.224871] create_object.isra.0+0x3a/0xa20 [ 2758.225855] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.227287] __kmalloc_track_caller+0x177/0x370 [ 2758.228443] ? kstrdup_const+0x53/0x80 [ 2758.229469] kstrdup+0x36/0x70 [ 2758.230197] kstrdup_const+0x53/0x80 [ 2758.231101] kvasprintf_const+0x10c/0x1a0 [ 2758.232155] kobject_set_name_vargs+0x56/0x150 [ 2758.233284] kobject_init_and_add+0xc9/0x160 [ 2758.234223] ? kobject_create_and_add+0xb0/0xb0 [ 2758.235232] ? wait_for_completion_io+0x270/0x270 [ 2758.236559] ? kernfs_name_hash+0xe7/0x110 [ 2758.237541] ? kernfs_find_ns+0x256/0x380 [ 2758.238509] sysfs_slab_add+0x172/0x200 [ 2758.239385] __kmem_cache_create+0x3db/0x520 [ 2758.240338] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2758.241413] p9_client_create+0xc6a/0x1230 [ 2758.242329] ? p9_client_flush+0x430/0x430 [ 2758.243230] ? trace_hardirqs_on+0x5b/0x180 [ 2758.244327] ? lockdep_init_map_type+0x2c7/0x780 [ 2758.245515] ? __raw_spin_lock_init+0x36/0x110 [ 2758.246496] v9fs_session_init+0x1dd/0x1680 [ 2758.247532] ? lock_release+0x680/0x680 [ 2758.248451] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2758.249904] ? trace_hardirqs_on+0x5b/0x180 [ 2758.250830] ? v9fs_show_options+0x690/0x690 [ 2758.251778] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 2758.252861] ? kasan_unpoison_shadow+0x33/0x50 [ 2758.253942] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.255250] v9fs_mount+0x79/0x8f0 [ 2758.256120] ? v9fs_write_inode+0x60/0x60 [ 2758.257002] legacy_get_tree+0x105/0x220 [ 2758.257961] vfs_get_tree+0x8e/0x300 [ 2758.258949] path_mount+0x1429/0x2120 [ 2758.259893] ? strncpy_from_user+0x9e/0x470 [ 2758.261052] ? finish_automount+0xa90/0xa90 [ 2758.262093] ? getname_flags.part.0+0x1dd/0x4f0 [ 2758.263351] ? _copy_from_user+0xfb/0x1b0 [ 2758.264368] __x64_sys_mount+0x282/0x300 [ 2758.265334] ? copy_mnt_ns+0xa00/0xa00 [ 2758.266400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.267635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.269084] do_syscall_64+0x33/0x40 [ 2758.270028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2758.271409] RIP: 0033:0x7f7b14970b19 [ 2758.272199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.276099] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2758.277713] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2758.279235] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2758.280744] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2758.282275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2758.283794] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 16:31:39 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) [ 2758.350946] FAULT_INJECTION: forcing a failure. [ 2758.350946] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.352432] CPU: 0 PID: 13884 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2758.353262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.354242] Call Trace: [ 2758.354580] dump_stack+0x107/0x167 [ 2758.355014] should_fail.cold+0x5/0xa [ 2758.355462] should_failslab+0x5/0x20 [ 2758.355902] __kmalloc_track_caller+0x79/0x370 [ 2758.356434] ? kstrdup_const+0x53/0x80 [ 2758.356890] kstrdup+0x36/0x70 [ 2758.357269] kstrdup_const+0x53/0x80 [ 2758.357699] __kernfs_new_node+0x9d/0x860 [ 2758.358186] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2758.358745] ? lock_acquire+0x197/0x470 [ 2758.359209] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2758.359830] ? lock_release+0x680/0x680 [ 2758.360293] ? find_held_lock+0x2c/0x110 [ 2758.360770] kernfs_new_node+0x18d/0x250 [ 2758.361246] kernfs_create_dir_ns+0x49/0x160 [ 2758.361762] sysfs_create_dir_ns+0x127/0x290 [ 2758.362279] ? sysfs_create_mount_point+0xb0/0xb0 [ 2758.362847] ? rwlock_bug.part.0+0x90/0x90 [ 2758.363337] ? do_raw_spin_unlock+0x4f/0x220 [ 2758.363852] kobject_add_internal+0x25e/0xa30 [ 2758.364377] kobject_init_and_add+0x101/0x160 [ 2758.364896] ? kobject_create_and_add+0xb0/0xb0 [ 2758.365438] ? wait_for_completion_io+0x270/0x270 [ 2758.365999] ? kernfs_name_hash+0xe7/0x110 [ 2758.366490] ? kernfs_find_ns+0x256/0x380 [ 2758.366995] sysfs_slab_add+0x172/0x200 [ 2758.367458] __kmem_cache_create+0x3db/0x520 [ 2758.367967] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2758.368557] p9_client_create+0xc6a/0x1230 [ 2758.369052] ? p9_client_flush+0x430/0x430 [ 2758.369545] ? trace_hardirqs_on+0x5b/0x180 [ 2758.370043] ? lockdep_init_map_type+0x2c7/0x780 [ 2758.370600] ? __raw_spin_lock_init+0x36/0x110 [ 2758.371132] v9fs_session_init+0x1dd/0x1680 [ 2758.371633] ? lock_release+0x680/0x680 [ 2758.372099] ? kmem_cache_alloc_trace+0x151/0x320 [ 2758.372658] ? v9fs_show_options+0x690/0x690 [ 2758.373175] ? trace_hardirqs_on+0x5b/0x180 [ 2758.373673] ? kasan_unpoison_shadow+0x33/0x50 [ 2758.374211] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.374811] v9fs_mount+0x79/0x8f0 [ 2758.375221] ? v9fs_write_inode+0x60/0x60 [ 2758.375707] legacy_get_tree+0x105/0x220 [ 2758.376178] vfs_get_tree+0x8e/0x300 [ 2758.376612] path_mount+0x1429/0x2120 [ 2758.377059] ? strncpy_from_user+0x9e/0x470 [ 2758.377560] ? finish_automount+0xa90/0xa90 [ 2758.378066] ? getname_flags.part.0+0x1dd/0x4f0 [ 2758.378616] ? _copy_from_user+0xfb/0x1b0 [ 2758.379101] __x64_sys_mount+0x282/0x300 [ 2758.379573] ? copy_mnt_ns+0xa00/0xa00 [ 2758.380028] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.380637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.381234] do_syscall_64+0x33/0x40 [ 2758.381674] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2758.382283] RIP: 0033:0x7fed66145b19 [ 2758.382722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.384845] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2758.385727] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2758.386548] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2758.387385] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2758.388204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2758.389034] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2758.389928] kobject_add_internal failed for 9p-fcall-cache-1431 (error: -12 parent: slab) [ 2758.390945] kmem_cache_create(9p-fcall-cache-1431) failed with error -12 [ 2758.391752] CPU: 0 PID: 13884 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2758.392553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.393509] Call Trace: [ 2758.393815] dump_stack+0x107/0x167 [ 2758.394239] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2758.394855] p9_client_create+0xc6a/0x1230 [ 2758.395355] ? p9_client_flush+0x430/0x430 [ 2758.395856] ? trace_hardirqs_on+0x5b/0x180 [ 2758.396353] ? lockdep_init_map_type+0x2c7/0x780 [ 2758.396900] ? __raw_spin_lock_init+0x36/0x110 [ 2758.397438] v9fs_session_init+0x1dd/0x1680 [ 2758.397939] ? lock_release+0x680/0x680 [ 2758.398405] ? kmem_cache_alloc_trace+0x151/0x320 [ 2758.398980] ? v9fs_show_options+0x690/0x690 [ 2758.399490] ? trace_hardirqs_on+0x5b/0x180 [ 2758.400007] ? kasan_unpoison_shadow+0x33/0x50 [ 2758.400537] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.401127] v9fs_mount+0x79/0x8f0 [ 2758.401540] ? v9fs_write_inode+0x60/0x60 [ 2758.402024] legacy_get_tree+0x105/0x220 [ 2758.402499] vfs_get_tree+0x8e/0x300 [ 2758.402940] path_mount+0x1429/0x2120 [ 2758.403384] ? strncpy_from_user+0x9e/0x470 [ 2758.403897] ? finish_automount+0xa90/0xa90 [ 2758.404397] ? getname_flags.part.0+0x1dd/0x4f0 [ 2758.404933] ? _copy_from_user+0xfb/0x1b0 [ 2758.405417] __x64_sys_mount+0x282/0x300 [ 2758.405890] ? copy_mnt_ns+0xa00/0xa00 [ 2758.406347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.406974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.407568] do_syscall_64+0x33/0x40 [ 2758.408002] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2758.408595] RIP: 0033:0x7fed66145b19 [ 2758.409024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.411162] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2758.412040] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2758.412858] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2758.413684] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2758.414509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2758.415340] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2758.443869] loop2: detected capacity change from 0 to 8388096 [ 2758.445272] nfs: Unknown parameter '-$' [ 2758.461799] loop5: detected capacity change from 0 to 8388096 [ 2758.463757] nfs: Unknown parameter '-$' [ 2758.467294] loop3: detected capacity change from 0 to 8388096 [ 2758.484803] nfs: Unknown parameter '-$' [ 2758.613659] loop6: detected capacity change from 0 to 8388096 [ 2758.615786] nfs: Unknown parameter '-$' 16:31:52 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 59) 16:31:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:52 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:52 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 62) 16:31:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x6800, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2771.489710] loop3: detected capacity change from 0 to 8388096 [ 2771.490566] FAULT_INJECTION: forcing a failure. [ 2771.490566] name failslab, interval 1, probability 0, space 0, times 0 [ 2771.491719] nfs: Unknown parameter '-$' [ 2771.493621] CPU: 0 PID: 13911 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2771.493635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2771.493643] Call Trace: [ 2771.493673] dump_stack+0x107/0x167 [ 2771.499174] should_fail.cold+0x5/0xa [ 2771.500007] ? create_object.isra.0+0x3a/0xa20 [ 2771.501007] should_failslab+0x5/0x20 16:31:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x4, 0x0, 0x1, 0xc001000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x9, 0x101, 0x5}, [], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x229) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x6c00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2771.501941] kmem_cache_alloc+0x5b/0x310 [ 2771.502804] create_object.isra.0+0x3a/0xa20 [ 2771.503740] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2771.504837] __kmalloc_track_caller+0x177/0x370 [ 2771.505832] ? kstrdup_const+0x53/0x80 [ 2771.506695] kstrdup+0x36/0x70 [ 2771.507397] kstrdup_const+0x53/0x80 [ 2771.508194] __kernfs_new_node+0x9d/0x860 [ 2771.509084] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2771.510107] ? lock_acquire+0x197/0x470 [ 2771.510974] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2771.512101] ? lock_release+0x680/0x680 [ 2771.512950] ? find_held_lock+0x2c/0x110 [ 2771.513817] kernfs_new_node+0x18d/0x250 [ 2771.514707] kernfs_create_dir_ns+0x49/0x160 [ 2771.515648] sysfs_create_dir_ns+0x127/0x290 [ 2771.516587] ? sysfs_create_mount_point+0xb0/0xb0 [ 2771.517618] ? rwlock_bug.part.0+0x90/0x90 [ 2771.518527] ? do_raw_spin_unlock+0x4f/0x220 [ 2771.519481] kobject_add_internal+0x25e/0xa30 [ 2771.520449] kobject_init_and_add+0x101/0x160 [ 2771.521412] ? kobject_create_and_add+0xb0/0xb0 [ 2771.522408] ? wait_for_completion_io+0x270/0x270 [ 2771.523451] ? kernfs_find_ns+0x256/0x380 [ 2771.524346] sysfs_slab_add+0x172/0x200 [ 2771.525205] __kmem_cache_create+0x3db/0x520 [ 2771.526156] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2771.527245] p9_client_create+0xc6a/0x1230 [ 2771.528157] ? p9_client_flush+0x430/0x430 [ 2771.529062] ? trace_hardirqs_on+0x5b/0x180 [ 2771.529988] ? lockdep_init_map_type+0x2c7/0x780 [ 2771.531022] ? __raw_spin_lock_init+0x36/0x110 [ 2771.532006] v9fs_session_init+0x1dd/0x1680 [ 2771.532927] ? lock_release+0x680/0x680 [ 2771.533788] ? kmem_cache_alloc_trace+0x151/0x320 [ 2771.534825] ? v9fs_show_options+0x690/0x690 [ 2771.535780] ? trace_hardirqs_on+0x5b/0x180 [ 2771.536703] ? kasan_unpoison_shadow+0x33/0x50 [ 2771.537675] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2771.538767] v9fs_mount+0x79/0x8f0 [ 2771.539529] ? v9fs_write_inode+0x60/0x60 [ 2771.540410] legacy_get_tree+0x105/0x220 [ 2771.541280] vfs_get_tree+0x8e/0x300 [ 2771.542079] path_mount+0x1429/0x2120 [ 2771.542905] ? strncpy_from_user+0x9e/0x470 [ 2771.543823] ? finish_automount+0xa90/0xa90 [ 2771.544746] ? getname_flags.part.0+0x1dd/0x4f0 [ 2771.545743] ? _copy_from_user+0xfb/0x1b0 [ 2771.546636] __x64_sys_mount+0x282/0x300 [ 2771.547537] ? copy_mnt_ns+0xa00/0xa00 [ 2771.548379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2771.549500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2771.550612] do_syscall_64+0x33/0x40 [ 2771.551419] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2771.552516] RIP: 0033:0x7fed66145b19 [ 2771.553311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2771.557268] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2771.558905] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2771.560436] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2771.561960] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2771.563489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2771.565019] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2771.585210] FAULT_INJECTION: forcing a failure. [ 2771.585210] name failslab, interval 1, probability 0, space 0, times 0 [ 2771.587636] CPU: 0 PID: 13914 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2771.589137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2771.590997] Call Trace: [ 2771.591611] dump_stack+0x107/0x167 [ 2771.592397] should_fail.cold+0x5/0xa [ 2771.593217] should_failslab+0x5/0x20 [ 2771.594046] __kmalloc_track_caller+0x79/0x370 [ 2771.595045] ? kstrdup_const+0x53/0x80 [ 2771.595882] kstrdup+0x36/0x70 [ 2771.596575] kstrdup_const+0x53/0x80 [ 2771.597395] __kernfs_new_node+0x9d/0x860 [ 2771.598289] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2771.599335] ? lock_acquire+0x197/0x470 [ 2771.600207] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2771.601331] ? lock_release+0x680/0x680 [ 2771.602176] ? find_held_lock+0x2c/0x110 [ 2771.603058] kernfs_new_node+0x18d/0x250 [ 2771.603934] kernfs_create_dir_ns+0x49/0x160 [ 2771.604882] sysfs_create_dir_ns+0x127/0x290 [ 2771.605820] ? sysfs_create_mount_point+0xb0/0xb0 [ 2771.606856] ? rwlock_bug.part.0+0x90/0x90 [ 2771.607769] ? do_raw_spin_unlock+0x4f/0x220 [ 2771.608717] kobject_add_internal+0x25e/0xa30 [ 2771.609683] kobject_init_and_add+0x101/0x160 [ 2771.610650] ? kobject_create_and_add+0xb0/0xb0 [ 2771.611649] ? wait_for_completion_io+0x270/0x270 [ 2771.612672] ? kernfs_name_hash+0xe7/0x110 [ 2771.613579] ? kernfs_find_ns+0x256/0x380 [ 2771.614475] sysfs_slab_add+0x172/0x200 [ 2771.615330] __kmem_cache_create+0x3db/0x520 [ 2771.616269] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2771.617339] p9_client_create+0xc6a/0x1230 [ 2771.618247] ? p9_client_flush+0x430/0x430 [ 2771.619154] ? trace_hardirqs_on+0x5b/0x180 [ 2771.620075] ? lockdep_init_map_type+0x2c7/0x780 [ 2771.621083] ? __raw_spin_lock_init+0x36/0x110 [ 2771.622059] v9fs_session_init+0x1dd/0x1680 [ 2771.622982] ? lock_release+0x680/0x680 [ 2771.623836] ? kmem_cache_alloc_trace+0x151/0x320 [ 2771.624860] ? v9fs_show_options+0x690/0x690 [ 2771.625803] ? trace_hardirqs_on+0x5b/0x180 [ 2771.626733] ? kasan_unpoison_shadow+0x33/0x50 [ 2771.627699] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2771.628779] v9fs_mount+0x79/0x8f0 [ 2771.629540] ? v9fs_write_inode+0x60/0x60 [ 2771.630421] legacy_get_tree+0x105/0x220 [ 2771.631298] vfs_get_tree+0x8e/0x300 [ 2771.632088] path_mount+0x1429/0x2120 [ 2771.632902] ? strncpy_from_user+0x9e/0x470 [ 2771.633820] ? finish_automount+0xa90/0xa90 [ 2771.634748] ? getname_flags.part.0+0x1dd/0x4f0 [ 2771.635728] ? _copy_from_user+0xfb/0x1b0 [ 2771.636619] __x64_sys_mount+0x282/0x300 [ 2771.637485] ? copy_mnt_ns+0xa00/0xa00 [ 2771.638318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2771.639435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2771.640537] do_syscall_64+0x33/0x40 [ 2771.641328] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2771.642415] RIP: 0033:0x7f7b14970b19 [ 2771.643212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2771.647144] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2771.648760] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2771.650283] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2771.651807] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2771.653323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2771.654844] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2771.658149] kobject_add_internal failed for 9p-fcall-cache-1437 (error: -12 parent: slab) [ 2771.660318] kmem_cache_create(9p-fcall-cache-1437) failed with error -12 [ 2771.661921] CPU: 0 PID: 13914 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2771.663147] loop5: detected capacity change from 0 to 8388096 [ 2771.663484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2771.663497] Call Trace: [ 2771.664895] nfs: Unknown parameter '-$' [ 2771.666046] dump_stack+0x107/0x167 [ 2771.666070] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2771.666096] p9_client_create+0xc6a/0x1230 [ 2771.666125] ? p9_client_flush+0x430/0x430 [ 2771.670968] ? trace_hardirqs_on+0x5b/0x180 [ 2771.671912] ? lockdep_init_map_type+0x2c7/0x780 [ 2771.672950] ? __raw_spin_lock_init+0x36/0x110 [ 2771.673938] v9fs_session_init+0x1dd/0x1680 [ 2771.674871] ? lock_release+0x680/0x680 [ 2771.675721] ? kmem_cache_alloc_trace+0x151/0x320 [ 2771.676742] ? v9fs_show_options+0x690/0x690 [ 2771.677684] ? trace_hardirqs_on+0x5b/0x180 [ 2771.678602] ? kasan_unpoison_shadow+0x33/0x50 [ 2771.679575] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2771.680655] v9fs_mount+0x79/0x8f0 [ 2771.681417] ? v9fs_write_inode+0x60/0x60 [ 2771.682300] legacy_get_tree+0x105/0x220 [ 2771.683171] vfs_get_tree+0x8e/0x300 [ 2771.683966] path_mount+0x1429/0x2120 [ 2771.684789] ? strncpy_from_user+0x9e/0x470 [ 2771.685712] ? finish_automount+0xa90/0xa90 [ 2771.686634] ? getname_flags.part.0+0x1dd/0x4f0 [ 2771.687628] ? _copy_from_user+0xfb/0x1b0 [ 2771.688512] __x64_sys_mount+0x282/0x300 [ 2771.689375] ? copy_mnt_ns+0xa00/0xa00 [ 2771.690215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2771.691335] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2771.692435] do_syscall_64+0x33/0x40 [ 2771.693226] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2771.694318] RIP: 0033:0x7f7b14970b19 [ 2771.695111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2771.699020] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2771.700641] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2771.702160] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2771.703679] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2771.705193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2771.706730] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2771.716467] loop2: detected capacity change from 0 to 8388096 16:31:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:52 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@fscache}, {@cache_loose}, {@uname={'uname', 0x3d, 'hash'}}]}}) (fail_nth: 60) 16:31:52 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000042cf09a05602d0d20014f0b1b42b899d67b057760136fd311a4546dd80f7ab348220c1ab7aebab03369bee9292eeacc1bc3e27b32bdc69b5055da150eb104e82324f63f2c81107acb709f739d323651d03c6a0113792ca80540fd390e2a0d9b9273cf402ec9d4c12ff74ca39cc4efed349069be081d1d809e6bfed27f64a579138e33349aab32901248d8c5a5d4a2184de51844f93817a240d7a03f378594970110f910278cbac05d5c00121cc15c26ba6242bfecb4fc3e26831fc7b014d23f19bdbb771628243e214507fc3fce6227e19416590ea", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d0", 0x4f, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000440)=@isdn={0x22, 0x9, 0x1f, 0x4, 0x1}, 0x0, 0x0, 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 16:31:52 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) (fail_nth: 63) [ 2771.982636] loop3: detected capacity change from 0 to 8388096 [ 2771.986784] nfs: Unknown parameter '-$' [ 2771.994644] FAULT_INJECTION: forcing a failure. [ 2771.994644] name failslab, interval 1, probability 0, space 0, times 0 [ 2771.995989] CPU: 1 PID: 13940 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2771.996763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2771.997746] Call Trace: [ 2771.998056] dump_stack+0x107/0x167 [ 2771.998465] should_fail.cold+0x5/0xa [ 2771.998924] ? __kernfs_new_node+0xd4/0x860 [ 2771.999437] should_failslab+0x5/0x20 [ 2771.999888] kmem_cache_alloc+0x5b/0x310 [ 2772.000375] __kernfs_new_node+0xd4/0x860 [ 2772.000863] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2772.001422] ? lock_chain_count+0x20/0x20 [ 2772.001906] ? lock_acquire+0x197/0x470 [ 2772.002358] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2772.002978] ? lock_release+0x680/0x680 [ 2772.003447] ? find_held_lock+0x2c/0x110 [ 2772.004022] kernfs_new_node+0x18d/0x250 [ 2772.004486] kernfs_create_dir_ns+0x49/0x160 [ 2772.005122] sysfs_create_dir_ns+0x127/0x290 [ 2772.005752] ? sysfs_create_mount_point+0xb0/0xb0 [ 2772.006443] ? rwlock_bug.part.0+0x90/0x90 [ 2772.007063] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2772.007850] ? do_raw_spin_unlock+0x4f/0x220 [ 2772.008479] kobject_add_internal+0x25e/0xa30 [ 2772.009127] ? kobject_add_internal+0x2/0xa30 [ 2772.009767] kobject_init_and_add+0x101/0x160 [ 2772.010414] ? kobject_create_and_add+0xb0/0xb0 [ 2772.011101] ? wait_for_completion_io+0x270/0x270 [ 2772.011796] ? kernfs_name_hash+0xe7/0x110 [ 2772.012416] ? kernfs_find_ns+0x256/0x380 [ 2772.013013] sysfs_slab_add+0x172/0x200 [ 2772.013590] __kmem_cache_create+0x3db/0x520 [ 2772.014222] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2772.014940] p9_client_create+0xc6a/0x1230 [ 2772.015555] ? p9_client_flush+0x430/0x430 [ 2772.016164] ? trace_hardirqs_on+0x5b/0x180 [ 2772.016790] ? lockdep_init_map_type+0x2c7/0x780 [ 2772.017469] ? __raw_spin_lock_init+0x36/0x110 [ 2772.018123] v9fs_session_init+0x1dd/0x1680 [ 2772.018738] ? lock_release+0x680/0x680 [ 2772.019310] ? kmem_cache_alloc_trace+0x151/0x320 [ 2772.020002] ? v9fs_show_options+0x690/0x690 [ 2772.020634] ? trace_hardirqs_on+0x5b/0x180 [ 2772.021250] ? kasan_unpoison_shadow+0x33/0x50 [ 2772.021899] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2772.022623] v9fs_mount+0x79/0x8f0 [ 2772.023148] ? v9fs_write_inode+0x60/0x60 [ 2772.023742] legacy_get_tree+0x105/0x220 [ 2772.024319] vfs_get_tree+0x8e/0x300 [ 2772.024846] path_mount+0x1429/0x2120 [ 2772.025390] ? strncpy_from_user+0x9e/0x470 [ 2772.025996] ? finish_automount+0xa90/0xa90 [ 2772.026616] ? getname_flags.part.0+0x1dd/0x4f0 [ 2772.027284] ? _copy_from_user+0xfb/0x1b0 [ 2772.027869] __x64_sys_mount+0x282/0x300 [ 2772.028440] ? copy_mnt_ns+0xa00/0xa00 [ 2772.028992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2772.029745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2772.030477] do_syscall_64+0x33/0x40 [ 2772.031026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2772.031755] RIP: 0033:0x7fed66145b19 [ 2772.032284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2772.034904] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2772.035984] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2772.037003] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2772.038005] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2772.039350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2772.041173] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2772.043266] kobject_add_internal failed for 9p-fcall-cache-1438 (error: -12 parent: slab) [ 2772.045260] kmem_cache_create(9p-fcall-cache-1438) failed with error -12 [ 2772.046868] CPU: 1 PID: 13940 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 2772.048463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2772.050345] Call Trace: [ 2772.050962] dump_stack+0x107/0x167 [ 2772.051801] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2772.053003] p9_client_create+0xc6a/0x1230 [ 2772.053980] ? p9_client_flush+0x430/0x430 [ 2772.054959] ? trace_hardirqs_on+0x5b/0x180 [ 2772.055946] ? lockdep_init_map_type+0x2c7/0x780 [ 2772.057032] ? __raw_spin_lock_init+0x36/0x110 [ 2772.058074] v9fs_session_init+0x1dd/0x1680 [ 2772.059072] ? lock_release+0x680/0x680 [ 2772.059988] ? kmem_cache_alloc_trace+0x151/0x320 [ 2772.061083] ? v9fs_show_options+0x690/0x690 [ 2772.062092] ? trace_hardirqs_on+0x5b/0x180 [ 2772.063085] ? kasan_unpoison_shadow+0x33/0x50 [ 2772.064124] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2772.065281] v9fs_mount+0x79/0x8f0 [ 2772.066097] ? v9fs_write_inode+0x60/0x60 [ 2772.067054] legacy_get_tree+0x105/0x220 [ 2772.067993] vfs_get_tree+0x8e/0x300 [ 2772.068864] path_mount+0x1429/0x2120 [ 2772.069913] ? strncpy_from_user+0x9e/0x470 [ 2772.070930] ? finish_automount+0xa90/0xa90 [ 2772.071933] ? getname_flags.part.0+0x1dd/0x4f0 [ 2772.073300] ? _copy_from_user+0xfb/0x1b0 [ 2772.074254] __x64_sys_mount+0x282/0x300 [ 2772.075196] ? copy_mnt_ns+0xa00/0xa00 [ 2772.076095] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2772.077458] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2772.078839] do_syscall_64+0x33/0x40 [ 2772.079909] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2772.081079] RIP: 0033:0x7fed66145b19 [ 2772.081936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2772.086520] RSP: 002b:00007fed636bb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2772.088444] RAX: ffffffffffffffda RBX: 00007fed66258f60 RCX: 00007fed66145b19 [ 2772.090366] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2772.092289] RBP: 00007fed636bb1d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2772.094221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2772.096216] R13: 00007ffc275dc2cf R14: 00007fed636bb300 R15: 0000000000022000 [ 2772.136914] FAULT_INJECTION: forcing a failure. [ 2772.136914] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.139492] CPU: 1 PID: 13944 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2772.140982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2772.142779] Call Trace: [ 2772.143348] dump_stack+0x107/0x167 [ 2772.144190] should_fail.cold+0x5/0xa [ 2772.145006] ? create_object.isra.0+0x3a/0xa20 [ 2772.146032] should_failslab+0x5/0x20 [ 2772.146971] kmem_cache_alloc+0x5b/0x310 [ 2772.147502] create_object.isra.0+0x3a/0xa20 [ 2772.148059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2772.148732] __kmalloc_track_caller+0x177/0x370 [ 2772.149330] ? kstrdup_const+0x53/0x80 [ 2772.149814] kstrdup+0x36/0x70 [ 2772.150237] kstrdup_const+0x53/0x80 [ 2772.150721] __kernfs_new_node+0x9d/0x860 [ 2772.151256] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2772.151846] ? lock_acquire+0x197/0x470 [ 2772.152357] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2772.153017] ? lock_release+0x680/0x680 [ 2772.153516] ? find_held_lock+0x2c/0x110 [ 2772.154021] kernfs_new_node+0x18d/0x250 [ 2772.154551] kernfs_create_dir_ns+0x49/0x160 [ 2772.155128] sysfs_create_dir_ns+0x127/0x290 [ 2772.155862] ? sysfs_create_mount_point+0xb0/0xb0 [ 2772.156471] ? rwlock_bug.part.0+0x90/0x90 [ 2772.156996] ? do_raw_spin_unlock+0x4f/0x220 [ 2772.157548] kobject_add_internal+0x25e/0xa30 [ 2772.158127] kobject_init_and_add+0x101/0x160 [ 2772.158742] ? kobject_create_and_add+0xb0/0xb0 [ 2772.159362] ? wait_for_completion_io+0x270/0x270 [ 2772.159957] ? kernfs_name_hash+0xe7/0x110 [ 2772.160501] ? kernfs_find_ns+0x256/0x380 [ 2772.161018] sysfs_slab_add+0x172/0x200 [ 2772.161522] __kmem_cache_create+0x3db/0x520 [ 2772.162081] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2772.162731] p9_client_create+0xc6a/0x1230 [ 2772.163274] ? p9_client_flush+0x430/0x430 [ 2772.163802] ? trace_hardirqs_on+0x5b/0x180 [ 2772.164351] ? lockdep_init_map_type+0x2c7/0x780 [ 2772.164944] ? __raw_spin_lock_init+0x36/0x110 [ 2772.165526] v9fs_session_init+0x1dd/0x1680 [ 2772.166070] ? lock_release+0x680/0x680 [ 2772.166568] ? kmem_cache_alloc_trace+0x151/0x320 [ 2772.167183] ? v9fs_show_options+0x690/0x690 [ 2772.167734] ? trace_hardirqs_on+0x5b/0x180 [ 2772.168290] ? kasan_unpoison_shadow+0x33/0x50 [ 2772.168850] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2772.169490] v9fs_mount+0x79/0x8f0 [ 2772.169929] ? v9fs_write_inode+0x60/0x60 [ 2772.170466] legacy_get_tree+0x105/0x220 [ 2772.170989] vfs_get_tree+0x8e/0x300 [ 2772.171595] path_mount+0x1429/0x2120 [ 2772.172120] ? strncpy_from_user+0x9e/0x470 [ 2772.172655] ? finish_automount+0xa90/0xa90 [ 2772.173200] ? getname_flags.part.0+0x1dd/0x4f0 [ 2772.173784] ? _copy_from_user+0xfb/0x1b0 [ 2772.174319] __x64_sys_mount+0x282/0x300 [ 2772.174856] ? copy_mnt_ns+0xa00/0xa00 [ 2772.175353] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2772.176005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2772.176654] do_syscall_64+0x33/0x40 [ 2772.177127] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2772.177768] RIP: 0033:0x7f7b14970b19 [ 2772.178239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2772.180522] RSP: 002b:00007f7b11ee6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2772.181458] RAX: ffffffffffffffda RBX: 00007f7b14a83f60 RCX: 00007f7b14970b19 [ 2772.182367] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2772.183262] RBP: 00007f7b11ee61d0 R08: 00000000200005c0 R09: 0000000000000000 [ 2772.184164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2772.185045] R13: 00007fff4e14caaf R14: 00007f7b11ee6300 R15: 0000000000022000 [ 2772.210457] loop2: detected capacity change from 0 to 8388096 [ 2772.211923] nfs: Unknown parameter '-$' [ 2786.314449] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888008a02140 (size 32): comm "syz-executor.7", pid 13914, jiffies 4297438533 (age 22.780s) hex dump (first 32 bytes): 39 70 2d 66 63 61 6c 6c 2d 63 61 63 68 65 2d 31 9p-fcall-cache-1 34 33 37 00 80 88 ff ff 5f 74 00 73 30 00 00 00 437....._t.s0... backtrace: [<000000003740195d>] kstrdup+0x36/0x70 [<000000007a588d34>] kstrdup_const+0x53/0x80 [<000000008a30e725>] kvasprintf_const+0x10c/0x1a0 [<00000000eb332802>] kobject_set_name_vargs+0x56/0x150 [<00000000f047a130>] kobject_init_and_add+0xc9/0x160 [<00000000973c30dd>] sysfs_slab_add+0x172/0x200 [<000000002758d737>] __kmem_cache_create+0x3db/0x520 [<00000000c46644f2>] kmem_cache_create_usercopy+0x1db/0x2f0 [<00000000a5d37946>] p9_client_create+0xc6a/0x1230 [<0000000067552429>] v9fs_session_init+0x1dd/0x1680 [<0000000085c0f35f>] v9fs_mount+0x79/0x8f0 [<00000000b3b05f8d>] legacy_get_tree+0x105/0x220 [<00000000770c933d>] vfs_get_tree+0x8e/0x300 [<000000000afb9a2f>] path_mount+0x1429/0x2120 [<0000000035dcc02d>] __x64_sys_mount+0x282/0x300 [<00000000cd8b973b>] do_syscall_64+0x33/0x40 BUG: memory leak unreferenced object 0xffff88800f992d00 (size 32): comm "syz-executor.1", pid 13940, jiffies 4297438942 (age 22.372s) hex dump (first 32 bytes): 39 70 2d 66 63 61 6c 6c 2d 63 61 63 68 65 2d 31 9p-fcall-cache-1 34 33 38 00 80 88 ff ff 5f 74 00 73 30 00 00 00 438....._t.s0... backtrace: [<000000003740195d>] kstrdup+0x36/0x70 [<000000007a588d34>] kstrdup_const+0x53/0x80 [<000000008a30e725>] kvasprintf_const+0x10c/0x1a0 [<00000000eb332802>] kobject_set_name_vargs+0x56/0x150 [<00000000f047a130>] kobject_init_and_add+0xc9/0x160 [<00000000973c30dd>] sysfs_slab_add+0x172/0x200 [<000000002758d737>] __kmem_cache_create+0x3db/0x520 [<00000000c46644f2>] kmem_cache_create_usercopy+0x1db/0x2f0 [<00000000a5d37946>] p9_client_create+0xc6a/0x1230 [<0000000067552429>] v9fs_session_init+0x1dd/0x1680 [<0000000085c0f35f>] v9fs_mount+0x79/0x8f0 [<00000000b3b05f8d>] legacy_get_tree+0x105/0x220 [<00000000770c933d>] vfs_get_tree+0x8e/0x300 [<000000000afb9a2f>] path_mount+0x1429/0x2120 [<0000000035dcc02d>] __x64_sys_mount+0x282/0x300 [<00000000cd8b973b>] do_syscall_64+0x33/0x40 BUG: leak checking failed VM DIAGNOSIS: 16:32:15 Registers: info registers vcpu 0 RAX=ffffffff83e8ee20 RBX=0000000000000000 RCX=ffffffff83e769bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8f428 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85678ec8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ee2e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffecd092f98 CR3=000000001e3e2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=3a29323320657a697328203034313230 XMM03=333120646970202c22372e726f747563 XMM04=6c6c6163662d70392020313320643220 XMM05=32206336206336203136203336203636 XMM06=73657479622032332074737269662820 XMM07=2e323220656761282033333538333437 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e8ee20 RBX=0000000000000001 RCX=ffffffff83e769bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8f428 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85678ec8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ee2e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff09572a020 CR3=000000001cee8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004116c46000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000