000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:43:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x4, 0x3, 0x250}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:43:18 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c09, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) 11:43:18 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r5 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ddd43ecb90a95f0c", "40a8159ae49f75d236f8fc0c2b4a7e67", "a6c8d275", "7d90d9818850ac61"}, 0x28) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:43:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x5460, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:43:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 1899.702522] FAULT_INJECTION: forcing a failure. [ 1899.702522] name failslab, interval 1, probability 0, space 0, times 0 [ 1899.704108] CPU: 1 PID: 11276 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1899.704998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1899.706071] Call Trace: [ 1899.706418] dump_stack+0x107/0x167 [ 1899.706889] should_fail.cold+0x5/0xa [ 1899.707387] ? create_object.isra.0+0x3a/0xa20 [ 1899.707986] should_failslab+0x5/0x20 [ 1899.708476] kmem_cache_alloc+0x5b/0x310 [ 1899.708997] ? p9_fd_show_options+0x1c0/0x1c0 [ 1899.709573] create_object.isra.0+0x3a/0xa20 [ 1899.710141] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1899.710803] kmem_cache_alloc_trace+0x151/0x320 [ 1899.711402] p9_fd_create+0x161/0x4a0 [ 1899.711898] ? p9_conn_create+0x510/0x510 [ 1899.712435] ? p9_client_create+0x798/0x1230 [ 1899.712999] ? kfree+0xd7/0x340 [ 1899.713426] ? do_raw_spin_unlock+0x4f/0x220 [ 1899.713995] p9_client_create+0x7ff/0x1230 [ 1899.714546] ? p9_client_flush+0x430/0x430 [ 1899.715089] ? trace_hardirqs_on+0x5b/0x180 [ 1899.715653] ? lockdep_init_map_type+0x2c7/0x780 [ 1899.716265] ? __raw_spin_lock_init+0x36/0x110 [ 1899.716857] v9fs_session_init+0x1dd/0x1680 [ 1899.717420] ? lock_release+0x680/0x680 [ 1899.717937] ? kmem_cache_alloc_trace+0x151/0x320 [ 1899.718557] ? v9fs_show_options+0x690/0x690 [ 1899.719125] ? trace_hardirqs_on+0x5b/0x180 [ 1899.719687] ? kasan_unpoison_shadow+0x33/0x50 [ 1899.720273] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1899.720938] v9fs_mount+0x79/0x8f0 [ 1899.721398] ? v9fs_write_inode+0x60/0x60 [ 1899.721930] legacy_get_tree+0x105/0x220 [ 1899.722449] vfs_get_tree+0x8e/0x300 [ 1899.722923] path_mount+0x1429/0x2120 [ 1899.723415] ? strncpy_from_user+0x9e/0x470 [ 1899.723976] ? finish_automount+0xa90/0xa90 [ 1899.724539] ? getname_flags.part.0+0x1dd/0x4f0 [ 1899.725134] ? _copy_from_user+0xfb/0x1b0 [ 1899.725671] __x64_sys_mount+0x282/0x300 [ 1899.726189] ? copy_mnt_ns+0xa00/0xa00 [ 1899.726688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1899.727361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1899.728045] do_syscall_64+0x33/0x40 [ 1899.728523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1899.729179] RIP: 0033:0x7f7d78bdfb19 [ 1899.729653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1899.732014] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1899.732985] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 1899.733899] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1899.734811] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 1899.735727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1899.736639] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:43:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xa3, 0x7, 0x7f, 0x4, 0x0, 0x10001, 0x2004, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_config_ext={0x3, 0x1b}, 0x0, 0x7ff, 0xffc, 0x0, 0x1, 0x0, 0x8, 0x0, 0xfffff9b7, 0x0, 0x101}, 0x0, 0x6, r1, 0x3) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:43:18 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c09, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 11:43:18 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40086602, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:43:18 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 34) [ 1899.912065] FAULT_INJECTION: forcing a failure. [ 1899.912065] name failslab, interval 1, probability 0, space 0, times 0 [ 1899.913494] CPU: 1 PID: 11306 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1899.914330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1899.915326] Call Trace: [ 1899.915672] dump_stack+0x107/0x167 [ 1899.916109] should_fail.cold+0x5/0xa [ 1899.916565] ? p9_fd_create+0x161/0x4a0 [ 1899.917046] should_failslab+0x5/0x20 [ 1899.917507] kmem_cache_alloc_trace+0x55/0x320 [ 1899.918063] p9_fd_create+0x161/0x4a0 [ 1899.918520] ? p9_conn_create+0x510/0x510 [ 1899.919022] ? p9_client_create+0x798/0x1230 [ 1899.919542] ? kfree+0xd7/0x340 [ 1899.919946] ? do_raw_spin_unlock+0x4f/0x220 [ 1899.920473] p9_client_create+0x7ff/0x1230 [ 1899.920984] ? p9_client_flush+0x430/0x430 [ 1899.921491] ? trace_hardirqs_on+0x5b/0x180 [ 1899.922009] ? lockdep_init_map_type+0x2c7/0x780 [ 1899.922575] ? __raw_spin_lock_init+0x36/0x110 [ 1899.923125] v9fs_session_init+0x1dd/0x1680 [ 1899.923647] ? lock_release+0x680/0x680 [ 1899.924128] ? kmem_cache_alloc_trace+0x151/0x320 [ 1899.924704] ? v9fs_show_options+0x690/0x690 [ 1899.925227] ? trace_hardirqs_on+0x5b/0x180 [ 1899.925739] ? kasan_unpoison_shadow+0x33/0x50 [ 1899.926282] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1899.926886] v9fs_mount+0x79/0x8f0 [ 1899.927311] ? v9fs_write_inode+0x60/0x60 [ 1899.927810] legacy_get_tree+0x105/0x220 [ 1899.928293] vfs_get_tree+0x8e/0x300 [ 1899.928733] path_mount+0x1429/0x2120 [ 1899.929189] ? strncpy_from_user+0x9e/0x470 [ 1899.929699] ? finish_automount+0xa90/0xa90 [ 1899.930213] ? getname_flags.part.0+0x1dd/0x4f0 [ 1899.930764] ? _copy_from_user+0xfb/0x1b0 [ 1899.931261] __x64_sys_mount+0x282/0x300 [ 1899.931746] ? copy_mnt_ns+0xa00/0xa00 [ 1899.932207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1899.932831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1899.933449] do_syscall_64+0x33/0x40 [ 1899.933894] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1899.934500] RIP: 0033:0x7f7d78bdfb19 [ 1899.934944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1899.937158] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1899.938064] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 1899.938913] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1899.939761] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 1899.940608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1899.941450] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 1899.962527] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:43:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x40049409, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:43:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:43:32 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000001c0)={0x7f}) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:43:32 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 35) 11:43:32 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c09, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) 11:43:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/242]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:43:32 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40087602, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:43:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x1, 0x80, 0x0, 0x0, 0x0, 0x5e, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xfff8, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) [ 1914.276851] FAULT_INJECTION: forcing a failure. [ 1914.276851] name failslab, interval 1, probability 0, space 0, times 0 11:43:32 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c09, r0) [ 1914.280141] CPU: 1 PID: 11320 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1914.281775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1914.283521] Call Trace: [ 1914.284081] dump_stack+0x107/0x167 [ 1914.284853] should_fail.cold+0x5/0xa [ 1914.285668] ? create_object.isra.0+0x3a/0xa20 [ 1914.286625] should_failslab+0x5/0x20 [ 1914.287436] kmem_cache_alloc+0x5b/0x310 [ 1914.288304] create_object.isra.0+0x3a/0xa20 [ 1914.289230] kmem_cache_alloc+0x159/0x310 [ 1914.290126] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1914.291196] p9_client_rpc+0x220/0x1370 [ 1914.292042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1914.293168] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1914.294279] ? pipe_poll+0x21b/0x7f0 [ 1914.295061] ? p9_fd_close+0x4a0/0x4a0 [ 1914.295854] ? anon_pipe_buf_release+0x280/0x280 [ 1914.296850] ? p9_fd_poll+0x1e0/0x2c0 [ 1914.297639] ? p9_fd_create+0x357/0x4a0 [ 1914.298468] ? p9_conn_create+0x510/0x510 [ 1914.299323] ? p9_client_create+0x798/0x1230 [ 1914.300247] ? kfree+0xd7/0x340 [ 1914.300929] ? do_raw_spin_unlock+0x4f/0x220 [ 1914.301849] p9_client_create+0xa76/0x1230 [ 1914.302741] ? p9_client_flush+0x430/0x430 [ 1914.303618] ? trace_hardirqs_on+0x5b/0x180 [ 1914.304529] ? lockdep_init_map_type+0x2c7/0x780 [ 1914.305513] ? __raw_spin_lock_init+0x36/0x110 [ 1914.306454] v9fs_session_init+0x1dd/0x1680 [ 1914.307347] ? lock_release+0x680/0x680 [ 1914.308185] ? kmem_cache_alloc_trace+0x151/0x320 [ 1914.309189] ? v9fs_show_options+0x690/0x690 [ 1914.310100] ? trace_hardirqs_on+0x5b/0x180 [ 1914.311004] ? kasan_unpoison_shadow+0x33/0x50 [ 1914.311939] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1914.312980] v9fs_mount+0x79/0x8f0 [ 1914.313727] ? v9fs_write_inode+0x60/0x60 [ 1914.314582] legacy_get_tree+0x105/0x220 [ 1914.315432] vfs_get_tree+0x8e/0x300 [ 1914.316213] path_mount+0x1429/0x2120 [ 1914.317008] ? strncpy_from_user+0x9e/0x470 [ 1914.317903] ? finish_automount+0xa90/0xa90 [ 1914.318804] ? getname_flags.part.0+0x1dd/0x4f0 [ 1914.319775] ? _copy_from_user+0xfb/0x1b0 [ 1914.320648] __x64_sys_mount+0x282/0x300 [ 1914.321492] ? copy_mnt_ns+0xa00/0xa00 [ 1914.322306] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1914.323397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1914.324484] do_syscall_64+0x33/0x40 [ 1914.325264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1914.326337] RIP: 0033:0x7f7d78bdfb19 [ 1914.327111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1914.330949] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1914.332537] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 1914.334028] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1914.335512] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 1914.337011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1914.338499] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:43:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/244]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:43:33 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40101283, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:43:33 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c09, r0) 11:43:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x81, 0xef, 0x9, 0x800, 0x0, 0x6, 0x8001, 0x2cb, 0x38, 0xc2, 0x5, 0x401, 0x20, 0x2, 0xfffd, 0x1ff}, [{0x1, 0x800, 0x100, 0x9, 0x401, 0xfffffffb, 0x1, 0x6}], "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"}, 0x1058) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:43:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x40081271, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:43:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:43:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d0a, &(0x7f00000003c0)={0x0, 0x7cfe, 0x2, 0x5, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x20, 0x2, 0x1, 0xf7, 0x0, 0x5, 0x6050, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x100, 0x1, @perf_config_ext={0x1, 0x9}, 0x10, 0x3, 0x8000, 0x5, 0x1ff, 0x1, 0x7fff, 0x0, 0x1, 0x0, 0x7ff}, 0x0, 0x5, r2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:43:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/244]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 1914.532384] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1914.573328] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1914.574403] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1914.575205] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1914.575969] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 1914.576863] print_req_error: 8 callbacks suppressed [ 1914.576874] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1914.578627] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1914.588887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1914.589514] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1914.591301] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1914.591319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1914.593555] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1914.594150] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1914.596995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1914.597113] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1914.597610] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1914.599983] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1914.601409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1914.602874] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1914.602889] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1914.605675] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1914.606901] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1914.606919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1914.609134] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1914.609775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1914.611348] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1914.611946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1914.613501] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1914.614165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1914.615687] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1914.617444] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1915.044401] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1915.045544] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1915.046350] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1915.047116] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 1915.064240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1915.065020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1915.065748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1915.066434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1915.067152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1915.067864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1915.068577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1915.069298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1915.072663] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1915.073546] Buffer I/O error on dev loop4, logical block 2096897, async page read 11:43:46 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 36) 11:43:46 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c09, r0) 11:43:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/244]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:43:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000180)="1ba393a486c6a16742efb90a", 0xc, 0x8000}, 0x6) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1, 0x7fffffff}}, './file0\x00'}) r4 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000001e00)={0x62e, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000080000000000000001f0b3ed6726be92d2a58eba26aa522000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000004000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025139c3753837c600000000000000000000000000000000000000000000000000000000000045308e63ea0dadd9a0ede5def79f622190efd500"/264]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:43:46 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40101286, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:43:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:43:46 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x40086602, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:43:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000740)='\"\"\x8a\xf1fl\xa8\xa6\xc7t\x8e\x8a/ \xb4~\x98\xdb\xd0u\xaa\x05\x98\x19\xe7w<\xaf\xbdSk\xc3\xc4\xc9\x83\xc0\xc0V\xff\x85\xfe\xc5R\xc5\xdd\xcc\xe3\xe4\x89\xb8\xedypR\xb5\x19\xc7\\\x13\x87\x82\xe1d\xf20]\x8a:\x7fV\x1d\xf8\xfcH:\xc5\x91\x93 \x00\xbf\xf1\x1fD\x0e$\x14U\xba\xbf\x9d\x97\xbe>C\xc82|\x05\xa8\x96\xb9F\x8d1\xcfu-Ld\x90_\xb7\xf9d\xc7\xf6%q\x86R\x97\x18\xc0\xe6\x9b\xf3\xcac\x10\xa6)\xa8\x91?\x11\x95\x8b\x9d\x96\xd5 D\xce\xc1\x96\xe1}i8Ni\x91k0\v\"\x9e\x97\xcb\xc6\xb6\x98\xc4\xc5\x88\xbe\xbf\xf9\x92\xc4<\xdf\xbdx4\x8a\xffs\xc5/@,\xd0\xbcS%C!\xddc\x8bQ~\x01\xa9|\xcend\x11\x92\xb4\xa3\xbb#\x8fg\xbd\a\x05\x97\xfa\xc13\xa6\xa5s\xf8oofQ\xad.\x95\xed\xaf\x12\xe7!\xb0\xa5sT\xc9j+\xfd\x92v\xe1:$\xf5\xa2\xe4\xa5\x92\x0f&\x98\x85*\xb0MF\x1d\xcb*\x84mk\xe9A\x90\xab\x97M\xf5{fv\xeds\xa7\t~\x0e\xac\xbfQ\xd3\n\"\xda7\xf4=\x94\xee0\xcd8\x81|_\x90\'\x8c\xf85\xcc\x9f\xb4\xa4\x8f\xedg=\xb7\x0f\xf7W3\x82\xbb\x8ftJ\xe8Z \xfe\xf0\x0e>\xab\xd0\x1a\b\xb6\xef\x91\xca\xde\xf3\x89:\xb4\x17\x04\x8c\x87x\xa5jc\x93H\xd4\xb7|\xaa\x88\x16\x19cD<\x85L\xe0\x99\x7fJ\xb0N\xfev\v\xd4\x9a:\x18\xa3#\xb7\xbe_X\xe4e\xads\xacK\xd3$q\xcb\bI2\x12#\xb6P\x00\x00\x00\x00\x00\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000006c0)={0x1, 0x1, 0x1000, 0xc5, &(0x7f0000000380)="fe4b98bae0a228dc1f587346978168402399e6c800e26e2b28ff6092ebf68a3d2a65c38cb5ce28bcfa41ace66de20efbd09de4812cd40546f2a1d4c0f59f6a7a4ba6d71faa126059eb69b89d958574d8547f41a8eaf0a946c45724c66998a1750bb1ca3cb9ad69ba3fa7c59047b2968de24ceb5f8ffcf05313454caba97fc06654a74a9b3911de1fb07dd7648356338e3338b80cef54fe7ce2c4c02e5bb2fb69aef1e1f3fd725c086ad75c0c6883848c0aa49b23b0a8e69e76ebd4f7d9998b69a40384ac4c", 0x9a, 0x0, &(0x7f0000000480)="3316e6df348e21d73fba8aa0d6c2b9d2ec70b13ff067f8e66d2bbbb808eb90ae5cb3b0aa3dbd4fd9cf11bfc1ca45e9a977bfc2af0d9852fa932a658456c03688aaa831150b9c8db8d3a580f0876e4832d314e4799fea32454190e77c509ab089eea413ef0a5b52f76e6014567cb46433560efc88e724a8cf444d8fc519dedc378565d411cfb9c76c39b11063ad2ea7099304be9cc75e414b6db1"}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x1, 0x581b01) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f000075c000/0x2000)=nil, 0x2000, 0xa, 0x1d012, r1, 0x2e238000) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="eadae4fb06c79c89fc18589c140428ece49eb6eb39ed19a38ded879bf6f27894c3e713f053cbe8b58abaeab1383eef97976f0f93809e5e156e707cd49731473abc299ab35ba914ab14b23a333c374d765bfb70d4521ec85e17c0aedbc9e1f812f6710b887423cdd2d9beaf7b169fc14acdeae0e62c20ca1658b1d413cecf8c3175c657ff7b082093b7ea3680e66314e78168cce9e91b40247e127fe2e8c27e4823770a217d9718b917006fd54e7c4730e5ef044a8cd9e99b47ebc4be01bdf6c66a98f6c19e490b39cab5cb729ad55d90b7", 0xd1}], 0x1000000000000138, 0x2, 0x7ff) [ 1928.142589] FAULT_INJECTION: forcing a failure. [ 1928.142589] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.145209] CPU: 0 PID: 11399 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1928.146685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1928.148424] Call Trace: [ 1928.149003] dump_stack+0x107/0x167 [ 1928.149781] should_fail.cold+0x5/0xa [ 1928.150592] ? create_object.isra.0+0x3a/0xa20 [ 1928.151547] should_failslab+0x5/0x20 [ 1928.152346] kmem_cache_alloc+0x5b/0x310 [ 1928.153220] create_object.isra.0+0x3a/0xa20 [ 1928.154156] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1928.155239] kmem_cache_alloc+0x159/0x310 [ 1928.156126] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1928.157214] p9_client_rpc+0x220/0x1370 [ 1928.158045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1928.159171] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1928.160305] ? pipe_poll+0x21b/0x7f0 [ 1928.161101] ? p9_fd_close+0x4a0/0x4a0 [ 1928.161928] ? anon_pipe_buf_release+0x280/0x280 [ 1928.162919] ? p9_fd_poll+0x1e0/0x2c0 [ 1928.163738] ? p9_fd_create+0x357/0x4a0 [ 1928.164572] ? p9_conn_create+0x510/0x510 11:43:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 1928.165446] ? p9_client_create+0x798/0x1230 [ 1928.166619] ? kfree+0xd7/0x340 [ 1928.167316] ? do_raw_spin_unlock+0x4f/0x220 [ 1928.168248] p9_client_create+0xa76/0x1230 [ 1928.169152] ? p9_client_flush+0x430/0x430 [ 1928.170035] ? trace_hardirqs_on+0x5b/0x180 11:43:46 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40101288, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) [ 1928.170939] ? lockdep_init_map_type+0x2c7/0x780 [ 1928.172004] ? __raw_spin_lock_init+0x36/0x110 [ 1928.172975] v9fs_session_init+0x1dd/0x1680 [ 1928.173876] ? lock_release+0x680/0x680 [ 1928.174715] ? kmem_cache_alloc_trace+0x151/0x320 [ 1928.175720] ? v9fs_show_options+0x690/0x690 [ 1928.176659] ? trace_hardirqs_on+0x5b/0x180 [ 1928.177558] ? kasan_unpoison_shadow+0x33/0x50 [ 1928.178519] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1928.179581] v9fs_mount+0x79/0x8f0 [ 1928.180339] ? v9fs_write_inode+0x60/0x60 [ 1928.181222] legacy_get_tree+0x105/0x220 [ 1928.182064] vfs_get_tree+0x8e/0x300 [ 1928.182837] path_mount+0x1429/0x2120 [ 1928.183632] ? strncpy_from_user+0x9e/0x470 [ 1928.184527] ? finish_automount+0xa90/0xa90 [ 1928.185433] ? getname_flags.part.0+0x1dd/0x4f0 [ 1928.186399] ? _copy_from_user+0xfb/0x1b0 [ 1928.187267] __x64_sys_mount+0x282/0x300 [ 1928.188114] ? copy_mnt_ns+0xa00/0xa00 [ 1928.188932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1928.190022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1928.191096] do_syscall_64+0x33/0x40 [ 1928.191882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1928.192956] RIP: 0033:0x7f7d78bdfb19 [ 1928.193733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1928.197565] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1928.199157] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 1928.200660] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1928.202151] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 1928.203649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1928.205146] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:43:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r2, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:43:46 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c09, r0) 11:43:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x40087602, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:43:47 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x15a3) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3, 0x3, 0x93, 0x8, 0x0, 0x6, 0x20400, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x6, 0x80}, 0x400, 0x8000000000000000, 0x80000001, 0x7, 0x1, 0x6a67, 0x3ff, 0x0, 0x800, 0x0, 0x3}, 0x0, 0xe, r0, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:43:47 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e00000027f0000010000000002000000ac1414aa000000006eff39b10807b1f59b60530ca0f7ea5d7fc6f6656f17a2390bc2452a781d39f209e55821e35c247e47b7e2b1eb9f77b2eea0be9a2be2e5460f2e5fdf82657aecd92ec203bc25f55b0618cb7d0a7ca59b7e3c02d2331bfaf674e613b2089de245d641f38a2bafdfb56dd5465acff6fcc5ce5d3c6d111edf9d630ed24908de742a252707f6"], 0x18) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:43:47 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x401070c9, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) [ 1928.435539] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:44:08 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 37) 11:44:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r2, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:08 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x40101283, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:44:08 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x401070ca, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:44:08 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c09, r0) 11:44:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:08 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000000400)='net/mcfilter\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000005c0)=ANY=[@ANYBLOB="a7000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa522000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000089450000000000000000017200000000000000ff0700"/247]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf25020000000900030073797a310080008cac60f1e2ad00010073797a31000000004d198077dc812834c1c6b0f8fd69b1140002006c6f000000000000000000004ab8194c000000000000000000000000000000001edb7d8b4d90f16175d9baa8c426aea33f7374bc6a28bd2c13001ec43e52e6ce1271b92b6e79eb54da9c5c4c7706b04128e146adb2b85abaab2b7a60897cdcf36c78cd37aa9d6fbc7fbcfedd1d15f1f968669bb987"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4080) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) r5 = syz_io_uring_setup(0x3ca3, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r2, &(0x7f0000000440)={0x4000, 0x2}, &(0x7f0000000480)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0x6) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xb6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:44:08 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/workqueue', 0x2c280, 0x0) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000240)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r5, 0x5395, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) [ 1950.205504] FAULT_INJECTION: forcing a failure. [ 1950.205504] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.207290] CPU: 1 PID: 11467 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1950.208195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1950.209304] Call Trace: [ 1950.209689] dump_stack+0x107/0x167 [ 1950.210214] should_fail.cold+0x5/0xa [ 1950.210757] ? create_object.isra.0+0x3a/0xa20 [ 1950.211420] should_failslab+0x5/0x20 [ 1950.211971] kmem_cache_alloc+0x5b/0x310 [ 1950.212562] create_object.isra.0+0x3a/0xa20 [ 1950.213121] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1950.213774] __kmalloc+0x16e/0x390 [ 1950.214275] p9_fcall_init+0x97/0x290 [ 1950.214837] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1950.215548] p9_client_rpc+0x220/0x1370 [ 1950.216043] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1950.216673] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1950.217471] ? pipe_poll+0x21b/0x7f0 [ 1950.218014] ? p9_fd_close+0x4a0/0x4a0 [ 1950.218586] ? anon_pipe_buf_release+0x280/0x280 [ 1950.219284] ? p9_fd_poll+0x1e0/0x2c0 [ 1950.219861] ? p9_fd_create+0x357/0x4a0 [ 1950.220425] ? p9_conn_create+0x510/0x510 [ 1950.221032] ? p9_client_create+0x798/0x1230 [ 1950.221676] ? kfree+0xd7/0x340 [ 1950.222145] ? do_raw_spin_unlock+0x4f/0x220 [ 1950.222790] p9_client_create+0xa76/0x1230 [ 1950.223409] ? p9_client_flush+0x430/0x430 [ 1950.223970] ? trace_hardirqs_on+0x5b/0x180 [ 1950.224469] ? lockdep_init_map_type+0x2c7/0x780 [ 1950.225118] ? __raw_spin_lock_init+0x36/0x110 [ 1950.225777] v9fs_session_init+0x1dd/0x1680 [ 1950.226422] ? lock_release+0x680/0x680 [ 1950.227000] ? kmem_cache_alloc_trace+0x151/0x320 [ 1950.227697] ? v9fs_show_options+0x690/0x690 [ 1950.228230] ? trace_hardirqs_on+0x5b/0x180 [ 1950.228734] ? kasan_unpoison_shadow+0x33/0x50 [ 1950.229279] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1950.229904] v9fs_mount+0x79/0x8f0 [ 1950.230329] ? v9fs_write_inode+0x60/0x60 [ 1950.230838] legacy_get_tree+0x105/0x220 [ 1950.231303] vfs_get_tree+0x8e/0x300 [ 1950.231748] path_mount+0x1429/0x2120 [ 1950.232201] ? strncpy_from_user+0x9e/0x470 [ 1950.232718] ? finish_automount+0xa90/0xa90 [ 1950.233219] ? getname_flags.part.0+0x1dd/0x4f0 [ 1950.233762] ? _copy_from_user+0xfb/0x1b0 [ 1950.234262] __x64_sys_mount+0x282/0x300 [ 1950.234743] ? copy_mnt_ns+0xa00/0xa00 [ 1950.235190] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1950.235790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1950.236394] do_syscall_64+0x33/0x40 [ 1950.236827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1950.237432] RIP: 0033:0x7f7d78bdfb19 [ 1950.237870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1950.240023] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1950.240932] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 1950.241760] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1950.242575] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 1950.243411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1950.244226] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:44:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r2, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:08 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c09, r0) 11:44:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:09 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x40101286, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:44:09 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r6, &(0x7f0000000300)=""/15, 0xf) 11:44:09 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x401070cd, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:44:09 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='mountstats\x00', &(0x7f0000000200)='&\'.%.]\'\xb6F)*$!(&\x00'], &(0x7f0000000540)=[&(0x7f0000000400)='[/!-\x87 {.\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='@(,),:\\]{&#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00'], 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0xbd07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:44:09 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x4c09, 0xffffffffffffffff) [ 1950.502548] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:44:22 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x401870c8, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:44:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x3) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r3 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r0, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:44:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x40101288, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:44:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:22 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 38) 11:44:22 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x4c09, 0xffffffffffffffff) 11:44:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x81, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:44:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 1963.493256] FAULT_INJECTION: forcing a failure. [ 1963.493256] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.496256] CPU: 0 PID: 11534 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1963.497805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1963.499772] Call Trace: [ 1963.500397] dump_stack+0x107/0x167 [ 1963.501234] should_fail.cold+0x5/0xa [ 1963.502041] ? p9_fcall_init+0x97/0x290 [ 1963.502875] should_failslab+0x5/0x20 [ 1963.503760] __kmalloc+0x72/0x390 [ 1963.504590] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1963.505792] p9_fcall_init+0x97/0x290 [ 1963.506723] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1963.507939] p9_client_rpc+0x220/0x1370 [ 1963.508807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.509938] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1963.511076] ? pipe_poll+0x21b/0x7f0 [ 1963.511960] ? p9_fd_close+0x4a0/0x4a0 [ 1963.512869] ? anon_pipe_buf_release+0x280/0x280 [ 1963.513892] ? p9_fd_poll+0x1e0/0x2c0 [ 1963.514709] ? p9_fd_create+0x357/0x4a0 [ 1963.515602] ? p9_conn_create+0x510/0x510 [ 1963.516569] ? p9_client_create+0x798/0x1230 [ 1963.517543] ? kfree+0xd7/0x340 [ 1963.518264] ? do_raw_spin_unlock+0x4f/0x220 [ 1963.519308] p9_client_create+0xa76/0x1230 [ 1963.520285] ? p9_client_flush+0x430/0x430 [ 1963.521170] ? trace_hardirqs_on+0x5b/0x180 [ 1963.522084] ? lockdep_init_map_type+0x2c7/0x780 [ 1963.523204] ? __raw_spin_lock_init+0x36/0x110 [ 1963.524267] v9fs_session_init+0x1dd/0x1680 [ 1963.525179] ? lock_release+0x680/0x680 [ 1963.526022] ? kmem_cache_alloc_trace+0x151/0x320 [ 1963.527029] ? v9fs_show_options+0x690/0x690 [ 1963.528072] ? trace_hardirqs_on+0x5b/0x180 [ 1963.529085] ? kasan_unpoison_shadow+0x33/0x50 [ 1963.530046] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1963.531118] v9fs_mount+0x79/0x8f0 [ 1963.531953] ? v9fs_write_inode+0x60/0x60 [ 1963.532925] legacy_get_tree+0x105/0x220 [ 1963.533789] vfs_get_tree+0x8e/0x300 [ 1963.534637] path_mount+0x1429/0x2120 [ 1963.535538] ? strncpy_from_user+0x9e/0x470 [ 1963.536542] ? finish_automount+0xa90/0xa90 [ 1963.537557] ? getname_flags.part.0+0x1dd/0x4f0 [ 1963.538657] ? _copy_from_user+0xfb/0x1b0 [ 1963.539632] __x64_sys_mount+0x282/0x300 [ 1963.540526] ? copy_mnt_ns+0xa00/0xa00 [ 1963.541340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.542447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1963.543595] do_syscall_64+0x33/0x40 [ 1963.544463] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1963.545609] RIP: 0033:0x7f7d78bdfb19 [ 1963.546395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.550492] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1963.552222] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 1963.553819] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1963.555476] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 1963.557056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1963.558575] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:44:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x4c09, 0xffffffffffffffff) 11:44:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1, 0x6, 0xd7, 0x7, 0x0, 0x8, 0x40000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x48320, 0x24000, 0x5, 0xa, 0x1, 0x1f, 0x1f, 0x0, 0x800, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x3) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:44:22 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x401870cb, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:44:22 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 39) [ 1963.671377] FAULT_INJECTION: forcing a failure. [ 1963.671377] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.673993] CPU: 0 PID: 11569 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1963.675481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1963.677254] Call Trace: [ 1963.677815] dump_stack+0x107/0x167 [ 1963.678600] should_fail.cold+0x5/0xa [ 1963.679400] ? create_object.isra.0+0x3a/0xa20 [ 1963.680372] should_failslab+0x5/0x20 [ 1963.681186] kmem_cache_alloc+0x5b/0x310 [ 1963.682061] create_object.isra.0+0x3a/0xa20 [ 1963.682981] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1963.684060] __kmalloc+0x16e/0x390 [ 1963.684818] p9_fcall_init+0x97/0x290 [ 1963.685629] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1963.686699] p9_client_rpc+0x220/0x1370 [ 1963.687552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.688670] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1963.689787] ? pipe_poll+0x21b/0x7f0 [ 1963.690583] ? p9_fd_close+0x4a0/0x4a0 [ 1963.691403] ? anon_pipe_buf_release+0x280/0x280 [ 1963.692390] ? p9_fd_poll+0x1e0/0x2c0 [ 1963.693199] ? p9_fd_create+0x357/0x4a0 [ 1963.694041] ? p9_conn_create+0x510/0x510 [ 1963.694906] ? p9_client_create+0x798/0x1230 [ 1963.695834] ? kfree+0xd7/0x340 [ 1963.696521] ? do_raw_spin_unlock+0x4f/0x220 [ 1963.697455] p9_client_create+0xa76/0x1230 [ 1963.698368] ? p9_client_flush+0x430/0x430 [ 1963.699259] ? trace_hardirqs_on+0x5b/0x180 [ 1963.700169] ? lockdep_init_map_type+0x2c7/0x780 [ 1963.701164] ? __raw_spin_lock_init+0x36/0x110 [ 1963.702128] v9fs_session_init+0x1dd/0x1680 [ 1963.703045] ? lock_release+0x680/0x680 [ 1963.703877] ? kmem_cache_alloc_trace+0x151/0x320 [ 1963.704882] ? v9fs_show_options+0x690/0x690 [ 1963.705814] ? trace_hardirqs_on+0x5b/0x180 [ 1963.706726] ? kasan_unpoison_shadow+0x33/0x50 [ 1963.707680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1963.708752] v9fs_mount+0x79/0x8f0 [ 1963.709493] ? v9fs_write_inode+0x60/0x60 [ 1963.710368] legacy_get_tree+0x105/0x220 [ 1963.711218] vfs_get_tree+0x8e/0x300 [ 1963.711988] path_mount+0x1429/0x2120 [ 1963.712788] ? strncpy_from_user+0x9e/0x470 [ 1963.713681] ? finish_automount+0xa90/0xa90 [ 1963.714587] ? getname_flags.part.0+0x1dd/0x4f0 [ 1963.715564] ? _copy_from_user+0xfb/0x1b0 [ 1963.716442] __x64_sys_mount+0x282/0x300 [ 1963.717297] ? copy_mnt_ns+0xa00/0xa00 [ 1963.718136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.719252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1963.720344] do_syscall_64+0x33/0x40 [ 1963.721135] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1963.722224] RIP: 0033:0x7f7d78bdfb19 [ 1963.723008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.726897] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1963.728494] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 1963.730028] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1963.731517] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 1963.733001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1963.734508] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:44:36 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 40) 11:44:36 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x4c09, 0xffffffffffffffff) 11:44:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:36 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x401070c9, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:44:36 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x401870cc, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:44:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/235]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:44:36 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000240)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r5, 0x5395, &(0x7f00000000c0)) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:44:36 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x4c09, 0xffffffffffffffff) 11:44:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 1978.288023] FAULT_INJECTION: forcing a failure. [ 1978.288023] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.290994] CPU: 1 PID: 11593 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1978.292578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1978.294469] Call Trace: [ 1978.295068] dump_stack+0x107/0x167 [ 1978.295892] should_fail.cold+0x5/0xa [ 1978.296754] ? create_object.isra.0+0x3a/0xa20 [ 1978.297788] should_failslab+0x5/0x20 [ 1978.298674] kmem_cache_alloc+0x5b/0x310 [ 1978.299598] create_object.isra.0+0x3a/0xa20 [ 1978.300589] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1978.301714] __kmalloc+0x16e/0x390 [ 1978.302523] p9_fcall_init+0x97/0x290 [ 1978.303395] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1978.304538] p9_client_rpc+0x220/0x1370 [ 1978.305394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1978.306612] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1978.307822] ? pipe_poll+0x21b/0x7f0 [ 1978.308647] ? p9_fd_close+0x4a0/0x4a0 11:44:37 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x4c09, 0xffffffffffffffff) [ 1978.309491] ? anon_pipe_buf_release+0x280/0x280 [ 1978.310808] ? p9_fd_poll+0x1e0/0x2c0 [ 1978.311677] ? p9_fd_create+0x357/0x4a0 [ 1978.312571] ? p9_conn_create+0x510/0x510 [ 1978.313509] ? p9_client_create+0x798/0x1230 [ 1978.314534] ? kfree+0xd7/0x340 [ 1978.315224] ? do_raw_spin_unlock+0x4f/0x220 [ 1978.316223] p9_client_create+0xa76/0x1230 [ 1978.317186] ? p9_client_flush+0x430/0x430 [ 1978.318141] ? trace_hardirqs_on+0x5b/0x180 [ 1978.319091] ? lockdep_init_map_type+0x2c7/0x780 [ 1978.320164] ? __raw_spin_lock_init+0x36/0x110 [ 1978.321214] v9fs_session_init+0x1dd/0x1680 [ 1978.322195] ? lock_release+0x680/0x680 [ 1978.323109] ? kmem_cache_alloc_trace+0x151/0x320 [ 1978.324205] ? v9fs_show_options+0x690/0x690 [ 1978.325230] ? trace_hardirqs_on+0x5b/0x180 [ 1978.326178] ? kasan_unpoison_shadow+0x33/0x50 [ 1978.327264] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1978.328440] v9fs_mount+0x79/0x8f0 [ 1978.329207] ? v9fs_write_inode+0x60/0x60 [ 1978.330166] legacy_get_tree+0x105/0x220 [ 1978.331162] vfs_get_tree+0x8e/0x300 [ 1978.332030] path_mount+0x1429/0x2120 [ 1978.332910] ? strncpy_from_user+0x9e/0x470 11:44:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 1978.333898] ? finish_automount+0xa90/0xa90 [ 1978.335094] ? getname_flags.part.0+0x1dd/0x4f0 [ 1978.336142] ? _copy_from_user+0xfb/0x1b0 [ 1978.337103] __x64_sys_mount+0x282/0x300 [ 1978.337977] ? copy_mnt_ns+0xa00/0xa00 [ 1978.338878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1978.340081] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1978.341257] do_syscall_64+0x33/0x40 [ 1978.342047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1978.343227] RIP: 0033:0x7f7d78bdfb19 [ 1978.344107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1978.348375] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1978.350101] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 1978.351755] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 1978.353301] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 11:44:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x1, 0x0, 0x21, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x5, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x1, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000fffffdfd0241ca000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f060000006be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400000000000000000000000000000000000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f36af196a1ad02393f1ca3c980fca14f3d11034f5f7cb3c2a0b07c91a1e84ff6682041a8eec1164c2417f81b76018301c0e1943cddc7db2bbd1f78f1aa5d6a05ea50300204818a40cdf08010cf933b80103480dc59397c97ded5ceacafae8258ef1db97dfdab98ef9a070b6d4965dafc349fc0c6d17f361705c16272e381ac2a60d0ab6369aa5b77fada6cada740bcbdb7ed2e3cb75933c4a2ae1cd175ca5df92bdb9ad39a9551a7471c9f9ce3aaa1fd0bd8287daeaaf61cf5fd64747624fe7bed75a44a01f3057154fe7fb6626583a9d2558cc105fd2bd2dc9bd"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) [ 1978.354983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1978.356820] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 1978.359157] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:44:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:37 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4020940d, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:44:37 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1000}, 0x20, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) r6 = getpid() sendmsg$nl_generic(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, 0x34, 0x4, 0x70bd27, 0x25dfdbfb, {0xa}, [@generic="52cd3d866b75d1f35a", @typed={0x8, 0x1b, 0x0, 0x0, @pid=r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) [ 1978.486029] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:44:51 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 41) 11:44:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:51 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x80041284, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:44:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0xfff, 0xea, 0xc1f9e6f, 0x9}, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa5220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:44:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c09, 0xffffffffffffffff) 11:44:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x401070ca, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:44:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f94153ba6aa4582, @perf_config_ext={0x8000, 0x576}, 0x800, 0x0, 0x662, 0x0, 0x1000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x5) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, &(0x7f00000002c0)=0x1c, 0x80000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000001c0)=0xc) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f00000000c0)) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$CDROMPLAYBLK(r3, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:44:51 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c09, 0xffffffffffffffff) [ 1992.866293] FAULT_INJECTION: forcing a failure. [ 1992.866293] name failslab, interval 1, probability 0, space 0, times 0 [ 1992.869015] CPU: 0 PID: 11654 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 1992.870418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1992.872142] Call Trace: [ 1992.872683] dump_stack+0x107/0x167 [ 1992.873423] should_fail.cold+0x5/0xa [ 1992.874195] ? create_object.isra.0+0x3a/0xa20 [ 1992.875137] should_failslab+0x5/0x20 [ 1992.875922] kmem_cache_alloc+0x5b/0x310 [ 1992.876754] create_object.isra.0+0x3a/0xa20 [ 1992.877646] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1992.878687] kmem_cache_alloc+0x159/0x310 [ 1992.879571] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1992.880703] idr_get_free+0x4b5/0x8f0 [ 1992.881487] idr_alloc_u32+0x170/0x2d0 [ 1992.882280] ? __fprop_inc_percpu_max+0x130/0x130 [ 1992.883264] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1992.884351] ? lock_release+0x680/0x680 [ 1992.885152] idr_alloc+0xc2/0x130 [ 1992.885850] ? idr_alloc_u32+0x2d0/0x2d0 [ 1992.886673] ? rwlock_bug.part.0+0x90/0x90 [ 1992.887554] p9_client_prepare_req.part.0+0x612/0xac0 [ 1992.888596] ? p9_client_rpc+0x204/0x1370 [ 1992.889438] p9_client_rpc+0x220/0x1370 [ 1992.890237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1992.891322] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1992.892403] ? pipe_poll+0x21b/0x7f0 [ 1992.893158] ? p9_fd_close+0x4a0/0x4a0 [ 1992.893949] ? anon_pipe_buf_release+0x280/0x280 [ 1992.894914] ? p9_fd_poll+0x1e0/0x2c0 [ 1992.895692] ? p9_fd_create+0x357/0x4a0 [ 1992.896514] ? p9_conn_create+0x510/0x510 [ 1992.897347] ? p9_client_create+0x798/0x1230 [ 1992.898243] ? kfree+0xd7/0x340 [ 1992.898912] ? do_raw_spin_unlock+0x4f/0x220 [ 1992.899809] p9_client_create+0xa76/0x1230 [ 1992.900678] ? p9_client_flush+0x430/0x430 [ 1992.901528] ? trace_hardirqs_on+0x5b/0x180 [ 1992.902403] ? lockdep_init_map_type+0x2c7/0x780 [ 1992.903375] ? __raw_spin_lock_init+0x36/0x110 [ 1992.904311] v9fs_session_init+0x1dd/0x1680 [ 1992.905190] ? kmem_cache_alloc_trace+0x151/0x320 [ 1992.906165] ? v9fs_show_options+0x690/0x690 [ 1992.907069] ? trace_hardirqs_on+0x5b/0x180 [ 1992.907935] ? kasan_unpoison_shadow+0x33/0x50 [ 1992.908859] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1992.909889] v9fs_mount+0x79/0x8f0 [ 1992.910611] ? v9fs_write_inode+0x60/0x60 [ 1992.911467] legacy_get_tree+0x105/0x220 [ 1992.912290] vfs_get_tree+0x8e/0x300 [ 1992.913046] path_mount+0x1429/0x2120 [ 1992.913820] ? strncpy_from_user+0x9e/0x470 [ 1992.914718] ? finish_automount+0xa90/0xa90 [ 1992.915597] ? getname_flags.part.0+0x1dd/0x4f0 [ 1992.916536] ? _copy_from_user+0xfb/0x1b0 [ 1992.917415] __x64_sys_mount+0x282/0x300 [ 1992.918230] ? copy_mnt_ns+0xa00/0xa00 [ 1992.919026] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1992.920083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1992.921140] do_syscall_64+0x33/0x40 [ 1992.921887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1992.922952] RIP: 0033:0x7f7d78bdfb19 [ 1992.923705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1992.927422] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1992.928947] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 1992.930396] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 11:44:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa522000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb58dd0e9e2b6a1a53de429651dbbe16000000000000000000000000000000f1000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000005c0)=""/78, 0x4e}], 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) [ 1992.931836] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 1992.933451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1992.935331] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:44:51 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c09, 0xffffffffffffffff) 11:44:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x401070cd, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:44:51 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x80041285, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:44:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d75d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b93ce2d79daea2f862f1b55b37ee8d399ddfff1823a5184fb0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e0000000079a6b4e0325afb5c8cf2a50ef2a5dc19da1526a05aea6f0122e5d0c2e464e28662d369726e53789661c24685e0e84d42546f6e8888897770d1b7286bb6a4e8e0796bc771e3b587f29a3f4deadcc888fc5dc0f8eb0ce8d0ef2a5699f5f235a168eb84c4c5b05d1bd14406b9cd00954fa4aaaaa4818d3dbf5403cedf4533616cb4d6315bccd045dc7bf1b6a043ac1e499bbc004d3ff54ffbbfb2d3e90ef2cccdc18fccbdf381a3318dde1827516fe2901e02aa799af115fcaf"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:44:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0xf258, 0x2400) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) [ 1993.159091] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:45:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x401870c8, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:45:05 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 42) 11:45:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:05 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x80081270, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:45:05 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000500)='\x00u~\\\xf2\xef\xa2Q\xa0\xd3\xe6\x11*4=\x8f\x16\x17\x93\xd9\xab\x02\x89\x00\xd8\xfa\x1f\x82\xd5j\x03y\x8a#\x03}8!\xa6\x11\xa7^2\xdf_\xf0\\\n\x00T\x86A\x85T\xa8|\x92\x9d\xf1^;)s\xb12\xb7\x8cO\xdaz\xd75\xbc7\x83[\x9dt\xa7\x1b\xd1\x99\x81\x19\xc0\x88H\xcd\xe1\x94\x92\x9e\xf7\x8f\xb0H\x1b\a\x9c\x1c\x01\xc3J\x19\xa9\x18\xbb\xbdU\xe8\xc7kO\x9b|\xa0\x94\x1b\xec\f\xe9\x16C\xc2\xf8\rPG\x91f\x83\xf5\x87\x8c\xea\xb7Yf,\x93>-T\xb4s\xe0z\xadVwF\ae\x98\x82\x9b\xe3\x85\x90\x9e\x97\tG\xbd\xc7\xfd\xe5\xfcY\xe9O\v\xa9z\ba\x03\xc14\x86\f\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1b\x97\xdb\x1d\xdb\xa7Y\x03\xb33\x99\xd1m9\x85q76\xe75(s\xb6\xc7\x9e\x98T\xf7\xf4^\x1a*\x0e=\x10\x1f\x1ar\xa0F4d\xab\x02\a\x9c\x7f\xb7S\x95\"\xe9\x9b{\x8eiv\x86\xb4#\x01\xe2\x92\x8a\xd4\v\xb0B\xd8\x1f\x17\x82I\xcd\xb1\xb5m\x94o\xde\'-L', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$AUDIT_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x3e8, 0x200, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:45:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:05 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c09, 0xffffffffffffffff) 11:45:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) write$P9_RREAD(r1, &(0x7f0000000000)={0x14, 0x75, 0x1, {0x9, "186de88c817cfc056f"}}, 0x14) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, 0x0) finit_module(r3, &(0x7f0000000180)='-\x00', 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x410800, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) [ 2007.283342] FAULT_INJECTION: forcing a failure. [ 2007.283342] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.284687] CPU: 1 PID: 11713 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2007.285515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.286478] Call Trace: [ 2007.286792] dump_stack+0x107/0x167 [ 2007.287218] should_fail.cold+0x5/0xa [ 2007.287681] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2007.288350] should_failslab+0x5/0x20 [ 2007.288804] kmem_cache_alloc+0x5b/0x310 [ 2007.289292] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2007.289959] idr_get_free+0x4b5/0x8f0 [ 2007.290407] idr_alloc_u32+0x170/0x2d0 [ 2007.290879] ? __fprop_inc_percpu_max+0x130/0x130 [ 2007.291433] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2007.292063] ? lock_release+0x680/0x680 [ 2007.292528] idr_alloc+0xc2/0x130 [ 2007.292937] ? idr_alloc_u32+0x2d0/0x2d0 [ 2007.293407] ? rwlock_bug.part.0+0x90/0x90 [ 2007.293895] p9_client_prepare_req.part.0+0x612/0xac0 [ 2007.294482] p9_client_rpc+0x220/0x1370 [ 2007.294938] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.295545] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2007.296153] ? pipe_poll+0x21b/0x7f0 [ 2007.296571] ? p9_fd_close+0x4a0/0x4a0 [ 2007.297037] ? anon_pipe_buf_release+0x280/0x280 [ 2007.297567] ? p9_fd_poll+0x1e0/0x2c0 [ 2007.298008] ? p9_fd_create+0x357/0x4a0 [ 2007.298472] ? p9_conn_create+0x510/0x510 [ 2007.298939] ? p9_client_create+0x798/0x1230 [ 2007.299434] ? kfree+0xd7/0x340 [ 2007.299805] ? do_raw_spin_unlock+0x4f/0x220 [ 2007.300301] p9_client_create+0xa76/0x1230 [ 2007.300785] ? p9_client_flush+0x430/0x430 [ 2007.301257] ? trace_hardirqs_on+0x5b/0x180 [ 2007.301746] ? lockdep_init_map_type+0x2c7/0x780 [ 2007.302273] ? __raw_spin_lock_init+0x36/0x110 [ 2007.302786] v9fs_session_init+0x1dd/0x1680 [ 2007.303270] ? lock_release+0x680/0x680 [ 2007.303751] ? kmem_cache_alloc_trace+0x151/0x320 [ 2007.304294] ? v9fs_show_options+0x690/0x690 [ 2007.304812] ? trace_hardirqs_on+0x5b/0x180 [ 2007.305302] ? kasan_unpoison_shadow+0x33/0x50 [ 2007.305838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2007.306418] v9fs_mount+0x79/0x8f0 [ 2007.306852] ? v9fs_write_inode+0x60/0x60 [ 2007.307320] legacy_get_tree+0x105/0x220 [ 2007.307810] vfs_get_tree+0x8e/0x300 [ 2007.308231] path_mount+0x1429/0x2120 [ 2007.308662] ? strncpy_from_user+0x9e/0x470 [ 2007.309148] ? finish_automount+0xa90/0xa90 [ 2007.309640] ? getname_flags.part.0+0x1dd/0x4f0 [ 2007.310161] ? _copy_from_user+0xfb/0x1b0 [ 2007.310628] __x64_sys_mount+0x282/0x300 [ 2007.311085] ? copy_mnt_ns+0xa00/0xa00 [ 2007.311534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.312127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.312704] do_syscall_64+0x33/0x40 [ 2007.313123] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.313699] RIP: 0033:0x7f7d78bdfb19 [ 2007.314132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.316194] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2007.317051] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2007.317854] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2007.318650] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2007.319456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2007.320269] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:45:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2007.379773] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:45:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0xfff, 0xea, 0xc1f9e6f, 0x9}, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa5220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:45:06 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x80081272, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:45:06 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x401870cb, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:45:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0xfff, 0xea, 0xc1f9e6f, 0x9}, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa5220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:45:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d03, &(0x7f0000000300)={0x0, 0x7d9b, 0x10, 0x3, 0x24c, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000180)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/242]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:45:06 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x80086601, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:45:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:45:06 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 43) 11:45:06 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x401870cc, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:45:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2007.573378] FAULT_INJECTION: forcing a failure. [ 2007.573378] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.574858] CPU: 1 PID: 11767 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2007.575860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.577048] Call Trace: [ 2007.577371] dump_stack+0x107/0x167 [ 2007.577938] should_fail.cold+0x5/0xa [ 2007.578534] ? create_object.isra.0+0x3a/0xa20 [ 2007.579207] should_failslab+0x5/0x20 [ 2007.579770] kmem_cache_alloc+0x5b/0x310 [ 2007.580347] create_object.isra.0+0x3a/0xa20 [ 2007.580979] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2007.581715] kmem_cache_alloc+0x159/0x310 [ 2007.582306] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2007.583108] idr_get_free+0x4b5/0x8f0 [ 2007.583657] idr_alloc_u32+0x170/0x2d0 [ 2007.584209] ? __fprop_inc_percpu_max+0x130/0x130 [ 2007.584887] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2007.585640] ? lock_release+0x680/0x680 [ 2007.586212] idr_alloc+0xc2/0x130 [ 2007.586699] ? idr_alloc_u32+0x2d0/0x2d0 [ 2007.587261] ? rwlock_bug.part.0+0x90/0x90 [ 2007.587872] p9_client_prepare_req.part.0+0x612/0xac0 [ 2007.588619] p9_client_rpc+0x220/0x1370 [ 2007.589177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.589919] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2007.590673] ? pipe_poll+0x21b/0x7f0 [ 2007.591190] ? p9_fd_close+0x4a0/0x4a0 [ 2007.591739] ? anon_pipe_buf_release+0x280/0x280 [ 2007.592401] ? p9_fd_poll+0x1e0/0x2c0 [ 2007.592946] ? p9_fd_create+0x357/0x4a0 [ 2007.593507] ? p9_conn_create+0x510/0x510 [ 2007.594091] ? p9_client_create+0x798/0x1230 [ 2007.594707] ? kfree+0xd7/0x340 [ 2007.595163] ? do_raw_spin_unlock+0x4f/0x220 [ 2007.595793] p9_client_create+0xa76/0x1230 [ 2007.596396] ? p9_client_flush+0x430/0x430 [ 2007.596987] ? trace_hardirqs_on+0x5b/0x180 [ 2007.597599] ? lockdep_init_map_type+0x2c7/0x780 [ 2007.598259] ? __raw_spin_lock_init+0x36/0x110 [ 2007.598914] v9fs_session_init+0x1dd/0x1680 [ 2007.599520] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2007.600112] ? trace_hardirqs_on+0x5b/0x180 [ 2007.600623] ? v9fs_show_options+0x690/0x690 [ 2007.601120] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 2007.601677] ? kasan_unpoison_shadow+0x33/0x50 [ 2007.602210] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2007.602778] v9fs_mount+0x79/0x8f0 [ 2007.603171] ? v9fs_write_inode+0x60/0x60 [ 2007.603641] legacy_get_tree+0x105/0x220 [ 2007.604088] vfs_get_tree+0x8e/0x300 [ 2007.604497] path_mount+0x1429/0x2120 [ 2007.604920] ? strncpy_from_user+0x9e/0x470 [ 2007.605394] ? finish_automount+0xa90/0xa90 [ 2007.605905] ? getname_flags.part.0+0x1dd/0x4f0 [ 2007.606421] ? _copy_from_user+0xfb/0x1b0 [ 2007.606884] __x64_sys_mount+0x282/0x300 [ 2007.607336] ? copy_mnt_ns+0xa00/0xa00 [ 2007.607778] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.608354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.608926] do_syscall_64+0x33/0x40 [ 2007.609360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.609929] RIP: 0033:0x7f7d78bdfb19 [ 2007.610338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.612525] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2007.613385] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2007.614212] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2007.615045] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2007.615887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2007.616714] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:45:19 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 44) 11:45:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:19 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1d, 0x0, 0x5, 0x9, 0x0, 0x7f, 0x410, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x8}, 0x41040, 0x3, 0xff, 0x6, 0x0, 0xfffffffb, 0xd2, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xc, r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d04, &(0x7f0000000300)={0x0, 0x7cfe, 0x8, 0x5, 0x24c, 0x0, r2}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r3, 0xe49, 0x4bed, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa5220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000d1e04b1ecccd0000000000000008000000000000000000000000000400000000000000000000000000000000000000000000009412bea1b3b954cd9a5100000000000000dfe444770000000000000000000000002737ff46986dd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c86354ef36c24b086614a6a0ac99d60c9f886203ecfc109"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:45:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0xfff, 0xea, 0xc1f9e6f, 0x9}, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa5220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:45:19 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x80087601, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:45:19 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000080)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x20000000004, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) [ 2020.735274] FAULT_INJECTION: forcing a failure. [ 2020.735274] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.736608] CPU: 0 PID: 11795 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2020.737403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2020.738423] Call Trace: [ 2020.738749] dump_stack+0x107/0x167 [ 2020.739191] should_fail.cold+0x5/0xa [ 2020.739655] ? create_object.isra.0+0x3a/0xa20 [ 2020.740223] should_failslab+0x5/0x20 [ 2020.740687] kmem_cache_alloc+0x5b/0x310 [ 2020.741181] create_object.isra.0+0x3a/0xa20 [ 2020.741712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2020.742331] kmem_cache_alloc+0x159/0x310 [ 2020.742839] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2020.743514] idr_get_free+0x4b5/0x8f0 [ 2020.743986] idr_alloc_u32+0x170/0x2d0 [ 2020.744458] ? __fprop_inc_percpu_max+0x130/0x130 [ 2020.745042] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2020.745684] ? lock_release+0x680/0x680 [ 2020.746170] idr_alloc+0xc2/0x130 [ 2020.746586] ? idr_alloc_u32+0x2d0/0x2d0 [ 2020.747074] ? rwlock_bug.part.0+0x90/0x90 [ 2020.747589] p9_client_prepare_req.part.0+0x612/0xac0 [ 2020.748222] p9_client_rpc+0x220/0x1370 [ 2020.748701] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2020.749338] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2020.749981] ? pipe_poll+0x21b/0x7f0 [ 2020.750429] ? p9_fd_close+0x4a0/0x4a0 [ 2020.750893] ? anon_pipe_buf_release+0x280/0x280 [ 2020.751466] ? p9_fd_poll+0x1e0/0x2c0 [ 2020.751940] ? p9_fd_create+0x357/0x4a0 [ 2020.752428] ? p9_conn_create+0x510/0x510 [ 2020.752925] ? p9_client_create+0x798/0x1230 [ 2020.753454] ? kfree+0xd7/0x340 [ 2020.753847] ? do_raw_spin_unlock+0x4f/0x220 [ 2020.754378] p9_client_create+0xa76/0x1230 [ 2020.754895] ? p9_client_flush+0x430/0x430 [ 2020.755406] ? trace_hardirqs_on+0x5b/0x180 [ 2020.755935] ? lockdep_init_map_type+0x2c7/0x780 [ 2020.756508] ? __raw_spin_lock_init+0x36/0x110 [ 2020.757060] v9fs_session_init+0x1dd/0x1680 [ 2020.757581] ? lock_release+0x680/0x680 [ 2020.758061] ? kmem_cache_alloc_trace+0x151/0x320 [ 2020.758641] ? v9fs_show_options+0x690/0x690 [ 2020.759181] ? trace_hardirqs_on+0x5b/0x180 [ 2020.759701] ? kasan_unpoison_shadow+0x33/0x50 [ 2020.760257] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2020.760871] v9fs_mount+0x79/0x8f0 [ 2020.761299] ? v9fs_write_inode+0x60/0x60 [ 2020.761800] legacy_get_tree+0x105/0x220 [ 2020.762287] vfs_get_tree+0x8e/0x300 [ 2020.762737] path_mount+0x1429/0x2120 [ 2020.763199] ? strncpy_from_user+0x9e/0x470 [ 2020.763714] ? finish_automount+0xa90/0xa90 [ 2020.764240] ? getname_flags.part.0+0x1dd/0x4f0 [ 2020.764797] ? _copy_from_user+0xfb/0x1b0 [ 2020.765296] __x64_sys_mount+0x282/0x300 [ 2020.765781] ? copy_mnt_ns+0xa00/0xa00 [ 2020.766249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2020.766878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2020.767493] do_syscall_64+0x33/0x40 [ 2020.767948] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2020.768563] RIP: 0033:0x7f7d78bdfb19 [ 2020.769010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2020.771209] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2020.772172] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2020.773030] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2020.773882] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2020.774738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2020.775593] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:45:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4020940d, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:45:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0xfff, 0xea, 0xc1f9e6f, 0x9}, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa5220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 11:45:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:33 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 45) 11:45:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000001c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:45:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r2 = syz_io_uring_setup(0x3ca3, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, r5}}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x24010, r0, 0x10000000) r7 = syz_io_uring_setup(0x3ca3, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r10}}, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) r11 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r11, 0x8004f50e, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x69}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x1) 11:45:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0xfff, 0xea, 0xc1f9e6f, 0x9}, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa5220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/245]) 11:45:33 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0xc0045878, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:45:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x80041284, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:45:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d75d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b93ce2d79daea2f862f1b55b37ee8d399ddfff1823a5184fb0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e0000000079a6b4e0325afb5c8cf2a50ef2a5dc19da1526a05aea6f0122e5d0c2e464e28662d369726e53789661c24685e0e84d42546f6e8888897770d1b7286bb6a4e8e0796bc771e3b587f29a3f4deadcc888fc5dc0f8eb0ce8d0ef2a5699f5f235a168eb84c4c5b05d1bd14406b9cd00954fa4aaaaa4818d3dbf5403cedf4533616cb4d6315bccd045dc7bf1b6a043ac1e499bbc004d3ff54ffbbfb2d3e90ef2cccdc18fccbdf381a3318dde1827516fe2901e02aa799af115fcaf"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0xfff, 0xea, 0xc1f9e6f, 0x9}, 0x10) [ 2034.522065] FAULT_INJECTION: forcing a failure. [ 2034.522065] name failslab, interval 1, probability 0, space 0, times 0 [ 2034.524968] CPU: 1 PID: 11836 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2034.526753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2034.528911] Call Trace: [ 2034.529601] dump_stack+0x107/0x167 [ 2034.530561] should_fail.cold+0x5/0xa [ 2034.531547] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2034.533056] should_failslab+0x5/0x20 [ 2034.534037] kmem_cache_alloc+0x5b/0x310 [ 2034.535099] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2034.536552] idr_get_free+0x4b5/0x8f0 [ 2034.537562] idr_alloc_u32+0x170/0x2d0 [ 2034.538589] ? __fprop_inc_percpu_max+0x130/0x130 [ 2034.539863] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2034.540988] ? lock_release+0x680/0x680 [ 2034.542029] idr_alloc+0xc2/0x130 [ 2034.542919] ? idr_alloc_u32+0x2d0/0x2d0 [ 2034.543958] ? rwlock_bug.part.0+0x90/0x90 [ 2034.545085] p9_client_prepare_req.part.0+0x612/0xac0 [ 2034.546419] p9_client_rpc+0x220/0x1370 [ 2034.547455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2034.548861] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2034.550250] ? pipe_poll+0x21b/0x7f0 [ 2034.551203] ? p9_fd_close+0x4a0/0x4a0 [ 2034.552194] ? anon_pipe_buf_release+0x280/0x280 [ 2034.553435] ? p9_fd_poll+0x1e0/0x2c0 [ 2034.554414] ? p9_fd_create+0x357/0x4a0 [ 2034.555459] ? p9_conn_create+0x510/0x510 [ 2034.556543] ? p9_client_create+0x798/0x1230 [ 2034.557684] ? kfree+0xd7/0x340 [ 2034.558528] ? do_raw_spin_unlock+0x4f/0x220 [ 2034.559674] p9_client_create+0xa76/0x1230 [ 2034.560794] ? p9_client_flush+0x430/0x430 [ 2034.561892] ? trace_hardirqs_on+0x5b/0x180 [ 2034.563016] ? lockdep_init_map_type+0x2c7/0x780 [ 2034.564236] ? __raw_spin_lock_init+0x36/0x110 [ 2034.565425] v9fs_session_init+0x1dd/0x1680 [ 2034.566318] ? lock_release+0x680/0x680 [ 2034.567347] ? kmem_cache_alloc_trace+0x151/0x320 [ 2034.568608] ? v9fs_show_options+0x690/0x690 [ 2034.569756] ? trace_hardirqs_on+0x5b/0x180 [ 2034.570860] ? kasan_unpoison_shadow+0x33/0x50 [ 2034.572017] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2034.573354] v9fs_mount+0x79/0x8f0 [ 2034.574290] ? v9fs_write_inode+0x60/0x60 [ 2034.575364] legacy_get_tree+0x105/0x220 [ 2034.576223] vfs_get_tree+0x8e/0x300 [ 2034.577194] path_mount+0x1429/0x2120 [ 2034.577991] ? strncpy_from_user+0x9e/0x470 11:45:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) fcntl$dupfd(r1, 0x0, r1) [ 2034.579100] ? finish_automount+0xa90/0xa90 [ 2034.580215] ? getname_flags.part.0+0x1dd/0x4f0 [ 2034.581421] ? _copy_from_user+0xfb/0x1b0 [ 2034.582303] __x64_sys_mount+0x282/0x300 [ 2034.583151] ? copy_mnt_ns+0xa00/0xa00 [ 2034.583988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2034.585086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2034.586156] do_syscall_64+0x33/0x40 [ 2034.586938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2034.588021] RIP: 0033:0x7f7d78bdfb19 11:45:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) r5 = dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1b4, 0x23, 0x4, 0x70bd29, 0x25dfdbfd, {0x10}, [@typed={0x8, 0x1a, 0x0, 0x0, @pid}, @nested={0x197, 0x1, 0x0, 0x1, [@typed={0x8, 0x62, 0x0, 0x0, @u32=0x6ff2}, @generic="b2bd40e26a2b7c9bf6daff60dfbc1d62d52fb2b57b983e4b41e1f0bc0ad4cf35f2ca3793e49a6fd92e2adcefd6", @generic="f8a393a6126c94fb8b5a0bac5e3dcb6664f16781cdbc96761c87a53b0292cc586c7713344b1aa25dc32ae11a0166e110", @generic="4f3b0234bb9d5c3d10595f9b960ec4f40bcbbee3f73a6983fc6ab026c8e0d79761cd6a6d6c803c513836d9df84f73e584adbacb63bd9b7b2b6a8f9731e33d0d3e456ca105f33dc4e3b087ae63322320924b7a6d504935f44bf15344b02f0ea9add0d1ff5e54559cf022ce7204fa6314508b304d0fece87df793ea2d0899b0de64f1ed57d83ba3ab78640f15c42df8f13a6fc38274f84d24ab3cb2b7cc8a7775b73619e9f633c0e9c91d8ab5804232d8222f1c37b6a9f96729430b2b6423ea0b5e3a6c59bec6d59", @generic="a4d7b935bd007c3c8880d688d46f1022aeebaaed2000fec993984d7416a76115b3a1a3833fefae5f964c4b30673a0d40be6e7262114a001c8aef4bc6da0c4bb339ae51cfa55e7528c3b70fe07dcbb8fe61c04a794237ea4720f65c2d49818406311fafc3732d1f"]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4050}, 0x4040) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f00000001c0)) ioctl$LOOP_SET_FD(r6, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) [ 2034.588810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2034.592877] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2034.594508] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2034.595987] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2034.597457] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2034.598914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2034.600387] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2034.628737] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:45:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:33 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0xc0045878, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:45:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 11:45:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x80041285, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:45:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2034.704877] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2034.836951] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2034.838078] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2034.838858] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2034.839607] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2034.840455] print_req_error: 26 callbacks suppressed [ 2034.840466] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2034.842305] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2034.843840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2034.844465] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2034.845712] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2034.846915] buffer_io_error: 6 callbacks suppressed [ 2034.846923] Buffer I/O error on dev loop0, logical block 2096896, async page read [ 2034.848816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2034.849434] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2034.850656] blk_update_request: I/O error, dev loop0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2034.851860] Buffer I/O error on dev loop0, logical block 2096897, async page read [ 2034.852841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2034.853456] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2034.854682] blk_update_request: I/O error, dev loop0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2034.855903] Buffer I/O error on dev loop0, logical block 2096898, async page read [ 2034.856870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2034.857484] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2034.859150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2034.859786] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2034.861102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2034.861854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2034.862600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2034.864714] Buffer I/O error on dev loop0, logical block 2096899, async page read [ 2034.865603] Buffer I/O error on dev loop0, logical block 2096900, async page read [ 2034.866461] Buffer I/O error on dev loop0, logical block 2096901, async page read [ 2034.867331] Buffer I/O error on dev loop0, logical block 2096902, async page read [ 2034.868205] Buffer I/O error on dev loop0, logical block 2096903, async page read 11:45:49 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0xc0101282, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:45:49 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 46) 11:45:49 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x14102, 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000180)="451012ebb7ff71722740d97d6e9fba14be99cb26e749124747751758b03d514ed8c2049cca225bcf29aec91402b58cbe3fbca55f5ff90d9e0139ba2943361226abbfaafa721136bf04e8983e7c3f891c07", 0x51) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r2, 0x3ff, 0x20064b3, 0x7}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r6, 0x10000000) 11:45:49 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000740)='\x00\xe5\xaf\xb1\"\xc2\x8d\xa4\x01\x80r\xd8\xc8]\x00\xb6\x97DC\xb81\x06\x1c\xa5W\xae>\x9fi>\x94;\xc3C\xc7Nv@\xe6\x95]b\xef\xe1\xd8\\Z\x0f\xd32\"7I\x13;\xef\xc0\xb0c\x0e\x0f\xc5\x88\x8a\xb7\xc3K\x0f\xd7\\O`\x0e^\xb2\x14\xeeS\x02jD|\b\x8dB\xd2\xc7o\tY\x0f\x14)j\x91H\x98\xa5x\xcb\xa7\xaa\xba3\xd8\xa7\x9d\\x{\r\x19I\xf6\xbe\xa1\x93\x1c#\x13(D\xddr\x01\x15\x95\x96\t\xfb\rG\xac\xac\xd9\xf9\xce\xe4\xd9\xa4\x81-\x0e\xbf\xb3\xa1\x9d\xd0\xedx5\xa5E\xaf\xd4\x8e5\x0f\xee\xf1&\x1fJ\x964\x16\x920x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000140)=r6) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x458842) ioctl$LOOP_SET_FD(r7, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f00000001c0)='/dev/loop#\x00', 0x1) 11:45:49 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:45:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x80081270, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:45:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2051.286874] audit: type=1400 audit(1734263149.992:14): avc: denied { write } for pid=11902 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 2051.299295] FAULT_INJECTION: forcing a failure. [ 2051.299295] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.302514] CPU: 1 PID: 11909 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2051.303985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2051.305703] Call Trace: [ 2051.306266] dump_stack+0x107/0x167 [ 2051.307022] should_fail.cold+0x5/0xa [ 2051.307815] ? p9pdu_readf+0xadb/0x1d40 [ 2051.308636] ? p9pdu_readf+0xadb/0x1d40 [ 2051.309472] should_failslab+0x5/0x20 [ 2051.310261] __kmalloc+0x72/0x390 [ 2051.310998] p9pdu_readf+0xadb/0x1d40 [ 2051.311788] ? pipe_poll+0x21b/0x7f0 [ 2051.312552] ? p9pdu_writef+0x100/0x100 [ 2051.313388] ? p9_fd_poll+0x1e0/0x2c0 [ 2051.314177] ? p9_fd_create+0x357/0x4a0 [ 2051.314997] ? p9_conn_create+0x510/0x510 [ 2051.315861] ? p9_client_create+0x798/0x1230 [ 2051.316770] ? kfree+0xd7/0x340 [ 2051.317465] ? do_raw_spin_unlock+0x4f/0x220 [ 2051.318374] p9_client_create+0xaee/0x1230 [ 2051.319259] ? p9_client_flush+0x430/0x430 [ 2051.320124] ? trace_hardirqs_on+0x5b/0x180 [ 2051.321037] ? lockdep_init_map_type+0x2c7/0x780 [ 2051.322018] ? __raw_spin_lock_init+0x36/0x110 [ 2051.322966] v9fs_session_init+0x1dd/0x1680 [ 2051.324070] ? lock_release+0x680/0x680 [ 2051.325000] ? kmem_cache_alloc_trace+0x151/0x320 [ 2051.326228] ? v9fs_show_options+0x690/0x690 [ 2051.327228] ? trace_hardirqs_on+0x5b/0x180 [ 2051.328334] ? kasan_unpoison_shadow+0x33/0x50 [ 2051.329283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2051.330344] v9fs_mount+0x79/0x8f0 [ 2051.331073] ? v9fs_write_inode+0x60/0x60 [ 2051.331926] legacy_get_tree+0x105/0x220 [ 2051.332761] vfs_get_tree+0x8e/0x300 [ 2051.333540] path_mount+0x1429/0x2120 [ 2051.334331] ? strncpy_from_user+0x9e/0x470 [ 2051.335213] ? finish_automount+0xa90/0xa90 [ 2051.336103] ? getname_flags.part.0+0x1dd/0x4f0 [ 2051.337064] ? _copy_from_user+0xfb/0x1b0 [ 2051.337931] __x64_sys_mount+0x282/0x300 [ 2051.338763] ? copy_mnt_ns+0xa00/0xa00 [ 2051.339565] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2051.340647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2051.341723] do_syscall_64+0x33/0x40 [ 2051.342496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2051.343539] RIP: 0033:0x7f7d78bdfb19 [ 2051.344301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2051.348068] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2051.349626] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2051.351082] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2051.352533] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2051.354010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2051.355459] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:45:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) 11:45:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:50 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0xc0189436, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:45:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x200000048) 11:45:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x80081272, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:45:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f00000011c0)="aab820656c18d2e07e2e7e05810bd6b571f9fff1f60adaa9a7a025ff18e07b262f7f1cbdc31b338c0819f4ed9e114d42dba5626268465dc63c15cf9446b33472ecfbb32bf0766aee8d53d12ce43f76600f2e413589e506e67460f1dd100c4a5573010bf64cb29c1a368353562ae7a170c5", 0x71}, {&(0x7f0000001240)="06d598186dbe518e38c94969e704274c96258213a7142c16cfeda5f43675db1b2ec8a88636c4bd3ffa63d28bf3f212bfebed22bef353161701f7b1555b369a4e9991f88fc860c30f9cf78f1ebe96ebb311f3685a50ecb522aa6a5709345c9f5f81a10ef90b6673a7033518faaf533e39f1f919142bc396ccd813476eff2d9b6ff497dac75544dad3cc0442e85b3479807ca36dc6dcbb198b235d28593ac3a6c42bfc9308819977f405c094c6c56f28227051a1e2c5f5b8e8b3dd1c96bb5132455f7662f124f7a653", 0xc8}, {&(0x7f0000001340)="a7e20eac74bf0c640978fb3b61a058631cb320cd2cd2b3d3df02ca2cba71fba6c4e34ddf382c92e2c4a110c3a8a812cdd98a5731d7e12d865bbf3c49024d39263ccc2610a09e5c7bf8c857d74d5e06d2186b7e2d8a83c257bce5dd158266124c472819eb86224b60d6bef6bf2e6acaa347dc7620ee153afef6f5627b139b3d641cb5b3d9e7146a4193ba4ac6dbd1ab352791525c821901871b9d1273c1f7dfe2dbc8ad9fc6581e20672c2ab5ff2e744b8a2035f2250a46e8743f85aa574687fc9b36cb9cc121189d32", 0xc9}, {&(0x7f0000001140)="101f0edfe97b7a0270cbd97375d206", 0xf}, {&(0x7f0000001440)="6abf3dac4f6d2ded9440f1558b643a38676fc67d8f91dd407eca3833094da9e4437bc709a7e1ae468fb9467999350d10af1c58d8417e30bd97e6c2d1b2d61a102aca0dd5d4853945a493510d80d0adc548b017bde23fd642063c8965c60fdb882339fc58a715f4f214ba8e74b42ae8139a7b01e22f8878e7fc23b70d98eb1d019379bf131eaa1d00edb0e40fb70af9c2dc725c756a4f756c2932d437b0d4", 0x9e}, {&(0x7f0000001500)="201648e86d6da0b255357a49b9a5fb3dad29af2e7cdfbcac83ae520cd9ffa51b141c2bb89ff2a79b152e30c92942ae9dd41851a4c8cd8e00a5562cea69af6300003f7c33f5de132d04dbc7559dac4ef7dd58d2d01936531aa86592c814ab08af2d9d80662e14633333c4628829a5d2f573f4994bafeecefc8e4b58c933686f51611f1abbc983d75a93f6fbc9d626bc2bb17af4a417d54621560f8b546c02115398778d51c1fbd32b5dc37deb3efa77388304d17b", 0xb4}, {&(0x7f00000015c0)="d8ac14eb8574d56d5a0f7687e604b028e3e8017e1daec3b8a5b9f44d8aec756b5506de861b0754afdc415d0f8fa448844c059bb348", 0x35}, {&(0x7f0000001600)="64b02ddfe04b7cd0d3ccb3ae3b717cf468a055a955a27b074eedd3e4fa587de3088daa6e79bf4e9b270d1572c44b06de21797a50bfcf1a3c37a44c052a5a380578337f9b584222b5fe57fb0c454c8f54fbe4fc323c2beb18eed7644deb18d37a0648ddb59c210a191223fa3e436939e9b314920cab", 0x75}, {&(0x7f0000001680)="94ae62b058a4e6563dd6beefdce94715ea4fd1d7d5492085b5d13ca13811070cef64ba760ec861dcbadb82540ce1d3c9bfced27ca6201cadb9c7e845906539eee4535c149a648c10f03d13f290c18cd447a130c97953dc65377530543ea9864576ca01a04fbfad3ddd218c0619c4452ef21c1c0accc69306336cc39c2f393304259b7f78bc281804cb351a9e8ebf61df6b0fd64e89630ab53f72850164199021", 0xa0}], 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r2 = syz_open_dev$usbmon(&(0x7f0000001100), 0xffffffffffff5400, 0x10200) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x9) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, 0x0) sendmmsg$inet6(r4, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="76ed50ca86e638096ad310f7c08f08a23b5444d61cea2580e633c9b7ddbdce33de12c7e754552387919d3058b17c6b67e4f095eda2811669bb1709d4e79df527ce81fb1d17ecfe7834879e088a5f595fe94d5cc0632eb13f2340651d2f45867af692807e4455d654a85697b1b1cb95c948a8123d541d1f8281bca15f411bd5", 0x7f}, {&(0x7f0000000400)="a31a51b40867e233a7423f0c6c2ae7ac7ce1c493e67f47593a707cffa322a6fc76c838fc7c7e3abdbb12add2a7d65077d34b0bda92b7b8df917d86fe205f4139ca6f5a70d7ec", 0x46}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000480)="aa3c76b8f5a23c87107e76fe6884514a7bbcebda0d4f4acf7f8e3d9a1a6ce279ac7d14d71273c133bc58b9b2f6d5514de23bebfa0abe6841c5fb768ddfc69888c431a9b8f3a268102114dbf39ca8d888b4e59f3ba79049a275abc3b3c2bc8b2ca30789cc1d85b95f22fc1290da28a82559c7571955757b74d8dcc4f8e763bd0246a51a7eba133bdcf9e28705", 0x8c}, {&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000640)="f63b29674cccf6e317bfde9d756ee59ec1696a14d10fc4042623fdba55b522189674f2ee0a8792fbc09c8e043d80b68cd8170670eb3f52ede8d3ba4b902b5f846201183505d34edae5e259506c931b8902296f54653122710a5b8620086cdd6d770fd9df4639e8fbd4e3644c2a03c9c2191cf4378b887fef1f2bf3ca2c72f41a4db47de233ebf83f56b335b42b9108c963be52636b90490f1af9cc6e796475bd5430e6a85bba42d480c139e942591c25d1d38089ac9881a35a871b3ece47a975b3e65990a5a66c6dd7d9e56395b4de36850e17e84833623db157f29241ac3d4e7dba03", 0xe3}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000000740)="1e4c760b08d9c470429758cffb80e89a8781127e0aada0972159397679457896965813795cf1df61739118e137bca52d77887d1ecc3b94421011080cb2dfd3a65bb9a9c9ab4ba12b624a092940fbf22bcc8cfc3166b2cda87dcba29e07245305da276060f484", 0x66}, {&(0x7f00000007c0)="fe31c426111c3a75403245475596af77c1ea84956fb29df921707355b53761fdcacc5506d13ab3fc101b71a82e491ab7ac77d4906332eae528969bc43cee35fe4196870d1bc338954ae8985d67552f1feca0baf074", 0x55}], 0x9}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x7, @remote, 0xfffff801}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000900)="0dcb541ac759f1a98c5b41a2c7672a4d5ce95b1f5ead5f3cd24b284002c77b1df403c3daa25c7701b0ec0ed4f0144592d7080b014b92f5c807defe278f9fd41b0cf6d6c2f559e29d30314267f4d479655840b3c589f47ba2cf9615fa7296626c6c96c817632a14a9fc5ba806a4c6f70e0f81d7292f612c653befd49508325e717bb38366592f91fd89e9eddfa333aa9fd833a50d86bf7f5aed4bc35f43e7", 0x9e}, {&(0x7f0000000200)="8c155bdef3fea0c2d37a2fb8d36596049639b5b80de421f1f51c54818518d3ef80a7f7e6575cf9ce082ff4cbbf6b1e7658963c28b81741c0cb", 0x39}], 0x2}}, {{&(0x7f00000009c0)={0xa, 0x4e24, 0x7, @local, 0x5}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="6cd23e574053df533c4e9b13e3a4c95df803223fba29b26c97a3052dbb716006349c00e6189ab30479615ea2c8c5bcc9b34c632347c6618b0160cec8e1f0c60fa9870abf849e76543eec8271b5ac10929baa896bdfb9a20ee6545a1d3a5c2d8a0c787397a29cc7f6317dc8d60e92b8f5e3e7d99c6cf129ec3ba9dae3e445655a708fc10c2bb50fa6eb6a700bdd9b3b8ca1957f78db46f8ae597975f5c94baf044ef3b6121007f39a7f3b5504d94eaceb851c56d8", 0xb4}], 0x1}}, {{&(0x7f0000000b00)={0xa, 0x4e24, 0x7f, @loopback, 0xfff}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b40)="689ecabba167f5ace862dd18c0a3ea1124e9f5006ee2c1743c36c11560ba8f2e933ea220bf88e76e64fb1f94929f779d2edbd8419ca8d494ac7804f45f946609cb60c7b3a8958b9d4b65e039aa9b97ac00335b2cd2e0b5b25ab1a58f02c3", 0x5e}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000000bc0)="bdf1be31fdaeeb2470b0b0a30f75c3fd77d8e015920f0c537d2708560d65f21e8d672df4d5c3fa5747a8edbcad7d5ba31dae239e6dfbfa7dd07425858e6332f57f4d0a8ee50a24682935a5adee1d010b82ce6a2f11c6203533b8e4c07b43a64455bec05d91623d7b5594b0d63dd0ac98944541a261dccb5c3ffda5fbdbafc56573a1574565e939a39d8d877d5f6286aa6023a6bb7bf22fc609ea6becfe2ebfea7da59c68e1eeb23d20301828af2a50afe31d27e3fec0fde39c844d909a85a2b3e3", 0xc1}, {&(0x7f0000000cc0)="7ace6170a8c6ba2486fb8e1d0148290bd939dbd96e58566ecad78d909bc8dc4ed85d492bd7d7be3d7c377a353f1d881bb91d7e5ffad0e0319a9f2b1d21b96ac8a722929f0bab7cb34514e3a1aae26a63b529b0246ef0e7d9935048ab335a4fe7d86256339c0b0601e91f877095b51fa92db764a4e32cb093c71333c25a18fff6e3e9261db08d0e52133b00c9dc31b91c169b1e84338cbb741ed746cc25b01ce702ea1d34582719706387d248bd23260c", 0xb0}, {&(0x7f0000000d80)="5aa96cb5b8d08e1c231262e95448e1d0bfbef01ba2eba1afeab66b8b20abd74b1add80ec384c05506904f8ecbd1a3637a673e2d1822a6b466cc208865fd1c242dde3ef589443fc1dfd80e4a9f86a1b45c1d3474b49d719e590c708269c3872d498ff21876ece44fa07b32b45877f224ade60822783641bda971261535e8e9d856206a547200c", 0x86}, {&(0x7f0000000e40)="025d5051497e79cec818eda3c6907a35a11b4876ff3f89ef0ffd2e237f5a96081b4d17c2b4c43c1a9521b229a2b247be98ef8d5f3c28b859a03306115da41eabb1bf25910c12afe84033d179a6c25c74133dd9e84416664d823eb1f6f608fcbdba9b62b6cb01c08f35e430cbeae1d4bea506c5aef60e3e9a5c617e27d656a660afea18fccfce08ce02972862362c323ad13600564f425ea133e375aa061d972e37c0fa702bd03f7450822edb564e11d3376f27fd843b6c6b5f57a24dc5d0af9b2a826518c20e3d977294c59665f094b243c2860bd5357884bf784226f89c7f58321f4e8b8671167126869fe7d155", 0xee}, {&(0x7f0000000f40)="59e7c179aee854c8cc6f26b22305573dafca354c41daa6921fcdf64b5cd0080c29404e124761155315a9", 0x2a}], 0x7}}], 0x4, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:45:50 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x12}, 0x0, 0x0, 0x662}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x145e82) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:45:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:50 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 47) 11:45:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x200000048) 11:45:50 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0xc020660b, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) [ 2051.631914] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:45:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:45:50 executing program 4: r0 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1f}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x34, 0x0, @tid=r0}, &(0x7f0000000880)=0x0) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000900)={{r2, r3+60000000}}, &(0x7f0000001940)) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000180)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r4, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) [ 2051.742811] FAULT_INJECTION: forcing a failure. [ 2051.742811] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.745485] CPU: 0 PID: 11964 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2051.746904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2051.748624] Call Trace: [ 2051.749198] dump_stack+0x107/0x167 [ 2051.749944] should_fail.cold+0x5/0xa [ 2051.750761] ? create_object.isra.0+0x3a/0xa20 [ 2051.751714] should_failslab+0x5/0x20 [ 2051.752510] kmem_cache_alloc+0x5b/0x310 [ 2051.753378] create_object.isra.0+0x3a/0xa20 [ 2051.754288] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2051.755347] __kmalloc+0x16e/0x390 [ 2051.756092] p9pdu_readf+0xadb/0x1d40 [ 2051.756873] ? pipe_poll+0x21b/0x7f0 [ 2051.757638] ? p9pdu_writef+0x100/0x100 [ 2051.758451] ? p9_fd_poll+0x1e0/0x2c0 [ 2051.759242] ? p9_fd_create+0x357/0x4a0 [ 2051.760061] ? p9_conn_create+0x510/0x510 [ 2051.760894] ? p9_client_create+0x798/0x1230 [ 2051.761797] ? kfree+0xd7/0x340 [ 2051.762464] ? do_raw_spin_unlock+0x4f/0x220 [ 2051.763363] p9_client_create+0xaee/0x1230 [ 2051.764230] ? p9_client_flush+0x430/0x430 [ 2051.765091] ? trace_hardirqs_on+0x5b/0x180 [ 2051.765988] ? lockdep_init_map_type+0x2c7/0x780 [ 2051.766952] ? __raw_spin_lock_init+0x36/0x110 [ 2051.767895] v9fs_session_init+0x1dd/0x1680 [ 2051.768770] ? lock_release+0x680/0x680 [ 2051.769602] ? kmem_cache_alloc_trace+0x151/0x320 [ 2051.770588] ? v9fs_show_options+0x690/0x690 [ 2051.771492] ? trace_hardirqs_on+0x5b/0x180 [ 2051.772366] ? kasan_unpoison_shadow+0x33/0x50 [ 2051.773303] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2051.774346] v9fs_mount+0x79/0x8f0 [ 2051.775074] ? v9fs_write_inode+0x60/0x60 [ 2051.775929] legacy_get_tree+0x105/0x220 [ 2051.776754] vfs_get_tree+0x8e/0x300 [ 2051.777533] path_mount+0x1429/0x2120 [ 2051.778319] ? strncpy_from_user+0x9e/0x470 [ 2051.779197] ? finish_automount+0xa90/0xa90 [ 2051.780062] ? getname_flags.part.0+0x1dd/0x4f0 [ 2051.781014] ? _copy_from_user+0xfb/0x1b0 [ 2051.781864] __x64_sys_mount+0x282/0x300 [ 2051.782687] ? copy_mnt_ns+0xa00/0xa00 [ 2051.783480] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2051.784541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2051.785600] do_syscall_64+0x33/0x40 [ 2051.786352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2051.787397] RIP: 0033:0x7f7d78bdfb19 [ 2051.788150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2051.791884] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2051.793463] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2051.794919] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2051.796378] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2051.797825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2051.799271] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:46:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x200000048) 11:46:03 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 48) 11:46:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) bind$packet(r0, &(0x7f0000000200)={0x11, 0x2, r1, 0x1, 0x40, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x10b4c0, 0x188) accept$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x10, 0x2, 0x24c, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x87, @multicast2, 0x4e24, 0x3, 'rr\x00', 0x28, 0xffff, 0x53}, 0x2c) 11:46:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, 0x0, 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x80086601, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:46:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:03 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0xc0481273, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:46:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) fsync(r5) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) [ 2065.149167] FAULT_INJECTION: forcing a failure. [ 2065.149167] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.151841] CPU: 1 PID: 11991 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2065.153313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2065.155084] Call Trace: [ 2065.155643] dump_stack+0x107/0x167 [ 2065.156416] should_fail.cold+0x5/0xa [ 2065.157228] ? p9pdu_readf+0xadb/0x1d40 [ 2065.158080] should_failslab+0x5/0x20 [ 2065.158882] __kmalloc+0x72/0x390 [ 2065.159623] p9pdu_readf+0xadb/0x1d40 [ 2065.160435] ? pipe_poll+0x21b/0x7f0 [ 2065.161229] ? p9pdu_writef+0x100/0x100 [ 2065.162076] ? p9_fd_poll+0x1e0/0x2c0 [ 2065.162887] ? p9_fd_create+0x357/0x4a0 [ 2065.163728] ? p9_conn_create+0x510/0x510 [ 2065.164608] ? p9_client_create+0x798/0x1230 [ 2065.165545] ? kfree+0xd7/0x340 [ 2065.166242] ? do_raw_spin_unlock+0x4f/0x220 [ 2065.167179] p9_client_create+0xaee/0x1230 [ 2065.168077] ? p9_client_flush+0x430/0x430 [ 2065.168974] ? trace_hardirqs_on+0x5b/0x180 [ 2065.169892] ? lockdep_init_map_type+0x2c7/0x780 [ 2065.170890] ? __raw_spin_lock_init+0x36/0x110 [ 2065.171860] v9fs_session_init+0x1dd/0x1680 [ 2065.172779] ? lock_release+0x680/0x680 [ 2065.173641] ? kmem_cache_alloc_trace+0x151/0x320 [ 2065.174659] ? v9fs_show_options+0x690/0x690 [ 2065.175598] ? trace_hardirqs_on+0x5b/0x180 [ 2065.176503] ? kasan_unpoison_shadow+0x33/0x50 [ 2065.177474] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2065.178549] v9fs_mount+0x79/0x8f0 11:46:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, 0x0, 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2065.179304] ? v9fs_write_inode+0x60/0x60 [ 2065.180343] legacy_get_tree+0x105/0x220 [ 2065.181222] vfs_get_tree+0x8e/0x300 [ 2065.182014] path_mount+0x1429/0x2120 [ 2065.182820] ? strncpy_from_user+0x9e/0x470 [ 2065.183725] ? finish_automount+0xa90/0xa90 [ 2065.184629] ? getname_flags.part.0+0x1dd/0x4f0 [ 2065.185610] ? _copy_from_user+0xfb/0x1b0 [ 2065.186486] __x64_sys_mount+0x282/0x300 11:46:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2065.187335] ? copy_mnt_ns+0xa00/0xa00 [ 2065.188292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2065.189430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2065.190517] do_syscall_64+0x33/0x40 [ 2065.191293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2065.192362] RIP: 0033:0x7f7d78bdfb19 [ 2065.193146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2065.196994] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2065.198595] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2065.200088] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2065.201616] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2065.203106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2065.204589] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:46:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) 11:46:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, 0x0, 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:16 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x568}, 0x1, 0x0, 0x0, 0x20000880}, 0x20040800) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:46:16 executing program 4: r0 = syz_io_uring_setup(0x3ca3, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x9, &(0x7f0000000180)={r5, r6+10000000}, 0x1, 0x0, 0x1}, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r7, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:46:16 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 49) 11:46:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x80087601, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:46:16 executing program 5: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) 11:46:16 executing program 3: memfd_create(&(0x7f0000000340)='\x00', 0x6) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000240)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f00000000c0)) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000001000000180000007042f12c7c393bf8a459a53ce96678524d601594bd308e6116ddf7f7f647f3b624f6661c1e4a520afd0b31de4092e3f8990e3770a0a48ef93b9c3c0a0000000000003e1f6b32c98ad78a79f7c399e9159fb574d32398ce5e561b00e062f4ed4aa7c5dd1a25fc4b5edda4481d5b8280a679da4ba110f55f59b0cf0f1aba63751e1ea1d784a8d019b4cd9d450d2bcc9844e3fbd401d630a50a28c9e9594423be1359ff5cd2b6ce2fc0dcf3610f7e33a67701cdb32d8f767624d4add2dcd1bb9c43376c0c3cde1f82eb93df0ea504f29b03000000c563cf601e2d535f5bf264ff50fdc7a7610000", @ANYRES32, @ANYBLOB="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"]) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$CDROMPLAYBLK(r2, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x2000) memfd_create(&(0x7f0000000140)='\x00'/11, 0x3) [ 2077.413896] FAULT_INJECTION: forcing a failure. [ 2077.413896] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.416980] CPU: 1 PID: 12030 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2077.418520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2077.420309] Call Trace: [ 2077.420883] dump_stack+0x107/0x167 [ 2077.421669] should_fail.cold+0x5/0xa [ 2077.422475] ? create_object.isra.0+0x3a/0xa20 [ 2077.423469] should_failslab+0x5/0x20 [ 2077.424291] kmem_cache_alloc+0x5b/0x310 [ 2077.425165] ? vsnprintf+0x4ba/0x1600 [ 2077.425998] create_object.isra.0+0x3a/0xa20 [ 2077.426946] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2077.428018] __kmalloc_track_caller+0x177/0x370 [ 2077.429010] ? kasprintf+0xbb/0xf0 [ 2077.429790] kvasprintf+0xb5/0x150 [ 2077.430546] ? bust_spinlocks+0xe0/0xe0 [ 2077.431412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2077.432557] kasprintf+0xbb/0xf0 [ 2077.433272] ? kvasprintf_const+0x1a0/0x1a0 [ 2077.434187] ? kmem_cache_free+0x249/0x2d0 [ 2077.435083] ? p9_client_create+0xbfa/0x1230 [ 2077.436013] p9_client_create+0xc1b/0x1230 [ 2077.436926] ? p9_client_flush+0x430/0x430 [ 2077.437814] ? trace_hardirqs_on+0x5b/0x180 [ 2077.438733] ? lockdep_init_map_type+0x2c7/0x780 [ 2077.439735] ? __raw_spin_lock_init+0x36/0x110 [ 2077.440722] v9fs_session_init+0x1dd/0x1680 [ 2077.441624] ? lock_release+0x680/0x680 [ 2077.442477] ? kmem_cache_alloc_trace+0x151/0x320 [ 2077.443487] ? v9fs_show_options+0x690/0x690 [ 2077.444418] ? trace_hardirqs_on+0x5b/0x180 [ 2077.445319] ? kasan_unpoison_shadow+0x33/0x50 [ 2077.446281] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2077.447357] v9fs_mount+0x79/0x8f0 [ 2077.448104] ? v9fs_write_inode+0x60/0x60 [ 2077.448984] legacy_get_tree+0x105/0x220 [ 2077.449842] vfs_get_tree+0x8e/0x300 [ 2077.450638] path_mount+0x1429/0x2120 [ 2077.451438] ? strncpy_from_user+0x9e/0x470 [ 2077.452343] ? finish_automount+0xa90/0xa90 [ 2077.453257] ? getname_flags.part.0+0x1dd/0x4f0 [ 2077.454266] ? _copy_from_user+0xfb/0x1b0 [ 2077.455141] __x64_sys_mount+0x282/0x300 [ 2077.456015] ? copy_mnt_ns+0xa00/0xa00 [ 2077.456854] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2077.457988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2077.459078] do_syscall_64+0x33/0x40 [ 2077.459867] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2077.460970] RIP: 0033:0x7f7d78bdfb19 [ 2077.461772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2077.465737] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2077.467371] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2077.468878] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2077.470384] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2077.471920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2077.473445] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:46:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:16 executing program 5: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) 11:46:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r2 = inotify_init1(0x80800) write(r2, &(0x7f0000000000)="235f34722a98c213b5b9d829c2106e240eb1223019ad899b025ab17b54e10ab8afc74ff37af5c51d0106562d3bfc", 0x2e) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) [ 2077.523367] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:46:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:16 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000380)={{0xd973, 0x200}, 0x100, './file0\x00'}) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000004c0)={0x0, "641c69a0300e4053dc89cc25f34e686c"}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:46:16 executing program 5: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) 11:46:16 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:46:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0xc0045878, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) [ 2077.628266] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:46:16 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, 0x0) r6 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="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", 0xfd, 0x4}], 0x844001, &(0x7f0000000380)={[{@utf8}, {@utf8}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/sr0\x00'}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, '+\x99\']'}}, {@audit}, {@fowner_eq}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) poll(&(0x7f0000000440)=[{0xffffffffffffffff, 0x440}, {r2, 0x4105}, {r0, 0xf6}, {r2, 0x501a}, {r1, 0x202}, {r3, 0x4200}, {r4, 0x40}, {r5, 0x4}, {r1, 0x50}, {r6, 0x100}], 0xa, 0x7) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:46:31 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, 0x0) r5 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)="830b9fd71ff30ae416270ece6aee8f2699e70cdee959a9df9e70c8072b8b1d628a26f6cbf9165605b7e845c479e0a6ae24281881c26089219da45c4917b637119b177e6826122ade55e4c042a4ae3bab774e283b9007de2c03fe0b86daa553f7293d60e44bbab977c530fae26e3f766f98ab48dbaf92a223d177edb6c987f73db676820146b5a142da41c2535cd4beec482827b6a4a672b25f4120256995f4aab01c693a53dc9d6d44852a4da5a9400daf5c89883c6c441fde76093bff4c7c926947ae246fcf87edaa433d1038e663d4775662e0bd84eb1ac5c690e3e9e4a3e995e5b5ce1c9bc4feb5913f3963528559", 0xf0, 0xf46}], 0x192808, &(0x7f00000002c0)={[{'mountstats\x00'}, {'\x00'}, {'[['}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}) ppoll(&(0x7f0000000680)=[{r3, 0x228}, {r2, 0x408}, {r1, 0x2000}, {r0, 0x4}, {r1, 0x2008}, {r0, 0x5}, {r1, 0x9}, {r4, 0x8}, {r5, 0x3040}], 0x9, &(0x7f0000000700), &(0x7f0000000740)={[0x3f]}, 0x8) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:46:31 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = accept4(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000000)=0x80, 0x80800) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[r0, r1, r0]}, 0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:46:31 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0xc0045878, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:46:31 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 50) 11:46:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:31 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x661, 0x3, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:46:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x200000048) 11:46:31 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2092.860047] FAULT_INJECTION: forcing a failure. [ 2092.860047] name failslab, interval 1, probability 0, space 0, times 0 [ 2092.862825] CPU: 0 PID: 12112 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2092.864220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2092.865903] Call Trace: [ 2092.866456] dump_stack+0x107/0x167 [ 2092.867214] should_fail.cold+0x5/0xa [ 2092.867993] should_failslab+0x5/0x20 [ 2092.868774] __kmalloc_track_caller+0x79/0x370 [ 2092.869691] ? kstrdup_const+0x53/0x80 [ 2092.870501] ? kasprintf+0xbb/0xf0 [ 2092.871226] kstrdup+0x36/0x70 [ 2092.871877] kstrdup_const+0x53/0x80 [ 2092.872641] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2092.873657] p9_client_create+0xc6a/0x1230 [ 2092.874543] ? p9_client_flush+0x430/0x430 [ 2092.875412] ? trace_hardirqs_on+0x5b/0x180 [ 2092.876298] ? lockdep_init_map_type+0x2c7/0x780 [ 2092.877269] ? __raw_spin_lock_init+0x36/0x110 [ 2092.878197] v9fs_session_init+0x1dd/0x1680 [ 2092.879096] ? lock_release+0x680/0x680 [ 2092.879911] ? kmem_cache_alloc_trace+0x151/0x320 [ 2092.880883] ? v9fs_show_options+0x690/0x690 [ 2092.881778] ? trace_hardirqs_on+0x5b/0x180 [ 2092.882666] ? kasan_unpoison_shadow+0x33/0x50 [ 2092.883577] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2092.884580] v9fs_mount+0x79/0x8f0 [ 2092.885280] ? v9fs_write_inode+0x60/0x60 [ 2092.886103] legacy_get_tree+0x105/0x220 [ 2092.886904] vfs_get_tree+0x8e/0x300 [ 2092.887643] path_mount+0x1429/0x2120 [ 2092.888406] ? strncpy_from_user+0x9e/0x470 [ 2092.889264] ? finish_automount+0xa90/0xa90 [ 2092.890113] ? getname_flags.part.0+0x1dd/0x4f0 [ 2092.891036] ? _copy_from_user+0xfb/0x1b0 [ 2092.891850] __x64_sys_mount+0x282/0x300 [ 2092.892661] ? copy_mnt_ns+0xa00/0xa00 [ 2092.893438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2092.894496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2092.895524] do_syscall_64+0x33/0x40 [ 2092.896251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2092.897254] RIP: 0033:0x7f7d78bdfb19 [ 2092.897986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2092.901605] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2092.903118] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2092.904504] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2092.905916] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2092.907307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2092.908716] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2092.910477] kmem_cache_create(9p-fcall-cache-310) failed with error -12 [ 2092.911994] CPU: 0 PID: 12112 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2092.913330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2092.914971] Call Trace: [ 2092.915480] dump_stack+0x107/0x167 [ 2092.916195] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2092.917218] p9_client_create+0xc6a/0x1230 [ 2092.918067] ? p9_client_flush+0x430/0x430 [ 2092.918909] ? trace_hardirqs_on+0x5b/0x180 [ 2092.919742] ? lockdep_init_map_type+0x2c7/0x780 [ 2092.920657] ? __raw_spin_lock_init+0x36/0x110 [ 2092.921539] v9fs_session_init+0x1dd/0x1680 [ 2092.922377] ? lock_release+0x680/0x680 [ 2092.923175] ? kmem_cache_alloc_trace+0x151/0x320 [ 2092.924099] ? v9fs_show_options+0x690/0x690 [ 2092.924946] ? trace_hardirqs_on+0x5b/0x180 [ 2092.925766] ? kasan_unpoison_shadow+0x33/0x50 [ 2092.926646] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2092.927614] v9fs_mount+0x79/0x8f0 [ 2092.928301] ? v9fs_write_inode+0x60/0x60 [ 2092.929101] legacy_get_tree+0x105/0x220 [ 2092.929882] vfs_get_tree+0x8e/0x300 [ 2092.930616] path_mount+0x1429/0x2120 [ 2092.931344] ? strncpy_from_user+0x9e/0x470 [ 2092.932222] ? finish_automount+0xa90/0xa90 [ 2092.933068] ? getname_flags.part.0+0x1dd/0x4f0 [ 2092.933971] ? _copy_from_user+0xfb/0x1b0 [ 2092.934791] __x64_sys_mount+0x282/0x300 [ 2092.935577] ? copy_mnt_ns+0xa00/0xa00 [ 2092.936326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2092.937354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2092.938334] do_syscall_64+0x33/0x40 [ 2092.939077] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2092.940075] RIP: 0033:0x7f7d78bdfb19 [ 2092.940801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2092.944384] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2092.945859] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2092.947261] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2092.948636] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2092.950022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2092.951408] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:46:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x200000048) 11:46:31 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 51) 11:46:31 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:31 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0xc0101282, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) [ 2093.080923] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2093.082640] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2093.083823] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2093.084978] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2093.086294] print_req_error: 8 callbacks suppressed [ 2093.086309] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2093.092605] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2093.101457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2093.102484] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2093.104421] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2093.106267] Buffer I/O error on dev loop0, logical block 2096896, async page read [ 2093.112271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2093.113257] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2093.115187] blk_update_request: I/O error, dev loop0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2093.116994] Buffer I/O error on dev loop0, logical block 2096897, async page read [ 2093.118667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2093.119627] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2093.128901] blk_update_request: I/O error, dev loop0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2093.130681] Buffer I/O error on dev loop0, logical block 2096898, async page read 11:46:31 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000010) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="1cee27c83a"], 0x5, 0x3) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000140), 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0xa05, 0x6, &(0x7f0000000600)=[{&(0x7f0000000280)="82ee75e2923d317f3d9e7cd5d2ab5532117e3823004e3b4eaceed03d61a9", 0x1e}, {&(0x7f00000002c0)="2883fe407f283b6384af92f0b4a8f66b06669c39d7a54be7b87a8884a4dd870b882d2dcb2832a85a54c3a36d192112b7966f3ab623013bf50cb2c7bb959f410674eb445834a58d5a866482cba9ed7f74535004e23672dfb204617d5da01b5f5f", 0x60}, {&(0x7f00000003c0)="60c4a5f6eefc1593fc37f7b4bb4a65a2daf073fcb54398583bc5a79526a9cb0f56d1296dfcb7671ec8dffa7ed0220e6d672fbdd555f47fa3bdae2f732190c61291609ecf841971bf239e2df551db6e73894ae4ec552451509ffa02577ee280b5be7e265d843ab170b289ab871e06ed75b3073a9cd5eb1afd307aca96f65abf6ef5a6fd21bc", 0x85, 0x80000001}, {&(0x7f0000000480)="a3cd621a26dafe646b8bf7fe866570b086597e121bde0eba0b31bd187c6d9a65fab4d922bafa96ab9e0566e70c4369ae895ae7d60d8e5de69b72e17963f46986", 0x40, 0x7}, {&(0x7f0000000500)="ff5c6de5abef817ca4ca3cb955b419ddbd", 0x11, 0x5}, {&(0x7f0000000540)="21bec1d91645baae0cb9f4b53cb38b7a9d7f5aee4e2cb9843964679f7bf5059b9eb1a5d402348ca68a2f0c10a4a16e73fa0fd8886180d6bfc067589ce0be46", 0x3f, 0x5}], 0x41810, &(0x7f00000006c0)={[{@sysvgroups}], [{@obj_user={'obj_user', 0x3d, 'security.ima\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '**\\'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@seclabel}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/meminfo\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r1, 0x0) syz_io_uring_setup(0x2aca, &(0x7f0000000a40)={0x0, 0xc67e, 0x0, 0x1, 0x1c7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000340)='\x00', 0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000240)) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r2, 0xffffffffffffffff) [ 2093.138150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2093.139124] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2093.141732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2093.142638] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2093.146845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2093.150768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2093.152150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2093.154207] FAULT_INJECTION: forcing a failure. [ 2093.154207] name failslab, interval 1, probability 0, space 0, times 0 [ 2093.156138] CPU: 0 PID: 12134 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2093.157264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2093.158622] Call Trace: [ 2093.159062] dump_stack+0x107/0x167 [ 2093.159657] should_fail.cold+0x5/0xa [ 2093.160279] ? create_object.isra.0+0x3a/0xa20 [ 2093.161028] should_failslab+0x5/0x20 [ 2093.161647] kmem_cache_alloc+0x5b/0x310 [ 2093.162319] ? lock_acquire+0x197/0x470 [ 2093.162979] create_object.isra.0+0x3a/0xa20 [ 2093.163681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2093.164533] __kmalloc_track_caller+0x177/0x370 [ 2093.165296] ? kstrdup_const+0x53/0x80 [ 2093.165922] ? kasprintf+0xbb/0xf0 [ 2093.166516] kstrdup+0x36/0x70 [ 2093.167034] kstrdup_const+0x53/0x80 [ 2093.167645] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2093.168471] p9_client_create+0xc6a/0x1230 [ 2093.169168] ? p9_client_flush+0x430/0x430 [ 2093.169843] ? trace_hardirqs_on+0x5b/0x180 [ 2093.170550] ? lockdep_init_map_type+0x2c7/0x780 [ 2093.171322] ? __raw_spin_lock_init+0x36/0x110 [ 2093.172087] v9fs_session_init+0x1dd/0x1680 [ 2093.172791] ? lock_release+0x680/0x680 [ 2093.173458] ? kmem_cache_alloc_trace+0x151/0x320 [ 2093.174244] ? v9fs_show_options+0x690/0x690 [ 2093.174986] ? trace_hardirqs_on+0x5b/0x180 [ 2093.175687] ? kasan_unpoison_shadow+0x33/0x50 [ 2093.176440] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2093.177267] v9fs_mount+0x79/0x8f0 [ 2093.177848] ? v9fs_write_inode+0x60/0x60 [ 2093.178533] legacy_get_tree+0x105/0x220 [ 2093.179214] vfs_get_tree+0x8e/0x300 [ 2093.179834] path_mount+0x1429/0x2120 [ 2093.180455] ? strncpy_from_user+0x9e/0x470 [ 2093.181157] ? finish_automount+0xa90/0xa90 [ 2093.181861] ? getname_flags.part.0+0x1dd/0x4f0 [ 2093.182616] ? _copy_from_user+0xfb/0x1b0 [ 2093.183298] __x64_sys_mount+0x282/0x300 [ 2093.183962] ? copy_mnt_ns+0xa00/0xa00 [ 2093.184617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2093.185486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2093.186327] do_syscall_64+0x33/0x40 [ 2093.186935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2093.187777] RIP: 0033:0x7f7d78bdfb19 [ 2093.188389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2093.191372] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2093.192623] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2093.193769] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2093.194933] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2093.196085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2093.197256] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:46:31 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000280)) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000000)=@lsasf={0x8, 0x0, 0x1}) memfd_create(0x0, 0x2) 11:46:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x200000048) [ 2093.199513] Buffer I/O error on dev loop0, logical block 2096899, async page read [ 2093.200780] Buffer I/O error on dev loop0, logical block 2096900, async page read [ 2093.202029] Buffer I/O error on dev loop0, logical block 2096901, async page read [ 2093.203267] Buffer I/O error on dev loop0, logical block 2096902, async page read [ 2093.204479] Buffer I/O error on dev loop0, logical block 2096903, async page read 11:46:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:45 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 52) 11:46:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:45 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf2501000000080001005b000000c08e802b8cafec001ed398ea3049dee9755bed64e5e7ee83bde155282df1a958bc1b36f41b099ad8852388932410af7b37c4899c5fc633abdf8a0b2e8eeab23bbd509d661d7cc55b53ee4aa0e0f8b2c3bf31e35e3a3ba2a464eb3be1f4e29865b0c1ddd7e2a0a844312b169209216601ac14b5a47a1488e26514cf495b209dc5e8a4f432003f0a49094de0aa87b149111dc8ed91f9983c0d801d341d776b6f0ea7c81e6e4a9bad"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:46:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d75d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b93ce2d79daea2f862f1b55b37ee8d399ddfff1823a5184fb0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e0000000079a6b4e0325afb5c8cf2a50ef2a5dc19da1526a05aea6f0122e5d0c2e464e28662d369726e53789661c24685e0e84d42546f6e8888897770d1b7286bb6a4e8e0796bc771e3b587f29a3f4deadcc888fc5dc0f8eb0ce8d0ef2a5699f5f235a168eb84c4c5b05d1bd14406b9cd00954fa4aaaaa4818d3dbf5403cedf4533616cb4d6315bccd045dc7bf1b6a043ac1e499bbc004d3ff54ffbbfb2d3e90ef2cccdc18fccbdf381a3318dde1827516fe2901e02aa799af115fcaf"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x9, 0x2, 0xfffffffe, 0xe, 0x1}) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) syz_io_uring_setup(0x1f40, &(0x7f0000000400)={0x0, 0xed6d, 0x2, 0x1, 0x2b9, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000005, 0x10010, 0xffffffffffffffff, 0x10000000) r4 = syz_io_uring_setup(0x3ca3, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x1, 0x1, 0x0, 0x7fffffff, 0x4, 0x0, {0x0, r7}}, 0x7fffffff) r8 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x20800, 0x119) write$P9_RREADLINK(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000017022f66696c653000000000e79218a19c1f3fca501fbdf8903170e074878430d7865db4"], 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) r9 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x4, 0x34b00) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fide0\x00']) 11:46:45 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) open_by_handle_at(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000006000000090000000101000004000000040000009503000003000000200d2e7e9ce8f3238dd661c08061971fb02c35231024b76d3cb043934da4ca19f053f0e00917b65e638a92058f280382342bde71ffe90536aaa163ffbd93c9a8329b4cfc6cf7088cf1afcd1dbb7a945a16ac5f6b5485f841027c077f6bf7268aac11b1df6c9521ed13cbff073935bf87ac89f9778bb1012b4913a1af0f4e164a03038608ecd9f616edbd93505124e726f429390255e105cccc0d6b45783084b059c2058b37137d3a114d92a6e9255cfca627cecfa79e314a09e345afc463eb9f5ae8833411d022434db27f359f631beee6"], 0xcdc0) memfd_create(0x0, 0x0) 11:46:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0xc0189436, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:46:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, 0x0, 0x0, 0x200000048) 11:46:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, 0x0, 0x0, 0x200000048) 11:46:45 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) ioctl$RTC_AIE_OFF(r3, 0x7002) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:46:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2106.466452] FAULT_INJECTION: forcing a failure. [ 2106.466452] name failslab, interval 1, probability 0, space 0, times 0 [ 2106.469310] CPU: 1 PID: 12166 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2106.470907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2106.472829] Call Trace: [ 2106.473439] dump_stack+0x107/0x167 [ 2106.474252] should_fail.cold+0x5/0xa [ 2106.475121] ? create_object.isra.0+0x3a/0xa20 [ 2106.476131] should_failslab+0x5/0x20 [ 2106.477017] kmem_cache_alloc+0x5b/0x310 [ 2106.477960] create_object.isra.0+0x3a/0xa20 [ 2106.478980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2106.480155] kmem_cache_alloc+0x159/0x310 [ 2106.481126] kmem_cache_create_usercopy+0x190/0x2f0 [ 2106.482282] p9_client_create+0xc6a/0x1230 [ 2106.483279] ? p9_client_flush+0x430/0x430 [ 2106.484255] ? trace_hardirqs_on+0x5b/0x180 [ 2106.485251] ? lockdep_init_map_type+0x2c7/0x780 [ 2106.486343] ? __raw_spin_lock_init+0x36/0x110 [ 2106.487409] v9fs_session_init+0x1dd/0x1680 [ 2106.488403] ? lock_release+0x680/0x680 [ 2106.489328] ? kmem_cache_alloc_trace+0x151/0x320 [ 2106.490435] ? v9fs_show_options+0x690/0x690 [ 2106.491462] ? trace_hardirqs_on+0x5b/0x180 [ 2106.492453] ? kasan_unpoison_shadow+0x33/0x50 [ 2106.493500] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2106.494674] v9fs_mount+0x79/0x8f0 [ 2106.495503] ? v9fs_write_inode+0x60/0x60 [ 2106.496459] legacy_get_tree+0x105/0x220 [ 2106.497396] vfs_get_tree+0x8e/0x300 [ 2106.498250] path_mount+0x1429/0x2120 [ 2106.499140] ? strncpy_from_user+0x9e/0x470 [ 2106.500134] ? finish_automount+0xa90/0xa90 [ 2106.501126] ? getname_flags.part.0+0x1dd/0x4f0 [ 2106.502195] ? _copy_from_user+0xfb/0x1b0 [ 2106.503164] __x64_sys_mount+0x282/0x300 [ 2106.504094] ? copy_mnt_ns+0xa00/0xa00 [ 2106.504996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2106.506200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2106.507393] do_syscall_64+0x33/0x40 [ 2106.508251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2106.509427] RIP: 0033:0x7f7d78bdfb19 [ 2106.510280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2106.514413] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2106.516127] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2106.517723] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2106.519325] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2106.520918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2106.522507] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2106.573875] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2106.575026] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2106.575810] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2106.576537] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2106.577393] print_req_error: 8 callbacks suppressed [ 2106.577403] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2106.579233] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2106.580953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2106.581671] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2106.584596] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2106.585810] Buffer I/O error on dev loop0, logical block 2096896, async page read [ 2106.592689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2106.593337] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2106.594627] blk_update_request: I/O error, dev loop0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2106.595842] Buffer I/O error on dev loop0, logical block 2096897, async page read 11:46:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2106.601298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2106.601917] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2106.605639] blk_update_request: I/O error, dev loop0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2106.606858] Buffer I/O error on dev loop0, logical block 2096898, async page read 11:46:45 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) inotify_init() dup2(r0, r0) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:46:45 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000001c0)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x800) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x2}, 0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) [ 2106.630776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2106.631414] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2106.632657] blk_update_request: I/O error, dev loop0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2106.632664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2106.632728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2106.635072] Buffer I/O error on dev loop0, logical block 2096899, async page read [ 2106.635703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2106.636904] Buffer I/O error on dev loop0, logical block 2096900, async page read [ 2106.637748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2106.638914] Buffer I/O error on dev loop0, logical block 2096901, async page read 11:46:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0xc020660b, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) [ 2106.642677] Buffer I/O error on dev loop0, logical block 2096902, async page read [ 2106.644524] Buffer I/O error on dev loop0, logical block 2096903, async page read 11:46:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, 0x0, 0x0, 0x200000048) 11:46:45 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 53) 11:46:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x0) 11:46:45 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x7fff, 0x662, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:46:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0xc0481273, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) [ 2106.860974] FAULT_INJECTION: forcing a failure. [ 2106.860974] name failslab, interval 1, probability 0, space 0, times 0 [ 2106.862482] CPU: 0 PID: 12231 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2106.863314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2106.864304] Call Trace: [ 2106.864613] dump_stack+0x107/0x167 [ 2106.865039] should_fail.cold+0x5/0xa [ 2106.865492] ? __kmem_cache_create+0x10e/0x520 [ 2106.866053] should_failslab+0x5/0x20 [ 2106.866496] kmem_cache_alloc_node+0x55/0x330 [ 2106.867036] __kmem_cache_create+0x10e/0x520 [ 2106.867556] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2106.868146] p9_client_create+0xc6a/0x1230 [ 2106.868644] ? p9_client_flush+0x430/0x430 [ 2106.869141] ? trace_hardirqs_on+0x5b/0x180 [ 2106.869667] ? lockdep_init_map_type+0x2c7/0x780 [ 2106.870232] ? __raw_spin_lock_init+0x36/0x110 [ 2106.870788] v9fs_session_init+0x1dd/0x1680 [ 2106.871319] ? lock_release+0x680/0x680 [ 2106.871794] ? kmem_cache_alloc_trace+0x151/0x320 [ 2106.872368] ? v9fs_show_options+0x690/0x690 [ 2106.872897] ? trace_hardirqs_on+0x5b/0x180 [ 2106.873410] ? kasan_unpoison_shadow+0x33/0x50 [ 2106.873955] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2106.874566] v9fs_mount+0x79/0x8f0 [ 2106.875009] ? v9fs_write_inode+0x60/0x60 [ 2106.875507] legacy_get_tree+0x105/0x220 [ 2106.875992] vfs_get_tree+0x8e/0x300 [ 2106.876432] path_mount+0x1429/0x2120 [ 2106.876893] ? strncpy_from_user+0x9e/0x470 [ 2106.877412] ? finish_automount+0xa90/0xa90 [ 2106.877932] ? getname_flags.part.0+0x1dd/0x4f0 [ 2106.878482] ? _copy_from_user+0xfb/0x1b0 [ 2106.878990] __x64_sys_mount+0x282/0x300 [ 2106.879480] ? copy_mnt_ns+0xa00/0xa00 [ 2106.879955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2106.880588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2106.881200] do_syscall_64+0x33/0x40 [ 2106.881646] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2106.882253] RIP: 0033:0x7f7d78bdfb19 [ 2106.882700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2106.884911] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2106.885817] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2106.886668] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2106.887541] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2106.888401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2106.889247] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2106.891060] kmem_cache_create(9p-fcall-cache-313) failed with error -22 [ 2106.892097] CPU: 0 PID: 12231 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2106.892945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2106.893948] Call Trace: [ 2106.894262] dump_stack+0x107/0x167 [ 2106.894709] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2106.895352] p9_client_create+0xc6a/0x1230 [ 2106.895859] ? p9_client_flush+0x430/0x430 [ 2106.896366] ? trace_hardirqs_on+0x5b/0x180 [ 2106.896878] ? lockdep_init_map_type+0x2c7/0x780 [ 2106.897443] ? __raw_spin_lock_init+0x36/0x110 [ 2106.897995] v9fs_session_init+0x1dd/0x1680 [ 2106.898505] ? lock_release+0x680/0x680 [ 2106.898989] ? kmem_cache_alloc_trace+0x151/0x320 [ 2106.899558] ? v9fs_show_options+0x690/0x690 [ 2106.900075] ? trace_hardirqs_on+0x5b/0x180 [ 2106.900574] ? kasan_unpoison_shadow+0x33/0x50 [ 2106.901097] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2106.901691] v9fs_mount+0x79/0x8f0 [ 2106.902102] ? v9fs_write_inode+0x60/0x60 [ 2106.902585] legacy_get_tree+0x105/0x220 [ 2106.903066] vfs_get_tree+0x8e/0x300 [ 2106.903490] path_mount+0x1429/0x2120 [ 2106.903927] ? strncpy_from_user+0x9e/0x470 [ 2106.904430] ? finish_automount+0xa90/0xa90 [ 2106.904931] ? getname_flags.part.0+0x1dd/0x4f0 [ 2106.905463] ? _copy_from_user+0xfb/0x1b0 [ 2106.905937] __x64_sys_mount+0x282/0x300 [ 2106.906407] ? copy_mnt_ns+0xa00/0xa00 [ 2106.906853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2106.907490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2106.908092] do_syscall_64+0x33/0x40 [ 2106.908517] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2106.909111] RIP: 0033:0x7f7d78bdfb19 [ 2106.909542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2106.911711] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2106.912583] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2106.913415] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2106.914242] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2106.915080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2106.915911] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2107.015522] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:46:58 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000008c0)={r4, 0x5, 0x80000001}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000280)={r4, 0x1, 0x1, [0x1, 0xfffffffffffffffc, 0x8, 0x800], [0x9, 0x4, 0x7, 0x511e, 0x40, 0x1f, 0x9, 0x7, 0x6, 0x5, 0x0, 0x7, 0x2, 0x4, 0x9, 0x8, 0x5, 0x7, 0x4, 0x800, 0x101, 0x8, 0x5, 0x0, 0xffffffff, 0x1, 0x2, 0x80000000, 0x100000001, 0x8, 0x6, 0x8, 0x7ff, 0x6, 0x3a, 0x7, 0xfffffffffffffff7, 0x3, 0x100000001, 0x100000001, 0x6, 0x2, 0x7fff, 0x1, 0x2c1, 0x9, 0x1, 0x81, 0x2, 0x0, 0x9, 0x9c5, 0x5, 0x240000000, 0x4, 0x3, 0x0, 0x3, 0x7fffffff, 0x5, 0x9, 0x3b, 0x5, 0x8, 0x9, 0x400, 0x9, 0xff, 0xf613, 0x10000, 0xead, 0x7, 0x0, 0xabc, 0x2, 0x20, 0xe2b, 0x3ac0000000000000, 0x1ff, 0x9, 0x86e6, 0xb4be, 0x6, 0x4, 0xce2, 0x80000001, 0x7, 0x9, 0x80, 0x0, 0xa35c, 0xfffffffffffffff8, 0xbe58, 0x8, 0x4, 0xb2, 0x3, 0x81, 0xc945, 0x18c3, 0x1, 0x0, 0xc, 0x1, 0x9, 0x1f, 0x9a43, 0x0, 0x180000000, 0xfffffffffffffffb, 0x100000000, 0x7fffffff, 0x101, 0xcd, 0xff, 0x3, 0x5, 0x2, 0x9, 0x9b8, 0x1]}) 11:46:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, 0x0, 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x663, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x12b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, 0x0) kcmp(0x0, 0x0, 0x1, r1, r5) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:46:58 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:46:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x0) 11:46:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:46:58 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 54) 11:46:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000005c0)='fdinfo/3\x00') perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7, 0x81, 0x3, 0x4, 0x0, 0x2, 0x120, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000180)}, 0x10040, 0x5e3, 0x1f, 0x7, 0x10001, 0x7fff, 0x9, 0x0, 0x9c, 0x0, 0x10001}, r1, 0x3, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) openat(r2, &(0x7f0000000000)='./file0\x00', 0x2, 0x108) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f00000002c0)) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="000000082d4c31b361961990da1200fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000050000000000000000000000f40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000008f5200"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) [ 2119.562356] FAULT_INJECTION: forcing a failure. [ 2119.562356] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.564732] CPU: 1 PID: 12247 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2119.565995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2119.567503] Call Trace: [ 2119.567993] dump_stack+0x107/0x167 [ 2119.568655] should_fail.cold+0x5/0xa [ 2119.569337] ? create_object.isra.0+0x3a/0xa20 [ 2119.570164] should_failslab+0x5/0x20 [ 2119.570845] kmem_cache_alloc+0x5b/0x310 [ 2119.571588] create_object.isra.0+0x3a/0xa20 [ 2119.572376] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2119.573288] kmem_cache_alloc_node+0x169/0x330 [ 2119.574114] __kmem_cache_create+0x10e/0x520 [ 2119.574910] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2119.575813] p9_client_create+0xc6a/0x1230 [ 2119.576579] ? p9_client_flush+0x430/0x430 [ 2119.577337] ? trace_hardirqs_on+0x5b/0x180 [ 2119.578115] ? lockdep_init_map_type+0x2c7/0x780 [ 2119.578992] ? __raw_spin_lock_init+0x36/0x110 [ 2119.579842] v9fs_session_init+0x1dd/0x1680 11:46:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x0) 11:46:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000ff0200000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200200000000000f3ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000004000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000800"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) [ 2119.580626] ? lock_release+0x680/0x680 [ 2119.581568] ? kmem_cache_alloc_trace+0x151/0x320 [ 2119.582444] ? v9fs_show_options+0x690/0x690 [ 2119.583247] ? trace_hardirqs_on+0x5b/0x180 [ 2119.584042] ? kasan_unpoison_shadow+0x33/0x50 [ 2119.584866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2119.585791] v9fs_mount+0x79/0x8f0 [ 2119.586435] ? v9fs_write_inode+0x60/0x60 [ 2119.587188] legacy_get_tree+0x105/0x220 [ 2119.587934] vfs_get_tree+0x8e/0x300 [ 2119.588606] path_mount+0x1429/0x2120 [ 2119.589300] ? strncpy_from_user+0x9e/0x470 [ 2119.590087] ? finish_automount+0xa90/0xa90 [ 2119.590863] ? getname_flags.part.0+0x1dd/0x4f0 [ 2119.591712] ? _copy_from_user+0xfb/0x1b0 [ 2119.592467] __x64_sys_mount+0x282/0x300 [ 2119.593200] ? copy_mnt_ns+0xa00/0xa00 [ 2119.593909] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2119.594869] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2119.595810] do_syscall_64+0x33/0x40 [ 2119.596482] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2119.597415] RIP: 0033:0x7f7d78bdfb19 [ 2119.598090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2119.601456] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2119.602857] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2119.604173] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2119.605484] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2119.606785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2119.608102] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2119.698507] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2119.699831] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2119.700616] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2119.701345] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2119.702209] print_req_error: 8 callbacks suppressed [ 2119.702219] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2119.704045] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2119.705519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2119.706191] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2119.707409] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2119.708636] Buffer I/O error on dev loop0, logical block 2096896, async page read [ 2119.709627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2119.710251] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2119.711711] blk_update_request: I/O error, dev loop0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2119.712933] Buffer I/O error on dev loop0, logical block 2096897, async page read [ 2119.713985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2119.714681] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2119.715959] blk_update_request: I/O error, dev loop0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2119.717218] Buffer I/O error on dev loop0, logical block 2096898, async page read [ 2119.718182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2119.718845] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2119.720144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2119.720805] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2119.722108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2119.722818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2119.723518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2119.724181] Buffer I/O error on dev loop0, logical block 2096899, async page read [ 2119.725073] Buffer I/O error on dev loop0, logical block 2096900, async page read [ 2119.725982] Buffer I/O error on dev loop0, logical block 2096901, async page read [ 2119.726896] Buffer I/O error on dev loop0, logical block 2096902, async page read [ 2119.727806] Buffer I/O error on dev loop0, logical block 2096903, async page read 11:46:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, 0x0, 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, 0x0, 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d75d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b93ce2d79daea2f862f1b55b37ee8d399ddfff1823a5184fb0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e0000000079a6b4e0325afb5c8cf2a50ef2a5dc19da1526a05aea6f0122e5d0c2e464e28662d369726e53789661c24685e0e84d42546f6e8888897770d1b7286bb6a4e8e0796bc771e3b587f29a3f4deadcc888fc5dc0f8eb0ce8d0ef2a5699f5f235a168eb84c4c5b05d1bd14406b9cd00954fa4aaaaa4818d3dbf5403cedf4533616cb4d6315bccd045dc7bf1b6a043ac1e499bbc004d3ff54ffbbfb2d3e90ef2cccdc18fccbdf381a3318dde1827516fe2901e02aa799af115fcaf"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:13 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:13 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 55) [ 2134.617246] FAULT_INJECTION: forcing a failure. [ 2134.617246] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.619421] CPU: 0 PID: 12295 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2134.620640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2134.622308] Call Trace: [ 2134.622763] dump_stack+0x107/0x167 [ 2134.623388] should_fail.cold+0x5/0xa [ 2134.624063] ? create_object.isra.0+0x3a/0xa20 [ 2134.624843] should_failslab+0x5/0x20 [ 2134.625497] kmem_cache_alloc+0x5b/0x310 [ 2134.626207] create_object.isra.0+0x3a/0xa20 [ 2134.626976] kmemleak_alloc_percpu+0xa0/0x100 [ 2134.627735] pcpu_alloc+0x4e2/0x1240 [ 2134.628390] __kmem_cache_create+0x35a/0x520 [ 2134.629032] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2134.629736] p9_client_create+0xc6a/0x1230 [ 2134.630343] ? p9_client_flush+0x430/0x430 [ 2134.630941] ? trace_hardirqs_on+0x5b/0x180 [ 2134.631555] ? lockdep_init_map_type+0x2c7/0x780 [ 2134.632234] ? __raw_spin_lock_init+0x36/0x110 [ 2134.632889] v9fs_session_init+0x1dd/0x1680 [ 2134.633510] ? lock_release+0x680/0x680 [ 2134.634173] ? kmem_cache_alloc_trace+0x151/0x320 [ 2134.634897] ? v9fs_show_options+0x690/0x690 [ 2134.635527] ? trace_hardirqs_on+0x5b/0x180 [ 2134.636163] ? kasan_unpoison_shadow+0x33/0x50 [ 2134.636824] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2134.637654] v9fs_mount+0x79/0x8f0 [ 2134.638163] ? v9fs_write_inode+0x60/0x60 [ 2134.638760] legacy_get_tree+0x105/0x220 [ 2134.639339] vfs_get_tree+0x8e/0x300 [ 2134.639875] path_mount+0x1429/0x2120 [ 2134.640428] ? strncpy_from_user+0x9e/0x470 [ 2134.641047] ? finish_automount+0xa90/0xa90 [ 2134.641675] ? getname_flags.part.0+0x1dd/0x4f0 [ 2134.642341] ? _copy_from_user+0xfb/0x1b0 [ 2134.642950] __x64_sys_mount+0x282/0x300 [ 2134.643535] ? copy_mnt_ns+0xa00/0xa00 [ 2134.644110] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2134.644857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2134.645614] do_syscall_64+0x33/0x40 [ 2134.646159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2134.646901] RIP: 0033:0x7f7d78bdfb19 [ 2134.647447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2134.650126] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2134.651241] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2134.652312] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2134.653377] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2134.654426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2134.655479] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:47:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) tee(r0, r2, 0x9c44, 0xa) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000400)=""/208) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:47:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000340)='\x00', 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000240)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) dup(r1) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f00000001c0)=@hsk={0x2, 0x1, "db684041fc"}) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000140)) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r3, r3) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$CDROMPLAYBLK(r3, 0x5317, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0xfffffffffffffff7, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, 0x0, 0x1, {0x0, r5}}, 0x3) 11:47:13 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1ed982, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2880) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x20, 0xa, &(0x7f0000001980)=[{&(0x7f0000000380)="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", 0x1000, 0x4}, {&(0x7f0000001380)="6ff389ebde290436e0b249c805f5ff183a0d78f0ae1226216239130923431830ee89ab7355e124bff7ae6ad99633c4ef9dc309b9ccee8b8ca8d71223156ad891e9d7789c61cfd224483142f04c16737708b5", 0x52}, {&(0x7f0000001400)="f19c4bd29b31f5a55cc2cf29b7abc92977bddd2787f8d96983a2921fda05f6facea27f9fa1549730ec08da19fabdf6f4cc87dcdeb49f9dac8b73314e8cf4cb13fb097c6574af34256b67a81b5bf01031ed7ea3fdd0e1efa101dab9e814b910d08204b1b4dcb5d77ce1dff3962fec0bfa4cf6180b2efef75b9fcdc22f0bed9d83bc96ecc1309c95bc1f9c82d2f4f7777e0ce071abe13c559a2a3b54b97c33a2349076ca25576a4b3b71ea0cfd84a7c85691e11ff1c4e5be1ee05f82c1a2db97bb9c65c437b9a16d01c93965db0f6f59", 0xcf, 0x1}, {&(0x7f0000001500)="a9c5fe94b537c8b87bab257b5cf7c9b740032d6c48ea8937b8", 0x19, 0x10000}, {&(0x7f0000001540)="a14b0886cf50d07952218b1c", 0xc, 0x8}, {&(0x7f0000001580)="425cbe8210e50a2c69de818ff58d28f70443d0d77f0193e5b21fa26d8f95dfdb0ee35365ce8d61b2245c968b0af728d8433ce235841e905048974bfef4bca08b431a65e6ac7a2b3a70bd2714171eced97e2bdb3002b6565717c5a4b727b4a9317098288f2cc1d74f4efa17906bac9ab1d51b73670e120b898cad789870dc343494b69414c7abb682ff51da27456fdcc82f8c36a32fb9c7d2cce439cb609242138949d0caa8ae085564a685213d386e260bba7766eb", 0xb5, 0x10000}, {&(0x7f0000001640)="69f92733249570b327697aea1e50cf0dc4669ce6177115e32b823651a95e48debd22c4d534f5dc8b0190c61bd5701ee54de65722c1a58c8175c9957fbed217968c29318b063182c31b27801bb2910dcf049ec8697e20bb24ee2d6f810e6f18a0007ed92903c785e9da2a18760f4031994eacc99970fc3ce0b0771cfcee806383938aa715612a66c70fdc67bc0e53b43f79364ff8ca34d748c6fdd6a2b3cc70daedf79129f504a8bf947ede109f0d3bca47c80c768e225ecf4077f0a391477c7387b3ac9311673396efea3d2b4a2524e40d82c18981a80fd0271cf6ae850092ac17f7241f9d6890ae5cc4a3aed4", 0xed, 0x9}, {&(0x7f0000001740)="5aa04dac5fbd31197e02021d2b0556f8c671b2e2f1744b470c6d40b1b0980515d0a75206a0e99a177fda6f6b90975b945e957df655d66473a644898332769ff77869", 0x42, 0xd9}, {&(0x7f00000017c0)="09f24a6bffeb17376ea1678d7b3eddb376194ecb0d22c1cde78752e02289b35b4635e0ad37c20d21d58b6431882ad36dad56384692a4afec0046d2f3d0b7136d9ee139360152ecf40e909fe37f1ffb21af8c1959f8e5db7d88522c76bfbb6667a3f4bc920e7ada1ae27430db5732a85a99d1f13b610175063ba5469d817d2ea31aa556ac5fdb5cafc08164d3872e9c3ea54ccaf08ec89686c3e73882882a3fe1c46f519d266f2d233a0b98da1ec29d1e60869623ff509f1fe706738a4766fb8f766cbdc250d2866124fcadb749aae9af9ccf0120c95fd584be6b7e21c4e07d4974e6", 0xe2, 0xfffffffffffffffb}, {&(0x7f00000018c0)="9f3b753ec4494b34bf2391388e4f45c921bb9e3e07d7cb97bbc06fc220178fa7b9cd6c52a5495130fd05e365d6f19f8be97d9f1b22ca1c704081f0a39275f551023cfe7258c120acd2c7c4a8d8f14c58c2b6dbe773b22ad01a0e7b88813aee900deec941d6f8ba84395cf7a7df6e6ad7251fa2523691aed8bda55f2a689e98afd3472950c8366b41bc", 0x89, 0x9}], 0x11400, &(0x7f0000001a80)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@utf8}, {@numtail}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@fsname={'fsname', 0x3d, 'nl80211\x00'}}, {@permit_directio}, {@uid_gt}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x124, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4a}, @val={0x8}, @val={0xc, 0x99, {0x10001, 0x1a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "01e6e56b68912c885851d0526204442360c17d13867e156b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1df8023d03cd435e215dc890d9d043fe729d05e96df4efe1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2639047173d800108df457dbd596735faf47df3262d60e32"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ab1b77cdcbb4c03cf40b4a2d5cc408582a9e80e721b85584"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x44801) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000824000/0x2000)=nil, 0x2000, 0x1000005, 0x2010, r0, 0x8000000) syz_io_uring_complete(r5) memfd_create(0x0, 0x0) 11:47:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0xc0189436, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:47:13 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000005e, 0x0, 0x6ffbef27ed858570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2000008000000000}, 0x0, 0xfffffffffffffff7, 0x100, 0xe, 0x4, 0x0, 0x1, 0x0, 0x28, 0x0, 0xd6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000300)) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000380)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) finit_module(r0, &(0x7f00000001c0)='\x00', 0x3) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:47:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:13 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x202040, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000200)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:47:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x401870cb, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:47:13 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='\x9d\x00\x01\x00\x00\x00\xdb\x88\x88\xe3\x9d', 0x3) [ 2134.871961] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2134.873439] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2134.874409] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2134.875343] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2134.876425] print_req_error: 8 callbacks suppressed [ 2134.876437] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2134.878863] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 11:47:13 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) r2 = memfd_create(0x0, 0x0) fadvise64(r2, 0x0, 0x5, 0x0) [ 2134.889182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2134.889992] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2134.891723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2134.891869] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2134.892489] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2134.895308] Buffer I/O error on dev loop0, logical block 2096896, async page read [ 2134.896570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2134.896601] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2134.898919] blk_update_request: I/O error, dev loop0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2134.899238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2134.901696] Buffer I/O error on dev loop0, logical block 2096897, async page read [ 2134.903162] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2134.903241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2134.904532] blk_update_request: I/O error, dev loop0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2134.905530] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2134.905630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2134.908051] Buffer I/O error on dev loop0, logical block 2096898, async page read [ 2134.908853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2134.911342] Buffer I/O error on dev loop0, logical block 2096899, async page read [ 2134.914646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:47:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:13 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x121840, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xfffffffdffffffff, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001e00)={{}, "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"}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfc, 0x8, 0x2, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x527, &(0x7f0000000400)={0x0, 0x6be, 0x2, 0x3, 0x23e}, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa5220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db31a291b3c4d9fd00000000000000000000000000000000000800000000001c00000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff7f00"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x1c9, &(0x7f0000000180)={0x0, 0x6144, 0x8, 0x5, 0x1a2}, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) [ 2135.002668] Buffer I/O error on dev loop0, logical block 2096900, async page read [ 2135.004512] Buffer I/O error on dev loop0, logical block 2096901, async page read [ 2135.006260] Buffer I/O error on dev loop0, logical block 2096902, async page read [ 2135.008038] Buffer I/O error on dev loop0, logical block 2096903, async page read 11:47:13 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:13 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x683, 0x12) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) finit_module(r2, &(0x7f0000000000)='/dev/sr0\x00', 0x3) 11:47:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000500)) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) sendfile(r0, r2, &(0x7f0000000140)=0x9, 0x7) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:47:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:47:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:26 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = syz_open_dev$rtc(&(0x7f00000001c0), 0x6, 0x2000) fremovexattr(r4, &(0x7f0000000300)=@known='trusted.overlay.nlink\x00') r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r5, 0x5395, &(0x7f00000000c0)) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:47:26 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 56) 11:47:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:26 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) accept$unix(r0, 0x0, &(0x7f0000000000)) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0) fcntl$setsig(r1, 0xa, 0x29) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48142) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000005, 0x10, r2, 0x0) memfd_create(0x0, 0x0) [ 2147.393844] FAULT_INJECTION: forcing a failure. [ 2147.393844] name failslab, interval 1, probability 0, space 0, times 0 [ 2147.395843] CPU: 0 PID: 12374 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2147.396989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2147.398352] Call Trace: [ 2147.398782] dump_stack+0x107/0x167 [ 2147.399378] should_fail.cold+0x5/0xa [ 2147.400003] ? create_object.isra.0+0x3a/0xa20 [ 2147.400765] should_failslab+0x5/0x20 [ 2147.401378] kmem_cache_alloc+0x5b/0x310 [ 2147.402050] ? mark_held_locks+0x9e/0xe0 [ 2147.402717] create_object.isra.0+0x3a/0xa20 [ 2147.403443] kmemleak_alloc_percpu+0xa0/0x100 [ 2147.404182] pcpu_alloc+0x4e2/0x1240 [ 2147.404817] __kmem_cache_create+0x35a/0x520 [ 2147.405541] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2147.406344] p9_client_create+0xc6a/0x1230 [ 2147.407031] ? p9_client_flush+0x430/0x430 [ 2147.407711] ? trace_hardirqs_on+0x5b/0x180 [ 2147.408411] ? lockdep_init_map_type+0x2c7/0x780 [ 2147.409174] ? __raw_spin_lock_init+0x36/0x110 [ 2147.409906] v9fs_session_init+0x1dd/0x1680 [ 2147.410604] ? lock_release+0x680/0x680 [ 2147.411245] ? kmem_cache_alloc_trace+0x151/0x320 [ 2147.412036] ? v9fs_show_options+0x690/0x690 [ 2147.412759] ? trace_hardirqs_on+0x5b/0x180 [ 2147.413464] ? kasan_unpoison_shadow+0x33/0x50 [ 2147.414197] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2147.415021] v9fs_mount+0x79/0x8f0 [ 2147.415599] ? v9fs_write_inode+0x60/0x60 [ 2147.416264] legacy_get_tree+0x105/0x220 [ 2147.416961] vfs_get_tree+0x8e/0x300 [ 2147.417550] path_mount+0x1429/0x2120 [ 2147.418186] ? strncpy_from_user+0x9e/0x470 [ 2147.418895] ? finish_automount+0xa90/0xa90 [ 2147.419603] ? getname_flags.part.0+0x1dd/0x4f0 [ 2147.420389] ? _copy_from_user+0xfb/0x1b0 [ 2147.421053] __x64_sys_mount+0x282/0x300 [ 2147.421699] ? copy_mnt_ns+0xa00/0xa00 [ 2147.422349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2147.423213] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2147.424056] do_syscall_64+0x33/0x40 [ 2147.424661] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2147.425465] RIP: 0033:0x7f7d78bdfb19 [ 2147.426082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2147.429159] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2147.430428] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2147.431617] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2147.432831] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2147.434031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2147.435218] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:47:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000140)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) readahead(0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff) 11:47:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:26 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x115103, 0x0) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1bd583, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:47:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x40101286, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:47:26 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:47:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa5220000000000000000000000005eebed8104286fb8d0cf00000000000000000000000000000000000000000000000000002b6ecbf1045b18a0000000000000000000000000000000000000000000000008000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da385df478070189b41cfc9cbb88122b617ffb02bb1ebed0d8e4e34a0db74642b1c9d4d25d496507fdf4f33f0824b2b0c72236edcd6ebec901967c075484948e2b44c23c7da51068becd38b75bfba17921e007ddff7f980db42a9492dc959a553dedf361b8630c3040c54d05af59e5ff745d0342"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:47:26 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x8, 0x0, 0x8001, 0x3}) r3 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000100)='net/stat\x00') ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000140)={0x81, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) [ 2147.664161] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:47:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:26 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40081271, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:47:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:39 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40081271, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:47:39 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/89, 0x59}, {&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f0000000480)=""/128, 0x80}, {&(0x7f0000000500)=""/94, 0x5e}], 0x4, 0x0, 0x61c) 11:47:39 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) r2 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0x5b8, 0x900) r4 = socket$inet(0x2, 0x80000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="400600002c00000129bd7000fddbdf251300000027028b800c001900ae0c0000000000008648418cb4c0188e95d38193af021b2bcafa8a35f8299c9b21041ee8a7a749b4b319984c6b03ef779e29e4587c7fff6649d461039dfde68c182f922798c16eed129a5dc9049a8623617e9bdf5173d126e28b5da7e17110b9052e517a41d67a4fa5b993ddedfac52e6e43243263a3b06fecfaf74e17d45357ea87c383161908e634eefe54b3b65b452f1c32a13f52cdf02445b8020548ffe2d9fe26460c1d3fb9611e10682ca96fefa626618fa6a43dfde301b5d13f325ce52605479c3ae17e3ee6e34533647b8226e8d339557c4f351f820f3a651bcbfcc2fa2b2fab63341dfd8ebf8db208007f00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x640}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0) memfd_create(0x0, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4440, 0x0) finit_module(r6, &(0x7f00000000c0)='/dev/sr0\x00', 0x1) 11:47:39 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 57) 11:47:39 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) r5 = dup2(r0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f0000000380)=0x1e) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r7, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:47:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d75d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b93ce2d79daea2f862f1b55b37ee8d399ddfff1823a5184fb0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e0000000079a6b4e0325afb5c8cf2a50ef2a5dc19da1526a05aea6f0122e5d0c2e464e28662d369726e53789661c24685e0e84d42546f6e8888897770d1b7286bb6a4e8e0796bc771e3b587f29a3f4deadcc888fc5dc0f8eb0ce8d0ef2a5699f5f235a168eb84c4c5b05d1bd14406b9cd00954fa4aaaaa4818d3dbf5403cedf4533616cb4d6315bccd045dc7bf1b6a043ac1e499bbc004d3ff54ffbbfb2d3e90ef2cccdc18fccbdf381a3318dde1827516fe2901e02aa799af115fcaf"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:39 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8}, 0x48211, 0x1, 0x662, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) r3 = dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x109040, 0x0) fcntl$setlease(r4, 0x400, 0x0) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, r2) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) ioctl$CDROMPLAYBLK(r2, 0x5317, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x19, 0x10, 0x70bd28, 0x25dfdbff, {0x14}, [@generic="ac0b", @typed={0x10, 0xc, 0x0, 0x0, @binary="31dad206d27dc65b7f812e18"}, @nested={0x62, 0xd, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x7}, @typed={0x4, 0x3f}, @typed={0x4, 0x91}, @generic="dbf7f060c97ac68fe0f3f0507a898650", @generic="b9b4ef19b55593d58b009e681894b2543f17ffb6b1ea553982ceacbb78938431408d3907d0f9e21d5c858ae24ff3f89f81b281773ed83cf9a0d5"]}, @typed={0x8, 0x23, 0x0, 0x0, @u32=0x400}, @typed={0xf, 0x93, 0x0, 0x0, @str='/dev/loop#\x00'}, @generic="16b5420842245034a3cb"]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) [ 2160.781867] FAULT_INJECTION: forcing a failure. [ 2160.781867] name failslab, interval 1, probability 0, space 0, times 0 [ 2160.784402] CPU: 0 PID: 12457 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2160.785717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2160.787214] Call Trace: [ 2160.787681] dump_stack+0x107/0x167 [ 2160.788354] should_fail.cold+0x5/0xa [ 2160.789075] should_failslab+0x5/0x20 [ 2160.789798] __kmalloc_track_caller+0x79/0x370 [ 2160.790647] ? kstrdup_const+0x53/0x80 [ 2160.791362] kstrdup+0x36/0x70 [ 2160.791907] kstrdup_const+0x53/0x80 [ 2160.792545] kvasprintf_const+0x10c/0x1a0 [ 2160.793359] kobject_set_name_vargs+0x56/0x150 [ 2160.794190] kobject_init_and_add+0xc9/0x160 [ 2160.794986] ? kobject_create_and_add+0xb0/0xb0 [ 2160.795787] ? wait_for_completion_io+0x270/0x270 [ 2160.796602] ? kernfs_name_hash+0xe7/0x110 [ 2160.797332] ? kernfs_find_ns+0x256/0x380 [ 2160.798036] sysfs_slab_add+0x172/0x200 [ 2160.798735] __kmem_cache_create+0x3db/0x520 [ 2160.799572] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2160.800477] p9_client_create+0xc6a/0x1230 [ 2160.801277] ? p9_client_flush+0x430/0x430 [ 2160.802039] ? trace_hardirqs_on+0x5b/0x180 [ 2160.802818] ? lockdep_init_map_type+0x2c7/0x780 [ 2160.803644] ? __raw_spin_lock_init+0x36/0x110 [ 2160.804444] v9fs_session_init+0x1dd/0x1680 [ 2160.805238] ? lock_release+0x680/0x680 [ 2160.805919] ? kmem_cache_alloc_trace+0x151/0x320 [ 2160.806756] ? v9fs_show_options+0x690/0x690 [ 2160.807603] ? trace_hardirqs_on+0x5b/0x180 [ 2160.808381] ? kasan_unpoison_shadow+0x33/0x50 [ 2160.809186] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2160.810080] v9fs_mount+0x79/0x8f0 [ 2160.810776] ? v9fs_write_inode+0x60/0x60 [ 2160.811499] legacy_get_tree+0x105/0x220 [ 2160.812240] vfs_get_tree+0x8e/0x300 [ 2160.812922] path_mount+0x1429/0x2120 [ 2160.813573] ? strncpy_from_user+0x9e/0x470 [ 2160.814369] ? finish_automount+0xa90/0xa90 [ 2160.815198] ? getname_flags.part.0+0x1dd/0x4f0 [ 2160.816007] ? _copy_from_user+0xfb/0x1b0 [ 2160.816722] __x64_sys_mount+0x282/0x300 [ 2160.817427] ? copy_mnt_ns+0xa00/0xa00 [ 2160.818131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2160.819053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2160.819970] do_syscall_64+0x33/0x40 [ 2160.820631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2160.821584] RIP: 0033:0x7f7d78bdfb19 [ 2160.822239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2160.825604] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2160.827134] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2160.828432] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2160.829795] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2160.831092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2160.832446] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2160.833834] kobject: can not set name properly! [ 2160.834944] kmem_cache_create(9p-fcall-cache-317) failed with error -12 [ 2160.836111] CPU: 0 PID: 12457 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2160.837277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2160.838667] Call Trace: [ 2160.839103] dump_stack+0x107/0x167 [ 2160.839714] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2160.840592] p9_client_create+0xc6a/0x1230 [ 2160.841310] ? p9_client_flush+0x430/0x430 [ 2160.842017] ? trace_hardirqs_on+0x5b/0x180 [ 2160.842734] ? lockdep_init_map_type+0x2c7/0x780 [ 2160.843518] ? __raw_spin_lock_init+0x36/0x110 [ 2160.844281] v9fs_session_init+0x1dd/0x1680 [ 2160.845051] ? lock_release+0x680/0x680 [ 2160.845764] ? kmem_cache_alloc_trace+0x151/0x320 [ 2160.846593] ? v9fs_show_options+0x690/0x690 [ 2160.847407] ? trace_hardirqs_on+0x5b/0x180 [ 2160.848174] ? kasan_unpoison_shadow+0x33/0x50 [ 2160.848995] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2160.850068] v9fs_mount+0x79/0x8f0 [ 2160.850677] ? v9fs_write_inode+0x60/0x60 [ 2160.851388] legacy_get_tree+0x105/0x220 [ 2160.852074] vfs_get_tree+0x8e/0x300 [ 2160.852751] path_mount+0x1429/0x2120 [ 2160.853459] ? strncpy_from_user+0x9e/0x470 [ 2160.854178] ? finish_automount+0xa90/0xa90 [ 2160.854898] ? getname_flags.part.0+0x1dd/0x4f0 [ 2160.855815] ? _copy_from_user+0xfb/0x1b0 [ 2160.856528] __x64_sys_mount+0x282/0x300 [ 2160.857222] ? copy_mnt_ns+0xa00/0xa00 [ 2160.857873] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2160.858746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2160.859596] do_syscall_64+0x33/0x40 [ 2160.860217] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2160.861164] RIP: 0033:0x7f7d78bdfb19 [ 2160.861833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2160.865070] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2160.866346] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2160.867593] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2160.868867] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2160.870116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2160.871489] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2161.244632] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2161.245754] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2161.246518] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2161.248239] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2161.249175] print_req_error: 8 callbacks suppressed [ 2161.249185] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2161.251021] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2161.252896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.253527] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2161.254753] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2161.255973] Buffer I/O error on dev loop0, logical block 2096896, async page read [ 2161.257435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.258114] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2161.259395] blk_update_request: I/O error, dev loop0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2161.260639] Buffer I/O error on dev loop0, logical block 2096897, async page read [ 2161.262655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.263285] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2161.264564] blk_update_request: I/O error, dev loop0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2161.265802] Buffer I/O error on dev loop0, logical block 2096898, async page read [ 2161.266967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.267610] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2161.268829] blk_update_request: I/O error, dev loop0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2161.270065] Buffer I/O error on dev loop0, logical block 2096899, async page read [ 2161.271059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.271787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.272486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.273358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.274085] Buffer I/O error on dev loop0, logical block 2096900, async page read [ 2161.274992] Buffer I/O error on dev loop0, logical block 2096901, async page read [ 2161.275868] Buffer I/O error on dev loop0, logical block 2096902, async page read [ 2161.276778] Buffer I/O error on dev loop0, logical block 2096903, async page read [ 2161.335483] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2161.336872] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2161.337666] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2161.338395] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2161.340158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.341212] Buffer I/O error on dev loop0, logical block 2096896, async page read [ 2161.341230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.343178] Buffer I/O error on dev loop0, logical block 2096897, async page read [ 2161.343198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.345233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.345927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.346604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.347280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.347963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.407570] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2161.408730] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2161.409526] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2161.410302] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2161.411647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.412316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.413364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.414060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.414763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.415425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.416107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.416790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.582111] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2161.583338] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2161.584204] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2161.585038] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2161.586454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.587912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.588876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.589777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.590594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.591422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.592329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2161.593317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:47:54 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40081271, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:47:54 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10000000000000, 0x48242) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4010, 0xffffffffffffffff, 0xfffff000) memfd_create(0x0, 0x0) 11:47:54 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r0, &(0x7f00000005c0)='fdinfo/3\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5a, 0x20120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x1000000000000, 0x662, 0x7, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:47:54 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 58) 11:47:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x3f}}, './file0\x00'}) r4 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x1, 0x784}}, './file0\x00'}) r5 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:47:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x7209, 0x0, 0xffffffff, 0x1000}) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000000)=@lstk={0x7, 0x0, "0466d870f3", 0x6, 0x1, 0x0, 0x2}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0xc0182) ioctl$LOOP_SET_FD(r6, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:47:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:55 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40081271, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) [ 2176.367335] FAULT_INJECTION: forcing a failure. [ 2176.367335] name failslab, interval 1, probability 0, space 0, times 0 [ 2176.370341] CPU: 0 PID: 12488 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2176.371974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2176.373941] Call Trace: [ 2176.374561] dump_stack+0x107/0x167 [ 2176.375423] should_fail.cold+0x5/0xa [ 2176.376336] ? create_object.isra.0+0x3a/0xa20 [ 2176.377418] should_failslab+0x5/0x20 [ 2176.378301] kmem_cache_alloc+0x5b/0x310 [ 2176.379273] create_object.isra.0+0x3a/0xa20 [ 2176.380284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2176.381488] __kmalloc_track_caller+0x177/0x370 [ 2176.382570] ? kstrdup_const+0x53/0x80 [ 2176.383498] kstrdup+0x36/0x70 [ 2176.384255] kstrdup_const+0x53/0x80 [ 2176.385142] kvasprintf_const+0x10c/0x1a0 [ 2176.386154] kobject_set_name_vargs+0x56/0x150 [ 2176.387238] kobject_init_and_add+0xc9/0x160 [ 2176.388273] ? kobject_create_and_add+0xb0/0xb0 [ 2176.389377] ? wait_for_completion_io+0x270/0x270 [ 2176.390526] ? kernfs_name_hash+0xe7/0x110 [ 2176.391533] ? kernfs_find_ns+0x256/0x380 [ 2176.392528] sysfs_slab_add+0x172/0x200 [ 2176.393482] __kmem_cache_create+0x3db/0x520 [ 2176.394527] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2176.395698] p9_client_create+0xc6a/0x1230 [ 2176.396692] ? p9_client_flush+0x430/0x430 [ 2176.397685] ? trace_hardirqs_on+0x5b/0x180 [ 2176.398702] ? lockdep_init_map_type+0x2c7/0x780 [ 2176.399818] ? __raw_spin_lock_init+0x36/0x110 [ 2176.400884] v9fs_session_init+0x1dd/0x1680 [ 2176.401892] ? lock_release+0x680/0x680 [ 2176.402830] ? kmem_cache_alloc_trace+0x151/0x320 [ 2176.403957] ? v9fs_show_options+0x690/0x690 [ 2176.405006] ? trace_hardirqs_on+0x5b/0x180 [ 2176.406021] ? kasan_unpoison_shadow+0x33/0x50 [ 2176.407082] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2176.408265] v9fs_mount+0x79/0x8f0 [ 2176.409087] ? v9fs_write_inode+0x60/0x60 [ 2176.410065] legacy_get_tree+0x105/0x220 [ 2176.411004] vfs_get_tree+0x8e/0x300 [ 2176.411873] path_mount+0x1429/0x2120 [ 2176.412767] ? strncpy_from_user+0x9e/0x470 [ 2176.413778] ? finish_automount+0xa90/0xa90 [ 2176.414779] ? getname_flags.part.0+0x1dd/0x4f0 [ 2176.415860] ? _copy_from_user+0xfb/0x1b0 [ 2176.416839] __x64_sys_mount+0x282/0x300 [ 2176.417802] ? copy_mnt_ns+0xa00/0xa00 [ 2176.418714] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2176.419931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2176.421140] do_syscall_64+0x33/0x40 [ 2176.422023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2176.423217] RIP: 0033:0x7f7d78bdfb19 [ 2176.424072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2176.428330] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2176.430095] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2176.431751] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2176.433413] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2176.435060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2176.436708] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:47:55 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) r5 = dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x8001}}, './file0\x00'}) r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:47:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:55 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:47:55 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40081271, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 11:47:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) r5 = dup2(r0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f00000001c0)=@lsc={0x3, 0x0, "32bda688e4844e066f48"}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:47:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 11:47:55 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) r7 = dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r6, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r6, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r6, r6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7, {r4, r5}}, './file0\x00'}) ioctl$DVD_AUTH(r8, 0x5390, &(0x7f00000001c0)=@hsk={0x4, 0x2, "fed423c57b"}) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r9, 0x4c00, r6) ioctl$CDROMPLAYBLK(r6, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:47:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:47:55 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000000)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) [ 2176.649434] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:48:10 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 59) 11:48:10 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = memfd_create(&(0x7f0000000300)='\xee\xe6\'\xfe\xf5|\x8c\x7fH\xec[\xdd\x01\xf2\xa8\x93\xad\x82`F\x14Q\x15\xa9\xd4\xb9\x0e\xe0J\x11\xe8\x82I.&\x1f\xe3A\x02\x1c\x8eF?\xffo\xe9\xf0\b\x88$~\x99\xa1R\xb0\xa7\xe3(\"\x19\x9ae\xadb\x89\xfc\x15*uU\x15\xf8NM\xdd\x95$\xc3\x05\x9d\xa7\xf5\xe4\xf9\\R\x94E\xabD\'\xb7\xd9\xf4\x0f\x7f \xee\x87T\x04}%!w<[\x81Y9\x9eJ\x81 ', 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000240)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r5, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r5, r5) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$CDROMPLAYBLK(r5, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r2, 0x0) 11:48:10 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40081271, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) 11:48:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:10 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) finit_module(r0, &(0x7f0000000000)='})\'\x00', 0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x51, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:48:10 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:48:10 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r5, 0x5395, &(0x7f00000000c0)) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000400)={0x860, 0x1, 0x7, 0x101, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x8}, [@typed={0x8, 0x6a, 0x0, 0x0, @fd=r5}, @nested={0x9c, 0x6f, 0x0, 0x1, [@generic="5df2650835469fd115fad0f173d0d9548982c5f4611b36daab58903e33447f85d368d1b03225f90500afcc1561dfa1f6be2fac8f853c5269cfb8005f7c5e7b0e3ae28c5ad7a07178eac41b5f4556e8a4ca24b36cce4f14a69497941fd17681dbd8dd39c416953218671dc9830a8b166e0a4a2aa8d76723d3adff0ab0032dfe3c3e9368d254d5422f149f3b299649dd65ea95e81c8302c223"]}, @generic="865a442b963dad41dbf47fe58bb2561dac2e56087fb91e6fbd50497b46b9da2f851bdb07534916a6354e055107273e29214da4d70b3c4b02ee1b633d6d78eebe08b0680795bcf2f01f4f5ccfa9e42051d3bd9588fdb06fbd725cf9d3c91a72c926cb8d49186e9698972569589aec0197d56cf5910588bc0640362e689d20ed90cb29bbe428698a5b43156aa87034f433ea246e4114577c8b352be0fcc05c4966e3f3eab824c6e6dd9a64b95ea3cfc0ede0eef3e0a4b2bc17372ee720dab348c8a0fe358146462b98061655c3f923fc5c189c092ecb36c10bccfa861de27883cc7f210a313e33c293", @nested={0x14, 0x12, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @uid}, @typed={0x5, 0x1e, 0x0, 0x0, @str='\x00'}]}, @generic="ea23c9ba1da1611303e574d6be49a2b4e0f0977daa3bc2215c4afc56602832353483bba4dd28a783360ef2226bccb5d77fb221b520c38eb290e1361e6b97edfe58a8ae6df93f90c8c98355bc7c9884e1e1a21072c622899d2e9dc5d7644dfbf582768a", @nested={0x59, 0x10, 0x0, 0x1, [@generic="8736b92b153df1b93f937ac171c0ebfec54e576ea184e9a3754db5fd8bad9cf53bc8e0290d87f30774ac518a02b50fdf229a10b3ec2f76736ae1ddbe77cae3102b219ecd84ea134fbec0954840", @typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x34d, 0x50, 0x0, 0x1, [@generic="7c5cd47a368ed7b9e06357d68c7ec751fd026df4de56ed93a0c7a21662189df837dfebbb5dcccd49c1c5c965d05a908dcae99a744c92818223ccd56c81129da31b63e2ca6232bc8d8eb0aff7928d0a74ab6821687950bc18c8b57b4c4a95bda00ff74c7cbe50b1fc61", @generic="c4beb8090a7db8a299a7b647bdf84eb1f26a188651ec10419c8b4afbb38e65ed0cebc12380c45b234ccabf5ddd80668f6eef", @typed={0x8, 0x33, 0x0, 0x0, @uid}, @generic="e06518e90c3d5afa4384873aff2adfb9f5c14f084857a152466ebb89ad7edd8a3d4d9e7cee0df63daf0b2ea160f8fce14e5f333b122efe5ed236bf792f397facab37b0d695322a93c78167f3d1f7a6c77c75b04a37f01c7b2eaaf33e8937c045296f064c842aa44495d61a7e2257ef0f635c5907cb1718db86bffeea42c8355f6c08f197764479d5b0f41b401cb166c28ad9fa8aa4990517065988879ac1d61b583c36264a29c41da3f5650a1569b3c342788cd37b02fb0154301c", @typed={0x4, 0x5a}, @generic="465d23dca1c5d908c7fa04e4fff485d38f00d3e3335e5bdc83f5815a7c35f6f18f5910b7fdb79c73b95be78345152308d8c2ae143d388bfa7ee97a7dcc47a841639e3bf4f5dbf16d5024d7a8fd630deb12af6cd9d8137aa3717722ca95becee66ef8ac2060c0cc20dc4c63f8b18131240232f7c78680545e7733f7ab3ba9340430f82a277a86177ad31600ac34cd4bd38d7fb275d0c1aeca2344d89e3d", @typed={0x6, 0x66, 0x0, 0x0, @str='*\x00'}, @generic="f7fd66c31bfe248ab595870df6e3d4e3a27dba6f2a38921113c0cdce484c48566dba922a823c81bf46cb5bb34dce050d5aa2fc0d0e7a763e7467979e9cb5aa25681add3dcad56110a48df8ec06babb6ac65748184ef76e44b776f8b5050dfea13d916293701bc148f485dd0b4e292a0489f9d736202cb43795ab510db480c6ddd9cca884a7179998a707cf8c4fb60d57a9e3963e037c2ba3", @generic="9964aa31af4454138ac928954037ebb9e90cc5476750ae6354e6f7596d6fc1b6adf881a174290f355e161a7891a5774fbab0020972204b3e8d7c664696be8966f565b40b8d936f24b82d104431bb074afe6c39a73720caf621c5961f0cf8d43368647db3ded39f948bd03e34c64e200359875f8cebcc320f94c17ad0", @generic="c4c08ca38e0c937813ec9abdff14790791c57410c9bd06b7f28347fe6a2cb28555927493f87513a72727b2520f4c"]}, @nested={0x29a, 0x4e, 0x0, 0x1, [@typed={0x90, 0x6, 0x0, 0x0, @binary="9124a7625ff893a91bc798d79bc835fb9888211bd07c1f9fe26a82663aaf4300fa3dd0a99c9fc1bac077c23f69ac48aa80a86ccab52af39b226c86c4b0e1f2b43f5d2d98dc3841dabd404cf6894d1c0d8ead278ac50b7ab9bcf0f8a6c22c3159d641748e6360510fbeb07e58119cc890469a608eb4ad501169c53f42fd1ac92708fa338e3fffec05315aa9e7"}, @generic="0da83fa71af96a4612bab1c33c6d44902bdddadf422b1584dd73abf47be0efc8f0b5f8732335504ee60d402aa9428c6db67a8f4f5fbdebb41d15240e4b29ed47f2cd604c941177e9e18b6cd0db365be53bb6b29c0b480904c81b1b928129ac6c738eeeb97d072c1a441003e53202f27a3111b6959cc6a4f748c94017cdf8c52436bb232dc6dbf6641d05922ef2b8371a4768e72b306d6de877dd0936bd517b707c4411343e5d706a9d2a5a46ea1280e2b81058ad16f956ddd74c1bf8fa41abada2e40fd5ed46e7bbe18988ece08d2950f51b0fa316", @typed={0x8, 0x16, 0x0, 0x0, @pid=r4}, @generic="e0320796833a9fc8761ce8259359cda3349dcd88bc9950b0630aee3c928b8a7025164593f89126bfb2ad6268151822659dfd9a9f908c3bacb6f80783e05292fb6759952d472dd3375ac107587eb826a9d2047403f644c571f741b18548c779393278add4aa4b004a1f21015662f2a1cc7af1348ae5046fc5bde29cbaaf1e5168e132c1aff2130467b90610421379f47dc3d47b407a5629693303dc42530467b6c539afc2b5f33a", @generic="24bd84b13ab7a247faed3cbea400655e8a84305e6fa38abdd5379a23cd0989711c", @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x6e, 0x0, 0x0, @u32=0xfffffeff}, @generic="bee779154b6cc6982f42f933664d2e32e39b5d8f553414a9fb702e7d52c4f6046e63a11713aae731891f5d0c4f3accca1748982ad0cc7a06ca965691fc5a943b58a0193798b0db510eb14d17b858708e9a"]}]}, 0x860}, 0x1, 0x0, 0x0, 0x805}, 0x804) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) [ 2191.567012] FAULT_INJECTION: forcing a failure. [ 2191.567012] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.568640] CPU: 0 PID: 12556 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2191.569526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2191.570598] Call Trace: [ 2191.570942] dump_stack+0x107/0x167 [ 2191.571408] should_fail.cold+0x5/0xa [ 2191.571905] should_failslab+0x5/0x20 [ 2191.572396] __kmalloc_track_caller+0x79/0x370 [ 2191.572988] ? kstrdup_const+0x53/0x80 [ 2191.573488] kstrdup+0x36/0x70 [ 2191.573905] kstrdup_const+0x53/0x80 [ 2191.574398] __kernfs_new_node+0x9d/0x860 [ 2191.574948] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2191.575585] ? lock_acquire+0x197/0x470 [ 2191.576102] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2191.576773] ? lock_release+0x680/0x680 [ 2191.577283] ? find_held_lock+0x2c/0x110 [ 2191.577813] kernfs_new_node+0x18d/0x250 [ 2191.578351] kernfs_create_dir_ns+0x49/0x160 [ 2191.578915] sysfs_create_dir_ns+0x127/0x290 [ 2191.579477] ? sysfs_create_mount_point+0xb0/0xb0 [ 2191.580092] ? rwlock_bug.part.0+0x90/0x90 [ 2191.580634] ? do_raw_spin_unlock+0x4f/0x220 [ 2191.581200] kobject_add_internal+0x25e/0xa30 [ 2191.581777] kobject_init_and_add+0x101/0x160 [ 2191.582358] ? kobject_create_and_add+0xb0/0xb0 [ 2191.582956] ? wait_for_completion_io+0x270/0x270 [ 2191.583569] ? kernfs_name_hash+0xe7/0x110 [ 2191.584107] ? kernfs_find_ns+0x256/0x380 [ 2191.584640] sysfs_slab_add+0x172/0x200 [ 2191.585150] __kmem_cache_create+0x3db/0x520 [ 2191.585721] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2191.586367] p9_client_create+0xc6a/0x1230 [ 2191.586912] ? p9_client_flush+0x430/0x430 [ 2191.587450] ? trace_hardirqs_on+0x5b/0x180 [ 2191.587997] ? lockdep_init_map_type+0x2c7/0x780 [ 2191.588607] ? __raw_spin_lock_init+0x36/0x110 [ 2191.589192] v9fs_session_init+0x1dd/0x1680 [ 2191.589749] ? lock_release+0x680/0x680 [ 2191.590273] ? kmem_cache_alloc_trace+0x151/0x320 [ 2191.590887] ? v9fs_show_options+0x690/0x690 [ 2191.591454] ? trace_hardirqs_on+0x5b/0x180 [ 2191.592002] ? kasan_unpoison_shadow+0x33/0x50 [ 2191.592583] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2191.593233] v9fs_mount+0x79/0x8f0 [ 2191.593695] ? v9fs_write_inode+0x60/0x60 [ 2191.594236] legacy_get_tree+0x105/0x220 [ 2191.594757] vfs_get_tree+0x8e/0x300 [ 2191.595235] path_mount+0x1429/0x2120 [ 2191.595872] ? strncpy_from_user+0x9e/0x470 [ 2191.596435] ? finish_automount+0xa90/0xa90 [ 2191.596993] ? getname_flags.part.0+0x1dd/0x4f0 [ 2191.597616] ? _copy_from_user+0xfb/0x1b0 [ 2191.598178] __x64_sys_mount+0x282/0x300 [ 2191.598840] ? copy_mnt_ns+0xa00/0xa00 [ 2191.599358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2191.600045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2191.600755] do_syscall_64+0x33/0x40 [ 2191.601260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2191.601964] RIP: 0033:0x7f7d78bdfb19 [ 2191.602444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2191.604930] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2191.605980] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2191.606942] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2191.607909] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2191.608873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2191.609810] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2191.610993] kobject_add_internal failed for 9p-fcall-cache-319 (error: -12 parent: slab) [ 2191.612254] kmem_cache_create(9p-fcall-cache-319) failed with error -12 [ 2191.613227] CPU: 0 PID: 12556 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2191.614131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2191.615224] Call Trace: [ 2191.615560] dump_stack+0x107/0x167 [ 2191.616026] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2191.616725] p9_client_create+0xc6a/0x1230 [ 2191.617273] ? p9_client_flush+0x430/0x430 [ 2191.617843] ? trace_hardirqs_on+0x5b/0x180 [ 2191.618407] ? lockdep_init_map_type+0x2c7/0x780 [ 2191.619037] ? __raw_spin_lock_init+0x36/0x110 [ 2191.619651] v9fs_session_init+0x1dd/0x1680 [ 2191.620213] ? lock_release+0x680/0x680 [ 2191.620735] ? kmem_cache_alloc_trace+0x151/0x320 [ 2191.621371] ? v9fs_show_options+0x690/0x690 [ 2191.621979] ? trace_hardirqs_on+0x5b/0x180 [ 2191.622557] ? kasan_unpoison_shadow+0x33/0x50 [ 2191.623157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2191.623815] v9fs_mount+0x79/0x8f0 [ 2191.624275] ? v9fs_write_inode+0x60/0x60 [ 2191.624799] legacy_get_tree+0x105/0x220 [ 2191.625308] vfs_get_tree+0x8e/0x300 [ 2191.625782] path_mount+0x1429/0x2120 [ 2191.626275] ? strncpy_from_user+0x9e/0x470 [ 2191.626831] ? finish_automount+0xa90/0xa90 [ 2191.627387] ? getname_flags.part.0+0x1dd/0x4f0 [ 2191.627982] ? _copy_from_user+0xfb/0x1b0 [ 2191.628509] __x64_sys_mount+0x282/0x300 [ 2191.629033] ? copy_mnt_ns+0xa00/0xa00 [ 2191.629523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2191.630219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2191.630883] do_syscall_64+0x33/0x40 [ 2191.631353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2191.632010] RIP: 0033:0x7f7d78bdfb19 [ 2191.632484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2191.634876] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2191.635838] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2191.636748] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2191.637658] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2191.638583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2191.639479] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:48:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:10 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d04, &(0x7f0000000080)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:48:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:10 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40081271, r0) 11:48:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r1) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0xfffffe66}}, './file0\x00'}) ioctl$CDROM_SEND_PACKET(r5, 0x5393, &(0x7f00000002c0)={"e10a9b1311d90b9d5075dd6d", &(0x7f0000000380)="d85c2efdf1f751d56f0460343250daba0ccad7174a6a2cde51cf8a621d7d8d193fa5b0f748f698e281bccb201e0b20ec7032e0d4a7f4ce2dedd2cefcaf7ff1f73710c205ea2c2d613d376e61602183f1b74c1607a3d11e0c13ec99c2ff11dea9faeabd5e7f77599b6137bdfefb36de9a0e29ee6ecb1f1f8a2ad87b5f19855c3f315b4179ea511e982fe8bb5ae90578972c217571c35dbcad6a002b407695e4bc4779e3b0df94da7659dfe697257bddc09a87f8ab8c78a7313ede0475464e4ef869641e73ee396a23d78ac388ea10b779aaf3b68d1b5853d4c44e8fc3b39f2ee149aa", 0xe2, 0x8, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "c13b853d", 0x40, "73a487ca", 0x0, 0x6, 0x80, "5d992f", "57756f3e33434f90f79733defd73398c962124dcfbb78a826fcf29f5a88db4dbdcc54c099a65191d00078de98fc7"}, 0x2, 0x5, 0x3, &(0x7f0000000280)}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) finit_module(r6, &(0x7f0000000140)='/#(\x00', 0x2) 11:48:10 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x240200, 0x0) mmap(&(0x7f000032a000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x571ca000) memfd_create(0x0, 0x0) [ 2191.818721] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:48:22 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 60) 11:48:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) accept$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xfffffffffffffec4) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:48:22 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x40081271, r0) 11:48:22 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$CDROMPLAYBLK(r1, 0x5317, 0x0) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, 0x0) sendfile(r3, r2, 0x0, 0x1f) 11:48:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000f0030000000000000000000000000000000000000000000000001c00"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:48:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0xb}, 0x3002, 0x0, 0x662, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000380)={0x0, 0x4000, 0x2356}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f00000001c0)=@lstk={0x7, 0x1, "c628ade6cb", 0xe71a}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) [ 2204.104935] FAULT_INJECTION: forcing a failure. [ 2204.104935] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.107780] CPU: 1 PID: 12619 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2204.109233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.110968] Call Trace: [ 2204.111523] dump_stack+0x107/0x167 [ 2204.112276] should_fail.cold+0x5/0xa [ 2204.113086] ? create_object.isra.0+0x3a/0xa20 [ 2204.114026] should_failslab+0x5/0x20 [ 2204.114851] kmem_cache_alloc+0x5b/0x310 [ 2204.115735] create_object.isra.0+0x3a/0xa20 [ 2204.116647] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2204.117725] __kmalloc_track_caller+0x177/0x370 [ 2204.118695] ? kstrdup_const+0x53/0x80 [ 2204.119522] kstrdup+0x36/0x70 [ 2204.120197] kstrdup_const+0x53/0x80 [ 2204.120985] __kernfs_new_node+0x9d/0x860 [ 2204.121850] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2204.122864] ? lock_acquire+0x197/0x470 [ 2204.123696] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2204.124788] ? lock_release+0x680/0x680 [ 2204.125647] ? find_held_lock+0x2c/0x110 [ 2204.126521] kernfs_new_node+0x18d/0x250 [ 2204.127369] kernfs_create_dir_ns+0x49/0x160 [ 2204.128310] sysfs_create_dir_ns+0x127/0x290 [ 2204.129240] ? sysfs_create_mount_point+0xb0/0xb0 [ 2204.130254] ? rwlock_bug.part.0+0x90/0x90 [ 2204.131157] ? do_raw_spin_unlock+0x4f/0x220 [ 2204.132116] kobject_add_internal+0x25e/0xa30 [ 2204.133085] kobject_init_and_add+0x101/0x160 [ 2204.134037] ? kobject_create_and_add+0xb0/0xb0 [ 2204.135051] ? wait_for_completion_io+0x270/0x270 [ 2204.136052] ? kernfs_name_hash+0xe7/0x110 [ 2204.136947] ? kernfs_find_ns+0x256/0x380 [ 2204.137838] sysfs_slab_add+0x172/0x200 [ 2204.138676] __kmem_cache_create+0x3db/0x520 [ 2204.139622] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2204.140668] p9_client_create+0xc6a/0x1230 [ 2204.141559] ? p9_client_flush+0x430/0x430 [ 2204.142462] ? trace_hardirqs_on+0x5b/0x180 [ 2204.143373] ? lockdep_init_map_type+0x2c7/0x780 [ 2204.144363] ? __raw_spin_lock_init+0x36/0x110 [ 2204.145333] v9fs_session_init+0x1dd/0x1680 [ 2204.146237] ? lock_release+0x680/0x680 [ 2204.147077] ? kmem_cache_alloc_trace+0x151/0x320 [ 2204.148098] ? v9fs_show_options+0x690/0x690 [ 2204.149025] ? trace_hardirqs_on+0x5b/0x180 [ 2204.149919] ? kasan_unpoison_shadow+0x33/0x50 [ 2204.150900] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2204.151967] v9fs_mount+0x79/0x8f0 [ 2204.152726] ? v9fs_write_inode+0x60/0x60 [ 2204.153591] legacy_get_tree+0x105/0x220 [ 2204.154418] vfs_get_tree+0x8e/0x300 [ 2204.155198] path_mount+0x1429/0x2120 [ 2204.155993] ? strncpy_from_user+0x9e/0x470 [ 2204.156899] ? finish_automount+0xa90/0xa90 [ 2204.157796] ? getname_flags.part.0+0x1dd/0x4f0 [ 2204.158798] ? _copy_from_user+0xfb/0x1b0 [ 2204.159684] __x64_sys_mount+0x282/0x300 [ 2204.160520] ? copy_mnt_ns+0xa00/0xa00 [ 2204.161342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2204.162456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2204.163542] do_syscall_64+0x33/0x40 [ 2204.164345] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.165437] RIP: 0033:0x7f7d78bdfb19 [ 2204.166199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.170014] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2204.171622] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2204.173126] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2204.174638] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2204.176121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2204.177613] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2204.219306] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:48:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:22 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x40081271, r0) 11:48:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(0x0, 0x0) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:48:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(0x0, 0x0) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000340)='\x00', 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000240)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, 0x0) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r3, r3) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r3) ioctl$CDROMPLAYBLK(r3, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x50, 0xffffffffffffffff, 0x0) 11:48:23 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x40081271, r0) 11:48:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:23 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 61) 11:48:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000005c0)='fdinfo/3\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x40, 0x0, 0x81, 0x6, 0x0, 0x7, 0x802, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x896c, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x12, 0x9, 0x8000, 0x6, 0x0, 0x6b, 0xf0d, 0x0, 0x2, 0x0, 0xf11c}, r1, 0x10, r0, 0xb) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:48:23 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40081271, r0) [ 2204.483179] FAULT_INJECTION: forcing a failure. [ 2204.483179] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.485815] CPU: 0 PID: 12670 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2204.487267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.488982] Call Trace: [ 2204.489536] dump_stack+0x107/0x167 [ 2204.490309] should_fail.cold+0x5/0xa [ 2204.491110] ? create_object.isra.0+0x3a/0xa20 [ 2204.492059] should_failslab+0x5/0x20 [ 2204.492872] kmem_cache_alloc+0x5b/0x310 [ 2204.493716] create_object.isra.0+0x3a/0xa20 [ 2204.494634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2204.495698] __kmalloc_track_caller+0x177/0x370 [ 2204.496668] ? kstrdup_const+0x53/0x80 [ 2204.497490] kstrdup+0x36/0x70 [ 2204.498158] kstrdup_const+0x53/0x80 [ 2204.498941] __kernfs_new_node+0x9d/0x860 [ 2204.499824] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2204.500819] ? lock_acquire+0x197/0x470 [ 2204.501641] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2204.502738] ? lock_release+0x680/0x680 [ 2204.503561] ? find_held_lock+0x2c/0x110 [ 2204.504408] kernfs_new_node+0x18d/0x250 [ 2204.505266] kernfs_create_dir_ns+0x49/0x160 [ 2204.506187] sysfs_create_dir_ns+0x127/0x290 [ 2204.507116] ? sysfs_create_mount_point+0xb0/0xb0 [ 2204.508126] ? rwlock_bug.part.0+0x90/0x90 [ 2204.509024] ? do_raw_spin_unlock+0x4f/0x220 [ 2204.509949] kobject_add_internal+0x25e/0xa30 [ 2204.510907] kobject_init_and_add+0x101/0x160 [ 2204.511843] ? kobject_create_and_add+0xb0/0xb0 [ 2204.512827] ? wait_for_completion_io+0x270/0x270 [ 2204.513827] ? kernfs_name_hash+0xe7/0x110 [ 2204.514739] ? kernfs_find_ns+0x256/0x380 [ 2204.515605] sysfs_slab_add+0x172/0x200 [ 2204.516438] __kmem_cache_create+0x3db/0x520 [ 2204.517360] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2204.518417] p9_client_create+0xc6a/0x1230 [ 2204.519310] ? p9_client_flush+0x430/0x430 [ 2204.520223] ? trace_hardirqs_on+0x5b/0x180 [ 2204.521125] ? lockdep_init_map_type+0x2c7/0x780 [ 2204.522107] ? __raw_spin_lock_init+0x36/0x110 [ 2204.523086] v9fs_session_init+0x1dd/0x1680 [ 2204.523993] ? lock_release+0x680/0x680 [ 2204.524829] ? kmem_cache_alloc_trace+0x151/0x320 [ 2204.525851] ? v9fs_show_options+0x690/0x690 [ 2204.526794] ? trace_hardirqs_on+0x5b/0x180 [ 2204.527697] ? kasan_unpoison_shadow+0x33/0x50 [ 2204.528634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2204.529698] v9fs_mount+0x79/0x8f0 [ 2204.530447] ? v9fs_write_inode+0x60/0x60 [ 2204.531326] legacy_get_tree+0x105/0x220 [ 2204.532176] vfs_get_tree+0x8e/0x300 [ 2204.532961] path_mount+0x1429/0x2120 [ 2204.533756] ? strncpy_from_user+0x9e/0x470 [ 2204.534652] ? finish_automount+0xa90/0xa90 [ 2204.535551] ? getname_flags.part.0+0x1dd/0x4f0 [ 2204.536518] ? _copy_from_user+0xfb/0x1b0 [ 2204.537401] __x64_sys_mount+0x282/0x300 [ 2204.538241] ? copy_mnt_ns+0xa00/0xa00 [ 2204.539080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2204.540183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2204.541259] do_syscall_64+0x33/0x40 [ 2204.542032] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.543107] RIP: 0033:0x7f7d78bdfb19 [ 2204.543882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.547734] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2204.549317] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2204.550807] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2204.552273] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2204.553754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2204.555233] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2204.571885] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:48:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:23 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x1ed482, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffffffffffff, 0x2241) r6 = syz_open_dev$rtc(&(0x7f00000001c0), 0x3, 0x80000) fsetxattr$security_capability(r6, &(0x7f0000000300), &(0x7f0000000380)=@v2={0x2000000, [{0x2, 0xfffffffa}, {0x7, 0x5}]}, 0x14, 0x1) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x402, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/lo\xf5P\xbf\xec', 0x1) 11:48:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(0x0, 0x0) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:36 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x647b818f, 0x8}, 0x2002, 0x0, 0x662, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x2}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:48:36 executing program 4: clone3(&(0x7f00000005c0)={0x80400, &(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000400)=0x0, {0x34}, &(0x7f0000000440)=""/47, 0x2f, &(0x7f0000000480)=""/253, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000005c0)='fdinfo/3\x00') r2 = syz_open_procfs(r1, &(0x7f0000000640)='mountstats\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x2, 0x3ff, 0x1, 'queue0\x00', 0x7f}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:48:36 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) r4 = openat(r0, 0x0, 0x551282, 0x60) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32=r2]) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) memfd_create(0x0, 0x1) 11:48:36 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40081271, r0) 11:48:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000240)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r3, r3) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r3) ioctl$CDROMPLAYBLK(r3, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r0, 0x0) 11:48:36 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 62) 11:48:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2217.875998] FAULT_INJECTION: forcing a failure. [ 2217.875998] name failslab, interval 1, probability 0, space 0, times 0 [ 2217.877692] CPU: 0 PID: 12715 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2217.878502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2217.879515] Call Trace: [ 2217.879838] dump_stack+0x107/0x167 [ 2217.880280] should_fail.cold+0x5/0xa [ 2217.880748] ? create_object.isra.0+0x3a/0xa20 [ 2217.881299] should_failslab+0x5/0x20 [ 2217.881761] kmem_cache_alloc+0x5b/0x310 [ 2217.882260] create_object.isra.0+0x3a/0xa20 [ 2217.882788] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2217.883411] kmem_cache_alloc+0x159/0x310 [ 2217.883918] __kernfs_new_node+0xd4/0x860 [ 2217.884422] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2217.885008] ? lock_acquire+0x197/0x470 [ 2217.885490] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2217.886112] ? lock_release+0x680/0x680 [ 2217.886597] ? find_held_lock+0x2c/0x110 [ 2217.887097] kernfs_new_node+0x18d/0x250 [ 2217.887598] kernfs_create_dir_ns+0x49/0x160 [ 2217.888138] sysfs_create_dir_ns+0x127/0x290 [ 2217.888674] ? sysfs_create_mount_point+0xb0/0xb0 [ 2217.889239] ? rwlock_bug.part.0+0x90/0x90 [ 2217.889746] ? do_raw_spin_unlock+0x4f/0x220 [ 2217.890277] kobject_add_internal+0x25e/0xa30 [ 2217.890821] kobject_init_and_add+0x101/0x160 [ 2217.891366] ? kobject_create_and_add+0xb0/0xb0 [ 2217.891931] ? wait_for_completion_io+0x270/0x270 [ 2217.892509] ? kernfs_name_hash+0xe7/0x110 [ 2217.893010] ? kernfs_find_ns+0x256/0x380 [ 2217.893519] sysfs_slab_add+0x172/0x200 [ 2217.894136] __kmem_cache_create+0x3db/0x520 [ 2217.894752] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2217.895363] p9_client_create+0xc6a/0x1230 [ 2217.895878] ? p9_client_flush+0x430/0x430 [ 2217.896386] ? trace_hardirqs_on+0x5b/0x180 [ 2217.896906] ? lockdep_init_map_type+0x2c7/0x780 [ 2217.897481] ? __raw_spin_lock_init+0x36/0x110 [ 2217.898026] v9fs_session_init+0x1dd/0x1680 [ 2217.898543] ? lock_release+0x680/0x680 [ 2217.899028] ? kmem_cache_alloc_trace+0x151/0x320 [ 2217.899607] ? v9fs_show_options+0x690/0x690 [ 2217.900142] ? trace_hardirqs_on+0x5b/0x180 [ 2217.900660] ? kasan_unpoison_shadow+0x33/0x50 [ 2217.901206] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2217.901818] v9fs_mount+0x79/0x8f0 [ 2217.902249] ? v9fs_write_inode+0x60/0x60 [ 2217.902750] legacy_get_tree+0x105/0x220 [ 2217.903243] vfs_get_tree+0x8e/0x300 [ 2217.903691] path_mount+0x1429/0x2120 [ 2217.904150] ? strncpy_from_user+0x9e/0x470 [ 2217.904675] ? finish_automount+0xa90/0xa90 [ 2217.905185] ? getname_flags.part.0+0x1dd/0x4f0 [ 2217.905744] ? _copy_from_user+0xfb/0x1b0 [ 2217.906244] __x64_sys_mount+0x282/0x300 [ 2217.906733] ? copy_mnt_ns+0xa00/0xa00 [ 2217.907200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2217.907825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2217.908444] do_syscall_64+0x33/0x40 [ 2217.908890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2217.909501] RIP: 0033:0x7f7d78bdfb19 [ 2217.909943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2217.912144] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2217.913055] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2217.913893] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2217.914749] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2217.915588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2217.916442] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:48:36 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x3f2, 0x2, 0x70bd2d, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000081) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f00000000c0)) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:48:36 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r1, 0x40081271, r0) 11:48:50 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r3 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x7, 0x6, 0x2, 0x7fff, 0x4], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x1a0, 0x17, 0x400, 0x70bd2d, 0x25dfdbfc, {0x5}, [@typed={0xc, 0x8f, 0x0, 0x0, @u64=0xbb}, @generic="ff034af083dcb0b57b3a2d6a6088a0a270c69c884551de8b60d1dca6b4b5ca688a3257842d8a83bb136ee5ed9c78c16cd591ae4f5b66355c307f7ed6e0442ba0fe916487b5ce9b93597ce4480b802de7a0c9d26deeae55818cc16fe0469994db7c3f8c2a8cf1c3f9ad579090c91967351f3cbdc40b479a159b7d1dff6ce2d937a976bedc4795c6bd8737cfb7c3b318a783f645", @generic="91000e3136d3f0672df79148bb3abde5279927244ab8eecb34b28c3feee67337e85073525c0f123559a15d7b7bfd6bd944c47978a2326ff606edb44519d13f76e33e8d6a25f7bd9af0d8c090477b028aa77ea9b9ab7c921687b7ba82e0b689c1c9386bda4b3baa033ad1ae72eb05dcd25bd5b919a298a53457bec230ee848040b5861a03923a84b6e264af7f620680c937d8a48ce38297a3d7a52a5b919619bce13799504288f9facff66b76c8ff24e57da60750a438a01228cd2f3c3d756b24cef485c28fd1b341177c904774cf9e94eb36049108462f490fb976f2da1f42429fedcc", @typed={0x8, 0x6a, 0x0, 0x0, @pid=r2}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:48:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x4, 0x662}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000001c0)={0x1, 0x20, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:48:50 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x40081271, 0xffffffffffffffff) 11:48:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:50 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) openat2(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x82000, 0x1}, 0x18) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000440)={0x1, 0x0, 0xb5, &(0x7f0000000380)=""/181}) mmap$IORING_OFF_SQ_RING(&(0x7f0000b9a000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f000058e000/0x2000)=nil, 0x2000, 0xe, 0x2010, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:48:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:50 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 63) 11:48:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) ftruncate(r2, 0x8001) getpeername(r0, &(0x7f0000000180)=@sco={0x1f, @fixed}, &(0x7f0000000000)=0x80) r3 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) syz_io_uring_setup(0x3d04, &(0x7f00000002c0)={0x0, 0x7cfe, 0x2, 0x3, 0x200024c, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000001, 0x20010, r1, 0x10000000) r6 = syz_io_uring_setup(0x3ca3, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x8, 0x2c, 0x0, 0x38, 0x4, 0x0, {0x0, r9}}, 0xffffa6b1) [ 2231.931319] FAULT_INJECTION: forcing a failure. [ 2231.931319] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.934266] CPU: 0 PID: 12753 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2231.935711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2231.937458] Call Trace: [ 2231.938005] dump_stack+0x107/0x167 [ 2231.938781] should_fail.cold+0x5/0xa [ 2231.939583] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2231.940790] should_failslab+0x5/0x20 [ 2231.941597] kmem_cache_alloc+0x5b/0x310 [ 2231.942449] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2231.943628] idr_get_free+0x4b5/0x8f0 [ 2231.944436] idr_alloc_u32+0x170/0x2d0 [ 2231.945251] ? __fprop_inc_percpu_max+0x130/0x130 [ 2231.946272] ? lock_acquire+0x197/0x470 [ 2231.947103] ? __kernfs_new_node+0xff/0x860 [ 2231.948035] idr_alloc_cyclic+0x102/0x230 [ 2231.948900] ? idr_alloc+0x130/0x130 [ 2231.949674] ? rwlock_bug.part.0+0x90/0x90 [ 2231.950574] __kernfs_new_node+0x117/0x860 [ 2231.951465] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2231.952452] ? lock_acquire+0x197/0x470 [ 2231.953278] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2231.954359] ? lock_release+0x680/0x680 [ 2231.955194] ? find_held_lock+0x2c/0x110 [ 2231.956062] kernfs_new_node+0x18d/0x250 [ 2231.956923] kernfs_create_dir_ns+0x49/0x160 [ 2231.957850] sysfs_create_dir_ns+0x127/0x290 [ 2231.958781] ? sysfs_create_mount_point+0xb0/0xb0 [ 2231.959803] ? rwlock_bug.part.0+0x90/0x90 [ 2231.960698] ? do_raw_spin_unlock+0x4f/0x220 [ 2231.961627] kobject_add_internal+0x25e/0xa30 [ 2231.962583] kobject_init_and_add+0x101/0x160 [ 2231.963535] ? kobject_create_and_add+0xb0/0xb0 [ 2231.964522] ? wait_for_completion_io+0x270/0x270 [ 2231.965527] ? kernfs_name_hash+0xe7/0x110 [ 2231.966423] ? kernfs_find_ns+0x256/0x380 [ 2231.967299] sysfs_slab_add+0x172/0x200 [ 2231.968151] __kmem_cache_create+0x3db/0x520 [ 2231.969077] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2231.970136] p9_client_create+0xc6a/0x1230 [ 2231.971031] ? p9_client_flush+0x430/0x430 [ 2231.971938] ? trace_hardirqs_on+0x5b/0x180 [ 2231.972839] ? lockdep_init_map_type+0x2c7/0x780 [ 2231.973841] ? __raw_spin_lock_init+0x36/0x110 [ 2231.974799] v9fs_session_init+0x1dd/0x1680 [ 2231.975729] ? lock_release+0x680/0x680 [ 2231.976567] ? kmem_cache_alloc_trace+0x151/0x320 [ 2231.977580] ? v9fs_show_options+0x690/0x690 [ 2231.978505] ? trace_hardirqs_on+0x5b/0x180 [ 2231.979422] ? kasan_unpoison_shadow+0x33/0x50 [ 2231.980374] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2231.981447] v9fs_mount+0x79/0x8f0 [ 2231.982194] ? v9fs_write_inode+0x60/0x60 [ 2231.983070] legacy_get_tree+0x105/0x220 [ 2231.983937] vfs_get_tree+0x8e/0x300 [ 2231.984720] path_mount+0x1429/0x2120 [ 2231.985519] ? strncpy_from_user+0x9e/0x470 [ 2231.986427] ? finish_automount+0xa90/0xa90 [ 2231.987326] ? getname_flags.part.0+0x1dd/0x4f0 [ 2231.988311] ? _copy_from_user+0xfb/0x1b0 [ 2231.989184] __x64_sys_mount+0x282/0x300 [ 2231.990039] ? copy_mnt_ns+0xa00/0xa00 [ 2231.990863] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2231.991964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2231.993062] do_syscall_64+0x33/0x40 [ 2231.993842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2231.994928] RIP: 0033:0x7f7d78bdfb19 [ 2231.995712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2231.999586] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2232.001178] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2232.002663] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2232.004154] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2232.005640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.007127] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2232.020111] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:48:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:50 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x40081271, 0xffffffffffffffff) 11:48:50 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '/dev/loop#\x00'}, {0x20, '!-\xd5'}, {0x20, '/dev/loop#\x00'}, {0x20, '/dev/loop#\x00'}], 0xa, "fde90c232b085ea78f887e7240180b02c84e80582d06e3cb4c6bf41c150e8ceea3da58269a53c7d70c36f6f22805ec2edbf0b7bc3067428b55c8cd20a7e54179a4abcbfcdcb5853b22b4ad3514064838841341065cb47f70c3c96ee0210b2915931ece8fac1b465d0d2826af992992ad0f934350e74f5bda6db94b765f601b6afa3a26b0bc36c2b7a0f9249776e2e6614fbab3bb23ca4d7b7823c69c0bd7b56bf267912ae94cf4008ab847eacb05b68e5f023396506c2e5a785746684325238302d22faab2f19aac57e7e78a123fe090bb9e780680224e1c57c2a7762afdf2f9521e35abadd74e17a996c42cabb7061b3029330000000000000000000000dd36fcb88f63a8ee32c8cf405b33eb11d92c801b957f26ce963efb986f8f32c4c4e85fc30c5b08d0dd8fb42b775d77ddf9d4645739c47b571ddfc4ceecce756eb39b59917d01c6ed30df597874543fc5579d0cb535296ccf4e79753483077079c99c09a294ddf6f6114efbc2f2a160145cba14f37e2d4aef80aef65a1046bb6fb86dae15498289ed4805de36a241da2ae67bf141cbd26142f5b9f815824b80ccb216f60b534b9fd7ae7fdfd9fb863565b1"}, 0x1e2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1a140, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, 0x0) ioctl$DVD_AUTH(r2, 0x5390, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:48:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/configfs', 0x80000, 0x141) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:48:50 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) r4 = dup3(0xffffffffffffffff, r2, 0x80000) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9f, 0x1, 0x4, 0x1, 0x0, 0xfff7, 0xaa88, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}, 0x920, 0x9, 0x1, 0x5, 0x0, 0x7f, 0x55ee, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r4, 0x8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r5, 0x5395, &(0x7f00000000c0)) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:48:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x40081271, 0xffffffffffffffff) 11:48:50 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x113002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0) dup2(r0, r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0xc7, 0x40, 0x8000, 0x3, 0x9}) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000258000/0x1000)=nil, 0x1000, 0x2, 0x12, r2, 0x2d331000) memfd_create(0x0, 0x0) 11:48:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fcntl$dupfd(r1, 0x406, r2) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x20, 0x9, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:48:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:48:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000001c0)=0x101) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:48:51 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x40081271, 0xffffffffffffffff) 11:48:51 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 64) 11:48:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2232.469040] FAULT_INJECTION: forcing a failure. [ 2232.469040] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.471690] CPU: 1 PID: 12817 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2232.473122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2232.474856] Call Trace: [ 2232.475416] dump_stack+0x107/0x167 [ 2232.476178] should_fail.cold+0x5/0xa [ 2232.476972] ? create_object.isra.0+0x3a/0xa20 [ 2232.477926] should_failslab+0x5/0x20 [ 2232.478720] kmem_cache_alloc+0x5b/0x310 [ 2232.479584] create_object.isra.0+0x3a/0xa20 [ 2232.480494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2232.481560] kmem_cache_alloc+0x159/0x310 [ 2232.482438] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2232.483610] idr_get_free+0x4b5/0x8f0 [ 2232.484423] idr_alloc_u32+0x170/0x2d0 [ 2232.485229] ? __fprop_inc_percpu_max+0x130/0x130 [ 2232.486234] ? lock_acquire+0x197/0x470 [ 2232.487058] ? __kernfs_new_node+0xff/0x860 [ 2232.487955] idr_alloc_cyclic+0x102/0x230 [ 2232.488810] ? idr_alloc+0x130/0x130 [ 2232.489570] ? rwlock_bug.part.0+0x90/0x90 [ 2232.490453] __kernfs_new_node+0x117/0x860 [ 2232.491327] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2232.492330] ? lock_acquire+0x197/0x470 [ 2232.493149] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2232.494219] ? lock_release+0x680/0x680 [ 2232.495033] ? find_held_lock+0x2c/0x110 [ 2232.495879] kernfs_new_node+0x18d/0x250 [ 2232.496723] kernfs_create_dir_ns+0x49/0x160 [ 2232.497626] sysfs_create_dir_ns+0x127/0x290 [ 2232.498532] ? sysfs_create_mount_point+0xb0/0xb0 [ 2232.499534] ? rwlock_bug.part.0+0x90/0x90 [ 2232.500404] ? do_raw_spin_unlock+0x4f/0x220 [ 2232.501313] kobject_add_internal+0x25e/0xa30 [ 2232.502244] kobject_init_and_add+0x101/0x160 [ 2232.503172] ? kobject_create_and_add+0xb0/0xb0 [ 2232.504144] ? wait_for_completion_io+0x270/0x270 [ 2232.505137] ? kernfs_name_hash+0xe7/0x110 [ 2232.506014] ? kernfs_find_ns+0x256/0x380 [ 2232.506874] sysfs_slab_add+0x172/0x200 [ 2232.507714] __kmem_cache_create+0x3db/0x520 [ 2232.508624] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2232.509661] p9_client_create+0xc6a/0x1230 [ 2232.510551] ? p9_client_flush+0x430/0x430 [ 2232.511430] ? trace_hardirqs_on+0x5b/0x180 [ 2232.512316] ? lockdep_init_map_type+0x2c7/0x780 [ 2232.513285] ? __raw_spin_lock_init+0x36/0x110 [ 2232.514227] v9fs_session_init+0x1dd/0x1680 [ 2232.515120] ? lock_release+0x680/0x680 [ 2232.515965] ? kmem_cache_alloc_trace+0x151/0x320 [ 2232.516953] ? v9fs_show_options+0x690/0x690 [ 2232.517871] ? trace_hardirqs_on+0x5b/0x180 [ 2232.518757] ? kasan_unpoison_shadow+0x33/0x50 [ 2232.519704] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2232.520743] v9fs_mount+0x79/0x8f0 [ 2232.521469] ? v9fs_write_inode+0x60/0x60 [ 2232.522315] legacy_get_tree+0x105/0x220 [ 2232.523158] vfs_get_tree+0x8e/0x300 [ 2232.523927] path_mount+0x1429/0x2120 [ 2232.524715] ? strncpy_from_user+0x9e/0x470 [ 2232.525600] ? finish_automount+0xa90/0xa90 [ 2232.526479] ? getname_flags.part.0+0x1dd/0x4f0 [ 2232.527428] ? _copy_from_user+0xfb/0x1b0 [ 2232.528278] __x64_sys_mount+0x282/0x300 [ 2232.529098] ? copy_mnt_ns+0xa00/0xa00 [ 2232.529889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2232.530956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2232.532009] do_syscall_64+0x33/0x40 [ 2232.532768] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2232.533806] RIP: 0033:0x7f7d78bdfb19 [ 2232.534566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2232.538302] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2232.539863] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2232.541321] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2232.542769] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2232.544229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.545673] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2232.598828] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2233.116074] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2233.117578] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2233.118634] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2233.119653] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2233.120817] print_req_error: 62 callbacks suppressed [ 2233.120830] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.123205] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2233.126389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.127239] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.128843] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.128867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.130817] buffer_io_error: 22 callbacks suppressed [ 2233.130828] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2233.132755] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.135657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.135722] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.136453] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.138400] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2233.140652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.141379] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.142095] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.144043] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2233.146719] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.146747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.148701] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2233.149590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.150980] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2233.151880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.153084] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2233.153917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.155289] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2233.158667] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2233.231831] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2233.233740] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2233.234706] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2233.235650] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2233.237388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.238459] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2233.238489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.240605] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2233.240632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.242740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.243575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.244386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.245222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.246054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.570321] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2233.571493] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2233.572784] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2233.573553] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2233.574710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.575431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.576159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.576888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.577671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.578371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.579123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2233.579866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:49:03 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x40081271, 0xffffffffffffffff) 11:49:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x6024000) 11:49:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x80800, 0x15c) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000300)=0x3, 0x4) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000240)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r5, 0x5395, &(0x7f00000000c0)) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:49:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, 0x0, 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:49:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:49:03 executing program 4: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/30) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa5220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090fdf54ccea02af31a5300000000000000000000000000000000000000000000000000000000000000000000000000b8694a1e1fa2f97e84b4afaf3d8619e3"]) r4 = signalfd4(r3, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x8, 0x80000) write$P9_RREADLINK(r4, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x4, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) r6 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, 0x0) unlinkat(r6, &(0x7f0000000100)='./file0\x00', 0x200) fcntl$getown(r6, 0x9) 11:49:03 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 65) 11:49:03 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:49:03 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x48042) ioctl$LOOP_SET_FD(r0, 0x40081271, 0xffffffffffffffff) 11:49:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x23000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) [ 2244.889036] FAULT_INJECTION: forcing a failure. [ 2244.889036] name failslab, interval 1, probability 0, space 0, times 0 [ 2244.892040] CPU: 0 PID: 12850 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2244.893648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2244.895571] Call Trace: [ 2244.896209] dump_stack+0x107/0x167 [ 2244.897060] should_fail.cold+0x5/0xa [ 2244.897944] ? __kernfs_new_node+0xd4/0x860 11:49:03 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x100, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r3 = memfd_create(0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) [ 2244.898943] should_failslab+0x5/0x20 [ 2244.900018] kmem_cache_alloc+0x5b/0x310 [ 2244.900991] __kernfs_new_node+0xd4/0x860 [ 2244.901971] ? lock_acquire+0x197/0x470 [ 2244.902916] ? kernfs_dop_revalidate+0x3a0/0x3a0 11:49:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) syz_io_uring_setup(0x3efe, &(0x7f00000001c0)={0x0, 0xed98, 0x2, 0x1, 0x164}, &(0x7f0000a7b000/0x8000)=nil, &(0x7f000037f000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000300)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000380)) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) [ 2244.904079] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2244.905377] ? kernfs_add_one+0x124/0x4d0 [ 2244.906354] ? kernfs_create_dir_ns+0x10b/0x160 [ 2244.907447] kernfs_new_node+0x18d/0x250 [ 2244.908417] __kernfs_create_file+0x51/0x350 [ 2244.909453] sysfs_add_file_mode_ns+0x221/0x560 [ 2244.910554] internal_create_group+0x324/0xb30 [ 2244.911635] ? sysfs_remove_group+0x170/0x170 [ 2244.912691] ? kernfs_name_hash+0xe7/0x110 [ 2244.913688] ? kernfs_find_ns+0x256/0x380 [ 2244.914668] sysfs_slab_add+0x188/0x200 [ 2244.915605] __kmem_cache_create+0x3db/0x520 [ 2244.916649] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2244.917827] p9_client_create+0xc6a/0x1230 [ 2244.918832] ? p9_client_flush+0x430/0x430 [ 2244.919840] ? trace_hardirqs_on+0x5b/0x180 [ 2244.920851] ? lockdep_init_map_type+0x2c7/0x780 [ 2244.921957] ? __raw_spin_lock_init+0x36/0x110 [ 2244.923025] v9fs_session_init+0x1dd/0x1680 [ 2244.924041] ? lock_release+0x680/0x680 [ 2244.924977] ? kmem_cache_alloc_trace+0x151/0x320 [ 2244.926100] ? v9fs_show_options+0x690/0x690 [ 2244.927135] ? trace_hardirqs_on+0x5b/0x180 [ 2244.928147] ? kasan_unpoison_shadow+0x33/0x50 [ 2244.929209] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2244.930385] v9fs_mount+0x79/0x8f0 [ 2244.931194] ? v9fs_write_inode+0x60/0x60 [ 2244.932133] legacy_get_tree+0x105/0x220 [ 2244.933051] vfs_get_tree+0x8e/0x300 [ 2244.933900] path_mount+0x1429/0x2120 [ 2244.934767] ? strncpy_from_user+0x9e/0x470 [ 2244.935740] ? finish_automount+0xa90/0xa90 [ 2244.936718] ? getname_flags.part.0+0x1dd/0x4f0 [ 2244.937763] ? _copy_from_user+0xfb/0x1b0 [ 2244.938707] __x64_sys_mount+0x282/0x300 [ 2244.939616] ? copy_mnt_ns+0xa00/0xa00 [ 2244.940494] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 11:49:03 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000b49000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r1, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x1, 0x6000, @fd_index, 0xff, &(0x7f0000000000)="1f4bf4677866e4d7d682ffbd6f8b1db575ffb9bbf6f3ca8d6c0bb861f776d0224c639a63ed1043791ace90942def8e67907c73", 0x33, 0x1a, 0x1, {0x0, r4}}, 0x3) memfd_create(0x0, 0x0) 11:49:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2244.941672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2244.942933] do_syscall_64+0x33/0x40 [ 2244.943779] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2244.944944] RIP: 0033:0x7f7d78bdfb19 [ 2244.945790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2244.949962] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2244.951693] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2244.953322] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2244.954956] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2244.956587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2244.958221] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2244.985275] kmem_cache_create(9p-fcall-cache-325) failed with error -12 [ 2244.987073] CPU: 0 PID: 12850 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2244.988647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2244.990507] Call Trace: 11:49:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, 0x0, 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2244.991104] dump_stack+0x107/0x167 [ 2244.992107] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2244.993283] p9_client_create+0xc6a/0x1230 [ 2244.994237] ? p9_client_flush+0x430/0x430 [ 2244.995180] ? trace_hardirqs_on+0x5b/0x180 [ 2244.996152] ? lockdep_init_map_type+0x2c7/0x780 [ 2244.997208] ? __raw_spin_lock_init+0x36/0x110 [ 2244.998226] v9fs_session_init+0x1dd/0x1680 [ 2244.999189] ? lock_release+0x680/0x680 [ 2245.000091] ? kmem_cache_alloc_trace+0x151/0x320 [ 2245.001171] ? v9fs_show_options+0x690/0x690 [ 2245.002166] ? trace_hardirqs_on+0x5b/0x180 [ 2245.003127] ? kasan_unpoison_shadow+0x33/0x50 [ 2245.004143] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2245.005285] v9fs_mount+0x79/0x8f0 [ 2245.006076] ? v9fs_write_inode+0x60/0x60 [ 2245.007002] legacy_get_tree+0x105/0x220 [ 2245.007918] vfs_get_tree+0x8e/0x300 [ 2245.008749] path_mount+0x1429/0x2120 [ 2245.009598] ? strncpy_from_user+0x9e/0x470 [ 2245.010563] ? finish_automount+0xa90/0xa90 [ 2245.011522] ? getname_flags.part.0+0x1dd/0x4f0 [ 2245.012569] ? _copy_from_user+0xfb/0x1b0 [ 2245.013490] __x64_sys_mount+0x282/0x300 [ 2245.014395] ? copy_mnt_ns+0xa00/0xa00 [ 2245.015257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2245.016449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2245.017592] do_syscall_64+0x33/0x40 [ 2245.018425] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2245.019558] RIP: 0033:0x7f7d78bdfb19 [ 2245.020397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2245.024462] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2245.026172] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2245.027777] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2245.029377] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2245.030964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2245.032572] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:49:03 executing program 3: r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x50004, 0x0, 0x662, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = dup(0xffffffffffffffff) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000400)={0x0, @phonet={0x23, 0x2, 0xc8, 0x20}, @l2tp={0x2, 0x0, @private=0xa010101, 0x2}, @isdn={0x22, 0x20, 0x7, 0x1f, 0x9}, 0x6, 0x0, 0x0, 0x0, 0x42, &(0x7f00000001c0)='veth1\x00', 0x8, 0xc, 0x24e3}) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000240)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, 0x0) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@hsc={0x1, 0x2, "d25a546077567a41d9d9"}) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r3) ioctl$CDROMPLAYBLK(r3, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) 11:49:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, '{%&'}], 0xa, "32c8a969c060451c3c65e79211c72828be9a89a6b422a11507263c77f9e64af7966564dd1feead609d0f9a2e4bc45e69a002d7dcc3c6dd885997b785d8c9c986e6e2fc8b224136deb21cd09647204c6b9edd449abc1e6634c80d3d6bb39104e6c24640cc642697005ccf1697f79b14d59d47218599268f5eda943a99b55303d8c844cab5670d75ee1c67f2acb61fd86b563355fb9fecd451eddfff478283e921a7de89a699b6bfa7e4292595bc2278d7239a19fe48a2a960db5a072f209de6e5fa637e8ec31b0f44b6a07bf945e00563e39983eb05b2c4145a7b7a217853"}, 0xed) 11:49:03 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1f0000000016ae4e1b43b14d9e2208002c010d99e78004ff"]) ioctl(r1, 0x9, &(0x7f00000000c0)="22a0abb9c78d9fdf8866") dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 11:49:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x40081271, 0xffffffffffffffff) 11:49:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') kcmp(0x0, 0x0, 0x3, r1, r2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:49:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, 0x0, 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2245.198113] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:49:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) [ 2245.331285] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2245.332488] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2245.333250] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2245.333985] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2245.334820] print_req_error: 44 callbacks suppressed [ 2245.334831] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2245.336581] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2245.339709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2245.340323] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2245.341567] blk_update_request: I/O error, dev loop0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2245.341572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2245.341592] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2245.343918] buffer_io_error: 14 callbacks suppressed [ 2245.343931] Buffer I/O error on dev loop0, logical block 2096896, async page read [ 2245.344554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2245.346934] blk_update_request: I/O error, dev loop0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2245.347308] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2245.349005] Buffer I/O error on dev loop0, logical block 2096897, async page read [ 2245.349632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2245.351974] blk_update_request: I/O error, dev loop0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2245.353072] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2245.354736] Buffer I/O error on dev loop0, logical block 2096898, async page read [ 2245.355481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2245.360667] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2245.361872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2245.362539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2245.363187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2245.364595] Buffer I/O error on dev loop0, logical block 2096899, async page read [ 2245.366339] Buffer I/O error on dev loop0, logical block 2096900, async page read [ 2245.368063] Buffer I/O error on dev loop0, logical block 2096901, async page read [ 2245.369777] Buffer I/O error on dev loop0, logical block 2096902, async page read [ 2245.371487] Buffer I/O error on dev loop0, logical block 2096903, async page read 11:49:15 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 66) 11:49:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:49:15 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x40081271, 0xffffffffffffffff) 11:49:15 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000033c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000001c0)={0x28, r3, 0xc21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x60, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2a, 0x5b, "f2376ea146d8bb417be1b8cc28d57cb5b2a6317b959f9e55e1e9c11cd48deb1efc9ff776acbf"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x24000080) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r6, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) [ 2256.485357] FAULT_INJECTION: forcing a failure. [ 2256.485357] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.487952] CPU: 0 PID: 12915 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2256.489433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2256.491199] Call Trace: [ 2256.491763] dump_stack+0x107/0x167 [ 2256.492554] should_fail.cold+0x5/0xa [ 2256.493373] ? create_object.isra.0+0x3a/0xa20 [ 2256.494348] should_failslab+0x5/0x20 [ 2256.495161] kmem_cache_alloc+0x5b/0x310 [ 2256.496032] create_object.isra.0+0x3a/0xa20 [ 2256.496974] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2256.498060] kmem_cache_alloc+0x159/0x310 [ 2256.498955] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2256.500151] idr_get_free+0x4b5/0x8f0 [ 2256.501050] idr_alloc_u32+0x170/0x2d0 [ 2256.501899] ? __fprop_inc_percpu_max+0x130/0x130 [ 2256.502930] ? lock_acquire+0x197/0x470 [ 2256.503781] ? __kernfs_new_node+0xff/0x860 [ 2256.504803] idr_alloc_cyclic+0x102/0x230 [ 2256.505694] ? idr_alloc+0x130/0x130 [ 2256.506490] ? rwlock_bug.part.0+0x90/0x90 [ 2256.507406] __kernfs_new_node+0x117/0x860 [ 2256.508327] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2256.509348] ? lock_acquire+0x197/0x470 [ 2256.510200] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2256.511320] ? lock_release+0x680/0x680 [ 2256.512168] ? find_held_lock+0x2c/0x110 [ 2256.513047] kernfs_new_node+0x18d/0x250 [ 2256.513919] kernfs_create_dir_ns+0x49/0x160 [ 2256.514861] sysfs_create_dir_ns+0x127/0x290 [ 2256.515800] ? sysfs_create_mount_point+0xb0/0xb0 [ 2256.516825] ? rwlock_bug.part.0+0x90/0x90 [ 2256.517732] ? do_raw_spin_unlock+0x4f/0x220 [ 2256.518671] kobject_add_internal+0x25e/0xa30 [ 2256.519638] kobject_init_and_add+0x101/0x160 [ 2256.520611] ? kobject_create_and_add+0xb0/0xb0 [ 2256.521616] ? wait_for_completion_io+0x270/0x270 [ 2256.522642] ? kernfs_name_hash+0xe7/0x110 [ 2256.523550] ? kernfs_find_ns+0x256/0x380 [ 2256.524498] sysfs_slab_add+0x172/0x200 [ 2256.525352] __kmem_cache_create+0x3db/0x520 [ 2256.526296] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2256.527369] p9_client_create+0xc6a/0x1230 [ 2256.528290] ? p9_client_flush+0x430/0x430 [ 2256.529193] ? trace_hardirqs_on+0x5b/0x180 [ 2256.530114] ? lockdep_init_map_type+0x2c7/0x780 [ 2256.531125] ? __raw_spin_lock_init+0x36/0x110 [ 2256.532105] v9fs_session_init+0x1dd/0x1680 [ 2256.533036] ? lock_release+0x680/0x680 [ 2256.533894] ? kmem_cache_alloc_trace+0x151/0x320 11:49:15 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) close(0xffffffffffffffff) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000140)={0x101, 0x8}) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:49:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:49:15 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x7ff}, 0x0, 0x401, 0x662, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xc7, 0x4, 0x3f, 0xfc, 0x0, 0x5, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f00000001c0), 0xa081ef4e95186327}, 0x8000, 0x4, 0x4, 0x7, 0x100000000, 0xfffffff7, 0x401, 0x0, 0xa, 0x0, 0xa3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000280)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x1) ioctl$CDROM_SELECT_DISK(r3, 0x5322, 0x5) 11:49:15 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x10400, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000020007000000000000e6b590f6aa9a97cd6a080b2c3167dbf0db7bfa8fcf8997c627c89bc7487ef6bfa0d6ccaa3f4c23b176", @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pidfd_open(0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000000)={0x7, 'batadv0\x00', {0xffffffc0}, 0x2}) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1d012, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) [ 2256.534920] ? v9fs_show_options+0x690/0x690 [ 2256.536021] ? trace_hardirqs_on+0x5b/0x180 [ 2256.536959] ? kasan_unpoison_shadow+0x33/0x50 [ 2256.537928] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2256.539015] v9fs_mount+0x79/0x8f0 [ 2256.539778] ? v9fs_write_inode+0x60/0x60 [ 2256.540670] legacy_get_tree+0x105/0x220 [ 2256.541540] vfs_get_tree+0x8e/0x300 [ 2256.542333] path_mount+0x1429/0x2120 [ 2256.543151] ? strncpy_from_user+0x9e/0x470 [ 2256.544071] ? finish_automount+0xa90/0xa90 [ 2256.545001] ? getname_flags.part.0+0x1dd/0x4f0 [ 2256.545994] ? _copy_from_user+0xfb/0x1b0 [ 2256.546885] __x64_sys_mount+0x282/0x300 [ 2256.547752] ? copy_mnt_ns+0xa00/0xa00 [ 2256.548595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2256.549711] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2256.550811] do_syscall_64+0x33/0x40 [ 2256.551605] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2256.552709] RIP: 0033:0x7f7d78bdfb19 [ 2256.553502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.557434] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2256.559059] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2256.560594] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2256.562114] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2256.563636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2256.565164] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 11:49:15 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x40081271, 0xffffffffffffffff) 11:49:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:49:30 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0x2b22, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x420800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x4}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 67) 11:49:30 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0xfc) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r4, r4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r5}}, './file0\x00'}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) 11:49:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f00000011c0)=ANY=[], 0x26, 0x0, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:49:30 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000240)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r1 = accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) dup2(r1, 0xffffffffffffffff) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) memfd_create(0x0, 0x0) 11:49:30 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x40081271, 0xffffffffffffffff) 11:49:30 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000000080)=""/111, 0x6f}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000640)=""/230, 0xe6}, {&(0x7f0000000740)=""/157, 0x9d}, {&(0x7f0000000800)=""/118, 0x76}, {&(0x7f0000000100)=""/49, 0x31}], 0x8, 0x6, 0xeef8) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/cpuidle', 0x101001, 0x29) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) dup3(r1, r2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, 0x0) fchdir(r4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) 11:49:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3d07, &(0x7f0000000300)={0x0, 0x7cfe, 0x2, 0x3, 0x24c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0b3ed6726be92d2a58eba26aa52200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/245]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x100000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) 11:49:30 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x662}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000001c0)=0x100008) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) openat(r0, &(0x7f0000000100)='./file0\x00', 0x101800, 0x20) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000240)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f00000000c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000200)={0x10001, 0x2}) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) memfd_create(&(0x7f0000000380)='/`ev/loop#\x00\x99\xa3\xae\xa1\xdc\x93\xd1\xbd\x98\x1b\xc0\x97\xec\xdcs\xee\xc5Z6e\xfe\x8a\x8a\xc8\x15k.\x9e}\xae3\r\xff\xed\f\xe5\xca\x0e\xe9t\xd9O\xdb8\x81\xf6\xf5q\xfc\xfc\xbbT\xf7\xc7\xa4\xc9\xdd\xc3Q\x04]\xe8\xcdD\xb6?v\xc4\xc3\'\xd1\xac\xb1\xa9\xd5\x89\xa6B7\x9c\xb4\xe0\f\xee$\xbaS\x04\x84\xda]\xf6\xf7\xcd>\xa4\xa1\xf7\x85\x01\xc6*\x8b\x0e\xee?\xfc\xe7\x13\x8b\xf4\xdb\xf5W\xb6\x03y\x85\rw\x06\xff\xea\xf4b\xb74}\xe3\xda\xfd\xf86\xfbs\xac\v)\xd9\xff\x17v\x14\xc8m\x13\x12\xf1_\xa4\xf36\xdf\xf2\xd2\xca86\xbe\xdd]\xb8AT\x98\xa6\xe2\xbf|\xc0K\xe6A\xc0DQy\x03{\x91\xe4W\x03J\xc8\x16\xe7\xf9lL\xe0X\xfd\xe2B`W\x9c\x8cv \xa2Or\xe1\xa9\x98\xa0F\x0eBj^\r\x06\v\xe4\x8e\a\xe2}AXD\xe9\xf8\x8cJ\xee\x15\xbf\xa6\xf7k\xf9\xafE\xe9\xb2\xe3\xd7\xd9\xd4\x00\xc7\x9e\x18\x8cD\xf5\xf2\b\xa0\x10\xc1^\x87\xa8\xa8\x06!b\xe9G|P\xdc\xc9\xe0\xe7o G1\x8e>\x90\xce[\xf8\xe2\x8f\x17\xecX\x99B\xb5\xf8\"\x16F\x80\xb1J\xcd\xf1\x8b\xacTU\xa7\x95\xa8\x9et\xb8hq^iK\xe8\xf9\x1e_\xd4BL\xdf\ag\xe4\xf9\xf9\x02\x9c\xbch\']dZt?\xa0\xe2o}\x17\xb5\f\x95\x01\xea\xcc\x8aB\xe8t\x88\xff\xb7I\xe5\x03\x9cSo\x18Y\x1e4t\x85\xa5\x85BGt$\x1c6Y', 0x6) [ 2271.443420] FAULT_INJECTION: forcing a failure. [ 2271.443420] name failslab, interval 1, probability 0, space 0, times 0 [ 2271.446070] CPU: 1 PID: 12963 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2271.447517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2271.449275] Call Trace: [ 2271.449832] dump_stack+0x107/0x167 [ 2271.450603] should_fail.cold+0x5/0xa [ 2271.451406] ? __kernfs_new_node+0xd4/0x860 [ 2271.452318] should_failslab+0x5/0x20 [ 2271.453131] kmem_cache_alloc+0x5b/0x310 [ 2271.453996] __kernfs_new_node+0xd4/0x860 [ 2271.454870] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2271.455872] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2271.456902] ? wait_for_completion_io+0x270/0x270 [ 2271.457922] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 2271.459034] kernfs_new_node+0x18d/0x250 [ 2271.459891] __kernfs_create_file+0x51/0x350 [ 2271.460827] sysfs_add_file_mode_ns+0x221/0x560 [ 2271.461815] internal_create_group+0x324/0xb30 [ 2271.462782] ? sysfs_remove_group+0x170/0x170 [ 2271.463726] ? kernfs_name_hash+0xe7/0x110 [ 2271.464618] ? kernfs_find_ns+0x256/0x380 [ 2271.465507] sysfs_slab_add+0x188/0x200 [ 2271.466345] __kmem_cache_create+0x3db/0x520 [ 2271.467277] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2271.468328] p9_client_create+0xc6a/0x1230 [ 2271.469236] ? p9_client_flush+0x430/0x430 [ 2271.470126] ? trace_hardirqs_on+0x5b/0x180 [ 2271.471036] ? lockdep_init_map_type+0x2c7/0x780 [ 2271.472034] ? __raw_spin_lock_init+0x36/0x110 [ 2271.473011] v9fs_session_init+0x1dd/0x1680 [ 2271.473919] ? lock_release+0x680/0x680 [ 2271.474767] ? kmem_cache_alloc_trace+0x151/0x320 [ 2271.475782] ? v9fs_show_options+0x690/0x690 [ 2271.476718] ? trace_hardirqs_on+0x5b/0x180 [ 2271.477634] ? kasan_unpoison_shadow+0x33/0x50 [ 2271.478590] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2271.479662] v9fs_mount+0x79/0x8f0 [ 2271.480413] ? v9fs_write_inode+0x60/0x60 [ 2271.481299] legacy_get_tree+0x105/0x220 [ 2271.482155] vfs_get_tree+0x8e/0x300 [ 2271.482937] path_mount+0x1429/0x2120 [ 2271.483747] ? strncpy_from_user+0x9e/0x470 [ 2271.484654] ? finish_automount+0xa90/0xa90 [ 2271.485582] ? getname_flags.part.0+0x1dd/0x4f0 [ 2271.486568] ? _copy_from_user+0xfb/0x1b0 [ 2271.487448] __x64_sys_mount+0x282/0x300 [ 2271.488299] ? copy_mnt_ns+0xa00/0xa00 [ 2271.489130] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2271.490232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2271.491320] do_syscall_64+0x33/0x40 [ 2271.492104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2271.493190] RIP: 0033:0x7f7d78bdfb19 [ 2271.493968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2271.497834] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2271.499427] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2271.500935] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2271.502435] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2271.503936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2271.505442] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2271.535176] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2271.582093] kmem_cache_create(9p-fcall-cache-327) failed with error -12 [ 2271.583666] CPU: 0 PID: 12963 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 2271.585126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2271.586857] Call Trace: [ 2271.587408] dump_stack+0x107/0x167 [ 2271.588176] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2271.589273] p9_client_create+0xc6a/0x1230 [ 2271.590149] ? p9_client_flush+0x430/0x430 [ 2271.591020] ? trace_hardirqs_on+0x5b/0x180 [ 2271.591930] ? lockdep_init_map_type+0x2c7/0x780 [ 2271.592928] ? __raw_spin_lock_init+0x36/0x110 [ 2271.593883] v9fs_session_init+0x1dd/0x1680 [ 2271.594788] ? lock_release+0x680/0x680 [ 2271.595622] ? kmem_cache_alloc_trace+0x151/0x320 [ 2271.596623] ? v9fs_show_options+0x690/0x690 [ 2271.597564] ? trace_hardirqs_on+0x5b/0x180 [ 2271.598459] ? kasan_unpoison_shadow+0x33/0x50 [ 2271.599409] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2271.600468] v9fs_mount+0x79/0x8f0 [ 2271.601212] ? v9fs_write_inode+0x60/0x60 [ 2271.601922] legacy_get_tree+0x105/0x220 [ 2271.602771] vfs_get_tree+0x8e/0x300 [ 2271.603534] path_mount+0x1429/0x2120 [ 2271.604339] ? strncpy_from_user+0x9e/0x470 [ 2271.605232] ? finish_automount+0xa90/0xa90 [ 2271.606130] ? getname_flags.part.0+0x1dd/0x4f0 [ 2271.607085] ? _copy_from_user+0xfb/0x1b0 [ 2271.607957] __x64_sys_mount+0x282/0x300 [ 2271.608798] ? copy_mnt_ns+0xa00/0xa00 [ 2271.609473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2271.610559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2271.611636] do_syscall_64+0x33/0x40 [ 2271.612398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2271.613485] RIP: 0033:0x7f7d78bdfb19 [ 2271.614251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2271.618075] RSP: 002b:00007f7d76155188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2271.619645] RAX: ffffffffffffffda RBX: 00007f7d78cf2f60 RCX: 00007f7d78bdfb19 [ 2271.621127] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2271.622609] RBP: 00007f7d761551d0 R08: 0000000020000280 R09: 0000000000000000 [ 2271.624092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2271.625583] R13: 00007ffd842a75bf R14: 00007f7d76155300 R15: 0000000000022000 [ 2271.636922] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2271.666321] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2271.668614] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2271.670093] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2271.671493] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2271.673132] print_req_error: 8 callbacks suppressed [ 2271.673151] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2271.676594] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2271.679758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2271.680984] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2271.683352] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2271.685684] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2271.687991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2271.689214] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2271.691821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2271.693017] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2271.695480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2271.696676] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2271.698959] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2271.701252] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2271.702928] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2271.705229] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2271.706905] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2271.709208] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2271.712210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2271.713656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2271.715072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2271.716495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2271.722936] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2271.724639] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2271.726328] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2271.728020] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2286.769162] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88801837a500 (size 32): comm "syz-executor.6", pid 12963, jiffies 4296938479 (age 23.229s) hex dump (first 32 bytes): 39 70 2d 66 63 61 6c 6c 2d 63 61 63 68 65 2d 33 9p-fcall-cache-3 32 37 00 18 80 88 ff ff 00 00 00 00 00 00 00 00 27.............. backtrace: [<000000001440bbf0>] kstrdup+0x36/0x70 [<0000000083302a67>] kstrdup_const+0x53/0x80 [<000000005b805818>] kvasprintf_const+0x10c/0x1a0 [<000000007069b585>] kobject_set_name_vargs+0x56/0x150 [<000000008fd0bb83>] kobject_init_and_add+0xc9/0x160 [<00000000e358f349>] sysfs_slab_add+0x172/0x200 [<00000000e9b466e1>] __kmem_cache_create+0x3db/0x520 [<000000007fa97e43>] kmem_cache_create_usercopy+0x1db/0x2f0 [<000000009ddc1b54>] p9_client_create+0xc6a/0x1230 [<000000008404d73a>] v9fs_session_init+0x1dd/0x1680 [<0000000027ee6788>] v9fs_mount+0x79/0x8f0 [<000000001037f906>] legacy_get_tree+0x105/0x220 [<000000006dd5e28f>] vfs_get_tree+0x8e/0x300 [<00000000417d8899>] path_mount+0x1429/0x2120 [<0000000065c318de>] __x64_sys_mount+0x282/0x300 [<00000000f7555330>] do_syscall_64+0x33/0x40 BUG: leak checking failed VM DIAGNOSIS: 11:49:53 Registers: info registers vcpu 0 RAX=ffffffff83e7c900 RBX=0000000000000000 RCX=ffffffff83e644dc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7cf08 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85677788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7c90e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff34194350 CR3=0000000004e26000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000000000000000ff00 XMM01=25252525252525252525252525252525 XMM02=20646970202c22362e726f7475636578 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=38313038383866666666783020746365 XMM06=29323320657a69732820303035613733 XMM07=78652d7a797322206d6d6f6320200a3a XMM08=0a303478302f333378302b34365f6c6c XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e7c900 RBX=0000000000000001 RCX=ffffffff83e644dc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7cf08 RBP=ffffed100112f000 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85677788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7c90e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2e0ff8e450 CR3=000000000ca9c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004145b7cc00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000