b012f063fbd94bf5526b7320b0c5a11e2d96664af952e186eb50e49e65192fd8f03d2a80942", 0xf4, 0x7f}, {&(0x7f0000000e00)="38f50059e6341004b564d391079952c776215e3269e3a9ff052f9fed38df43227ce304fc122b690fd3c66283fea63195ab3a2bd1abcad2529aa5a7c02b3707723f5644c7249d264ee362f89d7ca94eb27014ebf22e9709ca99a79e365596f669369e1dd73208a2c2527872b8e6b898504ab6b4850952111aacca2e99d52d6c6632916eeaddf6dd8d2f059e1c8380cf43aa56ab5759b2", 0x96}, {&(0x7f0000000ec0)="bafbc07c8dc6e9a0ab53dd5648c479c92bc1cc5489b263c1a7f3748479ca881b40d423369991679989797577af0d9704a96cd32f1fd98918d9f4888798a91f63ae48a7de0e4bc1e719313f89156785717c2a4ad7134b049dfc594bbc525bbd3bdba5b0bc5761f127", 0x68}, {&(0x7f0000000f40)="9896fbde140b79ce754d9e5f730f363ee8ed502cbc1ac476e3298dc7c814afaee76bb20b0518826f397fc9713db3cfee68866ff7f244fdb37d96c8dc0e7d489709710d67300e7a0f2df6227326eddc4000b2ae06ba64ed51e7059555e02bb1341cfc376773943a8904eed30be025066a37b3d40267722231091742d6e134b6aca4901dfa9cfadf14343ba1e13f6b7216c33e29adfa", 0x95, 0x5}, {&(0x7f0000001e00)="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", 0x1000, 0x2}], 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, r2, 0x0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) [ 481.283487] loop2: detected capacity change from 0 to 41948160 17:28:08 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0xb8}], 0x1}}], 0x1, 0x0) [ 481.312579] FAULT_INJECTION: forcing a failure. [ 481.312579] name failslab, interval 1, probability 0, space 0, times 0 [ 481.314986] CPU: 1 PID: 5524 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 481.316439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 481.318159] Call Trace: [ 481.318718] dump_stack+0x107/0x167 [ 481.319498] should_fail.cold+0x5/0xa [ 481.320314] ? create_object.isra.0+0x3a/0xa20 [ 481.321285] should_failslab+0x5/0x20 [ 481.322099] kmem_cache_alloc+0x5b/0x310 [ 481.322968] create_object.isra.0+0x3a/0xa20 [ 481.323897] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 481.324980] kmem_cache_alloc_trace+0x151/0x320 [ 481.325397] cgroup: fork rejected by pids controller in [ 481.325959] ? _copy_from_user+0xfb/0x1b0 [ 481.325987] copy_mount_options+0x55/0x180 [ 481.326900] /syz4 [ 481.327589] __x64_sys_mount+0x1a8/0x300 [ 481.327607] ? copy_mnt_ns+0xa00/0xa00 [ 481.328189] [ 481.328609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 481.328632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 481.332427] do_syscall_64+0x33/0x40 [ 481.333207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 481.334399] RIP: 0033:0x7fbd09823b19 [ 481.335179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 481.339385] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 481.341229] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 481.342733] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 481.344236] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 481.345825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.347514] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 481.372569] Restarting kernel threads ... done. 17:28:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:28:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a7c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x37c}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) accept(r0, 0x0, &(0x7f0000000080)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) dup2(r5, r6) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac485cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef691342362187a7f35557f447e7899c87d62581ef02da6162a85fc4bfcef3eff3532e1f1bcac900"/151], 0xb8) 17:28:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 481.497991] loop2: detected capacity change from 0 to 50176 17:28:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x282f443a}, 0x40420}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file1/file0\x00', 0x7, 0x9, &(0x7f0000001000)=[{&(0x7f0000000300)="1ce5f9fc568a3a3ea2bf374ef357300c8b63270dd415375da7b2fc12263e1bf7cbc54458c17a65862d405b6c0a34c9a739e580966da3928eba1bb0425061954289c269ab323016fb878c51ef917169553e907db42807e3895c2d495e7bdb72f99e77bf3c53075d44af70aeb2c98fd014a93f4e4e44abe0e0383fb9fbb64ec80fffd6f7dcef385e47601031a7f7c63635a910cd58c98e27f0612e6a3555be8b98fafdd3e4b39e0ada972c5a46895c03cd111d05935b15b698c29b67187f7ae20ee3a9de1378629a16a76d0cc9143c9723ac4e11218bfcbe53c5fe22", 0xdb}, {&(0x7f0000000240)="a44e03dae25229ef7664dc0d82e4b72cd0c592738a95", 0x16, 0x62b2}, {&(0x7f0000000400)="07ed084ada69053c2124c53028702d70c9a22071671ca60104ff40bfb813f281f556115eba4a1e3e7d01682b3797aab68d3aec", 0x33, 0x1}, {&(0x7f0000000c80)="d2ed55d7ae592d049b4bfbd759537ed383cd1b676a4f6e59d26a56e5b6daf4a4a218b0bfaa1ec80f800ef933d3c7e29b9f6b3c6d9d082ee0088be587c9c55c99c288acebfe09bbe2a3f04845d660bdcf23ca65d1854dd8097a", 0x59, 0x2}, {&(0x7f0000000d00)="d965f5d7fe4b15910a96e5a6a0700a5e9b6c2dbccb681ed38ef77ecc1b6a16276b7c830eefc4c787eb7d0bbbf08e35c84da54a5eaa03b13c6c77a6baa9ddb6491dcab1010a7faed5272bc113771385dd3434bd0eb36d9820b95d51c7eeb2e773eb4d7dbf971395d739c553e7b7ae5f073317ca14cc6a87751673062f6dbe88aa0ba08fe9f3b473626a9861341797e72327883c390744e9967701d256efada4e1dcf0c6a3bee756fd854c832f81e1d1a389c8514270c1054c2a3f67970dfa1459ef68c718bdf589adfc91a2a5d90e0b012f063fbd94bf5526b7320b0c5a11e2d96664af952e186eb50e49e65192fd8f03d2a80942", 0xf4, 0x7f}, {&(0x7f0000000e00)="38f50059e6341004b564d391079952c776215e3269e3a9ff052f9fed38df43227ce304fc122b690fd3c66283fea63195ab3a2bd1abcad2529aa5a7c02b3707723f5644c7249d264ee362f89d7ca94eb27014ebf22e9709ca99a79e365596f669369e1dd73208a2c2527872b8e6b898504ab6b4850952111aacca2e99d52d6c6632916eeaddf6dd8d2f059e1c8380cf43aa56ab5759b2", 0x96}, {&(0x7f0000000ec0)="bafbc07c8dc6e9a0ab53dd5648c479c92bc1cc5489b263c1a7f3748479ca881b40d423369991679989797577af0d9704a96cd32f1fd98918d9f4888798a91f63ae48a7de0e4bc1e719313f89156785717c2a4ad7134b049dfc594bbc525bbd3bdba5b0bc5761f127", 0x68}, {&(0x7f0000000f40)="9896fbde140b79ce754d9e5f730f363ee8ed502cbc1ac476e3298dc7c814afaee76bb20b0518826f397fc9713db3cfee68866ff7f244fdb37d96c8dc0e7d489709710d67300e7a0f2df6227326eddc4000b2ae06ba64ed51e7059555e02bb1341cfc376773943a8904eed30be025066a37b3d40267722231091742d6e134b6aca4901dfa9cfadf14343ba1e13f6b7216c33e29adfa", 0x95, 0x5}, {&(0x7f0000001e00)="23c59bf2e97c320e455ac1faa7ae5fc075760222ca911a74b4c775ffe1813e06095bb38fdc02f783823dcca831ad55e4fdecc5809d34172b5bda2a7a1901cda9fce902428098c5e08e0235d3fd20207628208c6957c76cd7eeb8f03ccb41bb40a2bad8a7416a5d878260e129426aef7aa1d3d077fd2fa4f5f26efbe2958d0b93e9200bc8e08dc65f37be49cab6a1bd4c1defcbe2b9f3c6c4eede7ee71fceaee1e0f3c118d5ba196c86f617a5bdc0ef6a78581a07399407455c306861433dfad7d7fa7ee4d9527a25281996563491059b848019ea13601eb44a78914cb56dfea6d143a9051068487f3d9343cdfbdb6adc7b88f4e1e3ab025c51e1c203b15a8a84433809eebf11f099c1e6e5a20d112657d6c2fcf189e0e568ad6332f4034971b139e72ee9da63e2642b694d7e52f29cebd138f488bd48692914f127aa9f0f3b84ea9b0949006d77c1810731842dc977bd1cc2116bfc7b58426d54ebd67f50fe76bfec9956941994c061a01cb2e3beb53fba6c43f3e7168d942113c77ab2bcdf6629ae6ad5206a03d315ccf813bb8a16922b933f6f762934a46d827f31e3e8e0466284743d5fe43d9ed739e31ce3781a6b343bb1fcf47b6ad5c3e8e73e24755c7510b0eeb39e34721c51d6fedeafe29d6de70e3866d12a7f373fec907a80c259ceaf342e0056c56b23cccde8cacc7edf3c5aa132118b7f5f3bc33a47c064c4b8785ac420fd52f113326bccf0effad3ceb171207809a16d17abfeae37cda8a367078288f618edc14759fce7ec36e2d65451d73f51659cae654ad74e9a569695c87e2087e49919db430524f3055ce640f07af05cb1cc872a1a72b4f67d3ae0ebf89b83b7b5fae82e8a9e9d2f4f9385de1173edc20e64e8ae8e4888d7a0fd3322c5bf9b6dfc1ff5df9910d1eebbf92808a0dc53ef2f080937955fad404711158934127c2ed5bf073c09c3a6a3567d52045f0867efeecb05ccbb2c57c775af5e9eb9bd250ce2f3675203ed36a41129a914effd48e027ece3422a658a4cb8946cba76878ef2d718f39889b7f589b7471b3d0f76bd7b17e8f31c8a5a024bb407997b60bf2f1cb907cca5ebe531dadf0480532e30d175cc5a915a376f63d42d342df5aba6abef04525c1c9340c495056b5eae3eec879b7309790c7591d28d34a2a4e07d2695814461cee52da3dd1a1c9632007144071469c8451c3795e6e6f7b6b770c434b2f94b71dd78c4db589a998a4c0642cf5d7fa83edacd963801cf2352dcf6904a5b1cace9c7cb13b9b1d655f3efd00e96f890f6ba685e09ae01f9985a09638d8b785c38307581f91766dfc475da8d4750d58e9ad23b607f77179279d5cd507b1ff5014682e4998c1dcd737a596d14de74296800ca09f4e62400fd1fc4e6887b19acb2b64856e61540328260741f824da11acd614e41283df63a74ba9a2ffb8471fb31b977cc31ba6193e6689780b4e695fae018ae83377bafcd1819047addc93ee1bf286a8e0476884661b2dc16ca6392b5e355d67cdc53d22c550f852db77cee20b59cc9cfe430415eba580020841cd8c7c792d0e12d20f1dd24db815aea79cc082712bcb9584fa362d6d6f28a852136542b03ecdff523c28a8f67422db30dc5585397960022279320ee0606293147688aad8248972d15ea084c2deb88b84e2e1ddd291095ab642da206567e9bf9dd7ee82a29bf5b8ff3ae0ee419a461d328ca088a888200c6fe1da76625feb4dfc468e104652e3172e115f46e70ad7c33d379e22687f6a9a304b812bcf747cd8765ce08dcbbbf80ec46c3807a9375fd5394c9d0f08d698b4bebe49a90f10d9e8f04eb61e9fcbe43885d12290996c63639710ba1ddd37f008624b154df42c2186ada111f08ab0bacb96900d5fef61e978c51f1858cfc496f0693485ce39c2ac33d2e3969389d90e5593f328c13c1f17b80444cf481ce5f75cd1352ccbc295bd4891b4a41d581a316f0c8b2778f0b03e7362bcc26597d5f097235e8588ffbc6f06c9f9461cb5d10a275b3f9205490abe7a658dce9ce0f502ec5d1f30524e260ecfafd554286a56f2dcd414a149abd0dee5f2e8f77339b07371f6b4c48a76e65aba4a38549b0c9634f97feffeccab902f5442920858eed2df9452c93ec4a61607e8ac9cc09d8e1f054b25106b2aa1700aa5a12de2a400d30417903aca244ef6d0244a46a586ac2c9c90bc203761365bf5d1aaefaeca76ce057d0a52a85a36303da14ae9b73a2a8dd74e7aa24af73a4284b948387c4d55102f2c2f99c83357215a1e42e6cbfe7da3d71acfdcdbd177ecc2647ae296a23af69c1a0bbd219f4aa42a561153f2c0d2f5296f07ce16be6c1a3389dc8fd0a693f10a88d790e142a6c21ce4ac9e0af7b2ffa3b5c45623d6715297e6c5ac04afd952cf5d2b612b37855b02f037f1fa47c9ff07e4fb7ae17e0a53c4b65c6057c54435fc77c70a321ea8c48920f9682ba7b207afc5be2f5dcb0e99c18b869fbd8e146c985762a1eedf3d1e2343cadb4ce08d6855b0f2f34df1936ea19ccb8e7a932e9769cb9e0f40c0828b2fa88d8fa08540068c034271291bce951412b0eacf5e0ecc38fc828696a9c12199f228390fe52d69d5339e59a98f651df36ae8e90c1fb985180799fbce0a6ba71afb1628c647f95d1ee38867a1616ab706935aefe5c4d5066895d90975eae241d5b2a33101366e1f2f21eb3e5dcafbbe17c166db71c008d30d8baa1d0c1aea9da0d13afe805b675ecca118d4e0d0b4903ae203c4e6dacc59e00cfa5a146d991d866aca5c3f9e88d7b8634054326756ad131735073a172db15be92a1846b413b7ac666b008dbfef859508f2fe8332ced747ebedcbcdb38da29ec32443a85d777da08b84dcac736f1e93f396f4b737d9eb8898c199782dd59054a2c023459c17922e51621fb6e4ea11643dd03f48eca1516122817502ea35b38882b8170b9ff2194f5e4b0585cbe443c5b8ec71434239f075ec943081eeb80d0e37fcdd2e4fa57cf69007a9769a2eced04d27f5166f7a765ccc28f8dcc71afd64af2e529bf0684aeb50da006691f161a714b6007abc36e82370a2420b77f4739c2984938893fb395f62ab2e15ac5dd011882de514465d6f56e919b73be57b868afc4ad11838021eae8dc8cfb3647e9364bfe9c62b8c4a5b72015d610e7a8524e1c42071f38d0b7103347b27c80d1c571053a730c6a2ce474188e64ba721a0fa1e6c99e44139f4ebcbf489f8c380a331686319581a29a01f546627997c75c63e7bbf64c23c4c92ecdbc08acbd1322ced75402da1a15fffec588ac1c9e50b1ae6993b48025de1b12a726a8abd2cc4f1d57936b215d21a39c3a4d5fe08939a388c9b386acb5080505d3440c7d1110f570dbdf13b4adeb1ae5719c22e723ca521988a6e4c68b598fa9a2eda5bd97e1cdda700b720476e5a857c6d9c4b995e755e3a6e299b5caa4bedd0da5ba9a23738d1d9b72a832e22fdb1eea4384ba73ddf2165d7ab83fbff8ffd786a6d01d00f25328a7a0353ec4282ef08a1f97dbe94886ae7394dc95fb11dde101e25425ea77c89b446dcf27e4cef3b23327a0ffcf7c0d029d2ba70b34ba1406f288c7776970e807d9b27417ab4f5ca3fcdcfb960c38fda933e52bd2db5b347267a2ec26728055d7e91cc03972992e9a5f410c7b4d30ef378c69f586455b507ac52b38b4f79d480afef9c29cb451cc9090660364860ba779098ad7a6a735987ea5f39a29a8bf2b8cc70323d12032a6be8f605ea300ef6afabb07e1480e6e653dca87bd1d56726c685c65aad955566fa6bccb05f6ec3a3c05629c8ce2be76063d4daa891c16542b923e34aaaeeaee43c63cd6e8c3b90ef35d001a407a17dd86aa88eabe1c2316c9df1b2ff909a6b69f64a349355eea71a22a7299865efdcaacdca697c09d44085fa11fbff4e341be7f5f190b0774dd6abe015edcb707b1238289a85dd98259945a0e1a200af9509a91097584243b35c12950b69e60859b2b70468cd969f6cc542234f531828d8b9f01eb937d79fd0d1ad2a4f42c24df7243503fcda7f489fc1ef5613dc7dd01f07240c5925490f22612ace9f1c79707b053a0884fd9058f9c913ebdff3b1f594841368ec5086c32f104221247bd4f4695e960747a970c1cb722be414fbde2fc5d0d6d2ac576a45c6d0820d5fb11e6cfb7716817cd6476d8c23b589499cebeea046113418aac8b1355b9dcf545c4e15fb6eff4160b4954f9d4af7fcf3d14cfed6632c2f746aad2e1e6752f518600f68563356042524806cc40b74c1335e59dfc44a62273b66a5155859aec0584b874bf87ff9c8d05d4a52ae86b875a74070f9a378c426ccd2d184d5f4babb789d25fc9f14f7118af45a1242d88e9d0f1ecdc25adc91cfb6523b4523f530295c8d1c77d9e688102cee7a26374d6b61611c35308ae66f584666ea6c3060921938de5d312bc0479334e5acbf9630e19869c65de43560cf79c654a6f12c89a3a72a32b0dfab57cb49e31b12fdeb247dc0c2f08f7c1dfc483c0b587135a4da65a4aab44432857ae883356fd2b9bf9b6121fcfbeae9a218401f97dd0c9fce369b4621f7174651f9cdfb83525d633d38045a4f8689601925cae837669ec54e83ea93bd61f5cdd5bcc6f8d7f04c7285453de8cb730d94bdbd2dc1c0d573ef3077cbcafafc2c85c734be36f1d408667a9b12c2a392f665eadcbc5d964ed975f39dbc98875b4822677bd36cb568b493b64292bc7e783dc058091b31461e5a48b96d0b35c6a774bdaef5aa6c29225c1f95b9ef52154bcb5083c1ec89b0dd55b80cd33d714f3c9cb042b30ef9ee140f1ff5860183bb397de23ac4d0deeb7729500bb8c5fd025fdeb796ec7528476ce413c67eace2fa426b8999ab668471baaaf3df985ebd13853e86a0530035167a9100f78430898128946349b98731a87e6ef52aea6a004e666c55eeec10d50d28360658d2226b49d3ecbbca6552ba4c1a157c838f6938d6248ae2cebf3d1281b8286a477a680f8f8b91bb9ebc9f73403236135317529da9e9d0091bc44eaa981832f002e5f11567d6dadccbd868c6e1ba953db2086a671ef1a8e1d4ea2e1d022b8e66b0eb8aa069c44a1e8583ab57d76296c30b1947ab2c7dd09403be1d3055d68b2e443e2e3e94108748f8111cd5d2de37b469347a47adac97c3d07d9abcd6fb3ff44eb558d4b1b026302906e9dbccbfa8d504b0318a20e1261d0721e66bd345896c389a45d50bd022298438bc2b8a72a208190698096016ba357021cb9362ebe0e2313af9cfc948c5b97d0fab46ac00d6d16199ad6957de59b023914cbc27552e05260c82d3d6ac5a91c6ae65e739a42952800c894cadfab3980395bf35c56f0800a0f1502c2965a0a8ef06fb386af2fdcd44bd1f12c3d3ce2726773fc4d312fbf5aeb4494f8994c382216bd3d67794a7f1369e3c130c7f1d2cc699d3fc193f1dc275c662b9fd9861c217afc26583a0f0dcfaab8f38125f922fdb5c7c735823e52c183902032e3a129e41317fee05d9b5bb961009193ac0964e7da6480eb9db34b24f7bf72dda940282a08cdb310bb0613381fb4de02009d28dac0c73af4471535f17977cbff25ea18e2612633c7a2d8e42d943c00c7c708dc12f3ea4e54de69247c20858bd453b674e076cbb7c60c8a3edc56ebc38fc65f9187c8bf9996aab10dc67732d5892c5c084850460282340a539bdfc098523a553f18e3bc6ad541dc7efd13cef838f09844d336a1a30e06062d798ffae63b167fc40fbef4c01a30c03e5517536903b583707d0adb8e843421816e01", 0x1000, 0x2}], 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r3, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, r2, 0x0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:28:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a7c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x37c}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) accept(r0, 0x0, &(0x7f0000000080)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) dup2(r5, r6) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac485cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef691342362187a7f35557f447e7899c87d62581ef02da6162a85fc4bfcef3eff3532e1f1bcac900"/151], 0xb8) 17:28:08 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:28:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 6) 17:28:08 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x20002a81}], 0x1}}], 0x1, 0x0) [ 481.638396] Restarting kernel threads ... done. 17:28:08 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0xb8}], 0x1}}], 0x1, 0x0) [ 481.673534] loop2: detected capacity change from 0 to 41948160 17:28:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 481.863738] FAULT_INJECTION: forcing a failure. [ 481.863738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.865114] CPU: 0 PID: 5560 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 481.865883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 481.866837] Call Trace: [ 481.867163] dump_stack+0x107/0x167 [ 481.867605] should_fail.cold+0x5/0xa [ 481.868107] _copy_from_user+0x2e/0x1b0 [ 481.868654] copy_mount_options+0x76/0x180 [ 481.869165] __x64_sys_mount+0x1a8/0x300 [ 481.869634] ? copy_mnt_ns+0xa00/0xa00 [ 481.870079] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 481.870676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 481.871270] do_syscall_64+0x33/0x40 [ 481.871693] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 481.872279] RIP: 0033:0x7fbd09823b19 [ 481.872713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 481.874838] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 481.875725] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 481.876557] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 481.877369] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 481.878185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.879000] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:28:08 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x7ffff000}], 0x1}}], 0x1, 0x0) 17:28:08 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:28:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:28:08 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0xb8}], 0x1}}], 0x1, 0x0) [ 481.964599] loop2: detected capacity change from 0 to 50176 [ 482.037240] Restarting kernel threads ... done. 17:28:23 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x270, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x25a, 0x81, 0x0, 0x1, [@typed={0x14, 0x65, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r2}, @generic="e094e1d5b244ae2c7f0c6c005373056b180521f908b01dabb70d72ba468b3b7b75510377bac91fe03cab5bc4538e6a1af8703234ea5a49272fb694afa70b4125c91153eaf1003c8b748de7cf12132d86bdbc6673ad5bc0438cdd57cecabaa50f2669c1e778bc9e43b73ffcb6a7993faad9d0b1bf1f09cfd581bd70e826ba82773d73959c2a0dd47d9aa5fee6104d0c5179fe67ed98d3e873a75a896342fcdc45a7e3b5667d91d5e3a0ec20a34a7da297fcc10ce46dc8430af248dfe1c5ecfd35bbe164a54c83b2d4bcc0bb3a213bc3db956f6bfd", @generic="b661d38b05ede8eb44ed2bff8d902a82daaa72f8d48dddc3825a574be7c562a1b2f8799b2daa24c89b5b5b700db39fe1e3235137568b290fb033459d7faef3a999db38bd8d3e5938ee73313af330ef58bc2bd84adfef4ff751bc84e9fc69c0335600b2a91bf2f804bfea7798649842f3278ce5367a8597a8ad702916286bfd59b7412fdd5a12869e57a459beb3fc95f0776c240a1e2e", @generic="e61c9a56b8a6eead0a270e608ae43490c17fe623f510b866ee53040dc4176b11233b09eeaef7d4cb9d0451e6f1069850b972559de94d27357711703be743e33e96232e6a3da509fb14c76dc65d8fe859e5143f2208d86a26f43fe2a2619fe34d1c5620c3a173c66a70461a4150dbb7899480c2fc93e0bc5c2797b1f61f203dc237f6a9337b6cd36bfdff18166577a05f41059c7189ea77fc1a0843e62563f6a92d41172dc5bd357beb137339ce82d89814538abbab0da2f1ab2a017671a546b4f8eb2e6d3f5d087c", @typed={0x6, 0x40, 0x0, 0x0, @str='-\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x2ba8e1d15d94a280) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010200001800b952e81179002c", @ANYRES32=r0, @ANYBLOB="0000e000000000002e2f66696c653000"]) r4 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r4, &(0x7f00000007c0)=0x800000000, r1, 0x0, 0x1f, 0x9) 17:28:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x282f443a}, 0x40420}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = gettid() syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file1/file0\x00', 0x7, 0x9, &(0x7f0000001000)=[{&(0x7f0000000300)="1ce5f9fc568a3a3ea2bf374ef357300c8b63270dd415375da7b2fc12263e1bf7cbc54458c17a65862d405b6c0a34c9a739e580966da3928eba1bb0425061954289c269ab323016fb878c51ef917169553e907db42807e3895c2d495e7bdb72f99e77bf3c53075d44af70aeb2c98fd014a93f4e4e44abe0e0383fb9fbb64ec80fffd6f7dcef385e47601031a7f7c63635a910cd58c98e27f0612e6a3555be8b98fafdd3e4b39e0ada972c5a46895c03cd111d05935b15b698c29b67187f7ae20ee3a9de1378629a16a76d0cc9143c9723ac4e11218bfcbe53c5fe22", 0xdb}, {&(0x7f0000000240)="a44e03dae25229ef7664dc0d82e4b72cd0c592738a95", 0x16, 0x62b2}, {&(0x7f0000000400)="07ed084ada69053c2124c53028702d70c9a22071671ca60104ff40bfb813f281f556115eba4a1e3e7d01682b3797aab68d3aec", 0x33, 0x1}, {&(0x7f0000000c80)="d2ed55d7ae592d049b4bfbd759537ed383cd1b676a4f6e59d26a56e5b6daf4a4a218b0bfaa1ec80f800ef933d3c7e29b9f6b3c6d9d082ee0088be587c9c55c99c288acebfe09bbe2a3f04845d660bdcf23ca65d1854dd8097a", 0x59, 0x2}, {&(0x7f0000000d00)="d965f5d7fe4b15910a96e5a6a0700a5e9b6c2dbccb681ed38ef77ecc1b6a16276b7c830eefc4c787eb7d0bbbf08e35c84da54a5eaa03b13c6c77a6baa9ddb6491dcab1010a7faed5272bc113771385dd3434bd0eb36d9820b95d51c7eeb2e773eb4d7dbf971395d739c553e7b7ae5f073317ca14cc6a87751673062f6dbe88aa0ba08fe9f3b473626a9861341797e72327883c390744e9967701d256efada4e1dcf0c6a3bee756fd854c832f81e1d1a389c8514270c1054c2a3f67970dfa1459ef68c718bdf589adfc91a2a5d90e0b012f063fbd94bf5526b7320b0c5a11e2d96664af952e186eb50e49e65192fd8f03d2a80942", 0xf4, 0x7f}, {&(0x7f0000000e00)="38f50059e6341004b564d391079952c776215e3269e3a9ff052f9fed38df43227ce304fc122b690fd3c66283fea63195ab3a2bd1abcad2529aa5a7c02b3707723f5644c7249d264ee362f89d7ca94eb27014ebf22e9709ca99a79e365596f669369e1dd73208a2c2527872b8e6b898504ab6b4850952111aacca2e99d52d6c6632916eeaddf6dd8d2f059e1c8380cf43aa56ab5759b2", 0x96}, {&(0x7f0000000ec0)="bafbc07c8dc6e9a0ab53dd5648c479c92bc1cc5489b263c1a7f3748479ca881b40d423369991679989797577af0d9704a96cd32f1fd98918d9f4888798a91f63ae48a7de0e4bc1e719313f89156785717c2a4ad7134b049dfc594bbc525bbd3bdba5b0bc5761f127", 0x68}, {&(0x7f0000000f40)="9896fbde140b79ce754d9e5f730f363ee8ed502cbc1ac476e3298dc7c814afaee76bb20b0518826f397fc9713db3cfee68866ff7f244fdb37d96c8dc0e7d489709710d67300e7a0f2df6227326eddc4000b2ae06ba64ed51e7059555e02bb1341cfc376773943a8904eed30be025066a37b3d40267722231091742d6e134b6aca4901dfa9cfadf14343ba1e13f6b7216c33e29adfa", 0x95, 0x5}, {&(0x7f0000001e00)="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", 0x1000, 0x2}], 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r3, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, r2, 0x0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:28:23 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:28:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:28:23 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 7) 17:28:23 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:28:23 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x2}}], 0x1, 0x0) 17:28:23 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0xb8}], 0x1}}], 0x1, 0x0) [ 496.846325] FAULT_INJECTION: forcing a failure. [ 496.846325] name failslab, interval 1, probability 0, space 0, times 0 [ 496.847869] CPU: 1 PID: 5597 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 496.848791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 496.849955] Call Trace: [ 496.850303] dump_stack+0x107/0x167 [ 496.850753] should_fail.cold+0x5/0xa [ 496.851228] ? getname_flags.part.0+0x50/0x4f0 [ 496.851800] should_failslab+0x5/0x20 [ 496.852381] kmem_cache_alloc+0x5b/0x310 [ 496.852998] getname_flags.part.0+0x50/0x4f0 [ 496.853656] ? _copy_from_user+0xfb/0x1b0 [ 496.854269] user_path_at_empty+0xa1/0x100 [ 496.854892] __x64_sys_mount+0x1e9/0x300 [ 496.855507] ? copy_mnt_ns+0xa00/0xa00 [ 496.856034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 496.856141] loop2: detected capacity change from 0 to 41948160 [ 496.856833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 496.856849] do_syscall_64+0x33/0x40 [ 496.856862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 496.856881] RIP: 0033:0x7fbd09823b19 [ 496.860970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 496.863287] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 496.864221] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 496.865125] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 496.865975] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 496.866829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.867699] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:28:23 executing program 7: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0xb8}], 0x1}}], 0x1, 0x0) 17:28:23 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x8}}], 0x1, 0x0) 17:28:23 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:28:23 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x270, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x25a, 0x81, 0x0, 0x1, [@typed={0x14, 0x65, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r2}, @generic="e094e1d5b244ae2c7f0c6c005373056b180521f908b01dabb70d72ba468b3b7b75510377bac91fe03cab5bc4538e6a1af8703234ea5a49272fb694afa70b4125c91153eaf1003c8b748de7cf12132d86bdbc6673ad5bc0438cdd57cecabaa50f2669c1e778bc9e43b73ffcb6a7993faad9d0b1bf1f09cfd581bd70e826ba82773d73959c2a0dd47d9aa5fee6104d0c5179fe67ed98d3e873a75a896342fcdc45a7e3b5667d91d5e3a0ec20a34a7da297fcc10ce46dc8430af248dfe1c5ecfd35bbe164a54c83b2d4bcc0bb3a213bc3db956f6bfd", @generic="b661d38b05ede8eb44ed2bff8d902a82daaa72f8d48dddc3825a574be7c562a1b2f8799b2daa24c89b5b5b700db39fe1e3235137568b290fb033459d7faef3a999db38bd8d3e5938ee73313af330ef58bc2bd84adfef4ff751bc84e9fc69c0335600b2a91bf2f804bfea7798649842f3278ce5367a8597a8ad702916286bfd59b7412fdd5a12869e57a459beb3fc95f0776c240a1e2e", @generic="e61c9a56b8a6eead0a270e608ae43490c17fe623f510b866ee53040dc4176b11233b09eeaef7d4cb9d0451e6f1069850b972559de94d27357711703be743e33e96232e6a3da509fb14c76dc65d8fe859e5143f2208d86a26f43fe2a2619fe34d1c5620c3a173c66a70461a4150dbb7899480c2fc93e0bc5c2797b1f61f203dc237f6a9337b6cd36bfdff18166577a05f41059c7189ea77fc1a0843e62563f6a92d41172dc5bd357beb137339ce82d89814538abbab0da2f1ab2a017671a546b4f8eb2e6d3f5d087c", @typed={0x6, 0x40, 0x0, 0x0, @str='-\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x2ba8e1d15d94a280) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010200001800b952e81179002c", @ANYRES32=r0, @ANYBLOB="0000e000000000002e2f66696c653000"]) r4 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r4, &(0x7f00000007c0)=0x800000000, r1, 0x0, 0x1f, 0x9) 17:28:23 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 8) [ 497.019917] loop2: detected capacity change from 0 to 50176 [ 497.259545] FAULT_INJECTION: forcing a failure. [ 497.259545] name failslab, interval 1, probability 0, space 0, times 0 [ 497.260947] CPU: 1 PID: 5616 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 497.261701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 497.262599] Call Trace: [ 497.262890] dump_stack+0x107/0x167 [ 497.263301] should_fail.cold+0x5/0xa [ 497.263745] ? create_object.isra.0+0x3a/0xa20 [ 497.264243] should_failslab+0x5/0x20 [ 497.264690] kmem_cache_alloc+0x5b/0x310 [ 497.265136] create_object.isra.0+0x3a/0xa20 [ 497.265657] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 497.266261] kmem_cache_alloc+0x159/0x310 [ 497.266756] getname_flags.part.0+0x50/0x4f0 [ 497.267267] ? _copy_from_user+0xfb/0x1b0 [ 497.267758] user_path_at_empty+0xa1/0x100 [ 497.268257] __x64_sys_mount+0x1e9/0x300 [ 497.268743] ? copy_mnt_ns+0xa00/0xa00 [ 497.269179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 497.269810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 497.270426] do_syscall_64+0x33/0x40 [ 497.270867] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 497.271475] RIP: 0033:0x7fbd09823b19 [ 497.271910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.274105] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 497.275003] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 497.275849] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 497.276628] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 497.277397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.278167] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:28:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 9) 17:28:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:28:37 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:28:37 executing program 7: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0xb8}], 0x1}}], 0x1, 0x0) 17:28:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x282f443a}, 0x40420}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file1/file0\x00', 0x7, 0x9, &(0x7f0000001000)=[{&(0x7f0000000300)="1ce5f9fc568a3a3ea2bf374ef357300c8b63270dd415375da7b2fc12263e1bf7cbc54458c17a65862d405b6c0a34c9a739e580966da3928eba1bb0425061954289c269ab323016fb878c51ef917169553e907db42807e3895c2d495e7bdb72f99e77bf3c53075d44af70aeb2c98fd014a93f4e4e44abe0e0383fb9fbb64ec80fffd6f7dcef385e47601031a7f7c63635a910cd58c98e27f0612e6a3555be8b98fafdd3e4b39e0ada972c5a46895c03cd111d05935b15b698c29b67187f7ae20ee3a9de1378629a16a76d0cc9143c9723ac4e11218bfcbe53c5fe22", 0xdb}, {&(0x7f0000000240)="a44e03dae25229ef7664dc0d82e4b72cd0c592738a95", 0x16, 0x62b2}, {&(0x7f0000000400)="07ed084ada69053c2124c53028702d70c9a22071671ca60104ff40bfb813f281f556115eba4a1e3e7d01682b3797aab68d3aec", 0x33, 0x1}, {&(0x7f0000000c80)="d2ed55d7ae592d049b4bfbd759537ed383cd1b676a4f6e59d26a56e5b6daf4a4a218b0bfaa1ec80f800ef933d3c7e29b9f6b3c6d9d082ee0088be587c9c55c99c288acebfe09bbe2a3f04845d660bdcf23ca65d1854dd8097a", 0x59, 0x2}, {&(0x7f0000000d00)="d965f5d7fe4b15910a96e5a6a0700a5e9b6c2dbccb681ed38ef77ecc1b6a16276b7c830eefc4c787eb7d0bbbf08e35c84da54a5eaa03b13c6c77a6baa9ddb6491dcab1010a7faed5272bc113771385dd3434bd0eb36d9820b95d51c7eeb2e773eb4d7dbf971395d739c553e7b7ae5f073317ca14cc6a87751673062f6dbe88aa0ba08fe9f3b473626a9861341797e72327883c390744e9967701d256efada4e1dcf0c6a3bee756fd854c832f81e1d1a389c8514270c1054c2a3f67970dfa1459ef68c718bdf589adfc91a2a5d90e0b012f063fbd94bf5526b7320b0c5a11e2d96664af952e186eb50e49e65192fd8f03d2a80942", 0xf4, 0x7f}, {&(0x7f0000000e00)="38f50059e6341004b564d391079952c776215e3269e3a9ff052f9fed38df43227ce304fc122b690fd3c66283fea63195ab3a2bd1abcad2529aa5a7c02b3707723f5644c7249d264ee362f89d7ca94eb27014ebf22e9709ca99a79e365596f669369e1dd73208a2c2527872b8e6b898504ab6b4850952111aacca2e99d52d6c6632916eeaddf6dd8d2f059e1c8380cf43aa56ab5759b2", 0x96}, {&(0x7f0000000ec0)="bafbc07c8dc6e9a0ab53dd5648c479c92bc1cc5489b263c1a7f3748479ca881b40d423369991679989797577af0d9704a96cd32f1fd98918d9f4888798a91f63ae48a7de0e4bc1e719313f89156785717c2a4ad7134b049dfc594bbc525bbd3bdba5b0bc5761f127", 0x68}, {&(0x7f0000000f40)="9896fbde140b79ce754d9e5f730f363ee8ed502cbc1ac476e3298dc7c814afaee76bb20b0518826f397fc9713db3cfee68866ff7f244fdb37d96c8dc0e7d489709710d67300e7a0f2df6227326eddc4000b2ae06ba64ed51e7059555e02bb1341cfc376773943a8904eed30be025066a37b3d40267722231091742d6e134b6aca4901dfa9cfadf14343ba1e13f6b7216c33e29adfa", 0x95, 0x5}, {&(0x7f0000001e00)="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", 0x1000, 0x2}], 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r2, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:28:37 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x270, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x25a, 0x81, 0x0, 0x1, [@typed={0x14, 0x65, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r2}, @generic="e094e1d5b244ae2c7f0c6c005373056b180521f908b01dabb70d72ba468b3b7b75510377bac91fe03cab5bc4538e6a1af8703234ea5a49272fb694afa70b4125c91153eaf1003c8b748de7cf12132d86bdbc6673ad5bc0438cdd57cecabaa50f2669c1e778bc9e43b73ffcb6a7993faad9d0b1bf1f09cfd581bd70e826ba82773d73959c2a0dd47d9aa5fee6104d0c5179fe67ed98d3e873a75a896342fcdc45a7e3b5667d91d5e3a0ec20a34a7da297fcc10ce46dc8430af248dfe1c5ecfd35bbe164a54c83b2d4bcc0bb3a213bc3db956f6bfd", @generic="b661d38b05ede8eb44ed2bff8d902a82daaa72f8d48dddc3825a574be7c562a1b2f8799b2daa24c89b5b5b700db39fe1e3235137568b290fb033459d7faef3a999db38bd8d3e5938ee73313af330ef58bc2bd84adfef4ff751bc84e9fc69c0335600b2a91bf2f804bfea7798649842f3278ce5367a8597a8ad702916286bfd59b7412fdd5a12869e57a459beb3fc95f0776c240a1e2e", @generic="e61c9a56b8a6eead0a270e608ae43490c17fe623f510b866ee53040dc4176b11233b09eeaef7d4cb9d0451e6f1069850b972559de94d27357711703be743e33e96232e6a3da509fb14c76dc65d8fe859e5143f2208d86a26f43fe2a2619fe34d1c5620c3a173c66a70461a4150dbb7899480c2fc93e0bc5c2797b1f61f203dc237f6a9337b6cd36bfdff18166577a05f41059c7189ea77fc1a0843e62563f6a92d41172dc5bd357beb137339ce82d89814538abbab0da2f1ab2a017671a546b4f8eb2e6d3f5d087c", @typed={0x6, 0x40, 0x0, 0x0, @str='-\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x2ba8e1d15d94a280) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010200001800b952e81179002c", @ANYRES32=r0, @ANYBLOB="0000e000000000002e2f66696c653000"]) r4 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r4, &(0x7f00000007c0)=0x800000000, r1, 0x0, 0x1f, 0x9) 17:28:37 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0xb8}}], 0x1, 0x0) 17:28:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 510.785296] FAULT_INJECTION: forcing a failure. [ 510.785296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.786811] CPU: 0 PID: 5630 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 510.787658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 510.788695] Call Trace: [ 510.789037] dump_stack+0x107/0x167 [ 510.789507] should_fail.cold+0x5/0xa [ 510.790001] strncpy_from_user+0x34/0x470 [ 510.790536] getname_flags.part.0+0x95/0x4f0 [ 510.791107] ? _copy_from_user+0xfb/0x1b0 [ 510.791622] user_path_at_empty+0xa1/0x100 [ 510.792151] __x64_sys_mount+0x1e9/0x300 [ 510.792659] ? copy_mnt_ns+0xa00/0xa00 [ 510.793143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 510.793787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 510.794421] do_syscall_64+0x33/0x40 [ 510.794882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 510.795509] RIP: 0033:0x7fbd09823b19 [ 510.795976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 510.798242] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 510.799186] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 510.800064] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 510.800945] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 510.801828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.802710] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 510.851738] loop2: detected capacity change from 0 to 41948160 17:28:37 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x270, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x25a, 0x81, 0x0, 0x1, [@typed={0x14, 0x65, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r2}, @generic="e094e1d5b244ae2c7f0c6c005373056b180521f908b01dabb70d72ba468b3b7b75510377bac91fe03cab5bc4538e6a1af8703234ea5a49272fb694afa70b4125c91153eaf1003c8b748de7cf12132d86bdbc6673ad5bc0438cdd57cecabaa50f2669c1e778bc9e43b73ffcb6a7993faad9d0b1bf1f09cfd581bd70e826ba82773d73959c2a0dd47d9aa5fee6104d0c5179fe67ed98d3e873a75a896342fcdc45a7e3b5667d91d5e3a0ec20a34a7da297fcc10ce46dc8430af248dfe1c5ecfd35bbe164a54c83b2d4bcc0bb3a213bc3db956f6bfd", @generic="b661d38b05ede8eb44ed2bff8d902a82daaa72f8d48dddc3825a574be7c562a1b2f8799b2daa24c89b5b5b700db39fe1e3235137568b290fb033459d7faef3a999db38bd8d3e5938ee73313af330ef58bc2bd84adfef4ff751bc84e9fc69c0335600b2a91bf2f804bfea7798649842f3278ce5367a8597a8ad702916286bfd59b7412fdd5a12869e57a459beb3fc95f0776c240a1e2e", @generic="e61c9a56b8a6eead0a270e608ae43490c17fe623f510b866ee53040dc4176b11233b09eeaef7d4cb9d0451e6f1069850b972559de94d27357711703be743e33e96232e6a3da509fb14c76dc65d8fe859e5143f2208d86a26f43fe2a2619fe34d1c5620c3a173c66a70461a4150dbb7899480c2fc93e0bc5c2797b1f61f203dc237f6a9337b6cd36bfdff18166577a05f41059c7189ea77fc1a0843e62563f6a92d41172dc5bd357beb137339ce82d89814538abbab0da2f1ab2a017671a546b4f8eb2e6d3f5d087c", @typed={0x6, 0x40, 0x0, 0x0, @str='-\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x2ba8e1d15d94a280) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010200001800b952e81179002c", @ANYRES32=r0, @ANYBLOB="0000e000000000002e2f66696c653000"]) r4 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r4, &(0x7f00000007c0)=0x800000000, r1, 0x0, 0x1f, 0x9) 17:28:37 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:28:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 10) 17:28:37 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x20002a81}}], 0x1, 0x0) 17:28:37 executing program 7: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0xb8}], 0x1}}], 0x1, 0x0) 17:28:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 511.069766] FAULT_INJECTION: forcing a failure. [ 511.069766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.072281] CPU: 1 PID: 5652 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 511.073715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.075441] Call Trace: [ 511.075998] dump_stack+0x107/0x167 [ 511.076772] should_fail.cold+0x5/0xa [ 511.077575] strncpy_from_user+0x34/0x470 [ 511.078450] getname_flags.part.0+0x95/0x4f0 [ 511.079374] ? _copy_from_user+0xfb/0x1b0 [ 511.080410] user_path_at_empty+0xa1/0x100 [ 511.081423] __x64_sys_mount+0x1e9/0x300 [ 511.082280] ? copy_mnt_ns+0xa00/0xa00 [ 511.083111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 511.084209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 511.085302] do_syscall_64+0x33/0x40 [ 511.086086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 511.087156] RIP: 0033:0x7fbd09823b19 [ 511.087941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 511.091801] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 511.093411] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 511.094915] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 511.096405] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 511.097905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.099400] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 511.124174] loop2: detected capacity change from 0 to 50176 17:28:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:28:54 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x270, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x25a, 0x81, 0x0, 0x1, [@typed={0x14, 0x65, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r2}, @generic="e094e1d5b244ae2c7f0c6c005373056b180521f908b01dabb70d72ba468b3b7b75510377bac91fe03cab5bc4538e6a1af8703234ea5a49272fb694afa70b4125c91153eaf1003c8b748de7cf12132d86bdbc6673ad5bc0438cdd57cecabaa50f2669c1e778bc9e43b73ffcb6a7993faad9d0b1bf1f09cfd581bd70e826ba82773d73959c2a0dd47d9aa5fee6104d0c5179fe67ed98d3e873a75a896342fcdc45a7e3b5667d91d5e3a0ec20a34a7da297fcc10ce46dc8430af248dfe1c5ecfd35bbe164a54c83b2d4bcc0bb3a213bc3db956f6bfd", @generic="b661d38b05ede8eb44ed2bff8d902a82daaa72f8d48dddc3825a574be7c562a1b2f8799b2daa24c89b5b5b700db39fe1e3235137568b290fb033459d7faef3a999db38bd8d3e5938ee73313af330ef58bc2bd84adfef4ff751bc84e9fc69c0335600b2a91bf2f804bfea7798649842f3278ce5367a8597a8ad702916286bfd59b7412fdd5a12869e57a459beb3fc95f0776c240a1e2e", @generic="e61c9a56b8a6eead0a270e608ae43490c17fe623f510b866ee53040dc4176b11233b09eeaef7d4cb9d0451e6f1069850b972559de94d27357711703be743e33e96232e6a3da509fb14c76dc65d8fe859e5143f2208d86a26f43fe2a2619fe34d1c5620c3a173c66a70461a4150dbb7899480c2fc93e0bc5c2797b1f61f203dc237f6a9337b6cd36bfdff18166577a05f41059c7189ea77fc1a0843e62563f6a92d41172dc5bd357beb137339ce82d89814538abbab0da2f1ab2a017671a546b4f8eb2e6d3f5d087c", @typed={0x6, 0x40, 0x0, 0x0, @str='-\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x2ba8e1d15d94a280) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010200001800b952e81179002c", @ANYRES32=r0, @ANYBLOB="0000e000000000002e2f66696c653000"]) splice(0xffffffffffffffff, &(0x7f00000007c0)=0x800000000, r1, 0x0, 0x1f, 0x9) 17:28:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 11) 17:28:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:28:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:28:54 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x7ffff000}}], 0x1, 0x0) 17:28:54 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:28:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file1/file0\x00', 0x7, 0x9, &(0x7f0000001000)=[{&(0x7f0000000300)="1ce5f9fc568a3a3ea2bf374ef357300c8b63270dd415375da7b2fc12263e1bf7cbc54458c17a65862d405b6c0a34c9a739e580966da3928eba1bb0425061954289c269ab323016fb878c51ef917169553e907db42807e3895c2d495e7bdb72f99e77bf3c53075d44af70aeb2c98fd014a93f4e4e44abe0e0383fb9fbb64ec80fffd6f7dcef385e47601031a7f7c63635a910cd58c98e27f0612e6a3555be8b98fafdd3e4b39e0ada972c5a46895c03cd111d05935b15b698c29b67187f7ae20ee3a9de1378629a16a76d0cc9143c9723ac4e11218bfcbe53c5fe22", 0xdb}, {&(0x7f0000000240)="a44e03dae25229ef7664dc0d82e4b72cd0c592738a95", 0x16, 0x62b2}, {&(0x7f0000000400)="07ed084ada69053c2124c53028702d70c9a22071671ca60104ff40bfb813f281f556115eba4a1e3e7d01682b3797aab68d3aec", 0x33, 0x1}, {&(0x7f0000000c80)="d2ed55d7ae592d049b4bfbd759537ed383cd1b676a4f6e59d26a56e5b6daf4a4a218b0bfaa1ec80f800ef933d3c7e29b9f6b3c6d9d082ee0088be587c9c55c99c288acebfe09bbe2a3f04845d660bdcf23ca65d1854dd8097a", 0x59, 0x2}, {&(0x7f0000000d00)="d965f5d7fe4b15910a96e5a6a0700a5e9b6c2dbccb681ed38ef77ecc1b6a16276b7c830eefc4c787eb7d0bbbf08e35c84da54a5eaa03b13c6c77a6baa9ddb6491dcab1010a7faed5272bc113771385dd3434bd0eb36d9820b95d51c7eeb2e773eb4d7dbf971395d739c553e7b7ae5f073317ca14cc6a87751673062f6dbe88aa0ba08fe9f3b473626a9861341797e72327883c390744e9967701d256efada4e1dcf0c6a3bee756fd854c832f81e1d1a389c8514270c1054c2a3f67970dfa1459ef68c718bdf589adfc91a2a5d90e0b012f063fbd94bf5526b7320b0c5a11e2d96664af952e186eb50e49e65192fd8f03d2a80942", 0xf4, 0x7f}, {&(0x7f0000000e00)="38f50059e6341004b564d391079952c776215e3269e3a9ff052f9fed38df43227ce304fc122b690fd3c66283fea63195ab3a2bd1abcad2529aa5a7c02b3707723f5644c7249d264ee362f89d7ca94eb27014ebf22e9709ca99a79e365596f669369e1dd73208a2c2527872b8e6b898504ab6b4850952111aacca2e99d52d6c6632916eeaddf6dd8d2f059e1c8380cf43aa56ab5759b2", 0x96}, {&(0x7f0000000ec0)="bafbc07c8dc6e9a0ab53dd5648c479c92bc1cc5489b263c1a7f3748479ca881b40d423369991679989797577af0d9704a96cd32f1fd98918d9f4888798a91f63ae48a7de0e4bc1e719313f89156785717c2a4ad7134b049dfc594bbc525bbd3bdba5b0bc5761f127", 0x68}, {&(0x7f0000000f40)="9896fbde140b79ce754d9e5f730f363ee8ed502cbc1ac476e3298dc7c814afaee76bb20b0518826f397fc9713db3cfee68866ff7f244fdb37d96c8dc0e7d489709710d67300e7a0f2df6227326eddc4000b2ae06ba64ed51e7059555e02bb1341cfc376773943a8904eed30be025066a37b3d40267722231091742d6e134b6aca4901dfa9cfadf14343ba1e13f6b7216c33e29adfa", 0x95, 0x5}, {&(0x7f0000001e00)="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", 0x1000, 0x2}], 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:28:54 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x270, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x25a, 0x81, 0x0, 0x1, [@typed={0x14, 0x65, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r2}, @generic="e094e1d5b244ae2c7f0c6c005373056b180521f908b01dabb70d72ba468b3b7b75510377bac91fe03cab5bc4538e6a1af8703234ea5a49272fb694afa70b4125c91153eaf1003c8b748de7cf12132d86bdbc6673ad5bc0438cdd57cecabaa50f2669c1e778bc9e43b73ffcb6a7993faad9d0b1bf1f09cfd581bd70e826ba82773d73959c2a0dd47d9aa5fee6104d0c5179fe67ed98d3e873a75a896342fcdc45a7e3b5667d91d5e3a0ec20a34a7da297fcc10ce46dc8430af248dfe1c5ecfd35bbe164a54c83b2d4bcc0bb3a213bc3db956f6bfd", @generic="b661d38b05ede8eb44ed2bff8d902a82daaa72f8d48dddc3825a574be7c562a1b2f8799b2daa24c89b5b5b700db39fe1e3235137568b290fb033459d7faef3a999db38bd8d3e5938ee73313af330ef58bc2bd84adfef4ff751bc84e9fc69c0335600b2a91bf2f804bfea7798649842f3278ce5367a8597a8ad702916286bfd59b7412fdd5a12869e57a459beb3fc95f0776c240a1e2e", @generic="e61c9a56b8a6eead0a270e608ae43490c17fe623f510b866ee53040dc4176b11233b09eeaef7d4cb9d0451e6f1069850b972559de94d27357711703be743e33e96232e6a3da509fb14c76dc65d8fe859e5143f2208d86a26f43fe2a2619fe34d1c5620c3a173c66a70461a4150dbb7899480c2fc93e0bc5c2797b1f61f203dc237f6a9337b6cd36bfdff18166577a05f41059c7189ea77fc1a0843e62563f6a92d41172dc5bd357beb137339ce82d89814538abbab0da2f1ab2a017671a546b4f8eb2e6d3f5d087c", @typed={0x6, 0x40, 0x0, 0x0, @str='-\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x2ba8e1d15d94a280) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010200001800b952e81179002c", @ANYRES32=r0, @ANYBLOB="0000e000000000002e2f66696c653000"]) splice(0xffffffffffffffff, &(0x7f00000007c0)=0x800000000, r1, 0x0, 0x1f, 0x9) 17:28:54 executing program 7: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0xb8}], 0x1}}], 0x1, 0x0) [ 527.832443] FAULT_INJECTION: forcing a failure. [ 527.832443] name failslab, interval 1, probability 0, space 0, times 0 [ 527.834929] CPU: 1 PID: 5673 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 527.836358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 527.838128] Call Trace: [ 527.838683] dump_stack+0x107/0x167 [ 527.839455] should_fail.cold+0x5/0xa [ 527.840253] ? create_object.isra.0+0x3a/0xa20 [ 527.841235] should_failslab+0x5/0x20 [ 527.842033] kmem_cache_alloc+0x5b/0x310 [ 527.842888] create_object.isra.0+0x3a/0xa20 [ 527.843813] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 527.844894] kmem_cache_alloc_trace+0x151/0x320 [ 527.845874] alloc_fs_context+0x57/0x840 [ 527.846743] path_mount+0xaa3/0x21c0 [ 527.847527] ? strncpy_from_user+0x9e/0x470 [ 527.848432] ? finish_automount+0xa90/0xa90 [ 527.849352] ? getname_flags.part.0+0x1dd/0x4f0 [ 527.850324] ? _copy_from_user+0xfb/0x1b0 [ 527.851210] __x64_sys_mount+0x282/0x300 [ 527.852063] ? copy_mnt_ns+0xa00/0xa00 [ 527.852892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 527.853998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 527.855086] do_syscall_64+0x33/0x40 [ 527.855871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 527.856963] RIP: 0033:0x7fbd09823b19 [ 527.857744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 527.861620] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 527.863227] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 527.864721] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 527.866241] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 527.867743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.869254] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 527.963077] loop2: detected capacity change from 0 to 41948160 [ 528.003990] loop2: detected capacity change from 0 to 50176 17:28:54 executing program 7: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0xb8}], 0x1}}], 0x1, 0x0) 17:28:54 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x2}}], 0x1, 0x0) 17:28:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 12) 17:28:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file1/file0\x00', 0x7, 0x9, &(0x7f0000001000)=[{&(0x7f0000000300)="1ce5f9fc568a3a3ea2bf374ef357300c8b63270dd415375da7b2fc12263e1bf7cbc54458c17a65862d405b6c0a34c9a739e580966da3928eba1bb0425061954289c269ab323016fb878c51ef917169553e907db42807e3895c2d495e7bdb72f99e77bf3c53075d44af70aeb2c98fd014a93f4e4e44abe0e0383fb9fbb64ec80fffd6f7dcef385e47601031a7f7c63635a910cd58c98e27f0612e6a3555be8b98fafdd3e4b39e0ada972c5a46895c03cd111d05935b15b698c29b67187f7ae20ee3a9de1378629a16a76d0cc9143c9723ac4e11218bfcbe53c5fe22", 0xdb}, {&(0x7f0000000240)="a44e03dae25229ef7664dc0d82e4b72cd0c592738a95", 0x16, 0x62b2}, {&(0x7f0000000400)="07ed084ada69053c2124c53028702d70c9a22071671ca60104ff40bfb813f281f556115eba4a1e3e7d01682b3797aab68d3aec", 0x33, 0x1}, {&(0x7f0000000c80)="d2ed55d7ae592d049b4bfbd759537ed383cd1b676a4f6e59d26a56e5b6daf4a4a218b0bfaa1ec80f800ef933d3c7e29b9f6b3c6d9d082ee0088be587c9c55c99c288acebfe09bbe2a3f04845d660bdcf23ca65d1854dd8097a", 0x59, 0x2}, {&(0x7f0000000d00)="d965f5d7fe4b15910a96e5a6a0700a5e9b6c2dbccb681ed38ef77ecc1b6a16276b7c830eefc4c787eb7d0bbbf08e35c84da54a5eaa03b13c6c77a6baa9ddb6491dcab1010a7faed5272bc113771385dd3434bd0eb36d9820b95d51c7eeb2e773eb4d7dbf971395d739c553e7b7ae5f073317ca14cc6a87751673062f6dbe88aa0ba08fe9f3b473626a9861341797e72327883c390744e9967701d256efada4e1dcf0c6a3bee756fd854c832f81e1d1a389c8514270c1054c2a3f67970dfa1459ef68c718bdf589adfc91a2a5d90e0b012f063fbd94bf5526b7320b0c5a11e2d96664af952e186eb50e49e65192fd8f03d2a80942", 0xf4, 0x7f}, {&(0x7f0000000e00)="38f50059e6341004b564d391079952c776215e3269e3a9ff052f9fed38df43227ce304fc122b690fd3c66283fea63195ab3a2bd1abcad2529aa5a7c02b3707723f5644c7249d264ee362f89d7ca94eb27014ebf22e9709ca99a79e365596f669369e1dd73208a2c2527872b8e6b898504ab6b4850952111aacca2e99d52d6c6632916eeaddf6dd8d2f059e1c8380cf43aa56ab5759b2", 0x96}, {&(0x7f0000000ec0)="bafbc07c8dc6e9a0ab53dd5648c479c92bc1cc5489b263c1a7f3748479ca881b40d423369991679989797577af0d9704a96cd32f1fd98918d9f4888798a91f63ae48a7de0e4bc1e719313f89156785717c2a4ad7134b049dfc594bbc525bbd3bdba5b0bc5761f127", 0x68}, {&(0x7f0000000f40)="9896fbde140b79ce754d9e5f730f363ee8ed502cbc1ac476e3298dc7c814afaee76bb20b0518826f397fc9713db3cfee68866ff7f244fdb37d96c8dc0e7d489709710d67300e7a0f2df6227326eddc4000b2ae06ba64ed51e7059555e02bb1341cfc376773943a8904eed30be025066a37b3d40267722231091742d6e134b6aca4901dfa9cfadf14343ba1e13f6b7216c33e29adfa", 0x95, 0x5}, {&(0x7f0000001e00)="23c59bf2e97c320e455ac1faa7ae5fc075760222ca911a74b4c775ffe1813e06095bb38fdc02f783823dcca831ad55e4fdecc5809d34172b5bda2a7a1901cda9fce902428098c5e08e0235d3fd20207628208c6957c76cd7eeb8f03ccb41bb40a2bad8a7416a5d878260e129426aef7aa1d3d077fd2fa4f5f26efbe2958d0b93e9200bc8e08dc65f37be49cab6a1bd4c1defcbe2b9f3c6c4eede7ee71fceaee1e0f3c118d5ba196c86f617a5bdc0ef6a78581a07399407455c306861433dfad7d7fa7ee4d9527a25281996563491059b848019ea13601eb44a78914cb56dfea6d143a9051068487f3d9343cdfbdb6adc7b88f4e1e3ab025c51e1c203b15a8a84433809eebf11f099c1e6e5a20d112657d6c2fcf189e0e568ad6332f4034971b139e72ee9da63e2642b694d7e52f29cebd138f488bd48692914f127aa9f0f3b84ea9b0949006d77c1810731842dc977bd1cc2116bfc7b58426d54ebd67f50fe76bfec9956941994c061a01cb2e3beb53fba6c43f3e7168d942113c77ab2bcdf6629ae6ad5206a03d315ccf813bb8a16922b933f6f762934a46d827f31e3e8e0466284743d5fe43d9ed739e31ce3781a6b343bb1fcf47b6ad5c3e8e73e24755c7510b0eeb39e34721c51d6fedeafe29d6de70e3866d12a7f373fec907a80c259ceaf342e0056c56b23cccde8cacc7edf3c5aa132118b7f5f3bc33a47c064c4b8785ac420fd52f113326bccf0effad3ceb171207809a16d17abfeae37cda8a367078288f618edc14759fce7ec36e2d65451d73f51659cae654ad74e9a569695c87e2087e49919db430524f3055ce640f07af05cb1cc872a1a72b4f67d3ae0ebf89b83b7b5fae82e8a9e9d2f4f9385de1173edc20e64e8ae8e4888d7a0fd3322c5bf9b6dfc1ff5df9910d1eebbf92808a0dc53ef2f080937955fad404711158934127c2ed5bf073c09c3a6a3567d52045f0867efeecb05ccbb2c57c775af5e9eb9bd250ce2f3675203ed36a41129a914effd48e027ece3422a658a4cb8946cba76878ef2d718f39889b7f589b7471b3d0f76bd7b17e8f31c8a5a024bb407997b60bf2f1cb907cca5ebe531dadf0480532e30d175cc5a915a376f63d42d342df5aba6abef04525c1c9340c495056b5eae3eec879b7309790c7591d28d34a2a4e07d2695814461cee52da3dd1a1c9632007144071469c8451c3795e6e6f7b6b770c434b2f94b71dd78c4db589a998a4c0642cf5d7fa83edacd963801cf2352dcf6904a5b1cace9c7cb13b9b1d655f3efd00e96f890f6ba685e09ae01f9985a09638d8b785c38307581f91766dfc475da8d4750d58e9ad23b607f77179279d5cd507b1ff5014682e4998c1dcd737a596d14de74296800ca09f4e62400fd1fc4e6887b19acb2b64856e61540328260741f824da11acd614e41283df63a74ba9a2ffb8471fb31b977cc31ba6193e6689780b4e695fae018ae83377bafcd1819047addc93ee1bf286a8e0476884661b2dc16ca6392b5e355d67cdc53d22c550f852db77cee20b59cc9cfe430415eba580020841cd8c7c792d0e12d20f1dd24db815aea79cc082712bcb9584fa362d6d6f28a852136542b03ecdff523c28a8f67422db30dc5585397960022279320ee0606293147688aad8248972d15ea084c2deb88b84e2e1ddd291095ab642da206567e9bf9dd7ee82a29bf5b8ff3ae0ee419a461d328ca088a888200c6fe1da76625feb4dfc468e104652e3172e115f46e70ad7c33d379e22687f6a9a304b812bcf747cd8765ce08dcbbbf80ec46c3807a9375fd5394c9d0f08d698b4bebe49a90f10d9e8f04eb61e9fcbe43885d12290996c63639710ba1ddd37f008624b154df42c2186ada111f08ab0bacb96900d5fef61e978c51f1858cfc496f0693485ce39c2ac33d2e3969389d90e5593f328c13c1f17b80444cf481ce5f75cd1352ccbc295bd4891b4a41d581a316f0c8b2778f0b03e7362bcc26597d5f097235e8588ffbc6f06c9f9461cb5d10a275b3f9205490abe7a658dce9ce0f502ec5d1f30524e260ecfafd554286a56f2dcd414a149abd0dee5f2e8f77339b07371f6b4c48a76e65aba4a38549b0c9634f97feffeccab902f5442920858eed2df9452c93ec4a61607e8ac9cc09d8e1f054b25106b2aa1700aa5a12de2a400d30417903aca244ef6d0244a46a586ac2c9c90bc203761365bf5d1aaefaeca76ce057d0a52a85a36303da14ae9b73a2a8dd74e7aa24af73a4284b948387c4d55102f2c2f99c83357215a1e42e6cbfe7da3d71acfdcdbd177ecc2647ae296a23af69c1a0bbd219f4aa42a561153f2c0d2f5296f07ce16be6c1a3389dc8fd0a693f10a88d790e142a6c21ce4ac9e0af7b2ffa3b5c45623d6715297e6c5ac04afd952cf5d2b612b37855b02f037f1fa47c9ff07e4fb7ae17e0a53c4b65c6057c54435fc77c70a321ea8c48920f9682ba7b207afc5be2f5dcb0e99c18b869fbd8e146c985762a1eedf3d1e2343cadb4ce08d6855b0f2f34df1936ea19ccb8e7a932e9769cb9e0f40c0828b2fa88d8fa08540068c034271291bce951412b0eacf5e0ecc38fc828696a9c12199f228390fe52d69d5339e59a98f651df36ae8e90c1fb985180799fbce0a6ba71afb1628c647f95d1ee38867a1616ab706935aefe5c4d5066895d90975eae241d5b2a33101366e1f2f21eb3e5dcafbbe17c166db71c008d30d8baa1d0c1aea9da0d13afe805b675ecca118d4e0d0b4903ae203c4e6dacc59e00cfa5a146d991d866aca5c3f9e88d7b8634054326756ad131735073a172db15be92a1846b413b7ac666b008dbfef859508f2fe8332ced747ebedcbcdb38da29ec32443a85d777da08b84dcac736f1e93f396f4b737d9eb8898c199782dd59054a2c023459c17922e51621fb6e4ea11643dd03f48eca1516122817502ea35b38882b8170b9ff2194f5e4b0585cbe443c5b8ec71434239f075ec943081eeb80d0e37fcdd2e4fa57cf69007a9769a2eced04d27f5166f7a765ccc28f8dcc71afd64af2e529bf0684aeb50da006691f161a714b6007abc36e82370a2420b77f4739c2984938893fb395f62ab2e15ac5dd011882de514465d6f56e919b73be57b868afc4ad11838021eae8dc8cfb3647e9364bfe9c62b8c4a5b72015d610e7a8524e1c42071f38d0b7103347b27c80d1c571053a730c6a2ce474188e64ba721a0fa1e6c99e44139f4ebcbf489f8c380a331686319581a29a01f546627997c75c63e7bbf64c23c4c92ecdbc08acbd1322ced75402da1a15fffec588ac1c9e50b1ae6993b48025de1b12a726a8abd2cc4f1d57936b215d21a39c3a4d5fe08939a388c9b386acb5080505d3440c7d1110f570dbdf13b4adeb1ae5719c22e723ca521988a6e4c68b598fa9a2eda5bd97e1cdda700b720476e5a857c6d9c4b995e755e3a6e299b5caa4bedd0da5ba9a23738d1d9b72a832e22fdb1eea4384ba73ddf2165d7ab83fbff8ffd786a6d01d00f25328a7a0353ec4282ef08a1f97dbe94886ae7394dc95fb11dde101e25425ea77c89b446dcf27e4cef3b23327a0ffcf7c0d029d2ba70b34ba1406f288c7776970e807d9b27417ab4f5ca3fcdcfb960c38fda933e52bd2db5b347267a2ec26728055d7e91cc03972992e9a5f410c7b4d30ef378c69f586455b507ac52b38b4f79d480afef9c29cb451cc9090660364860ba779098ad7a6a735987ea5f39a29a8bf2b8cc70323d12032a6be8f605ea300ef6afabb07e1480e6e653dca87bd1d56726c685c65aad955566fa6bccb05f6ec3a3c05629c8ce2be76063d4daa891c16542b923e34aaaeeaee43c63cd6e8c3b90ef35d001a407a17dd86aa88eabe1c2316c9df1b2ff909a6b69f64a349355eea71a22a7299865efdcaacdca697c09d44085fa11fbff4e341be7f5f190b0774dd6abe015edcb707b1238289a85dd98259945a0e1a200af9509a91097584243b35c12950b69e60859b2b70468cd969f6cc542234f531828d8b9f01eb937d79fd0d1ad2a4f42c24df7243503fcda7f489fc1ef5613dc7dd01f07240c5925490f22612ace9f1c79707b053a0884fd9058f9c913ebdff3b1f594841368ec5086c32f104221247bd4f4695e960747a970c1cb722be414fbde2fc5d0d6d2ac576a45c6d0820d5fb11e6cfb7716817cd6476d8c23b589499cebeea046113418aac8b1355b9dcf545c4e15fb6eff4160b4954f9d4af7fcf3d14cfed6632c2f746aad2e1e6752f518600f68563356042524806cc40b74c1335e59dfc44a62273b66a5155859aec0584b874bf87ff9c8d05d4a52ae86b875a74070f9a378c426ccd2d184d5f4babb789d25fc9f14f7118af45a1242d88e9d0f1ecdc25adc91cfb6523b4523f530295c8d1c77d9e688102cee7a26374d6b61611c35308ae66f584666ea6c3060921938de5d312bc0479334e5acbf9630e19869c65de43560cf79c654a6f12c89a3a72a32b0dfab57cb49e31b12fdeb247dc0c2f08f7c1dfc483c0b587135a4da65a4aab44432857ae883356fd2b9bf9b6121fcfbeae9a218401f97dd0c9fce369b4621f7174651f9cdfb83525d633d38045a4f8689601925cae837669ec54e83ea93bd61f5cdd5bcc6f8d7f04c7285453de8cb730d94bdbd2dc1c0d573ef3077cbcafafc2c85c734be36f1d408667a9b12c2a392f665eadcbc5d964ed975f39dbc98875b4822677bd36cb568b493b64292bc7e783dc058091b31461e5a48b96d0b35c6a774bdaef5aa6c29225c1f95b9ef52154bcb5083c1ec89b0dd55b80cd33d714f3c9cb042b30ef9ee140f1ff5860183bb397de23ac4d0deeb7729500bb8c5fd025fdeb796ec7528476ce413c67eace2fa426b8999ab668471baaaf3df985ebd13853e86a0530035167a9100f78430898128946349b98731a87e6ef52aea6a004e666c55eeec10d50d28360658d2226b49d3ecbbca6552ba4c1a157c838f6938d6248ae2cebf3d1281b8286a477a680f8f8b91bb9ebc9f73403236135317529da9e9d0091bc44eaa981832f002e5f11567d6dadccbd868c6e1ba953db2086a671ef1a8e1d4ea2e1d022b8e66b0eb8aa069c44a1e8583ab57d76296c30b1947ab2c7dd09403be1d3055d68b2e443e2e3e94108748f8111cd5d2de37b469347a47adac97c3d07d9abcd6fb3ff44eb558d4b1b026302906e9dbccbfa8d504b0318a20e1261d0721e66bd345896c389a45d50bd022298438bc2b8a72a208190698096016ba357021cb9362ebe0e2313af9cfc948c5b97d0fab46ac00d6d16199ad6957de59b023914cbc27552e05260c82d3d6ac5a91c6ae65e739a42952800c894cadfab3980395bf35c56f0800a0f1502c2965a0a8ef06fb386af2fdcd44bd1f12c3d3ce2726773fc4d312fbf5aeb4494f8994c382216bd3d67794a7f1369e3c130c7f1d2cc699d3fc193f1dc275c662b9fd9861c217afc26583a0f0dcfaab8f38125f922fdb5c7c735823e52c183902032e3a129e41317fee05d9b5bb961009193ac0964e7da6480eb9db34b24f7bf72dda940282a08cdb310bb0613381fb4de02009d28dac0c73af4471535f17977cbff25ea18e2612633c7a2d8e42d943c00c7c708dc12f3ea4e54de69247c20858bd453b674e076cbb7c60c8a3edc56ebc38fc65f9187c8bf9996aab10dc67732d5892c5c084850460282340a539bdfc098523a553f18e3bc6ad541dc7efd13cef838f09844d336a1a30e06062d798ffae63b167fc40fbef4c01a30c03e5517536903b583707d0adb8e843421816e01", 0x1000, 0x2}], 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:28:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:28:55 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:28:55 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x270, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x25a, 0x81, 0x0, 0x1, [@typed={0x14, 0x65, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r2}, @generic="e094e1d5b244ae2c7f0c6c005373056b180521f908b01dabb70d72ba468b3b7b75510377bac91fe03cab5bc4538e6a1af8703234ea5a49272fb694afa70b4125c91153eaf1003c8b748de7cf12132d86bdbc6673ad5bc0438cdd57cecabaa50f2669c1e778bc9e43b73ffcb6a7993faad9d0b1bf1f09cfd581bd70e826ba82773d73959c2a0dd47d9aa5fee6104d0c5179fe67ed98d3e873a75a896342fcdc45a7e3b5667d91d5e3a0ec20a34a7da297fcc10ce46dc8430af248dfe1c5ecfd35bbe164a54c83b2d4bcc0bb3a213bc3db956f6bfd", @generic="b661d38b05ede8eb44ed2bff8d902a82daaa72f8d48dddc3825a574be7c562a1b2f8799b2daa24c89b5b5b700db39fe1e3235137568b290fb033459d7faef3a999db38bd8d3e5938ee73313af330ef58bc2bd84adfef4ff751bc84e9fc69c0335600b2a91bf2f804bfea7798649842f3278ce5367a8597a8ad702916286bfd59b7412fdd5a12869e57a459beb3fc95f0776c240a1e2e", @generic="e61c9a56b8a6eead0a270e608ae43490c17fe623f510b866ee53040dc4176b11233b09eeaef7d4cb9d0451e6f1069850b972559de94d27357711703be743e33e96232e6a3da509fb14c76dc65d8fe859e5143f2208d86a26f43fe2a2619fe34d1c5620c3a173c66a70461a4150dbb7899480c2fc93e0bc5c2797b1f61f203dc237f6a9337b6cd36bfdff18166577a05f41059c7189ea77fc1a0843e62563f6a92d41172dc5bd357beb137339ce82d89814538abbab0da2f1ab2a017671a546b4f8eb2e6d3f5d087c", @typed={0x6, 0x40, 0x0, 0x0, @str='-\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x2ba8e1d15d94a280) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010200001800b952e81179002c", @ANYRES32=r0, @ANYBLOB="0000e000000000002e2f66696c653000"]) splice(0xffffffffffffffff, &(0x7f00000007c0)=0x800000000, r1, 0x0, 0x1f, 0x9) 17:28:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 528.262917] FAULT_INJECTION: forcing a failure. [ 528.262917] name failslab, interval 1, probability 0, space 0, times 0 [ 528.264677] CPU: 0 PID: 5697 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 528.265790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 528.266928] Call Trace: [ 528.267316] dump_stack+0x107/0x167 [ 528.267822] should_fail.cold+0x5/0xa [ 528.268350] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 528.269080] should_failslab+0x5/0x20 [ 528.269601] __kmalloc_node+0x76/0x420 [ 528.270134] ? lock_downgrade+0x6d0/0x6d0 [ 528.270705] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 528.271399] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 528.272085] ? trace_hardirqs_on+0x5b/0x180 [ 528.272704] kmem_cache_alloc_trace+0x169/0x320 [ 528.273378] alloc_fs_context+0x57/0x840 [ 528.273966] path_mount+0xaa3/0x21c0 [ 528.274503] ? strncpy_from_user+0x9e/0x470 [ 528.275117] ? finish_automount+0xa90/0xa90 [ 528.275732] ? getname_flags.part.0+0x1dd/0x4f0 [ 528.276417] ? _copy_from_user+0xfb/0x1b0 [ 528.277024] __x64_sys_mount+0x282/0x300 [ 528.277600] ? copy_mnt_ns+0xa00/0xa00 [ 528.278153] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 528.278897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 528.279629] do_syscall_64+0x33/0x40 [ 528.280154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 528.280886] RIP: 0033:0x7fbd09823b19 [ 528.281411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 528.284017] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 528.285114] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 528.286122] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 528.287130] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 528.288153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.289171] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:28:55 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x8}}], 0x1, 0x0) [ 528.360638] loop2: detected capacity change from 0 to 41948160 [ 528.392802] loop2: detected capacity change from 0 to 50176 17:29:09 executing program 7: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0xb8}], 0x1}}], 0x1, 0x0) 17:29:09 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:29:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000440)=ANY=[]) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file1/file0\x00', 0x7, 0x9, &(0x7f0000001000)=[{&(0x7f0000000300)="1ce5f9fc568a3a3ea2bf374ef357300c8b63270dd415375da7b2fc12263e1bf7cbc54458c17a65862d405b6c0a34c9a739e580966da3928eba1bb0425061954289c269ab323016fb878c51ef917169553e907db42807e3895c2d495e7bdb72f99e77bf3c53075d44af70aeb2c98fd014a93f4e4e44abe0e0383fb9fbb64ec80fffd6f7dcef385e47601031a7f7c63635a910cd58c98e27f0612e6a3555be8b98fafdd3e4b39e0ada972c5a46895c03cd111d05935b15b698c29b67187f7ae20ee3a9de1378629a16a76d0cc9143c9723ac4e11218bfcbe53c5fe22", 0xdb}, {&(0x7f0000000240)="a44e03dae25229ef7664dc0d82e4b72cd0c592738a95", 0x16, 0x62b2}, {&(0x7f0000000400)="07ed084ada69053c2124c53028702d70c9a22071671ca60104ff40bfb813f281f556115eba4a1e3e7d01682b3797aab68d3aec", 0x33, 0x1}, {&(0x7f0000000c80)="d2ed55d7ae592d049b4bfbd759537ed383cd1b676a4f6e59d26a56e5b6daf4a4a218b0bfaa1ec80f800ef933d3c7e29b9f6b3c6d9d082ee0088be587c9c55c99c288acebfe09bbe2a3f04845d660bdcf23ca65d1854dd8097a", 0x59, 0x2}, {&(0x7f0000000d00)="d965f5d7fe4b15910a96e5a6a0700a5e9b6c2dbccb681ed38ef77ecc1b6a16276b7c830eefc4c787eb7d0bbbf08e35c84da54a5eaa03b13c6c77a6baa9ddb6491dcab1010a7faed5272bc113771385dd3434bd0eb36d9820b95d51c7eeb2e773eb4d7dbf971395d739c553e7b7ae5f073317ca14cc6a87751673062f6dbe88aa0ba08fe9f3b473626a9861341797e72327883c390744e9967701d256efada4e1dcf0c6a3bee756fd854c832f81e1d1a389c8514270c1054c2a3f67970dfa1459ef68c718bdf589adfc91a2a5d90e0b012f063fbd94bf5526b7320b0c5a11e2d96664af952e186eb50e49e65192fd8f03d2a80942", 0xf4, 0x7f}, {&(0x7f0000000e00)="38f50059e6341004b564d391079952c776215e3269e3a9ff052f9fed38df43227ce304fc122b690fd3c66283fea63195ab3a2bd1abcad2529aa5a7c02b3707723f5644c7249d264ee362f89d7ca94eb27014ebf22e9709ca99a79e365596f669369e1dd73208a2c2527872b8e6b898504ab6b4850952111aacca2e99d52d6c6632916eeaddf6dd8d2f059e1c8380cf43aa56ab5759b2", 0x96}, {&(0x7f0000000ec0)="bafbc07c8dc6e9a0ab53dd5648c479c92bc1cc5489b263c1a7f3748479ca881b40d423369991679989797577af0d9704a96cd32f1fd98918d9f4888798a91f63ae48a7de0e4bc1e719313f89156785717c2a4ad7134b049dfc594bbc525bbd3bdba5b0bc5761f127", 0x68}, {&(0x7f0000000f40)="9896fbde140b79ce754d9e5f730f363ee8ed502cbc1ac476e3298dc7c814afaee76bb20b0518826f397fc9713db3cfee68866ff7f244fdb37d96c8dc0e7d489709710d67300e7a0f2df6227326eddc4000b2ae06ba64ed51e7059555e02bb1341cfc376773943a8904eed30be025066a37b3d40267722231091742d6e134b6aca4901dfa9cfadf14343ba1e13f6b7216c33e29adfa", 0x95, 0x5}, {&(0x7f0000001e00)="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", 0x1000, 0x2}], 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:29:09 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x270, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x25a, 0x81, 0x0, 0x1, [@typed={0x14, 0x65, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r1}, @generic="e094e1d5b244ae2c7f0c6c005373056b180521f908b01dabb70d72ba468b3b7b75510377bac91fe03cab5bc4538e6a1af8703234ea5a49272fb694afa70b4125c91153eaf1003c8b748de7cf12132d86bdbc6673ad5bc0438cdd57cecabaa50f2669c1e778bc9e43b73ffcb6a7993faad9d0b1bf1f09cfd581bd70e826ba82773d73959c2a0dd47d9aa5fee6104d0c5179fe67ed98d3e873a75a896342fcdc45a7e3b5667d91d5e3a0ec20a34a7da297fcc10ce46dc8430af248dfe1c5ecfd35bbe164a54c83b2d4bcc0bb3a213bc3db956f6bfd", @generic="b661d38b05ede8eb44ed2bff8d902a82daaa72f8d48dddc3825a574be7c562a1b2f8799b2daa24c89b5b5b700db39fe1e3235137568b290fb033459d7faef3a999db38bd8d3e5938ee73313af330ef58bc2bd84adfef4ff751bc84e9fc69c0335600b2a91bf2f804bfea7798649842f3278ce5367a8597a8ad702916286bfd59b7412fdd5a12869e57a459beb3fc95f0776c240a1e2e", @generic="e61c9a56b8a6eead0a270e608ae43490c17fe623f510b866ee53040dc4176b11233b09eeaef7d4cb9d0451e6f1069850b972559de94d27357711703be743e33e96232e6a3da509fb14c76dc65d8fe859e5143f2208d86a26f43fe2a2619fe34d1c5620c3a173c66a70461a4150dbb7899480c2fc93e0bc5c2797b1f61f203dc237f6a9337b6cd36bfdff18166577a05f41059c7189ea77fc1a0843e62563f6a92d41172dc5bd357beb137339ce82d89814538abbab0da2f1ab2a017671a546b4f8eb2e6d3f5d087c", @typed={0x6, 0x40, 0x0, 0x0, @str='-\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x2ba8e1d15d94a280) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, 0x0) r3 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r3, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) 17:29:09 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x11}}], 0x1, 0x0) 17:29:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 13) 17:29:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:29:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) [ 543.121256] loop2: detected capacity change from 0 to 41948160 [ 543.145342] FAULT_INJECTION: forcing a failure. [ 543.145342] name failslab, interval 1, probability 0, space 0, times 0 [ 543.146855] CPU: 1 PID: 5733 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 543.147699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 543.148716] Call Trace: [ 543.149042] dump_stack+0x107/0x167 [ 543.149500] should_fail.cold+0x5/0xa [ 543.149966] ? create_object.isra.0+0x3a/0xa20 [ 543.150540] should_failslab+0x5/0x20 [ 543.151007] kmem_cache_alloc+0x5b/0x310 [ 543.151512] create_object.isra.0+0x3a/0xa20 [ 543.152058] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 543.152681] kmem_cache_alloc_trace+0x151/0x320 [ 543.153264] legacy_init_fs_context+0x44/0xe0 [ 543.153817] ? generic_parse_monolithic+0x1f0/0x1f0 [ 543.154426] alloc_fs_context+0x4fd/0x840 [ 543.154936] path_mount+0xaa3/0x21c0 [ 543.155395] ? strncpy_from_user+0x9e/0x470 [ 543.155927] ? finish_automount+0xa90/0xa90 [ 543.156454] ? getname_flags.part.0+0x1dd/0x4f0 [ 543.157026] ? _copy_from_user+0xfb/0x1b0 [ 543.157545] __x64_sys_mount+0x282/0x300 [ 543.158039] ? copy_mnt_ns+0xa00/0xa00 [ 543.158525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 543.159167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 543.159802] do_syscall_64+0x33/0x40 [ 543.160260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 543.160885] RIP: 0033:0x7fbd09823b19 [ 543.161348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 543.163594] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 543.164523] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 543.165404] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 543.166282] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 543.167155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 543.168029] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 543.173268] loop2: detected capacity change from 0 to 50176 17:29:10 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x1100}}], 0x1, 0x0) 17:29:10 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 17:29:10 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x270, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x25a, 0x81, 0x0, 0x1, [@typed={0x14, 0x65, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r1}, @generic="e094e1d5b244ae2c7f0c6c005373056b180521f908b01dabb70d72ba468b3b7b75510377bac91fe03cab5bc4538e6a1af8703234ea5a49272fb694afa70b4125c91153eaf1003c8b748de7cf12132d86bdbc6673ad5bc0438cdd57cecabaa50f2669c1e778bc9e43b73ffcb6a7993faad9d0b1bf1f09cfd581bd70e826ba82773d73959c2a0dd47d9aa5fee6104d0c5179fe67ed98d3e873a75a896342fcdc45a7e3b5667d91d5e3a0ec20a34a7da297fcc10ce46dc8430af248dfe1c5ecfd35bbe164a54c83b2d4bcc0bb3a213bc3db956f6bfd", @generic="b661d38b05ede8eb44ed2bff8d902a82daaa72f8d48dddc3825a574be7c562a1b2f8799b2daa24c89b5b5b700db39fe1e3235137568b290fb033459d7faef3a999db38bd8d3e5938ee73313af330ef58bc2bd84adfef4ff751bc84e9fc69c0335600b2a91bf2f804bfea7798649842f3278ce5367a8597a8ad702916286bfd59b7412fdd5a12869e57a459beb3fc95f0776c240a1e2e", @generic="e61c9a56b8a6eead0a270e608ae43490c17fe623f510b866ee53040dc4176b11233b09eeaef7d4cb9d0451e6f1069850b972559de94d27357711703be743e33e96232e6a3da509fb14c76dc65d8fe859e5143f2208d86a26f43fe2a2619fe34d1c5620c3a173c66a70461a4150dbb7899480c2fc93e0bc5c2797b1f61f203dc237f6a9337b6cd36bfdff18166577a05f41059c7189ea77fc1a0843e62563f6a92d41172dc5bd357beb137339ce82d89814538abbab0da2f1ab2a017671a546b4f8eb2e6d3f5d087c", @typed={0x6, 0x40, 0x0, 0x0, @str='-\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x2ba8e1d15d94a280) pipe2(&(0x7f0000000040), 0x0) r2 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r2, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) 17:29:10 executing program 2: syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file1/file0\x00', 0x7, 0x9, &(0x7f0000001000)=[{&(0x7f0000000300)="1ce5f9fc568a3a3ea2bf374ef357300c8b63270dd415375da7b2fc12263e1bf7cbc54458c17a65862d405b6c0a34c9a739e580966da3928eba1bb0425061954289c269ab323016fb878c51ef917169553e907db42807e3895c2d495e7bdb72f99e77bf3c53075d44af70aeb2c98fd014a93f4e4e44abe0e0383fb9fbb64ec80fffd6f7dcef385e47601031a7f7c63635a910cd58c98e27f0612e6a3555be8b98fafdd3e4b39e0ada972c5a46895c03cd111d05935b15b698c29b67187f7ae20ee3a9de1378629a16a76d0cc9143c9723ac4e11218bfcbe53c5fe22", 0xdb}, {&(0x7f0000000240)="a44e03dae25229ef7664dc0d82e4b72cd0c592738a95", 0x16, 0x62b2}, {&(0x7f0000000400)="07ed084ada69053c2124c53028702d70c9a22071671ca60104ff40bfb813f281f556115eba4a1e3e7d01682b3797aab68d3aec", 0x33, 0x1}, {&(0x7f0000000c80)="d2ed55d7ae592d049b4bfbd759537ed383cd1b676a4f6e59d26a56e5b6daf4a4a218b0bfaa1ec80f800ef933d3c7e29b9f6b3c6d9d082ee0088be587c9c55c99c288acebfe09bbe2a3f04845d660bdcf23ca65d1854dd8097a", 0x59, 0x2}, {&(0x7f0000000d00)="d965f5d7fe4b15910a96e5a6a0700a5e9b6c2dbccb681ed38ef77ecc1b6a16276b7c830eefc4c787eb7d0bbbf08e35c84da54a5eaa03b13c6c77a6baa9ddb6491dcab1010a7faed5272bc113771385dd3434bd0eb36d9820b95d51c7eeb2e773eb4d7dbf971395d739c553e7b7ae5f073317ca14cc6a87751673062f6dbe88aa0ba08fe9f3b473626a9861341797e72327883c390744e9967701d256efada4e1dcf0c6a3bee756fd854c832f81e1d1a389c8514270c1054c2a3f67970dfa1459ef68c718bdf589adfc91a2a5d90e0b012f063fbd94bf5526b7320b0c5a11e2d96664af952e186eb50e49e65192fd8f03d2a80942", 0xf4, 0x7f}, {&(0x7f0000000e00)="38f50059e6341004b564d391079952c776215e3269e3a9ff052f9fed38df43227ce304fc122b690fd3c66283fea63195ab3a2bd1abcad2529aa5a7c02b3707723f5644c7249d264ee362f89d7ca94eb27014ebf22e9709ca99a79e365596f669369e1dd73208a2c2527872b8e6b898504ab6b4850952111aacca2e99d52d6c6632916eeaddf6dd8d2f059e1c8380cf43aa56ab5759b2", 0x96}, {&(0x7f0000000ec0)="bafbc07c8dc6e9a0ab53dd5648c479c92bc1cc5489b263c1a7f3748479ca881b40d423369991679989797577af0d9704a96cd32f1fd98918d9f4888798a91f63ae48a7de0e4bc1e719313f89156785717c2a4ad7134b049dfc594bbc525bbd3bdba5b0bc5761f127", 0x68}, {&(0x7f0000000f40)="9896fbde140b79ce754d9e5f730f363ee8ed502cbc1ac476e3298dc7c814afaee76bb20b0518826f397fc9713db3cfee68866ff7f244fdb37d96c8dc0e7d489709710d67300e7a0f2df6227326eddc4000b2ae06ba64ed51e7059555e02bb1341cfc376773943a8904eed30be025066a37b3d40267722231091742d6e134b6aca4901dfa9cfadf14343ba1e13f6b7216c33e29adfa", 0x95, 0x5}, {&(0x7f0000001e00)="23c59bf2e97c320e455ac1faa7ae5fc075760222ca911a74b4c775ffe1813e06095bb38fdc02f783823dcca831ad55e4fdecc5809d34172b5bda2a7a1901cda9fce902428098c5e08e0235d3fd20207628208c6957c76cd7eeb8f03ccb41bb40a2bad8a7416a5d878260e129426aef7aa1d3d077fd2fa4f5f26efbe2958d0b93e9200bc8e08dc65f37be49cab6a1bd4c1defcbe2b9f3c6c4eede7ee71fceaee1e0f3c118d5ba196c86f617a5bdc0ef6a78581a07399407455c306861433dfad7d7fa7ee4d9527a25281996563491059b848019ea13601eb44a78914cb56dfea6d143a9051068487f3d9343cdfbdb6adc7b88f4e1e3ab025c51e1c203b15a8a84433809eebf11f099c1e6e5a20d112657d6c2fcf189e0e568ad6332f4034971b139e72ee9da63e2642b694d7e52f29cebd138f488bd48692914f127aa9f0f3b84ea9b0949006d77c1810731842dc977bd1cc2116bfc7b58426d54ebd67f50fe76bfec9956941994c061a01cb2e3beb53fba6c43f3e7168d942113c77ab2bcdf6629ae6ad5206a03d315ccf813bb8a16922b933f6f762934a46d827f31e3e8e0466284743d5fe43d9ed739e31ce3781a6b343bb1fcf47b6ad5c3e8e73e24755c7510b0eeb39e34721c51d6fedeafe29d6de70e3866d12a7f373fec907a80c259ceaf342e0056c56b23cccde8cacc7edf3c5aa132118b7f5f3bc33a47c064c4b8785ac420fd52f113326bccf0effad3ceb171207809a16d17abfeae37cda8a367078288f618edc14759fce7ec36e2d65451d73f51659cae654ad74e9a569695c87e2087e49919db430524f3055ce640f07af05cb1cc872a1a72b4f67d3ae0ebf89b83b7b5fae82e8a9e9d2f4f9385de1173edc20e64e8ae8e4888d7a0fd3322c5bf9b6dfc1ff5df9910d1eebbf92808a0dc53ef2f080937955fad404711158934127c2ed5bf073c09c3a6a3567d52045f0867efeecb05ccbb2c57c775af5e9eb9bd250ce2f3675203ed36a41129a914effd48e027ece3422a658a4cb8946cba76878ef2d718f39889b7f589b7471b3d0f76bd7b17e8f31c8a5a024bb407997b60bf2f1cb907cca5ebe531dadf0480532e30d175cc5a915a376f63d42d342df5aba6abef04525c1c9340c495056b5eae3eec879b7309790c7591d28d34a2a4e07d2695814461cee52da3dd1a1c9632007144071469c8451c3795e6e6f7b6b770c434b2f94b71dd78c4db589a998a4c0642cf5d7fa83edacd963801cf2352dcf6904a5b1cace9c7cb13b9b1d655f3efd00e96f890f6ba685e09ae01f9985a09638d8b785c38307581f91766dfc475da8d4750d58e9ad23b607f77179279d5cd507b1ff5014682e4998c1dcd737a596d14de74296800ca09f4e62400fd1fc4e6887b19acb2b64856e61540328260741f824da11acd614e41283df63a74ba9a2ffb8471fb31b977cc31ba6193e6689780b4e695fae018ae83377bafcd1819047addc93ee1bf286a8e0476884661b2dc16ca6392b5e355d67cdc53d22c550f852db77cee20b59cc9cfe430415eba580020841cd8c7c792d0e12d20f1dd24db815aea79cc082712bcb9584fa362d6d6f28a852136542b03ecdff523c28a8f67422db30dc5585397960022279320ee0606293147688aad8248972d15ea084c2deb88b84e2e1ddd291095ab642da206567e9bf9dd7ee82a29bf5b8ff3ae0ee419a461d328ca088a888200c6fe1da76625feb4dfc468e104652e3172e115f46e70ad7c33d379e22687f6a9a304b812bcf747cd8765ce08dcbbbf80ec46c3807a9375fd5394c9d0f08d698b4bebe49a90f10d9e8f04eb61e9fcbe43885d12290996c63639710ba1ddd37f008624b154df42c2186ada111f08ab0bacb96900d5fef61e978c51f1858cfc496f0693485ce39c2ac33d2e3969389d90e5593f328c13c1f17b80444cf481ce5f75cd1352ccbc295bd4891b4a41d581a316f0c8b2778f0b03e7362bcc26597d5f097235e8588ffbc6f06c9f9461cb5d10a275b3f9205490abe7a658dce9ce0f502ec5d1f30524e260ecfafd554286a56f2dcd414a149abd0dee5f2e8f77339b07371f6b4c48a76e65aba4a38549b0c9634f97feffeccab902f5442920858eed2df9452c93ec4a61607e8ac9cc09d8e1f054b25106b2aa1700aa5a12de2a400d30417903aca244ef6d0244a46a586ac2c9c90bc203761365bf5d1aaefaeca76ce057d0a52a85a36303da14ae9b73a2a8dd74e7aa24af73a4284b948387c4d55102f2c2f99c83357215a1e42e6cbfe7da3d71acfdcdbd177ecc2647ae296a23af69c1a0bbd219f4aa42a561153f2c0d2f5296f07ce16be6c1a3389dc8fd0a693f10a88d790e142a6c21ce4ac9e0af7b2ffa3b5c45623d6715297e6c5ac04afd952cf5d2b612b37855b02f037f1fa47c9ff07e4fb7ae17e0a53c4b65c6057c54435fc77c70a321ea8c48920f9682ba7b207afc5be2f5dcb0e99c18b869fbd8e146c985762a1eedf3d1e2343cadb4ce08d6855b0f2f34df1936ea19ccb8e7a932e9769cb9e0f40c0828b2fa88d8fa08540068c034271291bce951412b0eacf5e0ecc38fc828696a9c12199f228390fe52d69d5339e59a98f651df36ae8e90c1fb985180799fbce0a6ba71afb1628c647f95d1ee38867a1616ab706935aefe5c4d5066895d90975eae241d5b2a33101366e1f2f21eb3e5dcafbbe17c166db71c008d30d8baa1d0c1aea9da0d13afe805b675ecca118d4e0d0b4903ae203c4e6dacc59e00cfa5a146d991d866aca5c3f9e88d7b8634054326756ad131735073a172db15be92a1846b413b7ac666b008dbfef859508f2fe8332ced747ebedcbcdb38da29ec32443a85d777da08b84dcac736f1e93f396f4b737d9eb8898c199782dd59054a2c023459c17922e51621fb6e4ea11643dd03f48eca1516122817502ea35b38882b8170b9ff2194f5e4b0585cbe443c5b8ec71434239f075ec943081eeb80d0e37fcdd2e4fa57cf69007a9769a2eced04d27f5166f7a765ccc28f8dcc71afd64af2e529bf0684aeb50da006691f161a714b6007abc36e82370a2420b77f4739c2984938893fb395f62ab2e15ac5dd011882de514465d6f56e919b73be57b868afc4ad11838021eae8dc8cfb3647e9364bfe9c62b8c4a5b72015d610e7a8524e1c42071f38d0b7103347b27c80d1c571053a730c6a2ce474188e64ba721a0fa1e6c99e44139f4ebcbf489f8c380a331686319581a29a01f546627997c75c63e7bbf64c23c4c92ecdbc08acbd1322ced75402da1a15fffec588ac1c9e50b1ae6993b48025de1b12a726a8abd2cc4f1d57936b215d21a39c3a4d5fe08939a388c9b386acb5080505d3440c7d1110f570dbdf13b4adeb1ae5719c22e723ca521988a6e4c68b598fa9a2eda5bd97e1cdda700b720476e5a857c6d9c4b995e755e3a6e299b5caa4bedd0da5ba9a23738d1d9b72a832e22fdb1eea4384ba73ddf2165d7ab83fbff8ffd786a6d01d00f25328a7a0353ec4282ef08a1f97dbe94886ae7394dc95fb11dde101e25425ea77c89b446dcf27e4cef3b23327a0ffcf7c0d029d2ba70b34ba1406f288c7776970e807d9b27417ab4f5ca3fcdcfb960c38fda933e52bd2db5b347267a2ec26728055d7e91cc03972992e9a5f410c7b4d30ef378c69f586455b507ac52b38b4f79d480afef9c29cb451cc9090660364860ba779098ad7a6a735987ea5f39a29a8bf2b8cc70323d12032a6be8f605ea300ef6afabb07e1480e6e653dca87bd1d56726c685c65aad955566fa6bccb05f6ec3a3c05629c8ce2be76063d4daa891c16542b923e34aaaeeaee43c63cd6e8c3b90ef35d001a407a17dd86aa88eabe1c2316c9df1b2ff909a6b69f64a349355eea71a22a7299865efdcaacdca697c09d44085fa11fbff4e341be7f5f190b0774dd6abe015edcb707b1238289a85dd98259945a0e1a200af9509a91097584243b35c12950b69e60859b2b70468cd969f6cc542234f531828d8b9f01eb937d79fd0d1ad2a4f42c24df7243503fcda7f489fc1ef5613dc7dd01f07240c5925490f22612ace9f1c79707b053a0884fd9058f9c913ebdff3b1f594841368ec5086c32f104221247bd4f4695e960747a970c1cb722be414fbde2fc5d0d6d2ac576a45c6d0820d5fb11e6cfb7716817cd6476d8c23b589499cebeea046113418aac8b1355b9dcf545c4e15fb6eff4160b4954f9d4af7fcf3d14cfed6632c2f746aad2e1e6752f518600f68563356042524806cc40b74c1335e59dfc44a62273b66a5155859aec0584b874bf87ff9c8d05d4a52ae86b875a74070f9a378c426ccd2d184d5f4babb789d25fc9f14f7118af45a1242d88e9d0f1ecdc25adc91cfb6523b4523f530295c8d1c77d9e688102cee7a26374d6b61611c35308ae66f584666ea6c3060921938de5d312bc0479334e5acbf9630e19869c65de43560cf79c654a6f12c89a3a72a32b0dfab57cb49e31b12fdeb247dc0c2f08f7c1dfc483c0b587135a4da65a4aab44432857ae883356fd2b9bf9b6121fcfbeae9a218401f97dd0c9fce369b4621f7174651f9cdfb83525d633d38045a4f8689601925cae837669ec54e83ea93bd61f5cdd5bcc6f8d7f04c7285453de8cb730d94bdbd2dc1c0d573ef3077cbcafafc2c85c734be36f1d408667a9b12c2a392f665eadcbc5d964ed975f39dbc98875b4822677bd36cb568b493b64292bc7e783dc058091b31461e5a48b96d0b35c6a774bdaef5aa6c29225c1f95b9ef52154bcb5083c1ec89b0dd55b80cd33d714f3c9cb042b30ef9ee140f1ff5860183bb397de23ac4d0deeb7729500bb8c5fd025fdeb796ec7528476ce413c67eace2fa426b8999ab668471baaaf3df985ebd13853e86a0530035167a9100f78430898128946349b98731a87e6ef52aea6a004e666c55eeec10d50d28360658d2226b49d3ecbbca6552ba4c1a157c838f6938d6248ae2cebf3d1281b8286a477a680f8f8b91bb9ebc9f73403236135317529da9e9d0091bc44eaa981832f002e5f11567d6dadccbd868c6e1ba953db2086a671ef1a8e1d4ea2e1d022b8e66b0eb8aa069c44a1e8583ab57d76296c30b1947ab2c7dd09403be1d3055d68b2e443e2e3e94108748f8111cd5d2de37b469347a47adac97c3d07d9abcd6fb3ff44eb558d4b1b026302906e9dbccbfa8d504b0318a20e1261d0721e66bd345896c389a45d50bd022298438bc2b8a72a208190698096016ba357021cb9362ebe0e2313af9cfc948c5b97d0fab46ac00d6d16199ad6957de59b023914cbc27552e05260c82d3d6ac5a91c6ae65e739a42952800c894cadfab3980395bf35c56f0800a0f1502c2965a0a8ef06fb386af2fdcd44bd1f12c3d3ce2726773fc4d312fbf5aeb4494f8994c382216bd3d67794a7f1369e3c130c7f1d2cc699d3fc193f1dc275c662b9fd9861c217afc26583a0f0dcfaab8f38125f922fdb5c7c735823e52c183902032e3a129e41317fee05d9b5bb961009193ac0964e7da6480eb9db34b24f7bf72dda940282a08cdb310bb0613381fb4de02009d28dac0c73af4471535f17977cbff25ea18e2612633c7a2d8e42d943c00c7c708dc12f3ea4e54de69247c20858bd453b674e076cbb7c60c8a3edc56ebc38fc65f9187c8bf9996aab10dc67732d5892c5c084850460282340a539bdfc098523a553f18e3bc6ad541dc7efd13cef838f09844d336a1a30e06062d798ffae63b167fc40fbef4c01a30c03e5517536903b583707d0adb8e843421816e01", 0x1000, 0x2}], 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) [ 543.371700] loop2: detected capacity change from 0 to 50176 17:29:24 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:29:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:29:24 executing program 2: syz_mount_image$nfs4(0x0, &(0x7f0000000140)='./file1/file0\x00', 0x7, 0x9, &(0x7f0000001000)=[{&(0x7f0000000300)="1ce5f9fc568a3a3ea2bf374ef357300c8b63270dd415375da7b2fc12263e1bf7cbc54458c17a65862d405b6c0a34c9a739e580966da3928eba1bb0425061954289c269ab323016fb878c51ef917169553e907db42807e3895c2d495e7bdb72f99e77bf3c53075d44af70aeb2c98fd014a93f4e4e44abe0e0383fb9fbb64ec80fffd6f7dcef385e47601031a7f7c63635a910cd58c98e27f0612e6a3555be8b98fafdd3e4b39e0ada972c5a46895c03cd111d05935b15b698c29b67187f7ae20ee3a9de1378629a16a76d0cc9143c9723ac4e11218bfcbe53c5fe22", 0xdb}, {&(0x7f0000000240)="a44e03dae25229ef7664dc0d82e4b72cd0c592738a95", 0x16, 0x62b2}, {&(0x7f0000000400)="07ed084ada69053c2124c53028702d70c9a22071671ca60104ff40bfb813f281f556115eba4a1e3e7d01682b3797aab68d3aec", 0x33, 0x1}, {&(0x7f0000000c80)="d2ed55d7ae592d049b4bfbd759537ed383cd1b676a4f6e59d26a56e5b6daf4a4a218b0bfaa1ec80f800ef933d3c7e29b9f6b3c6d9d082ee0088be587c9c55c99c288acebfe09bbe2a3f04845d660bdcf23ca65d1854dd8097a", 0x59, 0x2}, {&(0x7f0000000d00)="d965f5d7fe4b15910a96e5a6a0700a5e9b6c2dbccb681ed38ef77ecc1b6a16276b7c830eefc4c787eb7d0bbbf08e35c84da54a5eaa03b13c6c77a6baa9ddb6491dcab1010a7faed5272bc113771385dd3434bd0eb36d9820b95d51c7eeb2e773eb4d7dbf971395d739c553e7b7ae5f073317ca14cc6a87751673062f6dbe88aa0ba08fe9f3b473626a9861341797e72327883c390744e9967701d256efada4e1dcf0c6a3bee756fd854c832f81e1d1a389c8514270c1054c2a3f67970dfa1459ef68c718bdf589adfc91a2a5d90e0b012f063fbd94bf5526b7320b0c5a11e2d96664af952e186eb50e49e65192fd8f03d2a80942", 0xf4, 0x7f}, {&(0x7f0000000e00)="38f50059e6341004b564d391079952c776215e3269e3a9ff052f9fed38df43227ce304fc122b690fd3c66283fea63195ab3a2bd1abcad2529aa5a7c02b3707723f5644c7249d264ee362f89d7ca94eb27014ebf22e9709ca99a79e365596f669369e1dd73208a2c2527872b8e6b898504ab6b4850952111aacca2e99d52d6c6632916eeaddf6dd8d2f059e1c8380cf43aa56ab5759b2", 0x96}, {&(0x7f0000000ec0)="bafbc07c8dc6e9a0ab53dd5648c479c92bc1cc5489b263c1a7f3748479ca881b40d423369991679989797577af0d9704a96cd32f1fd98918d9f4888798a91f63ae48a7de0e4bc1e719313f89156785717c2a4ad7134b049dfc594bbc525bbd3bdba5b0bc5761f127", 0x68}, {&(0x7f0000000f40)="9896fbde140b79ce754d9e5f730f363ee8ed502cbc1ac476e3298dc7c814afaee76bb20b0518826f397fc9713db3cfee68866ff7f244fdb37d96c8dc0e7d489709710d67300e7a0f2df6227326eddc4000b2ae06ba64ed51e7059555e02bb1341cfc376773943a8904eed30be025066a37b3d40267722231091742d6e134b6aca4901dfa9cfadf14343ba1e13f6b7216c33e29adfa", 0x95, 0x5}, {&(0x7f0000001e00)="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", 0x1000, 0x2}], 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "00bc95e1d7c7526002994560cca3cb55b66678e5eaea2741345629a1cec02f007569e0842af897601b10179ce9c733b49449827210b73d70a774f7e48cea1c35a571cf104a8db9faf6c7f7a86647a7a3a4a1740d6e9722cbf84f0d9ec33b9bab22d97351d38686158264793722ee3b2516645cf01a1a9ae08aa9192b0aa2d521be5340caa28d3e9aca95d6c911bf19b56b60b59d718961708152c187c5ec50437a3df5039deb78aa1ff0d0c1dce7ff26bb1fbbd65861e3bd8db8c3eabd654b68db5d517f3cad2b86c70d81f32e2a06e473b6ca25df162c2c9c07bc413dca11294ad0405edf9d6960235bf04a490a886388edae8fe3dc39031f5cf8d64613ce9bd37486c957324e5f11cb734692496a2ea9f4a345751bc9c2fe871e70c7b6611549350cde91af83ff7b1c57a2b3fa51cb7019e32b4a56fc4a3f0f78c41e923aed5cb89ab79fb2b1d7d2264638ec688486438cb5bfcda5bd3336c0eca5c4eb49ec0284e9b1356de8e47797300221dae6b2dc5998e5616720ffc947ec2810b3c85b606781abf15f61154565f58d2492cc6a2c56dffa9ba7ab98278ed6ee13653b779b893d8494c76cebde9bc51ed405e27e8daf3d6a9c0e3a09f155d92887781b7e1d1bdca9c0618f5ed7e0c97917b349b694a3d9005f9a672cd522aee5946b70b962128c7702b069399bf489ddb076c5ea02fe2b9030823c4247a6d22cd8c59b4290c56d47ccfa5167f94e9bf5e66bf4fb99c0585598f1113e111eb23cff6482c3060b77f79a77f71e9a6d8fdf8a7311ef5c2eaf7b102e638b3cd28644c29855f14b30e9c0631ead0c314870a30615de4c1bda467575f75edaf7569a77ba047b8443d96d8c862006bfcc7c21b848904100527b69d39c5caf1c3aa038fec350da5c1cbcdec3def9c83b0fe0e3d5f044685ca4e3da91622fcf098a3d4a827740c771dcfc67298754a2a1601e363c35ba09e0191097ac1cb793653beb39885a70b00457010111f12223bc6d6b8dfc16c29e31e27a0bf6c35b421907f10cd41cedd40709d56d7b8e9e3531c1acebc0a5ad21dc1a18affe006320ea8b5d7c4fca00ba4028f802c97ca82c5b321867ae14d8ec57614c9bc5a8b0b7df20bc38585a32d3cf58ea3f9402c478d84c9312e1660648f67ad131560dc6a4932657afcda99b9d5cbf9c8d8e19798f86e62c1dcf4e4bfcdedefac0cd9d9d21cc692a1eb6b7d5b1b2c1a1a49ea7c3566fa56a9d2cc025332479e61fe3a750e20446ebece96faaa58a355e59fb83205c2b389243ecf8141c4a75ffe7281adb43074b88a501682b32c5153f9b79441306a130d17536eafbc70bfe91bb34cf4488d8624cc4fa287fa60b6502c2cc1a049b0afc6bee5a6240238d5ef0e762791121ed045a939dafdf1dfe996325fd552570887ffc7f3066e857015ee8cf082339375cc0989afe26e125bd66579d44c56c4ffe86507b5155ac7f47ef66629ed7b6b11db00c40ef262f5609733ef55b27370e8fbfea36500ba3e9687232eb9f2f6af04dfbfa79a64cd7bfab080648330776ff4088b0345f436f869f5aea2dbd1155bcd62cb858f694ea8e8ca34c418dc7ee051a1a041f0521abd04a7319f73d8fb902688e58a69c9043e8392ff1ddb95a9f6f7c72d5ca765c809901b9e4da6929e6ab98fdbed606854e05677b5fc04b46c7e77550bb2cac1747774d9f5bb41071a2edfdf7ca48303b65800ae56b1d4254d504555484040c8a6a7ff987cfd65e29c921d6aa356ab1ab3c9c3f493cb3c55b414d31cde83084e2183bc2e173f5872c252ffbc5c97ff6712d5934fdc512575dc5db977bf7d5d0b92fc13fcdfd04bafb59d28aeac0d8d5c105b1d648f07753c1fb731f883d0957b1c56138847f34b9b669511580ccbe523de0abf33ee0ae793d659cb2fae7bb1e546eb3d9c4b805499627618b9d0400ff60fdafaf975cb3a9663eb1efef94676dce8042f0d93f11e93d7fcd25d7535c7a37f57b2835b2aefa0108924efba0390da2d939630b6047eb7fff3395d421a27412fadd589e4673f4e3b86d92c51b8d2451812ce4623b2c5de86894519f6e72e381c8fa39ef43f95bd4c812936794f709556e89f9f1044fc59237da4b40406d74b630f4b558e0ca5a7e85f45968ee2162c5c787123f3165cea19f4998ba73ea99af14de50017ced399b32c65fcc3b0069f2393958c5b8fae29ce59e3de43ff2fe4f603b264190ca1ebf9763cef6d81b3b16e59210c72f53f064e3e877791cdbb836cfc3fa9ca97c8adf27f1d012fffc243a95e10adb0de9d1b375c15d4b94e6e1ff7a2b1a3162fccab6e526e8db185555acdf449e15f9fb8b60185c61fc2f838e9c258ab52ece9a38214b0e8d100da3681e215eee5a2052de65f2568d49744786e56185416a53934f627f3fbb460880e5e399993743cc048549a08f9a4a1e11210fdf0ed031a3c8f44cee83af55bf74948f51126d53e6808915d630a0ec0e31884c3ea8b9eacfbda96501b44c200bb7caf55032ae99324af341291df2183ef4a6b0cb2f0272007dac9589149953e61f01e027627dacb58d5edc892fbe29146b3bce72431ec4e2fb4fb7a03af2c2e94c7d68cf59c2f618eff3e7e06d0e03608ac678b325dc4c7bf5af32b215b65fa9a1bed17292a56e9131a8af0e22b79a91f66e5294c9dfd0ee6546978e0d3d5420649f10c1b9f917351cf824887011a8b4ed165b5db68d8f8d4dbd87d337e49f05873553fe5d0e34638851a273618f59ce5fe148ca149cce089a8f4301a5507404939cf4993b4afa6f9d2a76c40adcbf4607e0e293483194f7756ac3fa8f7e2eb28be0a251d0e70f428d06731a135a02b239ab8a0a79472002e08291a7242c41251cd36185a1b31a32ba3da99897886dc37fc9c4d2a8d1"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:29:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x34000}}], 0x1, 0x0) 17:29:24 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 14) 17:29:24 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x270, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x25a, 0x81, 0x0, 0x1, [@typed={0x14, 0x65, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r1}, @generic="e094e1d5b244ae2c7f0c6c005373056b180521f908b01dabb70d72ba468b3b7b75510377bac91fe03cab5bc4538e6a1af8703234ea5a49272fb694afa70b4125c91153eaf1003c8b748de7cf12132d86bdbc6673ad5bc0438cdd57cecabaa50f2669c1e778bc9e43b73ffcb6a7993faad9d0b1bf1f09cfd581bd70e826ba82773d73959c2a0dd47d9aa5fee6104d0c5179fe67ed98d3e873a75a896342fcdc45a7e3b5667d91d5e3a0ec20a34a7da297fcc10ce46dc8430af248dfe1c5ecfd35bbe164a54c83b2d4bcc0bb3a213bc3db956f6bfd", @generic="b661d38b05ede8eb44ed2bff8d902a82daaa72f8d48dddc3825a574be7c562a1b2f8799b2daa24c89b5b5b700db39fe1e3235137568b290fb033459d7faef3a999db38bd8d3e5938ee73313af330ef58bc2bd84adfef4ff751bc84e9fc69c0335600b2a91bf2f804bfea7798649842f3278ce5367a8597a8ad702916286bfd59b7412fdd5a12869e57a459beb3fc95f0776c240a1e2e", @generic="e61c9a56b8a6eead0a270e608ae43490c17fe623f510b866ee53040dc4176b11233b09eeaef7d4cb9d0451e6f1069850b972559de94d27357711703be743e33e96232e6a3da509fb14c76dc65d8fe859e5143f2208d86a26f43fe2a2619fe34d1c5620c3a173c66a70461a4150dbb7899480c2fc93e0bc5c2797b1f61f203dc237f6a9337b6cd36bfdff18166577a05f41059c7189ea77fc1a0843e62563f6a92d41172dc5bd357beb137339ce82d89814538abbab0da2f1ab2a017671a546b4f8eb2e6d3f5d087c", @typed={0x6, 0x40, 0x0, 0x0, @str='-\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x2ba8e1d15d94a280) r2 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r2, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) 17:29:24 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 17:29:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) [ 557.212599] loop2: detected capacity change from 0 to 50176 [ 557.246828] FAULT_INJECTION: forcing a failure. [ 557.246828] name failslab, interval 1, probability 0, space 0, times 0 [ 557.249423] CPU: 1 PID: 5768 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 557.250913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 557.252751] Call Trace: [ 557.253354] dump_stack+0x107/0x167 [ 557.254172] should_fail.cold+0x5/0xa [ 557.255038] ? v9fs_mount+0x5a/0x8f0 [ 557.255876] should_failslab+0x5/0x20 [ 557.256874] kmem_cache_alloc_trace+0x55/0x320 [ 557.258166] ? v9fs_write_inode+0x60/0x60 [ 557.259214] v9fs_mount+0x5a/0x8f0 [ 557.260270] ? v9fs_write_inode+0x60/0x60 [ 557.261386] legacy_get_tree+0x105/0x220 [ 557.262531] vfs_get_tree+0x8e/0x300 [ 557.263344] path_mount+0x1331/0x21c0 [ 557.264192] ? strncpy_from_user+0x9e/0x470 [ 557.265146] ? finish_automount+0xa90/0xa90 [ 557.266117] ? getname_flags.part.0+0x1dd/0x4f0 [ 557.267156] ? _copy_from_user+0xfb/0x1b0 [ 557.268081] __x64_sys_mount+0x282/0x300 [ 557.268977] ? copy_mnt_ns+0xa00/0xa00 [ 557.269857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 557.271011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 557.272164] do_syscall_64+0x33/0x40 [ 557.272990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 557.274236] RIP: 0033:0x7fbd09823b19 [ 557.275252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 557.280142] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 557.282081] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 557.283994] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 557.285876] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 557.287715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.289574] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:29:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x80000}}], 0x1, 0x0) 17:29:24 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x7, 0x9, &(0x7f0000001000)=[{&(0x7f0000000300)="1ce5f9fc568a3a3ea2bf374ef357300c8b63270dd415375da7b2fc12263e1bf7cbc54458c17a65862d405b6c0a34c9a739e580966da3928eba1bb0425061954289c269ab323016fb878c51ef917169553e907db42807e3895c2d495e7bdb72f99e77bf3c53075d44af70aeb2c98fd014a93f4e4e44abe0e0383fb9fbb64ec80fffd6f7dcef385e47601031a7f7c63635a910cd58c98e27f0612e6a3555be8b98fafdd3e4b39e0ada972c5a46895c03cd111d05935b15b698c29b67187f7ae20ee3a9de1378629a16a76d0cc9143c9723ac4e11218bfcbe53c5fe22", 0xdb}, {&(0x7f0000000240)="a44e03dae25229ef7664dc0d82e4b72cd0c592738a95", 0x16, 0x62b2}, {&(0x7f0000000400)="07ed084ada69053c2124c53028702d70c9a22071671ca60104ff40bfb813f281f556115eba4a1e3e7d01682b3797aab68d3aec", 0x33, 0x1}, {&(0x7f0000000c80)="d2ed55d7ae592d049b4bfbd759537ed383cd1b676a4f6e59d26a56e5b6daf4a4a218b0bfaa1ec80f800ef933d3c7e29b9f6b3c6d9d082ee0088be587c9c55c99c288acebfe09bbe2a3f04845d660bdcf23ca65d1854dd8097a", 0x59, 0x2}, {&(0x7f0000000d00)="d965f5d7fe4b15910a96e5a6a0700a5e9b6c2dbccb681ed38ef77ecc1b6a16276b7c830eefc4c787eb7d0bbbf08e35c84da54a5eaa03b13c6c77a6baa9ddb6491dcab1010a7faed5272bc113771385dd3434bd0eb36d9820b95d51c7eeb2e773eb4d7dbf971395d739c553e7b7ae5f073317ca14cc6a87751673062f6dbe88aa0ba08fe9f3b473626a9861341797e72327883c390744e9967701d256efada4e1dcf0c6a3bee756fd854c832f81e1d1a389c8514270c1054c2a3f67970dfa1459ef68c718bdf589adfc91a2a5d90e0b012f063fbd94bf5526b7320b0c5a11e2d96664af952e186eb50e49e65192fd8f03d2a80942", 0xf4, 0x7f}, {&(0x7f0000000e00)="38f50059e6341004b564d391079952c776215e3269e3a9ff052f9fed38df43227ce304fc122b690fd3c66283fea63195ab3a2bd1abcad2529aa5a7c02b3707723f5644c7249d264ee362f89d7ca94eb27014ebf22e9709ca99a79e365596f669369e1dd73208a2c2527872b8e6b898504ab6b4850952111aacca2e99d52d6c6632916eeaddf6dd8d2f059e1c8380cf43aa56ab5759b2", 0x96}, {&(0x7f0000000ec0)="bafbc07c8dc6e9a0ab53dd5648c479c92bc1cc5489b263c1a7f3748479ca881b40d423369991679989797577af0d9704a96cd32f1fd98918d9f4888798a91f63ae48a7de0e4bc1e719313f89156785717c2a4ad7134b049dfc594bbc525bbd3bdba5b0bc5761f127", 0x68}, {&(0x7f0000000f40)="9896fbde140b79ce754d9e5f730f363ee8ed502cbc1ac476e3298dc7c814afaee76bb20b0518826f397fc9713db3cfee68866ff7f244fdb37d96c8dc0e7d489709710d67300e7a0f2df6227326eddc4000b2ae06ba64ed51e7059555e02bb1341cfc376773943a8904eed30be025066a37b3d40267722231091742d6e134b6aca4901dfa9cfadf14343ba1e13f6b7216c33e29adfa", 0x95, 0x5}, {&(0x7f0000001e00)="23c59bf2e97c320e455ac1faa7ae5fc075760222ca911a74b4c775ffe1813e06095bb38fdc02f783823dcca831ad55e4fdecc5809d34172b5bda2a7a1901cda9fce902428098c5e08e0235d3fd20207628208c6957c76cd7eeb8f03ccb41bb40a2bad8a7416a5d878260e129426aef7aa1d3d077fd2fa4f5f26efbe2958d0b93e9200bc8e08dc65f37be49cab6a1bd4c1defcbe2b9f3c6c4eede7ee71fceaee1e0f3c118d5ba196c86f617a5bdc0ef6a78581a07399407455c306861433dfad7d7fa7ee4d9527a25281996563491059b848019ea13601eb44a78914cb56dfea6d143a9051068487f3d9343cdfbdb6adc7b88f4e1e3ab025c51e1c203b15a8a84433809eebf11f099c1e6e5a20d112657d6c2fcf189e0e568ad6332f4034971b139e72ee9da63e2642b694d7e52f29cebd138f488bd48692914f127aa9f0f3b84ea9b0949006d77c1810731842dc977bd1cc2116bfc7b58426d54ebd67f50fe76bfec9956941994c061a01cb2e3beb53fba6c43f3e7168d942113c77ab2bcdf6629ae6ad5206a03d315ccf813bb8a16922b933f6f762934a46d827f31e3e8e0466284743d5fe43d9ed739e31ce3781a6b343bb1fcf47b6ad5c3e8e73e24755c7510b0eeb39e34721c51d6fedeafe29d6de70e3866d12a7f373fec907a80c259ceaf342e0056c56b23cccde8cacc7edf3c5aa132118b7f5f3bc33a47c064c4b8785ac420fd52f113326bccf0effad3ceb171207809a16d17abfeae37cda8a367078288f618edc14759fce7ec36e2d65451d73f51659cae654ad74e9a569695c87e2087e49919db430524f3055ce640f07af05cb1cc872a1a72b4f67d3ae0ebf89b83b7b5fae82e8a9e9d2f4f9385de1173edc20e64e8ae8e4888d7a0fd3322c5bf9b6dfc1ff5df9910d1eebbf92808a0dc53ef2f080937955fad404711158934127c2ed5bf073c09c3a6a3567d52045f0867efeecb05ccbb2c57c775af5e9eb9bd250ce2f3675203ed36a41129a914effd48e027ece3422a658a4cb8946cba76878ef2d718f39889b7f589b7471b3d0f76bd7b17e8f31c8a5a024bb407997b60bf2f1cb907cca5ebe531dadf0480532e30d175cc5a915a376f63d42d342df5aba6abef04525c1c9340c495056b5eae3eec879b7309790c7591d28d34a2a4e07d2695814461cee52da3dd1a1c9632007144071469c8451c3795e6e6f7b6b770c434b2f94b71dd78c4db589a998a4c0642cf5d7fa83edacd963801cf2352dcf6904a5b1cace9c7cb13b9b1d655f3efd00e96f890f6ba685e09ae01f9985a09638d8b785c38307581f91766dfc475da8d4750d58e9ad23b607f77179279d5cd507b1ff5014682e4998c1dcd737a596d14de74296800ca09f4e62400fd1fc4e6887b19acb2b64856e61540328260741f824da11acd614e41283df63a74ba9a2ffb8471fb31b977cc31ba6193e6689780b4e695fae018ae83377bafcd1819047addc93ee1bf286a8e0476884661b2dc16ca6392b5e355d67cdc53d22c550f852db77cee20b59cc9cfe430415eba580020841cd8c7c792d0e12d20f1dd24db815aea79cc082712bcb9584fa362d6d6f28a852136542b03ecdff523c28a8f67422db30dc5585397960022279320ee0606293147688aad8248972d15ea084c2deb88b84e2e1ddd291095ab642da206567e9bf9dd7ee82a29bf5b8ff3ae0ee419a461d328ca088a888200c6fe1da76625feb4dfc468e104652e3172e115f46e70ad7c33d379e22687f6a9a304b812bcf747cd8765ce08dcbbbf80ec46c3807a9375fd5394c9d0f08d698b4bebe49a90f10d9e8f04eb61e9fcbe43885d12290996c63639710ba1ddd37f008624b154df42c2186ada111f08ab0bacb96900d5fef61e978c51f1858cfc496f0693485ce39c2ac33d2e3969389d90e5593f328c13c1f17b80444cf481ce5f75cd1352ccbc295bd4891b4a41d581a316f0c8b2778f0b03e7362bcc26597d5f097235e8588ffbc6f06c9f9461cb5d10a275b3f9205490abe7a658dce9ce0f502ec5d1f30524e260ecfafd554286a56f2dcd414a149abd0dee5f2e8f77339b07371f6b4c48a76e65aba4a38549b0c9634f97feffeccab902f5442920858eed2df9452c93ec4a61607e8ac9cc09d8e1f054b25106b2aa1700aa5a12de2a400d30417903aca244ef6d0244a46a586ac2c9c90bc203761365bf5d1aaefaeca76ce057d0a52a85a36303da14ae9b73a2a8dd74e7aa24af73a4284b948387c4d55102f2c2f99c83357215a1e42e6cbfe7da3d71acfdcdbd177ecc2647ae296a23af69c1a0bbd219f4aa42a561153f2c0d2f5296f07ce16be6c1a3389dc8fd0a693f10a88d790e142a6c21ce4ac9e0af7b2ffa3b5c45623d6715297e6c5ac04afd952cf5d2b612b37855b02f037f1fa47c9ff07e4fb7ae17e0a53c4b65c6057c54435fc77c70a321ea8c48920f9682ba7b207afc5be2f5dcb0e99c18b869fbd8e146c985762a1eedf3d1e2343cadb4ce08d6855b0f2f34df1936ea19ccb8e7a932e9769cb9e0f40c0828b2fa88d8fa08540068c034271291bce951412b0eacf5e0ecc38fc828696a9c12199f228390fe52d69d5339e59a98f651df36ae8e90c1fb985180799fbce0a6ba71afb1628c647f95d1ee38867a1616ab706935aefe5c4d5066895d90975eae241d5b2a33101366e1f2f21eb3e5dcafbbe17c166db71c008d30d8baa1d0c1aea9da0d13afe805b675ecca118d4e0d0b4903ae203c4e6dacc59e00cfa5a146d991d866aca5c3f9e88d7b8634054326756ad131735073a172db15be92a1846b413b7ac666b008dbfef859508f2fe8332ced747ebedcbcdb38da29ec32443a85d777da08b84dcac736f1e93f396f4b737d9eb8898c199782dd59054a2c023459c17922e51621fb6e4ea11643dd03f48eca1516122817502ea35b38882b8170b9ff2194f5e4b0585cbe443c5b8ec71434239f075ec943081eeb80d0e37fcdd2e4fa57cf69007a9769a2eced04d27f5166f7a765ccc28f8dcc71afd64af2e529bf0684aeb50da006691f161a714b6007abc36e82370a2420b77f4739c2984938893fb395f62ab2e15ac5dd011882de514465d6f56e919b73be57b868afc4ad11838021eae8dc8cfb3647e9364bfe9c62b8c4a5b72015d610e7a8524e1c42071f38d0b7103347b27c80d1c571053a730c6a2ce474188e64ba721a0fa1e6c99e44139f4ebcbf489f8c380a331686319581a29a01f546627997c75c63e7bbf64c23c4c92ecdbc08acbd1322ced75402da1a15fffec588ac1c9e50b1ae6993b48025de1b12a726a8abd2cc4f1d57936b215d21a39c3a4d5fe08939a388c9b386acb5080505d3440c7d1110f570dbdf13b4adeb1ae5719c22e723ca521988a6e4c68b598fa9a2eda5bd97e1cdda700b720476e5a857c6d9c4b995e755e3a6e299b5caa4bedd0da5ba9a23738d1d9b72a832e22fdb1eea4384ba73ddf2165d7ab83fbff8ffd786a6d01d00f25328a7a0353ec4282ef08a1f97dbe94886ae7394dc95fb11dde101e25425ea77c89b446dcf27e4cef3b23327a0ffcf7c0d029d2ba70b34ba1406f288c7776970e807d9b27417ab4f5ca3fcdcfb960c38fda933e52bd2db5b347267a2ec26728055d7e91cc03972992e9a5f410c7b4d30ef378c69f586455b507ac52b38b4f79d480afef9c29cb451cc9090660364860ba779098ad7a6a735987ea5f39a29a8bf2b8cc70323d12032a6be8f605ea300ef6afabb07e1480e6e653dca87bd1d56726c685c65aad955566fa6bccb05f6ec3a3c05629c8ce2be76063d4daa891c16542b923e34aaaeeaee43c63cd6e8c3b90ef35d001a407a17dd86aa88eabe1c2316c9df1b2ff909a6b69f64a349355eea71a22a7299865efdcaacdca697c09d44085fa11fbff4e341be7f5f190b0774dd6abe015edcb707b1238289a85dd98259945a0e1a200af9509a91097584243b35c12950b69e60859b2b70468cd969f6cc542234f531828d8b9f01eb937d79fd0d1ad2a4f42c24df7243503fcda7f489fc1ef5613dc7dd01f07240c5925490f22612ace9f1c79707b053a0884fd9058f9c913ebdff3b1f594841368ec5086c32f104221247bd4f4695e960747a970c1cb722be414fbde2fc5d0d6d2ac576a45c6d0820d5fb11e6cfb7716817cd6476d8c23b589499cebeea046113418aac8b1355b9dcf545c4e15fb6eff4160b4954f9d4af7fcf3d14cfed6632c2f746aad2e1e6752f518600f68563356042524806cc40b74c1335e59dfc44a62273b66a5155859aec0584b874bf87ff9c8d05d4a52ae86b875a74070f9a378c426ccd2d184d5f4babb789d25fc9f14f7118af45a1242d88e9d0f1ecdc25adc91cfb6523b4523f530295c8d1c77d9e688102cee7a26374d6b61611c35308ae66f584666ea6c3060921938de5d312bc0479334e5acbf9630e19869c65de43560cf79c654a6f12c89a3a72a32b0dfab57cb49e31b12fdeb247dc0c2f08f7c1dfc483c0b587135a4da65a4aab44432857ae883356fd2b9bf9b6121fcfbeae9a218401f97dd0c9fce369b4621f7174651f9cdfb83525d633d38045a4f8689601925cae837669ec54e83ea93bd61f5cdd5bcc6f8d7f04c7285453de8cb730d94bdbd2dc1c0d573ef3077cbcafafc2c85c734be36f1d408667a9b12c2a392f665eadcbc5d964ed975f39dbc98875b4822677bd36cb568b493b64292bc7e783dc058091b31461e5a48b96d0b35c6a774bdaef5aa6c29225c1f95b9ef52154bcb5083c1ec89b0dd55b80cd33d714f3c9cb042b30ef9ee140f1ff5860183bb397de23ac4d0deeb7729500bb8c5fd025fdeb796ec7528476ce413c67eace2fa426b8999ab668471baaaf3df985ebd13853e86a0530035167a9100f78430898128946349b98731a87e6ef52aea6a004e666c55eeec10d50d28360658d2226b49d3ecbbca6552ba4c1a157c838f6938d6248ae2cebf3d1281b8286a477a680f8f8b91bb9ebc9f73403236135317529da9e9d0091bc44eaa981832f002e5f11567d6dadccbd868c6e1ba953db2086a671ef1a8e1d4ea2e1d022b8e66b0eb8aa069c44a1e8583ab57d76296c30b1947ab2c7dd09403be1d3055d68b2e443e2e3e94108748f8111cd5d2de37b469347a47adac97c3d07d9abcd6fb3ff44eb558d4b1b026302906e9dbccbfa8d504b0318a20e1261d0721e66bd345896c389a45d50bd022298438bc2b8a72a208190698096016ba357021cb9362ebe0e2313af9cfc948c5b97d0fab46ac00d6d16199ad6957de59b023914cbc27552e05260c82d3d6ac5a91c6ae65e739a42952800c894cadfab3980395bf35c56f0800a0f1502c2965a0a8ef06fb386af2fdcd44bd1f12c3d3ce2726773fc4d312fbf5aeb4494f8994c382216bd3d67794a7f1369e3c130c7f1d2cc699d3fc193f1dc275c662b9fd9861c217afc26583a0f0dcfaab8f38125f922fdb5c7c735823e52c183902032e3a129e41317fee05d9b5bb961009193ac0964e7da6480eb9db34b24f7bf72dda940282a08cdb310bb0613381fb4de02009d28dac0c73af4471535f17977cbff25ea18e2612633c7a2d8e42d943c00c7c708dc12f3ea4e54de69247c20858bd453b674e076cbb7c60c8a3edc56ebc38fc65f9187c8bf9996aab10dc67732d5892c5c084850460282340a539bdfc098523a553f18e3bc6ad541dc7efd13cef838f09844d336a1a30e06062d798ffae63b167fc40fbef4c01a30c03e5517536903b583707d0adb8e843421816e01", 0x1000, 0x2}], 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:29:24 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x0) r2 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r2, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) 17:29:24 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 17:29:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x400300}}], 0x1, 0x0) 17:29:24 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:29:24 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:29:24 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 15) 17:29:24 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) [ 557.602512] loop2: detected capacity change from 0 to 50176 [ 557.752643] FAULT_INJECTION: forcing a failure. [ 557.752643] name failslab, interval 1, probability 0, space 0, times 0 [ 557.753989] CPU: 0 PID: 5801 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 557.754786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 557.755934] Call Trace: [ 557.756270] dump_stack+0x107/0x167 [ 557.756717] should_fail.cold+0x5/0xa [ 557.757187] ? create_object.isra.0+0x3a/0xa20 [ 557.757747] should_failslab+0x5/0x20 [ 557.758187] kmem_cache_alloc+0x5b/0x310 [ 557.758658] ? cred_has_capability.isra.0+0x152/0x2b0 [ 557.759256] create_object.isra.0+0x3a/0xa20 [ 557.759763] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 557.760347] kmem_cache_alloc_trace+0x151/0x320 [ 557.760889] ? v9fs_write_inode+0x60/0x60 [ 557.761356] v9fs_mount+0x5a/0x8f0 [ 557.761785] ? v9fs_write_inode+0x60/0x60 [ 557.762257] legacy_get_tree+0x105/0x220 [ 557.762735] vfs_get_tree+0x8e/0x300 [ 557.763175] path_mount+0x1331/0x21c0 [ 557.763621] ? strncpy_from_user+0x9e/0x470 [ 557.764124] ? finish_automount+0xa90/0xa90 [ 557.764627] ? getname_flags.part.0+0x1dd/0x4f0 [ 557.765158] ? _copy_from_user+0xfb/0x1b0 [ 557.765655] __x64_sys_mount+0x282/0x300 [ 557.766126] ? copy_mnt_ns+0xa00/0xa00 [ 557.766573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 557.767186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 557.767775] do_syscall_64+0x33/0x40 [ 557.768210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 557.768796] RIP: 0033:0x7fbd09823b19 [ 557.769236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 557.771379] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 557.772246] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 557.773075] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 557.773910] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 557.774717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.775550] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:29:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 16) 17:29:37 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740), 0x0, 0x0) 17:29:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:29:37 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x9, &(0x7f0000001000)=[{&(0x7f0000000300)="1ce5f9fc568a3a3ea2bf374ef357300c8b63270dd415375da7b2fc12263e1bf7cbc54458c17a65862d405b6c0a34c9a739e580966da3928eba1bb0425061954289c269ab323016fb878c51ef917169553e907db42807e3895c2d495e7bdb72f99e77bf3c53075d44af70aeb2c98fd014a93f4e4e44abe0e0383fb9fbb64ec80fffd6f7dcef385e47601031a7f7c63635a910cd58c98e27f0612e6a3555be8b98fafdd3e4b39e0ada972c5a46895c03cd111d05935b15b698c29b67187f7ae20ee3a9de1378629a16a76d0cc9143c9723ac4e11218bfcbe53c5fe22", 0xdb}, {&(0x7f0000000240)="a44e03dae25229ef7664dc0d82e4b72cd0c592738a95", 0x16, 0x62b2}, {&(0x7f0000000400)="07ed084ada69053c2124c53028702d70c9a22071671ca60104ff40bfb813f281f556115eba4a1e3e7d01682b3797aab68d3aec", 0x33, 0x1}, {&(0x7f0000000c80)="d2ed55d7ae592d049b4bfbd759537ed383cd1b676a4f6e59d26a56e5b6daf4a4a218b0bfaa1ec80f800ef933d3c7e29b9f6b3c6d9d082ee0088be587c9c55c99c288acebfe09bbe2a3f04845d660bdcf23ca65d1854dd8097a", 0x59, 0x2}, {&(0x7f0000000d00)="d965f5d7fe4b15910a96e5a6a0700a5e9b6c2dbccb681ed38ef77ecc1b6a16276b7c830eefc4c787eb7d0bbbf08e35c84da54a5eaa03b13c6c77a6baa9ddb6491dcab1010a7faed5272bc113771385dd3434bd0eb36d9820b95d51c7eeb2e773eb4d7dbf971395d739c553e7b7ae5f073317ca14cc6a87751673062f6dbe88aa0ba08fe9f3b473626a9861341797e72327883c390744e9967701d256efada4e1dcf0c6a3bee756fd854c832f81e1d1a389c8514270c1054c2a3f67970dfa1459ef68c718bdf589adfc91a2a5d90e0b012f063fbd94bf5526b7320b0c5a11e2d96664af952e186eb50e49e65192fd8f03d2a80942", 0xf4, 0x7f}, {&(0x7f0000000e00)="38f50059e6341004b564d391079952c776215e3269e3a9ff052f9fed38df43227ce304fc122b690fd3c66283fea63195ab3a2bd1abcad2529aa5a7c02b3707723f5644c7249d264ee362f89d7ca94eb27014ebf22e9709ca99a79e365596f669369e1dd73208a2c2527872b8e6b898504ab6b4850952111aacca2e99d52d6c6632916eeaddf6dd8d2f059e1c8380cf43aa56ab5759b2", 0x96}, {&(0x7f0000000ec0)="bafbc07c8dc6e9a0ab53dd5648c479c92bc1cc5489b263c1a7f3748479ca881b40d423369991679989797577af0d9704a96cd32f1fd98918d9f4888798a91f63ae48a7de0e4bc1e719313f89156785717c2a4ad7134b049dfc594bbc525bbd3bdba5b0bc5761f127", 0x68}, {&(0x7f0000000f40)="9896fbde140b79ce754d9e5f730f363ee8ed502cbc1ac476e3298dc7c814afaee76bb20b0518826f397fc9713db3cfee68866ff7f244fdb37d96c8dc0e7d489709710d67300e7a0f2df6227326eddc4000b2ae06ba64ed51e7059555e02bb1341cfc376773943a8904eed30be025066a37b3d40267722231091742d6e134b6aca4901dfa9cfadf14343ba1e13f6b7216c33e29adfa", 0x95, 0x5}, {&(0x7f0000001e00)="23c59bf2e97c320e455ac1faa7ae5fc075760222ca911a74b4c775ffe1813e06095bb38fdc02f783823dcca831ad55e4fdecc5809d34172b5bda2a7a1901cda9fce902428098c5e08e0235d3fd20207628208c6957c76cd7eeb8f03ccb41bb40a2bad8a7416a5d878260e129426aef7aa1d3d077fd2fa4f5f26efbe2958d0b93e9200bc8e08dc65f37be49cab6a1bd4c1defcbe2b9f3c6c4eede7ee71fceaee1e0f3c118d5ba196c86f617a5bdc0ef6a78581a07399407455c306861433dfad7d7fa7ee4d9527a25281996563491059b848019ea13601eb44a78914cb56dfea6d143a9051068487f3d9343cdfbdb6adc7b88f4e1e3ab025c51e1c203b15a8a84433809eebf11f099c1e6e5a20d112657d6c2fcf189e0e568ad6332f4034971b139e72ee9da63e2642b694d7e52f29cebd138f488bd48692914f127aa9f0f3b84ea9b0949006d77c1810731842dc977bd1cc2116bfc7b58426d54ebd67f50fe76bfec9956941994c061a01cb2e3beb53fba6c43f3e7168d942113c77ab2bcdf6629ae6ad5206a03d315ccf813bb8a16922b933f6f762934a46d827f31e3e8e0466284743d5fe43d9ed739e31ce3781a6b343bb1fcf47b6ad5c3e8e73e24755c7510b0eeb39e34721c51d6fedeafe29d6de70e3866d12a7f373fec907a80c259ceaf342e0056c56b23cccde8cacc7edf3c5aa132118b7f5f3bc33a47c064c4b8785ac420fd52f113326bccf0effad3ceb171207809a16d17abfeae37cda8a367078288f618edc14759fce7ec36e2d65451d73f51659cae654ad74e9a569695c87e2087e49919db430524f3055ce640f07af05cb1cc872a1a72b4f67d3ae0ebf89b83b7b5fae82e8a9e9d2f4f9385de1173edc20e64e8ae8e4888d7a0fd3322c5bf9b6dfc1ff5df9910d1eebbf92808a0dc53ef2f080937955fad404711158934127c2ed5bf073c09c3a6a3567d52045f0867efeecb05ccbb2c57c775af5e9eb9bd250ce2f3675203ed36a41129a914effd48e027ece3422a658a4cb8946cba76878ef2d718f39889b7f589b7471b3d0f76bd7b17e8f31c8a5a024bb407997b60bf2f1cb907cca5ebe531dadf0480532e30d175cc5a915a376f63d42d342df5aba6abef04525c1c9340c495056b5eae3eec879b7309790c7591d28d34a2a4e07d2695814461cee52da3dd1a1c9632007144071469c8451c3795e6e6f7b6b770c434b2f94b71dd78c4db589a998a4c0642cf5d7fa83edacd963801cf2352dcf6904a5b1cace9c7cb13b9b1d655f3efd00e96f890f6ba685e09ae01f9985a09638d8b785c38307581f91766dfc475da8d4750d58e9ad23b607f77179279d5cd507b1ff5014682e4998c1dcd737a596d14de74296800ca09f4e62400fd1fc4e6887b19acb2b64856e61540328260741f824da11acd614e41283df63a74ba9a2ffb8471fb31b977cc31ba6193e6689780b4e695fae018ae83377bafcd1819047addc93ee1bf286a8e0476884661b2dc16ca6392b5e355d67cdc53d22c550f852db77cee20b59cc9cfe430415eba580020841cd8c7c792d0e12d20f1dd24db815aea79cc082712bcb9584fa362d6d6f28a852136542b03ecdff523c28a8f67422db30dc5585397960022279320ee0606293147688aad8248972d15ea084c2deb88b84e2e1ddd291095ab642da206567e9bf9dd7ee82a29bf5b8ff3ae0ee419a461d328ca088a888200c6fe1da76625feb4dfc468e104652e3172e115f46e70ad7c33d379e22687f6a9a304b812bcf747cd8765ce08dcbbbf80ec46c3807a9375fd5394c9d0f08d698b4bebe49a90f10d9e8f04eb61e9fcbe43885d12290996c63639710ba1ddd37f008624b154df42c2186ada111f08ab0bacb96900d5fef61e978c51f1858cfc496f0693485ce39c2ac33d2e3969389d90e5593f328c13c1f17b80444cf481ce5f75cd1352ccbc295bd4891b4a41d581a316f0c8b2778f0b03e7362bcc26597d5f097235e8588ffbc6f06c9f9461cb5d10a275b3f9205490abe7a658dce9ce0f502ec5d1f30524e260ecfafd554286a56f2dcd414a149abd0dee5f2e8f77339b07371f6b4c48a76e65aba4a38549b0c9634f97feffeccab902f5442920858eed2df9452c93ec4a61607e8ac9cc09d8e1f054b25106b2aa1700aa5a12de2a400d30417903aca244ef6d0244a46a586ac2c9c90bc203761365bf5d1aaefaeca76ce057d0a52a85a36303da14ae9b73a2a8dd74e7aa24af73a4284b948387c4d55102f2c2f99c83357215a1e42e6cbfe7da3d71acfdcdbd177ecc2647ae296a23af69c1a0bbd219f4aa42a561153f2c0d2f5296f07ce16be6c1a3389dc8fd0a693f10a88d790e142a6c21ce4ac9e0af7b2ffa3b5c45623d6715297e6c5ac04afd952cf5d2b612b37855b02f037f1fa47c9ff07e4fb7ae17e0a53c4b65c6057c54435fc77c70a321ea8c48920f9682ba7b207afc5be2f5dcb0e99c18b869fbd8e146c985762a1eedf3d1e2343cadb4ce08d6855b0f2f34df1936ea19ccb8e7a932e9769cb9e0f40c0828b2fa88d8fa08540068c034271291bce951412b0eacf5e0ecc38fc828696a9c12199f228390fe52d69d5339e59a98f651df36ae8e90c1fb985180799fbce0a6ba71afb1628c647f95d1ee38867a1616ab706935aefe5c4d5066895d90975eae241d5b2a33101366e1f2f21eb3e5dcafbbe17c166db71c008d30d8baa1d0c1aea9da0d13afe805b675ecca118d4e0d0b4903ae203c4e6dacc59e00cfa5a146d991d866aca5c3f9e88d7b8634054326756ad131735073a172db15be92a1846b413b7ac666b008dbfef859508f2fe8332ced747ebedcbcdb38da29ec32443a85d777da08b84dcac736f1e93f396f4b737d9eb8898c199782dd59054a2c023459c17922e51621fb6e4ea11643dd03f48eca1516122817502ea35b38882b8170b9ff2194f5e4b0585cbe443c5b8ec71434239f075ec943081eeb80d0e37fcdd2e4fa57cf69007a9769a2eced04d27f5166f7a765ccc28f8dcc71afd64af2e529bf0684aeb50da006691f161a714b6007abc36e82370a2420b77f4739c2984938893fb395f62ab2e15ac5dd011882de514465d6f56e919b73be57b868afc4ad11838021eae8dc8cfb3647e9364bfe9c62b8c4a5b72015d610e7a8524e1c42071f38d0b7103347b27c80d1c571053a730c6a2ce474188e64ba721a0fa1e6c99e44139f4ebcbf489f8c380a331686319581a29a01f546627997c75c63e7bbf64c23c4c92ecdbc08acbd1322ced75402da1a15fffec588ac1c9e50b1ae6993b48025de1b12a726a8abd2cc4f1d57936b215d21a39c3a4d5fe08939a388c9b386acb5080505d3440c7d1110f570dbdf13b4adeb1ae5719c22e723ca521988a6e4c68b598fa9a2eda5bd97e1cdda700b720476e5a857c6d9c4b995e755e3a6e299b5caa4bedd0da5ba9a23738d1d9b72a832e22fdb1eea4384ba73ddf2165d7ab83fbff8ffd786a6d01d00f25328a7a0353ec4282ef08a1f97dbe94886ae7394dc95fb11dde101e25425ea77c89b446dcf27e4cef3b23327a0ffcf7c0d029d2ba70b34ba1406f288c7776970e807d9b27417ab4f5ca3fcdcfb960c38fda933e52bd2db5b347267a2ec26728055d7e91cc03972992e9a5f410c7b4d30ef378c69f586455b507ac52b38b4f79d480afef9c29cb451cc9090660364860ba779098ad7a6a735987ea5f39a29a8bf2b8cc70323d12032a6be8f605ea300ef6afabb07e1480e6e653dca87bd1d56726c685c65aad955566fa6bccb05f6ec3a3c05629c8ce2be76063d4daa891c16542b923e34aaaeeaee43c63cd6e8c3b90ef35d001a407a17dd86aa88eabe1c2316c9df1b2ff909a6b69f64a349355eea71a22a7299865efdcaacdca697c09d44085fa11fbff4e341be7f5f190b0774dd6abe015edcb707b1238289a85dd98259945a0e1a200af9509a91097584243b35c12950b69e60859b2b70468cd969f6cc542234f531828d8b9f01eb937d79fd0d1ad2a4f42c24df7243503fcda7f489fc1ef5613dc7dd01f07240c5925490f22612ace9f1c79707b053a0884fd9058f9c913ebdff3b1f594841368ec5086c32f104221247bd4f4695e960747a970c1cb722be414fbde2fc5d0d6d2ac576a45c6d0820d5fb11e6cfb7716817cd6476d8c23b589499cebeea046113418aac8b1355b9dcf545c4e15fb6eff4160b4954f9d4af7fcf3d14cfed6632c2f746aad2e1e6752f518600f68563356042524806cc40b74c1335e59dfc44a62273b66a5155859aec0584b874bf87ff9c8d05d4a52ae86b875a74070f9a378c426ccd2d184d5f4babb789d25fc9f14f7118af45a1242d88e9d0f1ecdc25adc91cfb6523b4523f530295c8d1c77d9e688102cee7a26374d6b61611c35308ae66f584666ea6c3060921938de5d312bc0479334e5acbf9630e19869c65de43560cf79c654a6f12c89a3a72a32b0dfab57cb49e31b12fdeb247dc0c2f08f7c1dfc483c0b587135a4da65a4aab44432857ae883356fd2b9bf9b6121fcfbeae9a218401f97dd0c9fce369b4621f7174651f9cdfb83525d633d38045a4f8689601925cae837669ec54e83ea93bd61f5cdd5bcc6f8d7f04c7285453de8cb730d94bdbd2dc1c0d573ef3077cbcafafc2c85c734be36f1d408667a9b12c2a392f665eadcbc5d964ed975f39dbc98875b4822677bd36cb568b493b64292bc7e783dc058091b31461e5a48b96d0b35c6a774bdaef5aa6c29225c1f95b9ef52154bcb5083c1ec89b0dd55b80cd33d714f3c9cb042b30ef9ee140f1ff5860183bb397de23ac4d0deeb7729500bb8c5fd025fdeb796ec7528476ce413c67eace2fa426b8999ab668471baaaf3df985ebd13853e86a0530035167a9100f78430898128946349b98731a87e6ef52aea6a004e666c55eeec10d50d28360658d2226b49d3ecbbca6552ba4c1a157c838f6938d6248ae2cebf3d1281b8286a477a680f8f8b91bb9ebc9f73403236135317529da9e9d0091bc44eaa981832f002e5f11567d6dadccbd868c6e1ba953db2086a671ef1a8e1d4ea2e1d022b8e66b0eb8aa069c44a1e8583ab57d76296c30b1947ab2c7dd09403be1d3055d68b2e443e2e3e94108748f8111cd5d2de37b469347a47adac97c3d07d9abcd6fb3ff44eb558d4b1b026302906e9dbccbfa8d504b0318a20e1261d0721e66bd345896c389a45d50bd022298438bc2b8a72a208190698096016ba357021cb9362ebe0e2313af9cfc948c5b97d0fab46ac00d6d16199ad6957de59b023914cbc27552e05260c82d3d6ac5a91c6ae65e739a42952800c894cadfab3980395bf35c56f0800a0f1502c2965a0a8ef06fb386af2fdcd44bd1f12c3d3ce2726773fc4d312fbf5aeb4494f8994c382216bd3d67794a7f1369e3c130c7f1d2cc699d3fc193f1dc275c662b9fd9861c217afc26583a0f0dcfaab8f38125f922fdb5c7c735823e52c183902032e3a129e41317fee05d9b5bb961009193ac0964e7da6480eb9db34b24f7bf72dda940282a08cdb310bb0613381fb4de02009d28dac0c73af4471535f17977cbff25ea18e2612633c7a2d8e42d943c00c7c708dc12f3ea4e54de69247c20858bd453b674e076cbb7c60c8a3edc56ebc38fc65f9187c8bf9996aab10dc67732d5892c5c084850460282340a539bdfc098523a553f18e3bc6ad541dc7efd13cef838f09844d336a1a30e06062d798ffae63b167fc40fbef4c01a30c03e5517536903b583707d0adb8e843421816e01", 0x1000, 0x2}], 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:29:37 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x1000000}}], 0x1, 0x0) 17:29:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:29:37 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) 17:29:37 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:29:37 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740), 0x0, 0x0) 17:29:37 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x2000000}}], 0x1, 0x0) 17:29:37 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r0, &(0x7f00000007c0)=0x800000000, 0xffffffffffffffff, 0x0, 0x1f, 0x9) [ 570.376331] FAULT_INJECTION: forcing a failure. [ 570.376331] name failslab, interval 1, probability 0, space 0, times 0 [ 570.377695] CPU: 0 PID: 5821 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 570.378528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 570.379527] Call Trace: [ 570.379847] dump_stack+0x107/0x167 [ 570.380285] should_fail.cold+0x5/0xa [ 570.380748] should_failslab+0x5/0x20 [ 570.381207] __kmalloc_track_caller+0x79/0x370 [ 570.381767] ? v9fs_session_init+0xa7/0x1680 [ 570.382298] ? kernel_text_address+0xf2/0x120 [ 570.382845] kstrdup+0x36/0x70 [ 570.383230] v9fs_session_init+0xa7/0x1680 [ 570.383741] ? lock_release+0x680/0x680 [ 570.384219] ? find_held_lock+0x2c/0x110 [ 570.384718] ? kmem_cache_alloc_trace+0x151/0x320 [ 570.385296] ? v9fs_show_options+0x690/0x690 [ 570.385844] ? trace_hardirqs_on+0x5b/0x180 [ 570.386373] ? kasan_unpoison_shadow+0x33/0x50 [ 570.386924] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 570.387545] v9fs_mount+0x79/0x8f0 [ 570.387979] ? v9fs_write_inode+0x60/0x60 [ 570.388479] legacy_get_tree+0x105/0x220 [ 570.388980] vfs_get_tree+0x8e/0x300 [ 570.389443] path_mount+0x1331/0x21c0 [ 570.389888] ? strncpy_from_user+0x9e/0x470 [ 570.390411] ? finish_automount+0xa90/0xa90 [ 570.390932] ? getname_flags.part.0+0x1dd/0x4f0 [ 570.391491] ? _copy_from_user+0xfb/0x1b0 [ 570.392000] __x64_sys_mount+0x282/0x300 [ 570.392491] ? copy_mnt_ns+0xa00/0xa00 [ 570.392967] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 570.393609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 570.394233] do_syscall_64+0x33/0x40 [ 570.394685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 570.395306] RIP: 0033:0x7fbd09823b19 [ 570.395760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 570.397981] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 570.398890] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 570.399747] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 570.400600] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 570.401461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.402316] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 570.403996] loop2: detected capacity change from 0 to 50176 17:29:37 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:29:37 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:29:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 17) [ 570.666154] FAULT_INJECTION: forcing a failure. [ 570.666154] name failslab, interval 1, probability 0, space 0, times 0 [ 570.669308] CPU: 1 PID: 5837 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 570.671211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 570.673504] Call Trace: [ 570.674232] dump_stack+0x107/0x167 [ 570.675063] should_fail.cold+0x5/0xa [ 570.676123] ? create_object.isra.0+0x3a/0xa20 [ 570.677173] should_failslab+0x5/0x20 [ 570.678234] kmem_cache_alloc+0x5b/0x310 [ 570.679165] create_object.isra.0+0x3a/0xa20 [ 570.680376] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 570.681569] __kmalloc_track_caller+0x177/0x370 [ 570.682838] ? v9fs_session_init+0xa7/0x1680 [ 570.683840] ? kernel_text_address+0xf2/0x120 [ 570.685060] kstrdup+0x36/0x70 [ 570.685808] v9fs_session_init+0xa7/0x1680 [ 570.686960] ? lock_release+0x680/0x680 [ 570.687868] ? find_held_lock+0x2c/0x110 [ 570.688992] ? kmem_cache_alloc_trace+0x151/0x320 [ 570.690093] ? v9fs_show_options+0x690/0x690 [ 570.691292] ? trace_hardirqs_on+0x5b/0x180 [ 570.692282] ? kasan_unpoison_shadow+0x33/0x50 [ 570.693522] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 570.694689] v9fs_mount+0x79/0x8f0 [ 570.695671] ? v9fs_write_inode+0x60/0x60 [ 570.696616] legacy_get_tree+0x105/0x220 [ 570.697755] vfs_get_tree+0x8e/0x300 [ 570.698600] path_mount+0x1331/0x21c0 [ 570.699637] ? strncpy_from_user+0x9e/0x470 [ 570.700621] ? finish_automount+0xa90/0xa90 [ 570.701803] ? getname_flags.part.0+0x1dd/0x4f0 [ 570.702854] ? _copy_from_user+0xfb/0x1b0 [ 570.703984] __x64_sys_mount+0x282/0x300 [ 570.704905] ? copy_mnt_ns+0xa00/0xa00 [ 570.705978] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 570.707174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 570.708578] do_syscall_64+0x33/0x40 [ 570.709452] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 570.710857] RIP: 0033:0x7fbd09823b19 [ 570.711701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 570.716743] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 570.718491] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 570.720106] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 570.721732] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 570.723345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.724961] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:29:50 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 18) 17:29:50 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:29:50 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r0, &(0x7f00000007c0)=0x800000000, 0xffffffffffffffff, 0x0, 0x1f, 0x9) 17:29:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:29:50 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x11000000}}], 0x1, 0x0) 17:29:50 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740), 0x0, 0x0) 17:29:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:29:50 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:29:51 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:29:51 executing program 5: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r0, &(0x7f00000007c0)=0x800000000, 0xffffffffffffffff, 0x0, 0x1f, 0x9) [ 584.164402] FAULT_INJECTION: forcing a failure. [ 584.164402] name failslab, interval 1, probability 0, space 0, times 0 [ 584.166775] CPU: 0 PID: 5858 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 584.168211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 584.169943] Call Trace: [ 584.170497] dump_stack+0x107/0x167 [ 584.171258] should_fail.cold+0x5/0xa [ 584.172060] should_failslab+0x5/0x20 [ 584.172854] __kmalloc_track_caller+0x79/0x370 [ 584.173810] ? v9fs_session_init+0xe9/0x1680 [ 584.174727] ? kernel_text_address+0xf2/0x120 [ 584.175665] kstrdup+0x36/0x70 [ 584.176337] v9fs_session_init+0xe9/0x1680 [ 584.177221] ? lock_release+0x680/0x680 [ 584.178061] ? find_held_lock+0x2c/0x110 [ 584.178916] ? kmem_cache_alloc_trace+0x151/0x320 [ 584.179920] ? v9fs_show_options+0x690/0x690 [ 584.180850] ? trace_hardirqs_on+0x5b/0x180 [ 584.181760] ? kasan_unpoison_shadow+0x33/0x50 [ 584.182713] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 584.183772] v9fs_mount+0x79/0x8f0 [ 584.184514] ? v9fs_write_inode+0x60/0x60 [ 584.185376] legacy_get_tree+0x105/0x220 [ 584.186334] vfs_get_tree+0x8e/0x300 [ 584.187236] path_mount+0x1331/0x21c0 [ 584.188101] ? strncpy_from_user+0x9e/0x470 [ 584.189056] ? finish_automount+0xa90/0xa90 [ 584.190115] ? getname_flags.part.0+0x1dd/0x4f0 [ 584.191243] ? _copy_from_user+0xfb/0x1b0 [ 584.192256] __x64_sys_mount+0x282/0x300 [ 584.193240] ? copy_mnt_ns+0xa00/0xa00 [ 584.194302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 17:29:51 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 584.195649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 584.197016] do_syscall_64+0x33/0x40 [ 584.197916] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 584.199155] RIP: 0033:0x7fbd09823b19 [ 584.200039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 584.204527] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 584.206388] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 584.208067] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 584.209568] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 584.211062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.212550] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:29:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 19) 17:29:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0xffffff7f}}], 0x1, 0x0) 17:29:51 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={[{'}:^'}, {'#:[!\\\x00'}], [{@measure}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '/\xb4$'}}, {@fsname}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x37, 0x63, 0x61, 0x34, 0x63], 0x2d, [0x63, 0x37, 0x31, 0x49], 0x2d, [0x36, 0x35, 0x36, 0x31], 0x2d, [0xbdfb0d6722a3767a, 0x63, 0x32, 0x62], 0x2d, [0x36, 0x63, 0x38, 0x62, 0x62, 0x30, 0x35, 0x61]}}}, {@permit_directio}]}) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:29:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:29:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:29:51 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) 17:29:51 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 584.526864] FAULT_INJECTION: forcing a failure. [ 584.526864] name failslab, interval 1, probability 0, space 0, times 0 [ 584.528360] CPU: 1 PID: 5878 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 584.529239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 584.530329] Call Trace: [ 584.530684] dump_stack+0x107/0x167 [ 584.531152] should_fail.cold+0x5/0xa [ 584.531646] ? create_object.isra.0+0x3a/0xa20 [ 584.532242] should_failslab+0x5/0x20 [ 584.532740] kmem_cache_alloc+0x5b/0x310 [ 584.533271] create_object.isra.0+0x3a/0xa20 [ 584.533858] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 584.534533] __kmalloc_track_caller+0x177/0x370 [ 584.535140] ? v9fs_session_init+0xe9/0x1680 [ 584.535880] ? kernel_text_address+0xf2/0x120 [ 584.536474] kstrdup+0x36/0x70 [ 584.536895] v9fs_session_init+0xe9/0x1680 [ 584.537448] ? lock_release+0x680/0x680 [ 584.537975] ? find_held_lock+0x2c/0x110 [ 584.538584] ? kmem_cache_alloc_trace+0x151/0x320 [ 584.539251] ? v9fs_show_options+0x690/0x690 [ 584.539910] ? trace_hardirqs_on+0x5b/0x180 [ 584.540519] ? kasan_unpoison_shadow+0x33/0x50 [ 584.541147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 584.541909] v9fs_mount+0x79/0x8f0 [ 584.542366] ? v9fs_write_inode+0x60/0x60 [ 584.542893] legacy_get_tree+0x105/0x220 [ 584.543416] vfs_get_tree+0x8e/0x300 [ 584.543896] path_mount+0x1331/0x21c0 [ 584.544389] ? strncpy_from_user+0x9e/0x470 [ 584.544948] ? finish_automount+0xa90/0xa90 [ 584.545620] ? getname_flags.part.0+0x1dd/0x4f0 [ 584.546325] ? _copy_from_user+0xfb/0x1b0 [ 584.546866] __x64_sys_mount+0x282/0x300 [ 584.547392] ? copy_mnt_ns+0xa00/0xa00 [ 584.547900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 584.548591] ? syscall_enter_from_user_mode+0x1d/0x50 [ 584.549253] do_syscall_64+0x33/0x40 [ 584.549744] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 584.550401] RIP: 0033:0x7fbd09823b19 [ 584.550874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 584.553359] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 584.554356] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 584.555262] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 584.556164] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 584.557071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.557994] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:30:06 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:30:06 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x8000000000000}}], 0x1, 0x0) 17:30:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:30:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:30:06 executing program 5: pipe2(0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r0, &(0x7f00000007c0)=0x800000000, 0xffffffffffffffff, 0x0, 0x1f, 0x9) 17:30:06 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:30:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 20) 17:30:06 executing program 4: r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:30:07 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x40030000000000}}], 0x1, 0x0) [ 600.265125] FAULT_INJECTION: forcing a failure. [ 600.265125] name failslab, interval 1, probability 0, space 0, times 0 [ 600.266484] CPU: 1 PID: 5904 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 600.267279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 600.268242] Call Trace: [ 600.268553] dump_stack+0x107/0x167 [ 600.268978] should_fail.cold+0x5/0xa [ 600.269424] ? p9_client_create+0xaf/0x1230 [ 600.269942] should_failslab+0x5/0x20 [ 600.270390] kmem_cache_alloc_trace+0x55/0x320 [ 600.270918] ? find_held_lock+0x2c/0x110 [ 600.271401] p9_client_create+0xaf/0x1230 [ 600.271881] ? lock_downgrade+0x6d0/0x6d0 [ 600.272376] ? p9_client_flush+0x430/0x430 [ 600.272864] ? trace_hardirqs_on+0x5b/0x180 [ 600.273368] ? lockdep_init_map_type+0x2c7/0x780 [ 600.273926] ? __raw_spin_lock_init+0x36/0x110 [ 600.274461] v9fs_session_init+0x1dd/0x1680 [ 600.274962] ? lock_release+0x680/0x680 [ 600.275435] ? kmem_cache_alloc_trace+0x151/0x320 [ 600.275992] ? v9fs_show_options+0x690/0x690 [ 600.276509] ? trace_hardirqs_on+0x5b/0x180 [ 600.277008] ? kasan_unpoison_shadow+0x33/0x50 [ 600.277538] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 600.278133] v9fs_mount+0x79/0x8f0 [ 600.278546] ? v9fs_write_inode+0x60/0x60 [ 600.279029] legacy_get_tree+0x105/0x220 [ 600.279504] vfs_get_tree+0x8e/0x300 [ 600.279935] path_mount+0x1331/0x21c0 [ 600.280381] ? strncpy_from_user+0x9e/0x470 [ 600.280883] ? finish_automount+0xa90/0xa90 [ 600.281383] ? getname_flags.part.0+0x1dd/0x4f0 17:30:07 executing program 5: pipe2(0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r0, &(0x7f00000007c0)=0x800000000, 0xffffffffffffffff, 0x0, 0x1f, 0x9) [ 600.281927] ? _copy_from_user+0xfb/0x1b0 [ 600.282629] __x64_sys_mount+0x282/0x300 [ 600.283094] ? copy_mnt_ns+0xa00/0xa00 [ 600.283543] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 600.284147] ? syscall_enter_from_user_mode+0x1d/0x50 [ 600.284741] do_syscall_64+0x33/0x40 [ 600.285177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 600.285781] RIP: 0033:0x7fbd09823b19 [ 600.286208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.288909] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 600.289868] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 600.290886] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 600.291943] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 600.292778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.293831] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:30:07 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:30:07 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)}}], 0x1, 0x0) 17:30:07 executing program 4: r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:30:07 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x100000000000000}}], 0x1, 0x0) 17:30:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 21) 17:30:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:30:07 executing program 5: pipe2(0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r0, &(0x7f00000007c0)=0x800000000, 0xffffffffffffffff, 0x0, 0x1f, 0x9) 17:30:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 600.593547] FAULT_INJECTION: forcing a failure. [ 600.593547] name failslab, interval 1, probability 0, space 0, times 0 [ 600.596157] CPU: 0 PID: 5931 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 600.597690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 600.599481] Call Trace: [ 600.600058] dump_stack+0x107/0x167 [ 600.600854] should_fail.cold+0x5/0xa [ 600.601691] ? create_object.isra.0+0x3a/0xa20 [ 600.602699] should_failslab+0x5/0x20 [ 600.603527] kmem_cache_alloc+0x5b/0x310 [ 600.604411] ? kernel_text_address+0xf2/0x120 [ 600.605397] create_object.isra.0+0x3a/0xa20 [ 600.606364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 600.607473] kmem_cache_alloc_trace+0x151/0x320 [ 600.608488] ? find_held_lock+0x2c/0x110 [ 600.609385] p9_client_create+0xaf/0x1230 [ 600.610299] ? lock_downgrade+0x6d0/0x6d0 [ 600.611209] ? p9_client_flush+0x430/0x430 [ 600.612132] ? trace_hardirqs_on+0x5b/0x180 [ 600.613072] ? lockdep_init_map_type+0x2c7/0x780 [ 600.614115] ? __raw_spin_lock_init+0x36/0x110 [ 600.615123] v9fs_session_init+0x1dd/0x1680 [ 600.616063] ? lock_release+0x680/0x680 [ 600.616938] ? kmem_cache_alloc_trace+0x151/0x320 [ 600.618001] ? v9fs_show_options+0x690/0x690 [ 600.618969] ? trace_hardirqs_on+0x5b/0x180 [ 600.619909] ? kasan_unpoison_shadow+0x33/0x50 [ 600.620902] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 600.622023] v9fs_mount+0x79/0x8f0 [ 600.622798] ? v9fs_write_inode+0x60/0x60 [ 600.623703] legacy_get_tree+0x105/0x220 [ 600.624590] vfs_get_tree+0x8e/0x300 [ 600.625398] path_mount+0x1331/0x21c0 [ 600.626240] ? strncpy_from_user+0x9e/0x470 [ 600.627182] ? finish_automount+0xa90/0xa90 [ 600.628120] ? getname_flags.part.0+0x1dd/0x4f0 [ 600.629131] ? _copy_from_user+0xfb/0x1b0 [ 600.630051] __x64_sys_mount+0x282/0x300 [ 600.630932] ? copy_mnt_ns+0xa00/0xa00 [ 600.631784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 600.632908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 600.634003] do_syscall_64+0x33/0x40 [ 600.634782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 600.635863] RIP: 0033:0x7fbd09823b19 [ 600.636645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.640517] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 600.642129] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 600.643632] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 600.645138] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 600.646646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.648152] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:30:20 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 22) 17:30:20 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:30:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:30:20 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(0x0, 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) 17:30:20 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)}}], 0x1, 0x0) 17:30:20 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x200000000000000}}], 0x1, 0x0) 17:30:20 executing program 4: r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:30:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 613.694700] FAULT_INJECTION: forcing a failure. [ 613.694700] name failslab, interval 1, probability 0, space 0, times 0 [ 613.697863] CPU: 0 PID: 5949 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 613.699698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 613.701825] Call Trace: [ 613.702533] dump_stack+0x107/0x167 [ 613.703478] should_fail.cold+0x5/0xa [ 613.704478] should_failslab+0x5/0x20 [ 613.705462] __kmalloc_track_caller+0x79/0x370 [ 613.706636] ? p9_client_create+0x41d/0x1230 [ 613.707765] kstrdup+0x36/0x70 [ 613.708587] p9_client_create+0x41d/0x1230 [ 613.709666] ? lock_downgrade+0x6d0/0x6d0 [ 613.710744] ? p9_client_flush+0x430/0x430 [ 613.711822] ? trace_hardirqs_on+0x5b/0x180 [ 613.712923] ? lockdep_init_map_type+0x2c7/0x780 [ 613.714145] ? __raw_spin_lock_init+0x36/0x110 [ 613.715324] v9fs_session_init+0x1dd/0x1680 [ 613.716422] ? lock_release+0x680/0x680 [ 613.717452] ? kmem_cache_alloc_trace+0x151/0x320 [ 613.718709] ? v9fs_show_options+0x690/0x690 [ 613.719843] ? trace_hardirqs_on+0x5b/0x180 [ 613.720940] ? kasan_unpoison_shadow+0x33/0x50 [ 613.722115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 613.723238] v9fs_mount+0x79/0x8f0 [ 613.723991] ? v9fs_write_inode+0x60/0x60 [ 613.724857] legacy_get_tree+0x105/0x220 [ 613.725723] vfs_get_tree+0x8e/0x300 [ 613.726517] path_mount+0x1331/0x21c0 [ 613.727327] ? strncpy_from_user+0x9e/0x470 [ 613.728227] ? finish_automount+0xa90/0xa90 [ 613.729134] ? getname_flags.part.0+0x1dd/0x4f0 [ 613.730124] ? _copy_from_user+0xfb/0x1b0 [ 613.731014] __x64_sys_mount+0x282/0x300 [ 613.731880] ? copy_mnt_ns+0xa00/0xa00 [ 613.732712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 613.733827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 613.734948] do_syscall_64+0x33/0x40 [ 613.735741] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 613.736835] RIP: 0033:0x7fbd09823b19 [ 613.737627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 613.741584] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 613.743223] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 613.744744] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 613.746282] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 613.747808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 613.749337] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:30:20 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(0x0, 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) 17:30:20 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)}}], 0x1, 0x0) 17:30:20 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:30:20 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:30:20 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x1100000000000000}}], 0x1, 0x0) 17:30:20 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 23) 17:30:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 614.136891] FAULT_INJECTION: forcing a failure. [ 614.136891] name failslab, interval 1, probability 0, space 0, times 0 [ 614.138287] CPU: 1 PID: 5975 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 614.139118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 614.140131] Call Trace: [ 614.140467] dump_stack+0x107/0x167 [ 614.140928] should_fail.cold+0x5/0xa [ 614.141417] ? create_object.isra.0+0x3a/0xa20 [ 614.141999] should_failslab+0x5/0x20 [ 614.142464] kmem_cache_alloc+0x5b/0x310 [ 614.142957] ? lock_downgrade+0x6d0/0x6d0 [ 614.143445] create_object.isra.0+0x3a/0xa20 [ 614.143971] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 614.144566] __kmalloc_track_caller+0x177/0x370 [ 614.145119] ? p9_client_create+0x41d/0x1230 [ 614.145642] kstrdup+0x36/0x70 [ 614.146028] p9_client_create+0x41d/0x1230 [ 614.146521] ? lock_downgrade+0x6d0/0x6d0 [ 614.146991] ? p9_client_flush+0x430/0x430 [ 614.147491] ? trace_hardirqs_on+0x5b/0x180 [ 614.147984] ? lockdep_init_map_type+0x2c7/0x780 [ 614.148541] ? __raw_spin_lock_init+0x36/0x110 [ 614.149079] v9fs_session_init+0x1dd/0x1680 [ 614.149586] ? lock_release+0x680/0x680 [ 614.150047] ? kmem_cache_alloc_trace+0x151/0x320 [ 614.150605] ? v9fs_show_options+0x690/0x690 [ 614.151124] ? trace_hardirqs_on+0x5b/0x180 [ 614.151610] ? kasan_unpoison_shadow+0x33/0x50 [ 614.152145] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 614.152727] v9fs_mount+0x79/0x8f0 [ 614.153147] ? v9fs_write_inode+0x60/0x60 [ 614.153630] legacy_get_tree+0x105/0x220 [ 614.154118] vfs_get_tree+0x8e/0x300 [ 614.154540] path_mount+0x1331/0x21c0 [ 614.154990] ? strncpy_from_user+0x9e/0x470 [ 614.155480] ? finish_automount+0xa90/0xa90 [ 614.155966] ? getname_flags.part.0+0x1dd/0x4f0 [ 614.156510] ? _copy_from_user+0xfb/0x1b0 [ 614.156998] __x64_sys_mount+0x282/0x300 [ 614.157461] ? copy_mnt_ns+0xa00/0xa00 [ 614.157927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 614.158544] ? syscall_enter_from_user_mode+0x1d/0x50 [ 614.159131] do_syscall_64+0x33/0x40 [ 614.159568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 614.160145] RIP: 0033:0x7fbd09823b19 [ 614.160579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 614.162657] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 614.163555] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 614.164403] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 614.165240] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 614.166083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 614.166916] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:30:35 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(0x0, 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) 17:30:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:30:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) 17:30:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 24) 17:30:35 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:30:35 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:30:35 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0xffffff7f00000000}}], 0x1, 0x0) 17:30:35 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{0x0}], 0x1}}], 0x1, 0x0) 17:30:35 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{0x0}], 0x1}}], 0x1, 0x0) [ 628.895345] FAULT_INJECTION: forcing a failure. [ 628.895345] name failslab, interval 1, probability 0, space 0, times 0 [ 628.897951] CPU: 1 PID: 5996 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 628.899516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 628.901404] Call Trace: [ 628.902005] dump_stack+0x107/0x167 [ 628.902846] should_fail.cold+0x5/0xa [ 628.903727] should_failslab+0x5/0x20 [ 628.904593] __kmalloc_track_caller+0x79/0x370 [ 628.905629] ? p9_client_create+0x51e/0x1230 [ 628.906645] kmemdup_nul+0x2d/0xa0 [ 628.907453] p9_client_create+0x51e/0x1230 [ 628.908422] ? p9_client_flush+0x430/0x430 [ 628.909383] ? trace_hardirqs_on+0x5b/0x180 [ 628.910367] ? lockdep_init_map_type+0x2c7/0x780 [ 628.911446] ? __raw_spin_lock_init+0x36/0x110 [ 628.912479] v9fs_session_init+0x1dd/0x1680 [ 628.913458] ? lock_release+0x680/0x680 [ 628.914373] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 628.915594] ? trace_hardirqs_on+0x5b/0x180 [ 628.916562] ? v9fs_show_options+0x690/0x690 [ 628.917572] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 628.918735] ? kasan_unpoison_shadow+0x33/0x50 17:30:35 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() [ 628.919771] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 628.921088] v9fs_mount+0x79/0x8f0 [ 628.921885] ? v9fs_write_inode+0x60/0x60 [ 628.922828] legacy_get_tree+0x105/0x220 [ 628.923743] vfs_get_tree+0x8e/0x300 [ 628.924576] path_mount+0x1331/0x21c0 [ 628.925436] ? strncpy_from_user+0x9e/0x470 [ 628.926410] ? finish_automount+0xa90/0xa90 [ 628.927383] ? getname_flags.part.0+0x1dd/0x4f0 [ 628.928428] ? _copy_from_user+0xfb/0x1b0 17:30:35 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(0xffffffffffffffff, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) [ 628.929364] __x64_sys_mount+0x282/0x300 [ 628.930389] ? copy_mnt_ns+0xa00/0xa00 [ 628.931272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 628.932441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 628.933623] do_syscall_64+0x33/0x40 [ 628.934470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 628.935617] RIP: 0033:0x7fbd09823b19 [ 628.936456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:30:35 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x0) [ 628.940976] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 628.942899] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 628.944606] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 628.946338] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 628.948044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 628.949891] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:30:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) 17:30:35 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:30:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:30:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 25) 17:30:35 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{0x0}], 0x1}}], 0x1, 0x0) 17:30:35 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2}}], 0x1, 0x0) 17:30:35 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(0xffffffffffffffff, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) [ 629.159325] FAULT_INJECTION: forcing a failure. [ 629.159325] name failslab, interval 1, probability 0, space 0, times 0 [ 629.161038] CPU: 0 PID: 6018 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 629.162046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 629.163211] Call Trace: [ 629.163584] dump_stack+0x107/0x167 [ 629.164097] should_fail.cold+0x5/0xa [ 629.164634] should_failslab+0x5/0x20 [ 629.165167] __kmalloc_track_caller+0x79/0x370 [ 629.165809] ? p9_client_create+0x51e/0x1230 [ 629.166436] kmemdup_nul+0x2d/0xa0 [ 629.166932] p9_client_create+0x51e/0x1230 [ 629.167537] ? p9_client_flush+0x430/0x430 [ 629.168128] ? trace_hardirqs_on+0x5b/0x180 [ 629.168740] ? lockdep_init_map_type+0x2c7/0x780 [ 629.169397] ? __raw_spin_lock_init+0x36/0x110 [ 629.170042] v9fs_session_init+0x1dd/0x1680 [ 629.170651] ? lock_release+0x680/0x680 [ 629.171208] ? kmem_cache_alloc_trace+0x151/0x320 [ 629.171878] ? v9fs_show_options+0x690/0x690 [ 629.172502] ? trace_hardirqs_on+0x5b/0x180 [ 629.173099] ? kasan_unpoison_shadow+0x33/0x50 [ 629.173735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 629.174459] v9fs_mount+0x79/0x8f0 [ 629.174958] ? v9fs_write_inode+0x60/0x60 [ 629.175530] legacy_get_tree+0x105/0x220 [ 629.176103] vfs_get_tree+0x8e/0x300 [ 629.176622] path_mount+0x1331/0x21c0 [ 629.177160] ? strncpy_from_user+0x9e/0x470 [ 629.177758] ? finish_automount+0xa90/0xa90 [ 629.178367] ? getname_flags.part.0+0x1dd/0x4f0 [ 629.179017] ? _copy_from_user+0xfb/0x1b0 [ 629.179604] __x64_sys_mount+0x282/0x300 [ 629.180168] ? copy_mnt_ns+0xa00/0xa00 [ 629.180712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 629.181442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 629.182172] do_syscall_64+0x33/0x40 [ 629.182687] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 629.183401] RIP: 0033:0x7fbd09823b19 [ 629.183917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 629.186484] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 629.187540] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 629.188531] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 629.189526] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 629.190433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 629.191195] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:30:52 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(0xffffffffffffffff, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x9) 17:30:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x0, 0x8}}], 0x1, 0x0) 17:30:52 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:30:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) 17:30:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 26) 17:30:52 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:30:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:30:52 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)}], 0x1}}], 0x1, 0x0) [ 645.468402] FAULT_INJECTION: forcing a failure. [ 645.468402] name failslab, interval 1, probability 0, space 0, times 0 [ 645.471862] CPU: 0 PID: 6046 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 645.473938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 645.476581] Call Trace: [ 645.477399] dump_stack+0x107/0x167 [ 645.478545] should_fail.cold+0x5/0xa [ 645.479647] should_failslab+0x5/0x20 [ 645.480634] __kmalloc_track_caller+0x79/0x370 [ 645.481807] ? parse_opts.part.0+0x8e/0x340 [ 645.482943] kstrdup+0x36/0x70 [ 645.483781] parse_opts.part.0+0x8e/0x340 [ 645.484854] ? p9_fd_show_options+0x1c0/0x1c0 [ 645.486013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 645.487377] ? quarantine_put+0x8b/0x1a0 [ 645.488417] ? trace_hardirqs_on+0x5b/0x180 [ 645.489525] ? kfree+0xd7/0x340 [ 645.490218] p9_fd_create+0x98/0x4a0 [ 645.491174] ? p9_conn_create+0x510/0x510 [ 645.492237] ? p9_client_create+0x798/0x1230 [ 645.493360] ? kfree+0xd7/0x340 [ 645.494205] ? do_raw_spin_unlock+0x4f/0x220 [ 645.495350] p9_client_create+0x7ff/0x1230 [ 645.496440] ? p9_client_flush+0x430/0x430 [ 645.497513] ? trace_hardirqs_on+0x5b/0x180 [ 645.498626] ? lockdep_init_map_type+0x2c7/0x780 [ 645.499842] ? __raw_spin_lock_init+0x36/0x110 [ 645.501039] v9fs_session_init+0x1dd/0x1680 [ 645.502150] ? lock_release+0x680/0x680 [ 645.503200] ? kmem_cache_alloc_trace+0x151/0x320 [ 645.504434] ? v9fs_show_options+0x690/0x690 [ 645.505586] ? trace_hardirqs_on+0x5b/0x180 [ 645.506534] ? kasan_unpoison_shadow+0x33/0x50 [ 645.507690] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 645.508759] v9fs_mount+0x79/0x8f0 [ 645.509660] ? v9fs_write_inode+0x60/0x60 [ 645.510647] legacy_get_tree+0x105/0x220 [ 645.511661] vfs_get_tree+0x8e/0x300 [ 645.512447] path_mount+0x1331/0x21c0 [ 645.513425] ? strncpy_from_user+0x9e/0x470 [ 645.514329] ? finish_automount+0xa90/0xa90 [ 645.515435] ? getname_flags.part.0+0x1dd/0x4f0 [ 645.516417] ? _copy_from_user+0xfb/0x1b0 [ 645.517490] __x64_sys_mount+0x282/0x300 [ 645.518365] ? copy_mnt_ns+0xa00/0xa00 [ 645.519379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 645.520495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 645.521805] do_syscall_64+0x33/0x40 [ 645.522777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 645.523864] RIP: 0033:0x7fbd09823b19 [ 645.524815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 645.529538] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 645.531500] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 645.533335] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 645.535188] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 645.537022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 645.538853] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 645.542420] 9pnet: Insufficient options for proto=fd 17:30:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x0, 0x11}}], 0x1, 0x0) 17:30:52 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, 0x0, r0, 0x0, 0x1f, 0x9) 17:30:52 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)}], 0x1}}], 0x1, 0x0) 17:30:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 27) 17:30:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) 17:30:52 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:30:52 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() [ 645.751027] FAULT_INJECTION: forcing a failure. [ 645.751027] name failslab, interval 1, probability 0, space 0, times 0 [ 645.752456] CPU: 1 PID: 6063 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 645.753318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 645.754361] Call Trace: [ 645.754700] dump_stack+0x107/0x167 [ 645.755162] should_fail.cold+0x5/0xa [ 645.755649] ? create_object.isra.0+0x3a/0xa20 [ 645.756228] should_failslab+0x5/0x20 [ 645.756691] kmem_cache_alloc+0x5b/0x310 [ 645.757176] ? legacy_get_tree+0x105/0x220 [ 645.757682] ? vfs_get_tree+0x8e/0x300 [ 645.758153] create_object.isra.0+0x3a/0xa20 [ 645.758687] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 645.759301] __kmalloc_track_caller+0x177/0x370 [ 645.759857] ? parse_opts.part.0+0x8e/0x340 [ 645.760378] kstrdup+0x36/0x70 [ 645.760764] parse_opts.part.0+0x8e/0x340 [ 645.761264] ? p9_fd_show_options+0x1c0/0x1c0 [ 645.761808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 645.762442] ? quarantine_put+0x8b/0x1a0 [ 645.762930] ? trace_hardirqs_on+0x5b/0x180 [ 645.763451] ? kfree+0xd7/0x340 [ 645.763851] p9_fd_create+0x98/0x4a0 [ 645.764300] ? p9_conn_create+0x510/0x510 [ 645.764802] ? p9_client_create+0x798/0x1230 [ 645.765330] ? kfree+0xd7/0x340 [ 645.765724] ? do_raw_spin_unlock+0x4f/0x220 [ 645.766256] p9_client_create+0x7ff/0x1230 [ 645.766778] ? p9_client_flush+0x430/0x430 [ 645.767286] ? trace_hardirqs_on+0x5b/0x180 [ 645.767806] ? lockdep_init_map_type+0x2c7/0x780 [ 645.768379] ? __raw_spin_lock_init+0x36/0x110 [ 645.768933] v9fs_session_init+0x1dd/0x1680 [ 645.769454] ? lock_release+0x680/0x680 [ 645.769942] ? kmem_cache_alloc_trace+0x151/0x320 [ 645.770530] ? v9fs_show_options+0x690/0x690 [ 645.771067] ? trace_hardirqs_on+0x5b/0x180 [ 645.771586] ? kasan_unpoison_shadow+0x33/0x50 [ 645.772133] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 645.772745] v9fs_mount+0x79/0x8f0 [ 645.773174] ? v9fs_write_inode+0x60/0x60 [ 645.773672] legacy_get_tree+0x105/0x220 [ 645.774161] vfs_get_tree+0x8e/0x300 [ 645.774614] path_mount+0x1331/0x21c0 [ 645.775077] ? strncpy_from_user+0x9e/0x470 [ 645.775606] ? finish_automount+0xa90/0xa90 [ 645.776135] ? getname_flags.part.0+0x1dd/0x4f0 [ 645.776706] ? _copy_from_user+0xfb/0x1b0 [ 645.777206] __x64_sys_mount+0x282/0x300 [ 645.777689] ? copy_mnt_ns+0xa00/0xa00 [ 645.778160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 645.778801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 645.779420] do_syscall_64+0x33/0x40 [ 645.779868] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 645.780479] RIP: 0033:0x7fbd09823b19 [ 645.780925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 645.783156] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 645.784071] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 645.784990] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 645.785848] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 645.786704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 645.787568] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:31:07 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:31:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) 17:31:07 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)}], 0x1}}], 0x1, 0x0) 17:31:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:31:07 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, 0x0, r0, 0x0, 0x1f, 0x9) 17:31:07 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x0, 0x1100}}], 0x1, 0x0) 17:31:07 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:31:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 28) 17:31:07 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() [ 660.272088] FAULT_INJECTION: forcing a failure. [ 660.272088] name failslab, interval 1, probability 0, space 0, times 0 [ 660.273552] CPU: 1 PID: 6090 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 660.274464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 660.275464] Call Trace: [ 660.275785] dump_stack+0x107/0x167 [ 660.276274] should_fail.cold+0x5/0xa [ 660.276710] should_failslab+0x5/0x20 [ 660.277145] __kmalloc_track_caller+0x79/0x370 [ 660.277738] ? match_number+0xaf/0x1d0 [ 660.278238] kmemdup_nul+0x2d/0xa0 [ 660.278662] match_number+0xaf/0x1d0 [ 660.279083] ? match_u64+0x190/0x190 [ 660.279511] ? __kmalloc_track_caller+0x2c6/0x370 [ 660.280097] ? memcpy+0x39/0x60 [ 660.280521] parse_opts.part.0+0x1f3/0x340 [ 660.281060] ? p9_fd_show_options+0x1c0/0x1c0 [ 660.281573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 660.282256] ? trace_hardirqs_on+0x5b/0x180 [ 660.282879] ? kfree+0xd7/0x340 [ 660.283262] p9_fd_create+0x98/0x4a0 [ 660.283683] ? p9_conn_create+0x510/0x510 [ 660.284149] ? p9_client_create+0x798/0x1230 [ 660.284753] ? kfree+0xd7/0x340 [ 660.285126] ? do_raw_spin_unlock+0x4f/0x220 [ 660.285628] p9_client_create+0x7ff/0x1230 [ 660.286196] ? p9_client_flush+0x430/0x430 [ 660.286740] ? trace_hardirqs_on+0x5b/0x180 [ 660.287299] ? lockdep_init_map_type+0x2c7/0x780 [ 660.287904] ? __raw_spin_lock_init+0x36/0x110 [ 660.288487] v9fs_session_init+0x1dd/0x1680 [ 660.288978] ? lock_release+0x680/0x680 [ 660.289503] ? kmem_cache_alloc_trace+0x151/0x320 [ 660.290133] ? v9fs_show_options+0x690/0x690 [ 660.290729] ? trace_hardirqs_on+0x5b/0x180 [ 660.291221] ? kasan_unpoison_shadow+0x33/0x50 [ 660.291805] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 660.292434] v9fs_mount+0x79/0x8f0 [ 660.292838] ? v9fs_write_inode+0x60/0x60 [ 660.293397] legacy_get_tree+0x105/0x220 [ 660.293920] vfs_get_tree+0x8e/0x300 [ 660.294393] path_mount+0x1331/0x21c0 [ 660.294835] ? strncpy_from_user+0x9e/0x470 [ 660.295345] ? finish_automount+0xa90/0xa90 [ 660.295918] ? getname_flags.part.0+0x1dd/0x4f0 [ 660.296453] ? _copy_from_user+0xfb/0x1b0 [ 660.296957] __x64_sys_mount+0x282/0x300 [ 660.297552] ? copy_mnt_ns+0xa00/0xa00 [ 660.298067] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 660.298669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 660.299254] do_syscall_64+0x33/0x40 [ 660.299713] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 660.300359] RIP: 0033:0x7fbd09823b19 [ 660.300780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 660.303094] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 660.303955] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 660.304762] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 660.305568] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 660.306370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 660.307191] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:31:07 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5329, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "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"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:31:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) 17:31:07 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x0, 0x34000}}], 0x1, 0x0) 17:31:07 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, 0x0, r0, 0x0, 0x1f, 0x9) 17:31:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:31:07 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) [ 660.407757] 9pnet: Insufficient options for proto=fd 17:31:07 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:31:22 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 29) 17:31:22 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:31:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:31:22 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0xfb, 0x0, 0x8, 0x0, 0x2faf, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10084, 0x2, 0x0, 0x8, 0xfffffffffffffff7, 0x101, 0xe4, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:31:22 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0), r0, 0x0, 0x1f, 0x9) 17:31:22 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x0, 0x80000}}], 0x1, 0x0) 17:31:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:31:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) [ 675.551519] FAULT_INJECTION: forcing a failure. [ 675.551519] name failslab, interval 1, probability 0, space 0, times 0 [ 675.554506] CPU: 1 PID: 6130 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 675.556261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 675.558346] Call Trace: [ 675.559034] dump_stack+0x107/0x167 [ 675.559953] should_fail.cold+0x5/0xa [ 675.560926] ? create_object.isra.0+0x3a/0xa20 [ 675.562091] should_failslab+0x5/0x20 [ 675.563051] kmem_cache_alloc+0x5b/0x310 [ 675.563915] create_object.isra.0+0x3a/0xa20 [ 675.564826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 675.565900] __kmalloc_track_caller+0x177/0x370 [ 675.566879] ? match_number+0xaf/0x1d0 [ 675.567700] kmemdup_nul+0x2d/0xa0 [ 675.568444] match_number+0xaf/0x1d0 [ 675.569230] ? match_u64+0x190/0x190 [ 675.570006] ? __kmalloc_track_caller+0x2c6/0x370 [ 675.571046] ? memcpy+0x39/0x60 [ 675.571749] parse_opts.part.0+0x1f3/0x340 [ 675.572643] ? p9_fd_show_options+0x1c0/0x1c0 [ 675.573601] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 675.574723] ? trace_hardirqs_on+0x5b/0x180 [ 675.575636] ? kfree+0xd7/0x340 [ 675.576334] p9_fd_create+0x98/0x4a0 [ 675.577114] ? p9_conn_create+0x510/0x510 [ 675.577985] ? p9_client_create+0x798/0x1230 [ 675.578924] ? kfree+0xd7/0x340 [ 675.579615] ? do_raw_spin_unlock+0x4f/0x220 [ 675.580541] p9_client_create+0x7ff/0x1230 [ 675.581438] ? p9_client_flush+0x430/0x430 [ 675.582321] ? trace_hardirqs_on+0x5b/0x180 [ 675.583241] ? lockdep_init_map_type+0x2c7/0x780 [ 675.584245] ? __raw_spin_lock_init+0x36/0x110 [ 675.585214] v9fs_session_init+0x1dd/0x1680 [ 675.586121] ? lock_release+0x680/0x680 [ 675.586999] ? kmem_cache_alloc_trace+0x151/0x320 [ 675.588018] ? v9fs_show_options+0x690/0x690 [ 675.588951] ? trace_hardirqs_on+0x5b/0x180 [ 675.589854] ? kasan_unpoison_shadow+0x33/0x50 [ 675.590817] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 675.591877] v9fs_mount+0x79/0x8f0 [ 675.592623] ? v9fs_write_inode+0x60/0x60 [ 675.593490] legacy_get_tree+0x105/0x220 [ 675.594342] vfs_get_tree+0x8e/0x300 [ 675.595138] path_mount+0x1331/0x21c0 [ 675.595951] ? strncpy_from_user+0x9e/0x470 [ 675.596859] ? finish_automount+0xa90/0xa90 [ 675.597762] ? getname_flags.part.0+0x1dd/0x4f0 [ 675.598741] ? _copy_from_user+0xfb/0x1b0 [ 675.599619] __x64_sys_mount+0x282/0x300 [ 675.600466] ? copy_mnt_ns+0xa00/0xa00 [ 675.601285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 675.602377] ? syscall_enter_from_user_mode+0x1d/0x50 [ 675.603476] do_syscall_64+0x33/0x40 [ 675.604253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 675.605326] RIP: 0033:0x7fbd09823b19 [ 675.606108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 675.610027] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 675.611638] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 675.613131] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 675.614633] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 675.616133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 675.617619] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:31:22 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x0, 0x400300}}], 0x1, 0x0) 17:31:22 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) 17:31:22 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0), r0, 0x0, 0x1f, 0x9) 17:31:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:31:22 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:31:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) 17:31:22 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:31:22 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0), r0, 0x0, 0x1f, 0x9) 17:31:22 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) 17:31:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 30) 17:31:40 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) 17:31:40 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:31:40 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:31:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:31:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:31:40 executing program 5: pipe2(&(0x7f0000000400), 0x0) r0 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r0, &(0x7f00000007c0)=0x800000000, 0xffffffffffffffff, 0x0, 0x1f, 0x9) 17:31:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) [ 693.856328] FAULT_INJECTION: forcing a failure. [ 693.856328] name failslab, interval 1, probability 0, space 0, times 0 [ 693.858809] CPU: 0 PID: 6185 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 693.860302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 693.862098] Call Trace: [ 693.862678] dump_stack+0x107/0x167 [ 693.863482] should_fail.cold+0x5/0xa [ 693.864317] should_failslab+0x5/0x20 [ 693.865142] __kmalloc_track_caller+0x79/0x370 [ 693.866129] ? match_number+0xaf/0x1d0 [ 693.866976] ? kfree+0xd7/0x340 [ 693.867692] kmemdup_nul+0x2d/0xa0 [ 693.868463] match_number+0xaf/0x1d0 [ 693.869270] ? match_u64+0x190/0x190 [ 693.870074] ? __kmalloc_track_caller+0x2c6/0x370 [ 693.871127] ? memcpy+0x39/0x60 [ 693.871852] parse_opts.part.0+0x1f3/0x340 [ 693.872766] ? p9_fd_show_options+0x1c0/0x1c0 [ 693.873745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 693.874893] ? trace_hardirqs_on+0x5b/0x180 [ 693.875827] ? kfree+0xd7/0x340 [ 693.876548] p9_fd_create+0x98/0x4a0 [ 693.877350] ? p9_conn_create+0x510/0x510 [ 693.878246] ? p9_client_create+0x798/0x1230 [ 693.879206] ? kfree+0xd7/0x340 [ 693.879914] ? do_raw_spin_unlock+0x4f/0x220 [ 693.880875] p9_client_create+0x7ff/0x1230 [ 693.881799] ? p9_client_flush+0x430/0x430 [ 693.882714] ? trace_hardirqs_on+0x5b/0x180 [ 693.883663] ? lockdep_init_map_type+0x2c7/0x780 [ 693.884692] ? __raw_spin_lock_init+0x36/0x110 [ 693.885689] v9fs_session_init+0x1dd/0x1680 [ 693.886622] ? lock_release+0x680/0x680 [ 693.887508] ? kmem_cache_alloc_trace+0x151/0x320 [ 693.888551] ? v9fs_show_options+0x690/0x690 [ 693.889513] ? trace_hardirqs_on+0x5b/0x180 [ 693.890448] ? kasan_unpoison_shadow+0x33/0x50 [ 693.891445] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 693.892545] v9fs_mount+0x79/0x8f0 [ 693.893314] ? v9fs_write_inode+0x60/0x60 [ 693.894213] legacy_get_tree+0x105/0x220 [ 693.895102] vfs_get_tree+0x8e/0x300 [ 693.895905] path_mount+0x1331/0x21c0 [ 693.896740] ? strncpy_from_user+0x9e/0x470 [ 693.897673] ? finish_automount+0xa90/0xa90 [ 693.898607] ? getname_flags.part.0+0x1dd/0x4f0 [ 693.899629] ? _copy_from_user+0xfb/0x1b0 [ 693.900535] __x64_sys_mount+0x282/0x300 [ 693.901409] ? copy_mnt_ns+0xa00/0xa00 [ 693.902257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 693.903404] ? syscall_enter_from_user_mode+0x1d/0x50 [ 693.904524] do_syscall_64+0x33/0x40 [ 693.905331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 693.906443] RIP: 0033:0x7fbd09823b19 [ 693.907256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 693.911257] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 693.912918] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 693.914467] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 693.916029] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 693.917576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 693.919139] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 693.922179] 9pnet: Insufficient options for proto=fd 17:31:40 executing program 5: pipe2(&(0x7f0000000400), 0x0) r0 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r0, &(0x7f00000007c0)=0x800000000, 0xffffffffffffffff, 0x0, 0x1f, 0x9) 17:31:40 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 17:31:40 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:31:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 31) 17:31:41 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:31:41 executing program 5: pipe2(&(0x7f0000000400), 0x0) r0 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r0, &(0x7f00000007c0)=0x800000000, 0xffffffffffffffff, 0x0, 0x1f, 0x9) 17:31:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:31:41 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 694.355860] FAULT_INJECTION: forcing a failure. [ 694.355860] name failslab, interval 1, probability 0, space 0, times 0 [ 694.358011] CPU: 1 PID: 6300 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 694.359302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 694.360841] Call Trace: [ 694.361339] dump_stack+0x107/0x167 [ 694.362012] should_fail.cold+0x5/0xa [ 694.362723] ? create_object.isra.0+0x3a/0xa20 [ 694.363579] should_failslab+0x5/0x20 [ 694.364305] kmem_cache_alloc+0x5b/0x310 [ 694.365063] create_object.isra.0+0x3a/0xa20 [ 694.365875] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 694.366819] __kmalloc_track_caller+0x177/0x370 [ 694.367687] ? match_number+0xaf/0x1d0 [ 694.368424] kmemdup_nul+0x2d/0xa0 [ 694.369085] match_number+0xaf/0x1d0 [ 694.369779] ? match_u64+0x190/0x190 [ 694.370468] ? __kmalloc_track_caller+0x2c6/0x370 [ 694.371365] ? memcpy+0x39/0x60 [ 694.371976] parse_opts.part.0+0x1f3/0x340 [ 694.372757] ? p9_fd_show_options+0x1c0/0x1c0 [ 694.373602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 694.374576] ? trace_hardirqs_on+0x5b/0x180 [ 694.375383] ? kfree+0xd7/0x340 [ 694.376001] p9_fd_create+0x98/0x4a0 [ 694.376688] ? p9_conn_create+0x510/0x510 [ 694.377456] ? p9_client_create+0x798/0x1230 [ 694.378265] ? kfree+0xd7/0x340 [ 694.378875] ? do_raw_spin_unlock+0x4f/0x220 [ 694.379722] p9_client_create+0x7ff/0x1230 [ 694.380504] ? p9_client_flush+0x430/0x430 [ 694.381277] ? trace_hardirqs_on+0x5b/0x180 [ 694.382075] ? lockdep_init_map_type+0x2c7/0x780 [ 694.382945] ? __raw_spin_lock_init+0x36/0x110 [ 694.383794] v9fs_session_init+0x1dd/0x1680 [ 694.384589] ? lock_release+0x680/0x680 [ 694.385326] ? kmem_cache_alloc_trace+0x151/0x320 [ 694.386203] ? v9fs_show_options+0x690/0x690 [ 694.387020] ? trace_hardirqs_on+0x5b/0x180 [ 694.387812] ? kasan_unpoison_shadow+0x33/0x50 [ 694.388653] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 694.389580] v9fs_mount+0x79/0x8f0 [ 694.390228] ? v9fs_write_inode+0x60/0x60 [ 694.390987] legacy_get_tree+0x105/0x220 [ 694.391731] vfs_get_tree+0x8e/0x300 [ 694.392410] path_mount+0x1331/0x21c0 [ 694.393113] ? strncpy_from_user+0x9e/0x470 [ 694.393898] ? finish_automount+0xa90/0xa90 [ 694.394685] ? getname_flags.part.0+0x1dd/0x4f0 [ 694.395538] ? _copy_from_user+0xfb/0x1b0 [ 694.396306] __x64_sys_mount+0x282/0x300 [ 694.397048] ? copy_mnt_ns+0xa00/0xa00 [ 694.397761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 694.398720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 694.399674] do_syscall_64+0x33/0x40 [ 694.400342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 694.401267] RIP: 0033:0x7fbd09823b19 [ 694.401934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 694.405284] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 694.406662] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 694.407958] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 694.409236] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 694.410517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 694.411816] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:32:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) 17:32:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:32:00 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 32) 17:32:00 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x0, 0x11000000}}], 0x1, 0x0) 17:32:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:32:00 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x0, 0x9) 17:32:00 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() [ 713.326871] FAULT_INJECTION: forcing a failure. [ 713.326871] name failslab, interval 1, probability 0, space 0, times 0 [ 713.329465] CPU: 1 PID: 6326 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 713.331263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 713.333017] Call Trace: [ 713.333577] dump_stack+0x107/0x167 [ 713.334351] should_fail.cold+0x5/0xa [ 713.335154] ? p9_fd_create+0x161/0x4a0 [ 713.335989] should_failslab+0x5/0x20 [ 713.336790] kmem_cache_alloc_trace+0x55/0x320 [ 713.337746] p9_fd_create+0x161/0x4a0 [ 713.338536] ? p9_conn_create+0x510/0x510 [ 713.339413] ? p9_client_create+0x798/0x1230 [ 713.340327] ? kfree+0xd7/0x340 [ 713.341014] ? do_raw_spin_unlock+0x4f/0x220 [ 713.341947] p9_client_create+0x7ff/0x1230 [ 713.342851] ? p9_client_flush+0x430/0x430 [ 713.343741] ? trace_hardirqs_on+0x5b/0x180 [ 713.344642] ? lockdep_init_map_type+0x2c7/0x780 [ 713.345632] ? __raw_spin_lock_init+0x36/0x110 [ 713.346589] v9fs_session_init+0x1dd/0x1680 [ 713.347500] ? lock_release+0x680/0x680 [ 713.348330] ? kmem_cache_alloc_trace+0x151/0x320 [ 713.349332] ? v9fs_show_options+0x690/0x690 [ 713.350260] ? trace_hardirqs_on+0x5b/0x180 [ 713.351165] ? kasan_unpoison_shadow+0x33/0x50 [ 713.352113] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 713.353189] v9fs_mount+0x79/0x8f0 [ 713.353934] ? v9fs_write_inode+0x60/0x60 [ 713.354814] legacy_get_tree+0x105/0x220 [ 713.355683] vfs_get_tree+0x8e/0x300 [ 713.356469] path_mount+0x1331/0x21c0 [ 713.357283] ? strncpy_from_user+0x9e/0x470 [ 713.358181] ? finish_automount+0xa90/0xa90 [ 713.359134] ? getname_flags.part.0+0x1dd/0x4f0 [ 713.360255] ? _copy_from_user+0xfb/0x1b0 [ 713.361153] __x64_sys_mount+0x282/0x300 [ 713.362013] ? copy_mnt_ns+0xa00/0xa00 [ 713.362867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 713.364108] ? syscall_enter_from_user_mode+0x1d/0x50 [ 713.365406] do_syscall_64+0x33/0x40 [ 713.366180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 713.367267] RIP: 0033:0x7fbd09823b19 [ 713.368101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 713.372827] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 713.374717] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 713.376504] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 713.378168] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 713.380103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 713.381806] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:32:00 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) 17:32:15 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x0, 0x9) 17:32:15 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x0) 17:32:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) 17:32:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 33) 17:32:15 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:32:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:15 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 728.631014] FAULT_INJECTION: forcing a failure. [ 728.631014] name failslab, interval 1, probability 0, space 0, times 0 [ 728.632495] CPU: 0 PID: 6458 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 728.633360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 728.634413] Call Trace: [ 728.634751] dump_stack+0x107/0x167 [ 728.635217] should_fail.cold+0x5/0xa [ 728.635707] ? p9_fd_create+0x161/0x4a0 [ 728.636212] should_failslab+0x5/0x20 [ 728.636696] kmem_cache_alloc_trace+0x55/0x320 [ 728.637278] p9_fd_create+0x161/0x4a0 [ 728.637760] ? p9_conn_create+0x510/0x510 [ 728.638285] ? p9_client_create+0x798/0x1230 [ 728.638857] ? kfree+0xd7/0x340 [ 728.639279] ? do_raw_spin_unlock+0x4f/0x220 [ 728.639852] p9_client_create+0x7ff/0x1230 [ 728.640396] ? p9_client_flush+0x430/0x430 [ 728.640933] ? trace_hardirqs_on+0x5b/0x180 [ 728.641481] ? lockdep_init_map_type+0x2c7/0x780 [ 728.642083] ? __raw_spin_lock_init+0x36/0x110 [ 728.642669] v9fs_session_init+0x1dd/0x1680 [ 728.643218] ? lock_release+0x680/0x680 [ 728.643733] ? kmem_cache_alloc_trace+0x151/0x320 [ 728.644342] ? v9fs_show_options+0x690/0x690 [ 728.644921] ? trace_hardirqs_on+0x5b/0x180 [ 728.645467] ? kasan_unpoison_shadow+0x33/0x50 [ 728.646040] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 728.646695] v9fs_mount+0x79/0x8f0 [ 728.647144] ? v9fs_write_inode+0x60/0x60 [ 728.647688] legacy_get_tree+0x105/0x220 [ 728.648199] vfs_get_tree+0x8e/0x300 [ 728.648666] path_mount+0x1331/0x21c0 [ 728.649148] ? strncpy_from_user+0x9e/0x470 [ 728.649689] ? finish_automount+0xa90/0xa90 [ 728.650236] ? getname_flags.part.0+0x1dd/0x4f0 [ 728.650819] ? _copy_from_user+0xfb/0x1b0 [ 728.651361] __x64_sys_mount+0x282/0x300 [ 728.651875] ? copy_mnt_ns+0xa00/0xa00 [ 728.652366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 728.653031] ? syscall_enter_from_user_mode+0x1d/0x50 [ 728.653680] do_syscall_64+0x33/0x40 [ 728.654151] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 728.654798] RIP: 0033:0x7fbd09823b19 [ 728.655268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 728.657584] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 728.658564] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 728.659468] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 728.660364] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 728.661273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 728.662167] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:32:15 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x10, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:32:15 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x0, 0x9) 17:32:15 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:15 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}, 0x2}], 0x1, 0x0) 17:32:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 34) 17:32:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) [ 729.005684] FAULT_INJECTION: forcing a failure. [ 729.005684] name failslab, interval 1, probability 0, space 0, times 0 [ 729.007032] CPU: 0 PID: 6475 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 729.007823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 729.008762] Call Trace: [ 729.009068] dump_stack+0x107/0x167 [ 729.009486] should_fail.cold+0x5/0xa [ 729.009921] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 729.010521] should_failslab+0x5/0x20 [ 729.010954] kmem_cache_alloc+0x5b/0x310 [ 729.011428] p9_client_prepare_req.part.0+0x3a/0xac0 [ 729.012005] p9_client_rpc+0x220/0x1370 [ 729.012459] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 729.013056] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 729.013670] ? pipe_poll+0x21b/0x800 [ 729.014093] ? p9_fd_close+0x4a0/0x4a0 [ 729.014534] ? wait_for_partner+0x3c0/0x3c0 [ 729.015028] ? p9_fd_poll+0x1e0/0x2c0 [ 729.015476] ? p9_fd_create+0x357/0x4a0 [ 729.015927] ? p9_conn_create+0x510/0x510 [ 729.016396] ? p9_client_create+0x798/0x1230 [ 729.016892] ? kfree+0xd7/0x340 [ 729.017269] ? do_raw_spin_unlock+0x4f/0x220 [ 729.017779] p9_client_create+0xa76/0x1230 [ 729.018268] ? p9_client_flush+0x430/0x430 [ 729.018753] ? trace_hardirqs_on+0x5b/0x180 [ 729.019245] ? lockdep_init_map_type+0x2c7/0x780 [ 729.019792] ? __raw_spin_lock_init+0x36/0x110 [ 729.020318] v9fs_session_init+0x1dd/0x1680 [ 729.020809] ? lock_release+0x680/0x680 [ 729.021266] ? kmem_cache_alloc_trace+0x151/0x320 [ 729.021808] ? v9fs_show_options+0x690/0x690 [ 729.022316] ? trace_hardirqs_on+0x5b/0x180 [ 729.022808] ? kasan_unpoison_shadow+0x33/0x50 [ 729.023332] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 729.023912] v9fs_mount+0x79/0x8f0 [ 729.024313] ? v9fs_write_inode+0x60/0x60 [ 729.024783] legacy_get_tree+0x105/0x220 [ 729.025246] vfs_get_tree+0x8e/0x300 [ 729.025668] path_mount+0x1331/0x21c0 [ 729.026103] ? strncpy_from_user+0x9e/0x470 [ 729.026597] ? finish_automount+0xa90/0xa90 [ 729.027087] ? getname_flags.part.0+0x1dd/0x4f0 [ 729.027628] ? _copy_from_user+0xfb/0x1b0 [ 729.028108] __x64_sys_mount+0x282/0x300 [ 729.028565] ? copy_mnt_ns+0xa00/0xa00 [ 729.029012] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 729.029607] ? syscall_enter_from_user_mode+0x1d/0x50 [ 729.030198] do_syscall_64+0x33/0x40 [ 729.030638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 729.031223] RIP: 0033:0x7fbd09823b19 [ 729.031651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 729.033747] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 729.034619] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 729.035442] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 729.036260] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 729.037073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.037886] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:32:15 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}, 0x8}], 0x1, 0x0) 17:32:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:32:15 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x0) 17:32:15 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:15 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x10, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:32:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 35) [ 729.352120] FAULT_INJECTION: forcing a failure. [ 729.352120] name failslab, interval 1, probability 0, space 0, times 0 [ 729.354804] CPU: 1 PID: 6495 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 729.356529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 729.358408] Call Trace: [ 729.359007] dump_stack+0x107/0x167 [ 729.359999] should_fail.cold+0x5/0xa [ 729.360949] ? create_object.isra.0+0x3a/0xa20 [ 729.361985] should_failslab+0x5/0x20 [ 729.362848] kmem_cache_alloc+0x5b/0x310 [ 729.363781] create_object.isra.0+0x3a/0xa20 [ 729.364882] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 729.366136] kmem_cache_alloc+0x159/0x310 [ 729.367081] p9_client_prepare_req.part.0+0x3a/0xac0 [ 729.368247] p9_client_rpc+0x220/0x1370 [ 729.369217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 729.370556] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 729.371761] ? pipe_poll+0x21b/0x800 [ 729.372587] ? p9_fd_close+0x4a0/0x4a0 [ 729.373462] ? wait_for_partner+0x3c0/0x3c0 [ 729.374500] ? p9_fd_poll+0x1e0/0x2c0 [ 729.375528] ? p9_fd_create+0x357/0x4a0 [ 729.376412] ? p9_conn_create+0x510/0x510 [ 729.377333] ? p9_client_create+0x798/0x1230 [ 729.378320] ? kfree+0xd7/0x340 [ 729.379074] ? do_raw_spin_unlock+0x4f/0x220 [ 729.380259] p9_client_create+0xa76/0x1230 [ 729.381222] ? p9_client_flush+0x430/0x430 [ 729.382180] ? trace_hardirqs_on+0x5b/0x180 [ 729.383153] ? lockdep_init_map_type+0x2c7/0x780 [ 729.384358] ? __raw_spin_lock_init+0x36/0x110 [ 729.385562] v9fs_session_init+0x1dd/0x1680 [ 729.386535] ? lock_release+0x680/0x680 [ 729.387458] ? kmem_cache_alloc_trace+0x151/0x320 [ 729.388707] ? v9fs_show_options+0x690/0x690 [ 729.389752] ? trace_hardirqs_on+0x5b/0x180 [ 729.390718] ? kasan_unpoison_shadow+0x33/0x50 [ 729.391759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 729.393146] v9fs_mount+0x79/0x8f0 [ 729.393963] ? v9fs_write_inode+0x60/0x60 [ 729.394910] legacy_get_tree+0x105/0x220 [ 729.396053] vfs_get_tree+0x8e/0x300 [ 729.396981] path_mount+0x1331/0x21c0 [ 729.397998] ? strncpy_from_user+0x9e/0x470 [ 729.399095] ? finish_automount+0xa90/0xa90 [ 729.400178] ? getname_flags.part.0+0x1dd/0x4f0 [ 729.401326] ? _copy_from_user+0xfb/0x1b0 [ 729.402408] __x64_sys_mount+0x282/0x300 [ 729.403341] ? copy_mnt_ns+0xa00/0xa00 [ 729.404218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 729.405397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 729.406567] do_syscall_64+0x33/0x40 [ 729.407418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 729.408576] RIP: 0033:0x7fbd09823b19 [ 729.409414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 729.413558] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 729.415272] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 729.416890] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 729.418495] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 729.420111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.421722] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:32:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 36) 17:32:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:32:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:31 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}, 0x11}], 0x1, 0x0) 17:32:31 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x10, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:32:31 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 744.379537] FAULT_INJECTION: forcing a failure. [ 744.379537] name failslab, interval 1, probability 0, space 0, times 0 [ 744.381984] CPU: 1 PID: 6512 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 744.383446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 744.385228] Call Trace: [ 744.385794] dump_stack+0x107/0x167 [ 744.386571] should_fail.cold+0x5/0xa [ 744.387387] ? p9_fcall_init+0x97/0x290 [ 744.388249] should_failslab+0x5/0x20 [ 744.389065] __kmalloc+0x72/0x390 [ 744.389813] p9_fcall_init+0x97/0x290 [ 744.390630] p9_client_prepare_req.part.0+0x8c/0xac0 [ 744.391730] p9_client_rpc+0x220/0x1370 [ 744.392587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 744.393712] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 744.394853] ? pipe_poll+0x21b/0x800 [ 744.395656] ? p9_fd_close+0x4a0/0x4a0 [ 744.396483] ? wait_for_partner+0x3c0/0x3c0 [ 744.397401] ? p9_fd_poll+0x1e0/0x2c0 [ 744.398216] ? p9_fd_create+0x357/0x4a0 [ 744.399060] ? p9_conn_create+0x510/0x510 [ 744.399948] ? p9_client_create+0x798/0x1230 [ 744.400885] ? kfree+0xd7/0x340 [ 744.401583] ? do_raw_spin_unlock+0x4f/0x220 [ 744.402530] p9_client_create+0xa76/0x1230 [ 744.403438] ? p9_client_flush+0x430/0x430 [ 744.404346] ? trace_hardirqs_on+0x5b/0x180 [ 744.405277] ? lockdep_init_map_type+0x2c7/0x780 [ 744.406288] ? __raw_spin_lock_init+0x36/0x110 [ 744.407272] v9fs_session_init+0x1dd/0x1680 [ 744.408197] ? lock_release+0x680/0x680 [ 744.409053] ? kmem_cache_alloc_trace+0x151/0x320 [ 744.410080] ? v9fs_show_options+0x690/0x690 [ 744.411026] ? trace_hardirqs_on+0x5b/0x180 [ 744.411952] ? kasan_unpoison_shadow+0x33/0x50 [ 744.412925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 744.414008] v9fs_mount+0x79/0x8f0 [ 744.414763] ? v9fs_write_inode+0x60/0x60 [ 744.415648] legacy_get_tree+0x105/0x220 [ 744.416516] vfs_get_tree+0x8e/0x300 [ 744.417311] path_mount+0x1331/0x21c0 [ 744.418128] ? strncpy_from_user+0x9e/0x470 [ 744.419047] ? finish_automount+0xa90/0xa90 [ 744.419971] ? getname_flags.part.0+0x1dd/0x4f0 [ 744.420959] ? _copy_from_user+0xfb/0x1b0 [ 744.421848] __x64_sys_mount+0x282/0x300 [ 744.422714] ? copy_mnt_ns+0xa00/0xa00 [ 744.423557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 744.424672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 744.425770] do_syscall_64+0x33/0x40 [ 744.426560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 744.427659] RIP: 0033:0x7fbd09823b19 [ 744.428450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 744.432380] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 744.434003] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 744.435533] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 744.437055] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 744.438573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 744.440096] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:32:31 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}, 0x1100}], 0x1, 0x0) 17:32:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) syz_io_uring_complete(0x0) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 37) 17:32:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:32:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:31 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() [ 744.911029] FAULT_INJECTION: forcing a failure. [ 744.911029] name failslab, interval 1, probability 0, space 0, times 0 [ 744.913566] CPU: 0 PID: 6534 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 744.915074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 744.916931] Call Trace: [ 744.917527] dump_stack+0x107/0x167 [ 744.918356] should_fail.cold+0x5/0xa [ 744.919211] ? create_object.isra.0+0x3a/0xa20 [ 744.920254] should_failslab+0x5/0x20 [ 744.921095] kmem_cache_alloc+0x5b/0x310 [ 744.921995] create_object.isra.0+0x3a/0xa20 [ 744.922960] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 744.924121] kmem_cache_alloc+0x159/0x310 [ 744.925061] p9_client_prepare_req.part.0+0x3a/0xac0 [ 744.926194] p9_client_rpc+0x220/0x1370 [ 744.927070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 744.928287] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 744.929505] ? pipe_poll+0x21b/0x800 [ 744.930319] ? p9_fd_close+0x4a0/0x4a0 [ 744.931191] ? wait_for_partner+0x3c0/0x3c0 [ 744.932148] ? p9_fd_poll+0x1e0/0x2c0 [ 744.932991] ? p9_fd_create+0x357/0x4a0 [ 744.933856] ? p9_conn_create+0x510/0x510 [ 744.934775] ? p9_client_create+0x798/0x1230 [ 744.935951] ? kfree+0xd7/0x340 [ 744.936790] ? do_raw_spin_unlock+0x4f/0x220 [ 744.937915] p9_client_create+0xa76/0x1230 [ 744.939000] ? p9_client_flush+0x430/0x430 [ 744.940024] ? trace_hardirqs_on+0x5b/0x180 [ 744.940932] ? lockdep_init_map_type+0x2c7/0x780 [ 744.941928] ? __raw_spin_lock_init+0x36/0x110 [ 744.942893] v9fs_session_init+0x1dd/0x1680 [ 744.943809] ? lock_release+0x680/0x680 [ 744.944653] ? kmem_cache_alloc_trace+0x151/0x320 [ 744.945662] ? v9fs_show_options+0x690/0x690 [ 744.946592] ? trace_hardirqs_on+0x5b/0x180 [ 744.947509] ? kasan_unpoison_shadow+0x33/0x50 [ 744.948463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 744.949539] v9fs_mount+0x79/0x8f0 [ 744.950289] ? v9fs_write_inode+0x60/0x60 [ 744.951155] legacy_get_tree+0x105/0x220 [ 744.952017] vfs_get_tree+0x8e/0x300 [ 744.952794] path_mount+0x1331/0x21c0 [ 744.953597] ? strncpy_from_user+0x9e/0x470 [ 744.954503] ? finish_automount+0xa90/0xa90 [ 744.955408] ? getname_flags.part.0+0x1dd/0x4f0 [ 744.956387] ? _copy_from_user+0xfb/0x1b0 [ 744.957264] __x64_sys_mount+0x282/0x300 [ 744.958114] ? copy_mnt_ns+0xa00/0xa00 [ 744.958933] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 744.960044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 744.961122] do_syscall_64+0x33/0x40 [ 744.961901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 744.962977] RIP: 0033:0x7fbd09823b19 [ 744.963767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 744.967641] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 744.969228] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 744.970680] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 744.972126] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 744.973625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 744.975126] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 745.049584] perf: interrupt took too long (4060 > 3977), lowering kernel.perf_event_max_sample_rate to 49000 [ 745.051965] perf: interrupt took too long (5120 > 5075), lowering kernel.perf_event_max_sample_rate to 39000 [ 745.054687] perf: interrupt took too long (6441 > 6400), lowering kernel.perf_event_max_sample_rate to 31000 [ 745.057764] perf: interrupt took too long (8082 > 8051), lowering kernel.perf_event_max_sample_rate to 24000 [ 745.115808] perf: interrupt took too long (10127 > 10102), lowering kernel.perf_event_max_sample_rate to 19000 [ 745.146271] perf: interrupt took too long (12659 > 12658), lowering kernel.perf_event_max_sample_rate to 15000 17:32:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:44 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}, 0x34000}], 0x1, 0x0) 17:32:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 38) 17:32:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:44 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:32:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) syz_io_uring_complete(0x0) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:45 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}, 0x80000}], 0x1, 0x0) [ 758.160281] FAULT_INJECTION: forcing a failure. [ 758.160281] name failslab, interval 1, probability 0, space 0, times 0 [ 758.161797] CPU: 0 PID: 6556 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 758.162694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 758.163776] Call Trace: [ 758.164123] dump_stack+0x107/0x167 [ 758.164596] should_fail.cold+0x5/0xa [ 758.165091] ? p9_fcall_init+0x97/0x290 [ 758.165614] should_failslab+0x5/0x20 [ 758.166109] __kmalloc+0x72/0x390 [ 758.166566] p9_fcall_init+0x97/0x290 [ 758.167067] p9_client_prepare_req.part.0+0x8c/0xac0 [ 758.167742] p9_client_rpc+0x220/0x1370 [ 758.168280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 758.168964] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 758.169671] ? pipe_poll+0x21b/0x800 [ 758.170156] ? p9_fd_close+0x4a0/0x4a0 [ 758.170661] ? wait_for_partner+0x3c0/0x3c0 [ 758.171230] ? p9_fd_poll+0x1e0/0x2c0 [ 758.171740] ? p9_fd_create+0x357/0x4a0 [ 758.172253] ? p9_conn_create+0x510/0x510 [ 758.172788] ? p9_client_create+0x798/0x1230 [ 758.173360] ? kfree+0xd7/0x340 [ 758.173787] ? do_raw_spin_unlock+0x4f/0x220 [ 758.174372] p9_client_create+0xa76/0x1230 [ 758.174930] ? p9_client_flush+0x430/0x430 [ 758.175484] ? trace_hardirqs_on+0x5b/0x180 [ 758.176053] ? lockdep_init_map_type+0x2c7/0x780 [ 758.176669] ? __raw_spin_lock_init+0x36/0x110 [ 758.177272] v9fs_session_init+0x1dd/0x1680 [ 758.177836] ? lock_release+0x680/0x680 [ 758.178361] ? kmem_cache_alloc_trace+0x151/0x320 [ 758.178982] ? v9fs_show_options+0x690/0x690 [ 758.179553] ? trace_hardirqs_on+0x5b/0x180 [ 758.180115] ? kasan_unpoison_shadow+0x33/0x50 [ 758.180721] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 758.181383] v9fs_mount+0x79/0x8f0 [ 758.181850] ? v9fs_write_inode+0x60/0x60 [ 758.182389] legacy_get_tree+0x105/0x220 [ 758.182912] vfs_get_tree+0x8e/0x300 [ 758.183399] path_mount+0x1331/0x21c0 [ 758.183910] ? strncpy_from_user+0x9e/0x470 [ 758.184474] ? finish_automount+0xa90/0xa90 [ 758.185039] ? getname_flags.part.0+0x1dd/0x4f0 [ 758.185644] ? _copy_from_user+0xfb/0x1b0 [ 758.186380] __x64_sys_mount+0x282/0x300 [ 758.186944] ? copy_mnt_ns+0xa00/0xa00 [ 758.187501] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 758.188203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 758.188887] do_syscall_64+0x33/0x40 [ 758.189375] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 758.190043] RIP: 0033:0x7fbd09823b19 [ 758.190530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 758.192971] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 758.193961] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 758.194888] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 758.195834] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 758.196805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 758.197752] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:32:45 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:32:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) syz_io_uring_complete(0x0) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) syz_io_uring_complete(0x0) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:32:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 39) 17:32:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 758.466280] FAULT_INJECTION: forcing a failure. [ 758.466280] name failslab, interval 1, probability 0, space 0, times 0 [ 758.468733] CPU: 1 PID: 6576 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 758.470123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 758.471844] Call Trace: [ 758.472381] dump_stack+0x107/0x167 [ 758.473124] should_fail.cold+0x5/0xa [ 758.473939] ? create_object.isra.0+0x3a/0xa20 [ 758.474919] should_failslab+0x5/0x20 [ 758.475735] kmem_cache_alloc+0x5b/0x310 [ 758.476596] create_object.isra.0+0x3a/0xa20 [ 758.477528] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 758.478603] __kmalloc+0x16e/0x390 [ 758.479359] p9_fcall_init+0x97/0x290 [ 758.480177] p9_client_prepare_req.part.0+0xf4/0xac0 [ 758.481258] p9_client_rpc+0x220/0x1370 [ 758.482096] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 758.483210] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 758.484348] ? pipe_poll+0x21b/0x800 [ 758.485134] ? p9_fd_close+0x4a0/0x4a0 [ 758.485952] ? wait_for_partner+0x3c0/0x3c0 [ 758.486861] ? p9_fd_poll+0x1e0/0x2c0 [ 758.487680] ? p9_fd_create+0x357/0x4a0 [ 758.488521] ? p9_conn_create+0x510/0x510 [ 758.489394] ? p9_client_create+0x798/0x1230 [ 758.490324] ? kfree+0xd7/0x340 [ 758.491014] ? do_raw_spin_unlock+0x4f/0x220 [ 758.491961] p9_client_create+0xa76/0x1230 [ 758.492862] ? p9_client_flush+0x430/0x430 [ 758.493757] ? trace_hardirqs_on+0x5b/0x180 [ 758.494678] ? lockdep_init_map_type+0x2c7/0x780 [ 758.495687] ? __raw_spin_lock_init+0x36/0x110 [ 758.496657] v9fs_session_init+0x1dd/0x1680 [ 758.497571] ? lock_release+0x680/0x680 [ 758.498425] ? kmem_cache_alloc_trace+0x151/0x320 [ 758.499446] ? v9fs_show_options+0x690/0x690 [ 758.500398] ? trace_hardirqs_on+0x5b/0x180 [ 758.501309] ? kasan_unpoison_shadow+0x33/0x50 [ 758.502280] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 758.503352] v9fs_mount+0x79/0x8f0 [ 758.504110] ? v9fs_write_inode+0x60/0x60 [ 758.504980] legacy_get_tree+0x105/0x220 [ 758.505838] vfs_get_tree+0x8e/0x300 [ 758.506621] path_mount+0x1331/0x21c0 [ 758.507429] ? strncpy_from_user+0x9e/0x470 [ 758.508347] ? finish_automount+0xa90/0xa90 [ 758.509257] ? getname_flags.part.0+0x1dd/0x4f0 [ 758.510247] ? _copy_from_user+0xfb/0x1b0 [ 758.511129] __x64_sys_mount+0x282/0x300 [ 758.511991] ? copy_mnt_ns+0xa00/0xa00 [ 758.512817] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 758.513925] ? syscall_enter_from_user_mode+0x1d/0x50 [ 758.515015] do_syscall_64+0x33/0x40 [ 758.515821] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 758.516904] RIP: 0033:0x7fbd09823b19 [ 758.517712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 758.521606] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 758.523210] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 758.524722] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 758.526227] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 758.527739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 758.529244] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 758.775903] perf: interrupt took too long (15847 > 15823), lowering kernel.perf_event_max_sample_rate to 12000 17:32:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:32:58 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}, 0x400300}], 0x1, 0x0) 17:32:58 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:32:58 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 40) 17:32:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) 17:32:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 771.496654] FAULT_INJECTION: forcing a failure. [ 771.496654] name failslab, interval 1, probability 0, space 0, times 0 [ 771.498157] CPU: 1 PID: 6604 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 771.498975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 771.499968] Call Trace: [ 771.500288] dump_stack+0x107/0x167 [ 771.500736] should_fail.cold+0x5/0xa [ 771.501192] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 771.501879] should_failslab+0x5/0x20 [ 771.502329] kmem_cache_alloc+0x5b/0x310 [ 771.502814] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 771.503486] idr_get_free+0x4b5/0x8f0 [ 771.503948] idr_alloc_u32+0x170/0x2d0 [ 771.504419] ? __fprop_inc_percpu_max+0x130/0x130 [ 771.504980] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 771.505617] ? lock_release+0x680/0x680 [ 771.506070] idr_alloc+0xc2/0x130 [ 771.506476] ? idr_alloc_u32+0x2d0/0x2d0 [ 771.506960] ? rwlock_bug.part.0+0x90/0x90 [ 771.507448] p9_client_prepare_req.part.0+0x612/0xac0 [ 771.508048] p9_client_rpc+0x220/0x1370 [ 771.508502] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 771.509106] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 771.509712] ? pipe_poll+0x21b/0x800 [ 771.510134] ? p9_fd_close+0x4a0/0x4a0 [ 771.510574] ? wait_for_partner+0x3c0/0x3c0 [ 771.511067] ? p9_fd_poll+0x1e0/0x2c0 [ 771.511506] ? p9_fd_create+0x357/0x4a0 [ 771.511971] ? p9_conn_create+0x510/0x510 [ 771.512443] ? p9_client_create+0x798/0x1230 [ 771.512946] ? kfree+0xd7/0x340 [ 771.513343] ? do_raw_spin_unlock+0x4f/0x220 [ 771.513871] p9_client_create+0xa76/0x1230 [ 771.514378] ? p9_client_flush+0x430/0x430 [ 771.514873] ? trace_hardirqs_on+0x5b/0x180 [ 771.515367] ? lockdep_init_map_type+0x2c7/0x780 [ 771.515915] ? __raw_spin_lock_init+0x36/0x110 [ 771.516442] v9fs_session_init+0x1dd/0x1680 [ 771.516937] ? lock_release+0x680/0x680 [ 771.517438] ? kmem_cache_alloc_trace+0x151/0x320 [ 771.518146] ? v9fs_show_options+0x690/0x690 [ 771.518744] ? trace_hardirqs_on+0x5b/0x180 [ 771.519349] ? kasan_unpoison_shadow+0x33/0x50 [ 771.519964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 771.520554] v9fs_mount+0x79/0x8f0 [ 771.520960] ? v9fs_write_inode+0x60/0x60 [ 771.521431] legacy_get_tree+0x105/0x220 [ 771.521904] vfs_get_tree+0x8e/0x300 [ 771.522326] path_mount+0x1331/0x21c0 [ 771.522761] ? strncpy_from_user+0x9e/0x470 [ 771.523330] ? finish_automount+0xa90/0xa90 [ 771.523883] ? getname_flags.part.0+0x1dd/0x4f0 [ 771.524411] ? _copy_from_user+0xfb/0x1b0 [ 771.525007] __x64_sys_mount+0x282/0x300 [ 771.525648] ? copy_mnt_ns+0xa00/0xa00 [ 771.526092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 771.526807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 771.527514] do_syscall_64+0x33/0x40 [ 771.528079] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 771.528715] RIP: 0033:0x7fbd09823b19 [ 771.529277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 771.531790] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 771.532758] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 771.533717] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 771.534673] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 771.535628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 771.536699] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:32:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:58 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}, 0x1000000}], 0x1, 0x0) 17:32:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:32:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:32:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:32:58 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:32:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:32:58 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 41) [ 771.941647] FAULT_INJECTION: forcing a failure. [ 771.941647] name failslab, interval 1, probability 0, space 0, times 0 [ 771.942972] CPU: 1 PID: 6628 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 771.943761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 771.944734] Call Trace: [ 771.945059] dump_stack+0x107/0x167 [ 771.945496] should_fail.cold+0x5/0xa [ 771.945950] ? create_object.isra.0+0x3a/0xa20 [ 771.946497] should_failslab+0x5/0x20 [ 771.946943] kmem_cache_alloc+0x5b/0x310 [ 771.947422] create_object.isra.0+0x3a/0xa20 [ 771.947942] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 771.948543] kmem_cache_alloc+0x159/0x310 [ 771.949040] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 771.949705] idr_get_free+0x4b5/0x8f0 [ 771.950168] idr_alloc_u32+0x170/0x2d0 [ 771.950640] ? __fprop_inc_percpu_max+0x130/0x130 [ 771.951208] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 771.951840] ? lock_release+0x680/0x680 [ 771.952309] idr_alloc+0xc2/0x130 [ 771.952715] ? idr_alloc_u32+0x2d0/0x2d0 [ 771.953195] ? rwlock_bug.part.0+0x90/0x90 [ 771.953705] p9_client_prepare_req.part.0+0x612/0xac0 [ 771.954327] p9_client_rpc+0x220/0x1370 [ 771.954799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 771.955422] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 771.956069] ? pipe_poll+0x21b/0x800 [ 771.956507] ? p9_fd_close+0x4a0/0x4a0 [ 771.956962] ? wait_for_partner+0x3c0/0x3c0 [ 771.957471] ? p9_fd_poll+0x1e0/0x2c0 [ 771.957920] ? p9_fd_create+0x357/0x4a0 [ 771.958395] ? p9_conn_create+0x510/0x510 [ 771.958880] ? p9_client_create+0x798/0x1230 [ 771.959396] ? kfree+0xd7/0x340 [ 771.959782] ? do_raw_spin_unlock+0x4f/0x220 [ 771.960311] p9_client_create+0xa76/0x1230 [ 771.960815] ? p9_client_flush+0x430/0x430 [ 771.961318] ? trace_hardirqs_on+0x5b/0x180 [ 771.961827] ? lockdep_init_map_type+0x2c7/0x780 [ 771.962388] ? __raw_spin_lock_init+0x36/0x110 [ 771.962930] v9fs_session_init+0x1dd/0x1680 [ 771.963435] ? lock_release+0x680/0x680 [ 771.963908] ? kmem_cache_alloc_trace+0x151/0x320 [ 771.964475] ? v9fs_show_options+0x690/0x690 [ 771.964975] ? trace_hardirqs_on+0x5b/0x180 [ 771.965480] ? kasan_unpoison_shadow+0x33/0x50 [ 771.965998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 771.966598] v9fs_mount+0x79/0x8f0 [ 771.967014] ? v9fs_write_inode+0x60/0x60 [ 771.967483] legacy_get_tree+0x105/0x220 [ 771.967957] vfs_get_tree+0x8e/0x300 [ 771.968375] path_mount+0x1331/0x21c0 [ 771.968815] ? strncpy_from_user+0x9e/0x470 [ 771.969302] ? finish_automount+0xa90/0xa90 [ 771.969792] ? getname_flags.part.0+0x1dd/0x4f0 [ 771.970315] ? _copy_from_user+0xfb/0x1b0 [ 771.970787] __x64_sys_mount+0x282/0x300 [ 771.971246] ? copy_mnt_ns+0xa00/0xa00 [ 771.971686] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 771.972290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 771.972873] do_syscall_64+0x33/0x40 [ 771.973293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 771.973875] RIP: 0033:0x7fbd09823b19 [ 771.974298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 771.976393] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 771.977288] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 771.978125] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 771.978958] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 771.979782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 771.980624] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:33:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 42) 17:33:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) 17:33:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:13 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}, 0x2000000}], 0x1, 0x0) 17:33:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:33:13 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:33:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) [ 786.773544] FAULT_INJECTION: forcing a failure. [ 786.773544] name failslab, interval 1, probability 0, space 0, times 0 [ 786.776514] CPU: 1 PID: 6645 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 786.778258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 786.780396] Call Trace: [ 786.781113] dump_stack+0x107/0x167 [ 786.782055] should_fail.cold+0x5/0xa [ 786.783041] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 17:33:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) [ 786.784521] should_failslab+0x5/0x20 [ 786.785661] kmem_cache_alloc+0x5b/0x310 [ 786.786707] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 786.788206] idr_get_free+0x4b5/0x8f0 [ 786.789429] idr_alloc_u32+0x170/0x2d0 [ 786.790562] ? __fprop_inc_percpu_max+0x130/0x130 [ 786.791966] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 786.793578] ? lock_release+0x680/0x680 [ 786.794860] idr_alloc+0xc2/0x130 [ 786.795827] ? idr_alloc_u32+0x2d0/0x2d0 [ 786.797098] ? rwlock_bug.part.0+0x90/0x90 [ 786.798459] p9_client_prepare_req.part.0+0x612/0xac0 [ 786.799964] p9_client_rpc+0x220/0x1370 [ 786.801152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 786.802742] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 786.804393] ? pipe_poll+0x21b/0x800 [ 786.805542] ? p9_fd_close+0x4a0/0x4a0 [ 786.806677] ? wait_for_partner+0x3c0/0x3c0 [ 786.807967] ? p9_fd_poll+0x1e0/0x2c0 [ 786.809051] ? p9_fd_create+0x357/0x4a0 [ 786.810269] ? p9_conn_create+0x510/0x510 [ 786.811437] ? p9_client_create+0x798/0x1230 [ 786.812614] ? kfree+0xd7/0x340 [ 786.813304] ? do_raw_spin_unlock+0x4f/0x220 [ 786.814269] p9_client_create+0xa76/0x1230 [ 786.815166] ? p9_client_flush+0x430/0x430 [ 786.816092] ? trace_hardirqs_on+0x5b/0x180 [ 786.817032] ? lockdep_init_map_type+0x2c7/0x780 [ 786.818059] ? __raw_spin_lock_init+0x36/0x110 [ 786.819056] v9fs_session_init+0x1dd/0x1680 [ 786.819999] ? lock_release+0x680/0x680 [ 786.820971] ? kmem_cache_alloc_trace+0x151/0x320 [ 786.822231] ? v9fs_show_options+0x690/0x690 [ 786.823371] ? trace_hardirqs_on+0x5b/0x180 [ 786.824446] ? kasan_unpoison_shadow+0x33/0x50 [ 786.825617] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 786.826793] v9fs_mount+0x79/0x8f0 [ 786.827741] ? v9fs_write_inode+0x60/0x60 [ 786.828737] legacy_get_tree+0x105/0x220 [ 786.829611] vfs_get_tree+0x8e/0x300 [ 786.830420] path_mount+0x1331/0x21c0 [ 786.831248] ? strncpy_from_user+0x9e/0x470 [ 786.832168] ? finish_automount+0xa90/0xa90 [ 786.833084] ? getname_flags.part.0+0x1dd/0x4f0 [ 786.834075] ? _copy_from_user+0xfb/0x1b0 [ 786.834958] __x64_sys_mount+0x282/0x300 [ 786.835811] ? copy_mnt_ns+0xa00/0xa00 [ 786.836648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 786.837759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 786.838842] do_syscall_64+0x33/0x40 [ 786.839792] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 786.841086] RIP: 0033:0x7fbd09823b19 [ 786.841890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.845880] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 786.847482] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 786.848993] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 786.850501] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 17:33:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) [ 786.852013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 786.853736] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:33:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:13 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}, 0x11000000}], 0x1, 0x0) 17:33:28 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}, 0xffffff7f}], 0x1, 0x0) 17:33:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:28 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:28 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:33:28 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) 17:33:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:33:28 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 43) 17:33:28 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x2, 0x0) [ 801.480969] FAULT_INJECTION: forcing a failure. [ 801.480969] name failslab, interval 1, probability 0, space 0, times 0 [ 801.483367] CPU: 1 PID: 6682 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 801.484817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 801.486589] Call Trace: [ 801.487152] dump_stack+0x107/0x167 [ 801.487933] should_fail.cold+0x5/0xa [ 801.488747] ? create_object.isra.0+0x3a/0xa20 [ 801.489706] should_failslab+0x5/0x20 [ 801.490504] kmem_cache_alloc+0x5b/0x310 [ 801.491367] create_object.isra.0+0x3a/0xa20 [ 801.492294] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 801.493376] kmem_cache_alloc+0x159/0x310 [ 801.494268] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 801.495444] idr_get_free+0x4b5/0x8f0 [ 801.496269] idr_alloc_u32+0x170/0x2d0 [ 801.497104] ? __fprop_inc_percpu_max+0x130/0x130 [ 801.498120] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 801.499267] ? lock_release+0x680/0x680 [ 801.500105] idr_alloc+0xc2/0x130 [ 801.500858] ? idr_alloc_u32+0x2d0/0x2d0 [ 801.501706] ? rwlock_bug.part.0+0x90/0x90 [ 801.502609] p9_client_prepare_req.part.0+0x612/0xac0 [ 801.503708] p9_client_rpc+0x220/0x1370 [ 801.504547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 801.505649] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 801.506782] ? pipe_poll+0x21b/0x800 [ 801.507559] ? p9_fd_close+0x4a0/0x4a0 [ 801.508380] ? wait_for_partner+0x3c0/0x3c0 [ 801.509503] ? p9_fd_poll+0x1e0/0x2c0 [ 801.510552] ? p9_fd_create+0x357/0x4a0 [ 801.511495] ? p9_conn_create+0x510/0x510 [ 801.512399] ? p9_client_create+0x798/0x1230 [ 801.513344] ? kfree+0xd7/0x340 [ 801.514050] ? do_raw_spin_unlock+0x4f/0x220 [ 801.515005] p9_client_create+0xa76/0x1230 [ 801.515922] ? p9_client_flush+0x430/0x430 [ 801.516840] ? trace_hardirqs_on+0x5b/0x180 [ 801.517758] ? lockdep_init_map_type+0x2c7/0x780 [ 801.518775] ? __raw_spin_lock_init+0x36/0x110 [ 801.519763] v9fs_session_init+0x1dd/0x1680 [ 801.520696] ? lock_release+0x680/0x680 [ 801.521558] ? kmem_cache_alloc_trace+0x151/0x320 [ 801.522592] ? v9fs_show_options+0x690/0x690 [ 801.523544] ? trace_hardirqs_on+0x5b/0x180 [ 801.524468] ? kasan_unpoison_shadow+0x33/0x50 [ 801.525419] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 801.526630] v9fs_mount+0x79/0x8f0 [ 801.527407] ? v9fs_write_inode+0x60/0x60 [ 801.528557] legacy_get_tree+0x105/0x220 [ 801.529411] vfs_get_tree+0x8e/0x300 [ 801.530347] path_mount+0x1331/0x21c0 [ 801.531323] ? strncpy_from_user+0x9e/0x470 [ 801.532341] ? finish_automount+0xa90/0xa90 [ 801.533391] ? getname_flags.part.0+0x1dd/0x4f0 [ 801.534659] ? _copy_from_user+0xfb/0x1b0 [ 801.535545] __x64_sys_mount+0x282/0x300 [ 801.536539] ? copy_mnt_ns+0xa00/0xa00 [ 801.537604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 801.538809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 801.539971] do_syscall_64+0x33/0x40 [ 801.540828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 801.542113] RIP: 0033:0x7fbd09823b19 [ 801.542909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 801.546777] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 801.548573] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 801.550385] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 801.551902] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 801.553417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.554947] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:33:28 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:33:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:33:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:28 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:28 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:28 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x8, 0x0) 17:33:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r1) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:33:28 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 44) 17:33:28 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:33:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:33:28 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0xb8, 0x0) [ 802.130691] FAULT_INJECTION: forcing a failure. [ 802.130691] name failslab, interval 1, probability 0, space 0, times 0 [ 802.133137] CPU: 1 PID: 6713 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 802.134751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 802.136512] Call Trace: [ 802.137239] dump_stack+0x107/0x167 [ 802.138096] should_fail.cold+0x5/0xa [ 802.138914] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 802.140141] should_failslab+0x5/0x20 [ 802.140962] kmem_cache_alloc+0x5b/0x310 [ 802.141850] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 802.143037] idr_get_free+0x4b5/0x8f0 [ 802.143865] idr_alloc_u32+0x170/0x2d0 [ 802.144696] ? __fprop_inc_percpu_max+0x130/0x130 [ 802.145706] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 802.146979] ? lock_release+0x680/0x680 [ 802.147820] idr_alloc+0xc2/0x130 [ 802.148600] ? idr_alloc_u32+0x2d0/0x2d0 [ 802.149659] ? rwlock_bug.part.0+0x90/0x90 [ 802.150566] p9_client_prepare_req.part.0+0x612/0xac0 [ 802.151687] p9_client_rpc+0x220/0x1370 [ 802.152540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 802.153676] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 802.154828] ? pipe_poll+0x21b/0x800 [ 802.155628] ? p9_fd_close+0x4a0/0x4a0 [ 802.156474] ? wait_for_partner+0x3c0/0x3c0 [ 802.157541] ? p9_fd_poll+0x1e0/0x2c0 [ 802.158539] ? p9_fd_create+0x357/0x4a0 [ 802.159465] ? p9_conn_create+0x510/0x510 [ 802.160368] ? p9_client_create+0x798/0x1230 [ 802.161314] ? kfree+0xd7/0x340 [ 802.162019] ? do_raw_spin_unlock+0x4f/0x220 [ 802.162978] p9_client_create+0xa76/0x1230 [ 802.163982] ? p9_client_flush+0x430/0x430 [ 802.165045] ? trace_hardirqs_on+0x5b/0x180 [ 802.166132] ? lockdep_init_map_type+0x2c7/0x780 [ 802.167156] ? __raw_spin_lock_init+0x36/0x110 [ 802.168167] v9fs_session_init+0x1dd/0x1680 [ 802.169102] ? lock_release+0x680/0x680 [ 802.169976] ? kmem_cache_alloc_trace+0x151/0x320 [ 802.171154] ? v9fs_show_options+0x690/0x690 [ 802.172330] ? trace_hardirqs_on+0x5b/0x180 [ 802.173275] ? kasan_unpoison_shadow+0x33/0x50 [ 802.174265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 802.175361] v9fs_mount+0x79/0x8f0 [ 802.176137] ? v9fs_write_inode+0x60/0x60 [ 802.177008] legacy_get_tree+0x105/0x220 [ 802.177932] vfs_get_tree+0x8e/0x300 [ 802.178864] path_mount+0x1331/0x21c0 [ 802.179846] ? strncpy_from_user+0x9e/0x470 [ 802.180764] ? finish_automount+0xa90/0xa90 [ 802.181685] ? getname_flags.part.0+0x1dd/0x4f0 [ 802.182689] ? _copy_from_user+0xfb/0x1b0 [ 802.183682] __x64_sys_mount+0x282/0x300 [ 802.184700] ? copy_mnt_ns+0xa00/0xa00 [ 802.185724] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 802.186937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 802.188231] do_syscall_64+0x33/0x40 [ 802.189096] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 802.190321] RIP: 0033:0x7fbd09823b19 [ 802.191260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 802.195680] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 802.197297] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 802.198832] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 802.200338] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 802.201859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 802.203369] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:33:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 45) 17:33:44 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(0x0, 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:33:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r1) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:33:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:44 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x20002a81, 0x0) 17:33:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 818.054973] FAULT_INJECTION: forcing a failure. [ 818.054973] name failslab, interval 1, probability 0, space 0, times 0 [ 818.056398] CPU: 0 PID: 6736 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 818.057246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 818.058281] Call Trace: [ 818.058626] dump_stack+0x107/0x167 [ 818.059082] should_fail.cold+0x5/0xa [ 818.059570] ? create_object.isra.0+0x3a/0xa20 [ 818.060140] should_failslab+0x5/0x20 [ 818.060635] kmem_cache_alloc+0x5b/0x310 [ 818.061143] create_object.isra.0+0x3a/0xa20 [ 818.061697] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 818.062338] kmem_cache_alloc+0x159/0x310 [ 818.062866] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 818.063581] idr_get_free+0x4b5/0x8f0 [ 818.064069] idr_alloc_u32+0x170/0x2d0 [ 818.064574] ? __fprop_inc_percpu_max+0x130/0x130 [ 818.065188] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 818.065854] ? lock_release+0x680/0x680 [ 818.066353] idr_alloc+0xc2/0x130 [ 818.066786] ? idr_alloc_u32+0x2d0/0x2d0 [ 818.067294] ? rwlock_bug.part.0+0x90/0x90 [ 818.067835] p9_client_prepare_req.part.0+0x612/0xac0 [ 818.068492] p9_client_rpc+0x220/0x1370 [ 818.068986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 818.069652] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 818.070318] ? pipe_poll+0x21b/0x800 [ 818.070778] ? p9_fd_close+0x4a0/0x4a0 [ 818.071263] ? wait_for_partner+0x3c0/0x3c0 [ 818.071799] ? p9_fd_poll+0x1e0/0x2c0 [ 818.072277] ? p9_fd_create+0x357/0x4a0 [ 818.072784] ? p9_conn_create+0x510/0x510 [ 818.073297] ? p9_client_create+0x798/0x1230 [ 818.073850] ? kfree+0xd7/0x340 [ 818.074260] ? do_raw_spin_unlock+0x4f/0x220 [ 818.074818] p9_client_create+0xa76/0x1230 [ 818.075350] ? p9_client_flush+0x430/0x430 [ 818.075877] ? trace_hardirqs_on+0x5b/0x180 [ 818.076430] ? lockdep_init_map_type+0x2c7/0x780 [ 818.077021] ? __raw_spin_lock_init+0x36/0x110 [ 818.077597] v9fs_session_init+0x1dd/0x1680 [ 818.078136] ? lock_release+0x680/0x680 [ 818.078645] ? kmem_cache_alloc_trace+0x151/0x320 [ 818.079248] ? v9fs_show_options+0x690/0x690 [ 818.079813] ? trace_hardirqs_on+0x5b/0x180 [ 818.080361] ? kasan_unpoison_shadow+0x33/0x50 [ 818.080930] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 818.081565] v9fs_mount+0x79/0x8f0 [ 818.082007] ? v9fs_write_inode+0x60/0x60 [ 818.082531] legacy_get_tree+0x105/0x220 [ 818.083043] vfs_get_tree+0x8e/0x300 [ 818.083518] path_mount+0x1331/0x21c0 [ 818.083997] ? strncpy_from_user+0x9e/0x470 [ 818.084540] ? finish_automount+0xa90/0xa90 [ 818.085076] ? getname_flags.part.0+0x1dd/0x4f0 [ 818.085658] ? _copy_from_user+0xfb/0x1b0 [ 818.086182] __x64_sys_mount+0x282/0x300 [ 818.086686] ? copy_mnt_ns+0xa00/0xa00 [ 818.087171] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 818.087820] ? syscall_enter_from_user_mode+0x1d/0x50 [ 818.088481] do_syscall_64+0x33/0x40 [ 818.088939] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 818.089575] RIP: 0033:0x7fbd09823b19 [ 818.090033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 818.092320] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 17:33:44 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 818.093269] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 818.094354] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 818.095235] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 818.096110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 818.096996] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:33:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r1) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:33:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:33:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:33:45 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x2) 17:33:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 46) [ 818.509582] FAULT_INJECTION: forcing a failure. [ 818.509582] name failslab, interval 1, probability 0, space 0, times 0 [ 818.510981] CPU: 0 PID: 6764 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 818.511758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 818.512709] Call Trace: [ 818.513013] dump_stack+0x107/0x167 [ 818.513425] should_fail.cold+0x5/0xa [ 818.513857] ? p9pdu_readf+0xadb/0x1d40 [ 818.514314] should_failslab+0x5/0x20 [ 818.514749] __kmalloc+0x72/0x390 [ 818.515148] p9pdu_readf+0xadb/0x1d40 [ 818.515588] ? pipe_poll+0x21b/0x800 [ 818.516006] ? p9pdu_writef+0x100/0x100 [ 818.516473] ? wait_woken+0x250/0x250 [ 818.516907] ? p9_fd_create+0x357/0x4a0 [ 818.517357] ? p9_conn_create+0x510/0x510 [ 818.517828] ? p9_client_create+0x798/0x1230 [ 818.518330] ? kfree+0xd7/0x340 [ 818.518703] ? do_raw_spin_unlock+0x4f/0x220 [ 818.519212] p9_client_create+0xaee/0x1230 [ 818.519707] ? p9_client_flush+0x430/0x430 [ 818.520192] ? trace_hardirqs_on+0x5b/0x180 [ 818.520691] ? lockdep_init_map_type+0x2c7/0x780 [ 818.521236] ? __raw_spin_lock_init+0x36/0x110 [ 818.521764] v9fs_session_init+0x1dd/0x1680 [ 818.522254] ? lock_release+0x680/0x680 [ 818.522718] ? kmem_cache_alloc_trace+0x151/0x320 [ 818.523271] ? v9fs_show_options+0x690/0x690 [ 818.523775] ? trace_hardirqs_on+0x5b/0x180 [ 818.524270] ? kasan_unpoison_shadow+0x33/0x50 [ 818.524795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 818.525377] v9fs_mount+0x79/0x8f0 [ 818.525788] ? v9fs_write_inode+0x60/0x60 [ 818.526261] legacy_get_tree+0x105/0x220 [ 818.526725] vfs_get_tree+0x8e/0x300 [ 818.527152] path_mount+0x1331/0x21c0 [ 818.527594] ? strncpy_from_user+0x9e/0x470 [ 818.528086] ? finish_automount+0xa90/0xa90 [ 818.528591] ? getname_flags.part.0+0x1dd/0x4f0 [ 818.529122] ? _copy_from_user+0xfb/0x1b0 [ 818.529600] __x64_sys_mount+0x282/0x300 [ 818.530062] ? copy_mnt_ns+0xa00/0xa00 [ 818.530509] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 818.531105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 818.531701] do_syscall_64+0x33/0x40 [ 818.532125] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 818.532714] RIP: 0033:0x7fbd09823b19 [ 818.533140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 818.535238] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 818.536106] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 818.536924] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 818.537755] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 818.538567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 818.539383] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:34:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 47) 17:34:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:34:00 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:34:00 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x8) 17:34:00 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(0x0, 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:34:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r1) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:34:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:34:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) [ 833.256579] FAULT_INJECTION: forcing a failure. [ 833.256579] name failslab, interval 1, probability 0, space 0, times 0 [ 833.258473] CPU: 1 PID: 6779 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 833.259583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 833.260935] Call Trace: [ 833.261363] dump_stack+0x107/0x167 [ 833.261955] should_fail.cold+0x5/0xa [ 833.262571] ? p9pdu_readf+0xadb/0x1d40 [ 833.263198] should_failslab+0x5/0x20 [ 833.263815] __kmalloc+0x72/0x390 [ 833.264362] p9pdu_readf+0xadb/0x1d40 [ 833.264989] ? pipe_poll+0x21b/0x800 [ 833.265590] ? p9pdu_writef+0x100/0x100 [ 833.266213] ? p9_fd_poll+0x1e0/0x2c0 [ 833.266822] ? p9_fd_create+0x357/0x4a0 [ 833.267468] ? p9_conn_create+0x510/0x510 [ 833.268150] ? p9_client_create+0x798/0x1230 [ 833.268860] ? kfree+0xd7/0x340 [ 833.269400] ? do_raw_spin_unlock+0x4f/0x220 [ 833.270105] p9_client_create+0xaee/0x1230 [ 833.270828] ? p9_client_flush+0x430/0x430 [ 833.271517] ? trace_hardirqs_on+0x5b/0x180 [ 833.272200] ? lockdep_init_map_type+0x2c7/0x780 [ 833.272963] ? __raw_spin_lock_init+0x36/0x110 [ 833.273684] v9fs_session_init+0x1dd/0x1680 [ 833.274365] ? lock_release+0x680/0x680 [ 833.275047] ? kmem_cache_alloc_trace+0x151/0x320 [ 833.275939] ? v9fs_show_options+0x690/0x690 [ 833.276815] ? trace_hardirqs_on+0x5b/0x180 [ 833.277607] ? kasan_unpoison_shadow+0x33/0x50 [ 833.278354] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 833.279188] v9fs_mount+0x79/0x8f0 [ 833.279760] ? v9fs_write_inode+0x60/0x60 [ 833.280414] legacy_get_tree+0x105/0x220 [ 833.281079] vfs_get_tree+0x8e/0x300 [ 833.281693] path_mount+0x1331/0x21c0 [ 833.282307] ? strncpy_from_user+0x9e/0x470 [ 833.283004] ? finish_automount+0xa90/0xa90 [ 833.283706] ? getname_flags.part.0+0x1dd/0x4f0 [ 833.284446] ? _copy_from_user+0xfb/0x1b0 [ 833.285116] __x64_sys_mount+0x282/0x300 [ 833.285762] ? copy_mnt_ns+0xa00/0xa00 [ 833.286383] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 833.287215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 833.288030] do_syscall_64+0x33/0x40 [ 833.288641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 833.289451] RIP: 0033:0x7fbd09823b19 [ 833.290147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 833.293289] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 833.294488] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 833.295602] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 833.296706] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 833.297825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 833.298931] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:34:00 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x11) 17:34:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:34:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:34:00 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(0x0, 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:34:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:34:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:34:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:34:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 48) [ 833.718402] FAULT_INJECTION: forcing a failure. [ 833.718402] name failslab, interval 1, probability 0, space 0, times 0 [ 833.720885] CPU: 0 PID: 6805 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 833.722317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 833.724054] Call Trace: [ 833.724631] dump_stack+0x107/0x167 [ 833.725405] should_fail.cold+0x5/0xa [ 833.726213] should_failslab+0x5/0x20 [ 833.727012] __kmalloc_track_caller+0x79/0x370 [ 833.727973] ? kasprintf+0xbb/0xf0 [ 833.728726] ? __delete_object+0xb3/0x100 [ 833.729611] kvasprintf+0xb5/0x150 [ 833.730362] ? bust_spinlocks+0xe0/0xe0 [ 833.731196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 833.732315] kasprintf+0xbb/0xf0 [ 833.733036] ? kvasprintf_const+0x1a0/0x1a0 [ 833.733948] ? kmem_cache_free+0x249/0x2d0 [ 833.734846] ? p9_client_create+0xbfa/0x1230 [ 833.735779] p9_client_create+0xc1b/0x1230 [ 833.736691] ? p9_client_flush+0x430/0x430 [ 833.737582] ? trace_hardirqs_on+0x5b/0x180 [ 833.738490] ? lockdep_init_map_type+0x2c7/0x780 [ 833.739484] ? __raw_spin_lock_init+0x36/0x110 [ 833.740447] v9fs_session_init+0x1dd/0x1680 [ 833.741374] ? lock_release+0x680/0x680 [ 833.742217] ? kmem_cache_alloc_trace+0x151/0x320 [ 833.743232] ? v9fs_show_options+0x690/0x690 [ 833.744165] ? trace_hardirqs_on+0x5b/0x180 [ 833.745088] ? kasan_unpoison_shadow+0x33/0x50 [ 833.746047] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 833.747150] v9fs_mount+0x79/0x8f0 [ 833.747891] ? v9fs_write_inode+0x60/0x60 [ 833.748771] legacy_get_tree+0x105/0x220 [ 833.749625] vfs_get_tree+0x8e/0x300 [ 833.750408] path_mount+0x1331/0x21c0 [ 833.751212] ? strncpy_from_user+0x9e/0x470 [ 833.752117] ? finish_automount+0xa90/0xa90 [ 833.753042] ? getname_flags.part.0+0x1dd/0x4f0 [ 833.754017] ? _copy_from_user+0xfb/0x1b0 [ 833.754898] __x64_sys_mount+0x282/0x300 [ 833.755748] ? copy_mnt_ns+0xa00/0xa00 [ 833.756576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 833.757688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 833.758781] do_syscall_64+0x33/0x40 [ 833.759562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 833.760647] RIP: 0033:0x7fbd09823b19 [ 833.761426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 833.765313] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 833.766915] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 833.768417] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 833.769928] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 833.771422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 833.772929] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:34:14 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x1100) 17:34:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 49) 17:34:14 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:34:14 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, 0x0) (fail_nth: 1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:34:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:34:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:34:14 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:34:14 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x0) (fail_nth: 1) [ 847.912041] FAULT_INJECTION: forcing a failure. [ 847.912041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.914608] CPU: 1 PID: 6822 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 847.916037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 847.917786] Call Trace: [ 847.918348] dump_stack+0x107/0x167 [ 847.919121] should_fail.cold+0x5/0xa [ 847.919931] _copy_from_user+0x2e/0x1b0 [ 847.920759] __do_splice+0xf7/0x250 [ 847.921517] ? do_splice+0x1af0/0x1af0 [ 847.922342] __x64_sys_splice+0x19c/0x250 [ 847.923213] do_syscall_64+0x33/0x40 [ 847.923991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 847.925070] RIP: 0033:0x7f947ef6bb19 [ 847.925851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 847.929694] RSP: 002b:00007f947c4e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 847.931288] RAX: ffffffffffffffda RBX: 00007f947f07ef60 RCX: 00007f947ef6bb19 [ 847.932785] RDX: 0000000000000004 RSI: 00000000200007c0 RDI: 0000000000000005 [ 847.934266] RBP: 00007f947c4e11d0 R08: 000000000000001f R09: 0000000000000000 [ 847.935756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.937255] R13: 00007fff73fae6ff R14: 00007f947c4e1300 R15: 0000000000022000 17:34:14 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x34000) [ 847.955558] FAULT_INJECTION: forcing a failure. [ 847.955558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.958105] CPU: 0 PID: 6821 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 847.959509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 847.961244] Call Trace: [ 847.961797] dump_stack+0x107/0x167 [ 847.962551] should_fail.cold+0x5/0xa [ 847.963336] _copy_to_user+0x2e/0x180 [ 847.964129] simple_read_from_buffer+0xcc/0x160 [ 847.965129] proc_fail_nth_read+0x198/0x230 [ 847.966031] ? proc_sessionid_read+0x230/0x230 [ 847.966984] ? security_file_permission+0xb1/0xe0 [ 847.968005] ? proc_sessionid_read+0x230/0x230 [ 847.968978] vfs_read+0x228/0x620 [ 847.969710] ksys_read+0x12d/0x260 [ 847.970449] ? vfs_write+0xb10/0xb10 [ 847.971237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 847.972336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 847.973435] do_syscall_64+0x33/0x40 [ 847.974232] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 847.975307] RIP: 0033:0x7f4b047c369c [ 847.976083] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 847.979955] RSP: 002b:00007f4b01d86170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 847.981552] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b047c369c [ 847.983047] RDX: 000000000000000f RSI: 00007f4b01d861e0 RDI: 0000000000000004 [ 847.984533] RBP: 00007f4b01d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 847.986039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.987547] R13: 00007ffd51f8cacf R14: 00007f4b01d86300 R15: 0000000000022000 17:34:14 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x0) (fail_nth: 2) [ 848.029501] FAULT_INJECTION: forcing a failure. [ 848.029501] name failslab, interval 1, probability 0, space 0, times 0 [ 848.032226] CPU: 0 PID: 6827 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 848.033739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 848.035473] Call Trace: [ 848.036028] dump_stack+0x107/0x167 [ 848.036813] should_fail.cold+0x5/0xa [ 848.037620] ? create_object.isra.0+0x3a/0xa20 [ 848.038578] should_failslab+0x5/0x20 [ 848.039374] kmem_cache_alloc+0x5b/0x310 [ 848.040221] ? vsnprintf+0x4ba/0x1600 [ 848.041027] create_object.isra.0+0x3a/0xa20 [ 848.041941] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 848.043011] __kmalloc_track_caller+0x177/0x370 [ 848.043990] ? kasprintf+0xbb/0xf0 [ 848.044756] kvasprintf+0xb5/0x150 [ 848.045506] ? bust_spinlocks+0xe0/0xe0 [ 848.046338] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 848.047448] kasprintf+0xbb/0xf0 [ 848.048162] ? kvasprintf_const+0x1a0/0x1a0 [ 848.049076] ? kmem_cache_free+0x249/0x2d0 [ 848.049970] ? p9_client_create+0xbfa/0x1230 [ 848.050894] p9_client_create+0xc1b/0x1230 [ 848.051794] ? p9_client_flush+0x430/0x430 [ 848.052681] ? trace_hardirqs_on+0x5b/0x180 [ 848.053590] ? asm_common_interrupt+0x1e/0x40 [ 848.054547] v9fs_session_init+0x1dd/0x1680 [ 848.055448] ? lock_release+0x680/0x680 [ 848.056290] ? kmem_cache_alloc_trace+0x151/0x320 [ 848.057309] ? v9fs_show_options+0x690/0x690 [ 848.058235] ? trace_hardirqs_on+0x5b/0x180 [ 848.059116] ? kasan_unpoison_shadow+0x33/0x50 [ 848.060068] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 848.061148] v9fs_mount+0x79/0x8f0 [ 848.061898] ? v9fs_write_inode+0x60/0x60 [ 848.062773] legacy_get_tree+0x105/0x220 [ 848.063626] vfs_get_tree+0x8e/0x300 [ 848.064410] path_mount+0x1331/0x21c0 [ 848.065223] ? strncpy_from_user+0x9e/0x470 [ 848.066126] ? finish_automount+0xa90/0xa90 [ 848.067036] ? getname_flags.part.0+0x1dd/0x4f0 [ 848.068013] ? _copy_from_user+0xfb/0x1b0 [ 848.068902] __x64_sys_mount+0x282/0x300 [ 848.069730] ? copy_mnt_ns+0xa00/0xa00 [ 848.070556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 848.071650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 848.072746] do_syscall_64+0x33/0x40 [ 848.073526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.074597] RIP: 0033:0x7fbd09823b19 [ 848.075372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.079226] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 848.080832] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 848.082626] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 848.084287] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 848.085846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.087342] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:34:14 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:34:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:34:14 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5329, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:34:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:34:15 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x11) 17:34:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 50) [ 848.268797] FAULT_INJECTION: forcing a failure. [ 848.268797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.271266] CPU: 0 PID: 6837 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 848.272662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 848.274345] Call Trace: [ 848.274884] dump_stack+0x107/0x167 [ 848.275633] should_fail.cold+0x5/0xa [ 848.276445] _copy_to_user+0x2e/0x180 [ 848.277237] __do_splice+0x19a/0x250 [ 848.278004] ? do_splice+0x1af0/0x1af0 [ 848.278809] __x64_sys_splice+0x19c/0x250 [ 848.279658] do_syscall_64+0x33/0x40 [ 848.280439] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.281503] RIP: 0033:0x7f947ef6bb19 [ 848.282282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.286038] RSP: 002b:00007f947c4e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 848.287641] RAX: ffffffffffffffda RBX: 00007f947f07ef60 RCX: 00007f947ef6bb19 [ 848.289148] RDX: 0000000000000004 RSI: 00000000200007c0 RDI: 0000000000000005 [ 848.290824] RBP: 00007f947c4e11d0 R08: 000000000000001f R09: 0000000000000000 [ 848.292323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.293837] R13: 00007fff73fae6ff R14: 00007f947c4e1300 R15: 0000000000022000 [ 848.482135] FAULT_INJECTION: forcing a failure. [ 848.482135] name failslab, interval 1, probability 0, space 0, times 0 [ 848.485022] CPU: 1 PID: 6851 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 848.486466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 848.488203] Call Trace: [ 848.488768] dump_stack+0x107/0x167 [ 848.489535] should_fail.cold+0x5/0xa [ 848.490344] should_failslab+0x5/0x20 [ 848.491142] __kmalloc_track_caller+0x79/0x370 [ 848.492094] ? kstrdup_const+0x53/0x80 [ 848.492917] ? kasprintf+0xbb/0xf0 [ 848.493669] kstrdup+0x36/0x70 [ 848.494347] kstrdup_const+0x53/0x80 [ 848.495132] kmem_cache_create_usercopy+0x12f/0x2f0 [ 848.496190] p9_client_create+0xc6a/0x1230 [ 848.497101] ? p9_client_flush+0x430/0x430 [ 848.497997] ? trace_hardirqs_on+0x5b/0x180 [ 848.498900] ? lockdep_init_map_type+0x2c7/0x780 [ 848.499893] ? __raw_spin_lock_init+0x36/0x110 [ 848.500861] v9fs_session_init+0x1dd/0x1680 [ 848.501764] ? lock_release+0x680/0x680 [ 848.502606] ? kmem_cache_alloc_trace+0x151/0x320 [ 848.503618] ? v9fs_show_options+0x690/0x690 [ 848.504554] ? trace_hardirqs_on+0x5b/0x180 [ 848.505469] ? kasan_unpoison_shadow+0x33/0x50 [ 848.506421] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 848.507485] v9fs_mount+0x79/0x8f0 [ 848.508230] ? v9fs_write_inode+0x60/0x60 [ 848.509107] legacy_get_tree+0x105/0x220 [ 848.509966] vfs_get_tree+0x8e/0x300 [ 848.510748] path_mount+0x1331/0x21c0 [ 848.511551] ? strncpy_from_user+0x9e/0x470 [ 848.512460] ? finish_automount+0xa90/0xa90 [ 848.513370] ? getname_flags.part.0+0x1dd/0x4f0 [ 848.514350] ? _copy_from_user+0xfb/0x1b0 [ 848.515229] __x64_sys_mount+0x282/0x300 [ 848.516082] ? copy_mnt_ns+0xa00/0xa00 [ 848.516909] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 848.518019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 848.519105] do_syscall_64+0x33/0x40 [ 848.519888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.520968] RIP: 0033:0x7fbd09823b19 [ 848.521747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.525622] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 848.527220] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 848.528724] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 848.530221] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 848.531719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.533225] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 848.534828] kmem_cache_create(9p-fcall-cache-37) failed with error -12 [ 848.536244] CPU: 1 PID: 6851 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 848.537692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 848.539430] Call Trace: [ 848.540014] dump_stack+0x107/0x167 [ 848.540943] kmem_cache_create_usercopy.cold+0x17/0x65 [ 848.542054] p9_client_create+0xc6a/0x1230 [ 848.542956] ? p9_client_flush+0x430/0x430 [ 848.543849] ? trace_hardirqs_on+0x5b/0x180 [ 848.544769] ? lockdep_init_map_type+0x2c7/0x780 [ 848.545767] ? __raw_spin_lock_init+0x36/0x110 [ 848.546733] v9fs_session_init+0x1dd/0x1680 [ 848.547636] ? lock_release+0x680/0x680 [ 848.548484] ? kmem_cache_alloc_trace+0x151/0x320 [ 848.549508] ? v9fs_show_options+0x690/0x690 [ 848.550440] ? trace_hardirqs_on+0x5b/0x180 [ 848.551344] ? kasan_unpoison_shadow+0x33/0x50 [ 848.552298] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 848.553377] v9fs_mount+0x79/0x8f0 [ 848.554128] ? v9fs_write_inode+0x60/0x60 [ 848.554992] legacy_get_tree+0x105/0x220 [ 848.555842] vfs_get_tree+0x8e/0x300 [ 848.556620] path_mount+0x1331/0x21c0 [ 848.557436] ? strncpy_from_user+0x9e/0x470 [ 848.558341] ? finish_automount+0xa90/0xa90 [ 848.559249] ? getname_flags.part.0+0x1dd/0x4f0 [ 848.560223] ? _copy_from_user+0xfb/0x1b0 [ 848.561111] __x64_sys_mount+0x282/0x300 [ 848.561964] ? copy_mnt_ns+0xa00/0xa00 [ 848.562791] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 848.563892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 848.564984] do_syscall_64+0x33/0x40 [ 848.565762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.566837] RIP: 0033:0x7fbd09823b19 [ 848.567621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.571496] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 848.573098] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 848.574596] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 848.576093] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 848.577594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.579091] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:34:29 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x80000) 17:34:29 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x0) (fail_nth: 3) 17:34:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 51) 17:34:29 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:34:29 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x11) 17:34:29 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:34:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:34:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 862.852886] FAULT_INJECTION: forcing a failure. [ 862.852886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.855313] CPU: 1 PID: 6870 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 862.856774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 862.858498] Call Trace: [ 862.859044] dump_stack+0x107/0x167 [ 862.859791] should_fail.cold+0x5/0xa [ 862.860568] _copy_to_user+0x2e/0x180 [ 862.861361] simple_read_from_buffer+0xcc/0x160 [ 862.862333] proc_fail_nth_read+0x198/0x230 [ 862.863232] ? proc_sessionid_read+0x230/0x230 [ 862.864289] ? security_file_permission+0xb1/0xe0 [ 862.865416] ? proc_sessionid_read+0x230/0x230 [ 862.866666] vfs_read+0x228/0x620 [ 862.867490] ksys_read+0x12d/0x260 [ 862.868217] ? vfs_write+0xb10/0xb10 [ 862.868995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 862.870064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 862.871118] do_syscall_64+0x33/0x40 [ 862.871871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 862.872369] FAULT_INJECTION: forcing a failure. [ 862.872369] name failslab, interval 1, probability 0, space 0, times 0 [ 862.872921] RIP: 0033:0x7f947ef1e69c [ 862.876027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 862.879781] RSP: 002b:00007f947c4e1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 862.881347] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f947ef1e69c [ 862.882813] RDX: 000000000000000f RSI: 00007f947c4e11e0 RDI: 0000000000000006 [ 862.884250] RBP: 00007f947c4e11d0 R08: 0000000000000000 R09: 0000000000000000 [ 862.885712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.887173] R13: 00007fff73fae6ff R14: 00007f947c4e1300 R15: 0000000000022000 [ 862.888650] CPU: 0 PID: 6867 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 862.890112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 862.891854] Call Trace: [ 862.892410] dump_stack+0x107/0x167 [ 862.893188] should_fail.cold+0x5/0xa [ 862.893992] ? create_object.isra.0+0x3a/0xa20 [ 862.894948] should_failslab+0x5/0x20 [ 862.895749] kmem_cache_alloc+0x5b/0x310 [ 862.896599] ? lock_acquire+0x197/0x470 [ 862.897448] create_object.isra.0+0x3a/0xa20 [ 862.898360] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 862.899423] __kmalloc_track_caller+0x177/0x370 [ 862.900401] ? kstrdup_const+0x53/0x80 [ 862.901220] ? kasprintf+0xbb/0xf0 [ 862.901968] kstrdup+0x36/0x70 [ 862.902645] kstrdup_const+0x53/0x80 [ 862.903427] kmem_cache_create_usercopy+0x12f/0x2f0 [ 862.904480] p9_client_create+0xc6a/0x1230 [ 862.905390] ? p9_client_flush+0x430/0x430 [ 862.906275] ? trace_hardirqs_on+0x5b/0x180 [ 862.907178] ? lockdep_init_map_type+0x2c7/0x780 [ 862.908174] ? __raw_spin_lock_init+0x36/0x110 [ 862.909133] v9fs_session_init+0x1dd/0x1680 [ 862.910032] ? lock_release+0x680/0x680 [ 862.910863] ? kmem_cache_alloc_trace+0x151/0x320 [ 862.911863] ? v9fs_show_options+0x690/0x690 [ 862.912779] ? trace_hardirqs_on+0x5b/0x180 [ 862.913682] ? kasan_unpoison_shadow+0x33/0x50 [ 862.914628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 862.915703] v9fs_mount+0x79/0x8f0 [ 862.916443] ? v9fs_write_inode+0x60/0x60 [ 862.917305] legacy_get_tree+0x105/0x220 [ 862.918152] vfs_get_tree+0x8e/0x300 [ 862.918926] path_mount+0x1331/0x21c0 [ 862.919715] ? strncpy_from_user+0x9e/0x470 [ 862.920624] ? finish_automount+0xa90/0xa90 [ 862.921522] ? getname_flags.part.0+0x1dd/0x4f0 [ 862.922496] ? _copy_from_user+0xfb/0x1b0 [ 862.923369] __x64_sys_mount+0x282/0x300 [ 862.924215] ? copy_mnt_ns+0xa00/0xa00 [ 862.925044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 862.926144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 862.927225] do_syscall_64+0x33/0x40 [ 862.927993] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 862.929056] RIP: 0033:0x7fbd09823b19 [ 862.929825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 862.933651] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 862.935214] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 862.936694] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 862.938206] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 862.939681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 862.941184] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:34:29 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x0) 17:34:29 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x400300) 17:34:29 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x11) 17:34:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:34:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:34:29 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x301, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:34:29 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:34:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 52) [ 863.346989] FAULT_INJECTION: forcing a failure. [ 863.346989] name failslab, interval 1, probability 0, space 0, times 0 [ 863.349401] CPU: 1 PID: 6894 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 863.350802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.352504] Call Trace: [ 863.353070] dump_stack+0x107/0x167 [ 863.353831] should_fail.cold+0x5/0xa [ 863.354609] ? create_object.isra.0+0x3a/0xa20 [ 863.355550] should_failslab+0x5/0x20 [ 863.356339] kmem_cache_alloc+0x5b/0x310 [ 863.357188] create_object.isra.0+0x3a/0xa20 [ 863.358091] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 863.359134] kmem_cache_alloc+0x159/0x310 [ 863.359993] kmem_cache_create_usercopy+0x190/0x2f0 [ 863.361042] p9_client_create+0xc6a/0x1230 [ 863.361920] ? p9_client_flush+0x430/0x430 [ 863.362786] ? trace_hardirqs_on+0x5b/0x180 [ 863.363679] ? lockdep_init_map_type+0x2c7/0x780 [ 863.364660] ? __raw_spin_lock_init+0x36/0x110 [ 863.365608] v9fs_session_init+0x1dd/0x1680 [ 863.366484] ? lock_release+0x680/0x680 [ 863.367295] ? kmem_cache_alloc_trace+0x151/0x320 [ 863.368265] ? v9fs_show_options+0x690/0x690 [ 863.369165] ? trace_hardirqs_on+0x5b/0x180 [ 863.370045] ? kasan_unpoison_shadow+0x33/0x50 [ 863.370963] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 863.371985] v9fs_mount+0x79/0x8f0 [ 863.372703] ? v9fs_write_inode+0x60/0x60 [ 863.373553] legacy_get_tree+0x105/0x220 [ 863.374375] vfs_get_tree+0x8e/0x300 [ 863.375126] path_mount+0x1331/0x21c0 [ 863.375898] ? strncpy_from_user+0x9e/0x470 [ 863.376785] ? finish_automount+0xa90/0xa90 [ 863.377669] ? getname_flags.part.0+0x1dd/0x4f0 [ 863.378607] ? _copy_from_user+0xfb/0x1b0 [ 863.379455] __x64_sys_mount+0x282/0x300 [ 863.380276] ? copy_mnt_ns+0xa00/0xa00 [ 863.380904] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 863.381940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 863.382981] do_syscall_64+0x33/0x40 [ 863.383723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 863.384750] RIP: 0033:0x7fbd09823b19 [ 863.385507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.389185] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 863.390727] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 863.392157] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 863.393599] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 863.395021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.396434] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:34:45 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000010, r0, 0x0, 0x1f, 0x0) 17:34:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 53) 17:34:45 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:34:45 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x125d, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:34:45 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x1000000) 17:34:45 executing program 7: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x11) 17:34:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:34:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 878.643921] FAULT_INJECTION: forcing a failure. [ 878.643921] name failslab, interval 1, probability 0, space 0, times 0 [ 878.646486] CPU: 1 PID: 6916 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 878.647949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.649721] Call Trace: [ 878.650294] dump_stack+0x107/0x167 [ 878.651087] should_fail.cold+0x5/0xa [ 878.651902] ? __kmem_cache_create+0x10e/0x520 [ 878.652866] should_failslab+0x5/0x20 [ 878.653675] kmem_cache_alloc_node+0x55/0x330 [ 878.654637] __kmem_cache_create+0x10e/0x520 [ 878.655568] kmem_cache_create_usercopy+0x1db/0x2f0 [ 878.656630] p9_client_create+0xc6a/0x1230 [ 878.657550] ? p9_client_flush+0x430/0x430 [ 878.658449] ? trace_hardirqs_on+0x5b/0x180 [ 878.659367] ? lockdep_init_map_type+0x2c7/0x780 [ 878.660368] ? __raw_spin_lock_init+0x36/0x110 [ 878.661351] v9fs_session_init+0x1dd/0x1680 [ 878.662258] ? lock_release+0x680/0x680 [ 878.663105] ? kmem_cache_alloc_trace+0x151/0x320 [ 878.664126] ? v9fs_show_options+0x690/0x690 [ 878.665074] ? trace_hardirqs_on+0x5b/0x180 [ 878.665982] ? kasan_unpoison_shadow+0x33/0x50 [ 878.666947] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 878.668018] v9fs_mount+0x79/0x8f0 [ 878.668768] ? v9fs_write_inode+0x60/0x60 [ 878.669652] legacy_get_tree+0x105/0x220 [ 878.670516] vfs_get_tree+0x8e/0x300 [ 878.671312] path_mount+0x1331/0x21c0 [ 878.672120] ? strncpy_from_user+0x9e/0x470 [ 878.673032] ? finish_automount+0xa90/0xa90 [ 878.673952] ? getname_flags.part.0+0x1dd/0x4f0 [ 878.674929] ? _copy_from_user+0xfb/0x1b0 [ 878.675817] __x64_sys_mount+0x282/0x300 [ 878.676675] ? copy_mnt_ns+0xa00/0xa00 [ 878.677511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.678625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.679713] do_syscall_64+0x33/0x40 [ 878.680502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.681585] RIP: 0033:0x7fbd09823b19 [ 878.682367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.686262] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 878.687869] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 878.689383] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 878.690907] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 878.692423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 878.693939] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:34:45 executing program 7: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x11) [ 878.695599] kmem_cache_create(9p-fcall-cache-40) failed with error -22 [ 878.697309] CPU: 1 PID: 6916 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 878.698759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.700510] Call Trace: [ 878.701078] dump_stack+0x107/0x167 [ 878.701852] kmem_cache_create_usercopy.cold+0x17/0x65 17:34:45 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x2000000) [ 878.702966] p9_client_create+0xc6a/0x1230 [ 878.704047] ? p9_client_flush+0x430/0x430 [ 878.704943] ? trace_hardirqs_on+0x5b/0x180 [ 878.705882] ? lockdep_init_map_type+0x2c7/0x780 [ 878.706881] ? __raw_spin_lock_init+0x36/0x110 [ 878.707858] v9fs_session_init+0x1dd/0x1680 [ 878.708771] ? lock_release+0x680/0x680 [ 878.709629] ? kmem_cache_alloc_trace+0x151/0x320 [ 878.710641] ? v9fs_show_options+0x690/0x690 17:34:45 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x80000001c, r0, 0x0, 0x1f, 0x0) [ 878.711576] ? trace_hardirqs_on+0x5b/0x180 [ 878.712662] ? kasan_unpoison_shadow+0x33/0x50 [ 878.713636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 878.714710] v9fs_mount+0x79/0x8f0 [ 878.715466] ? v9fs_write_inode+0x60/0x60 [ 878.716334] legacy_get_tree+0x105/0x220 [ 878.717208] vfs_get_tree+0x8e/0x300 [ 878.717992] path_mount+0x1331/0x21c0 [ 878.718805] ? strncpy_from_user+0x9e/0x470 [ 878.719711] ? finish_automount+0xa90/0xa90 [ 878.720625] ? getname_flags.part.0+0x1dd/0x4f0 [ 878.721612] ? _copy_from_user+0xfb/0x1b0 [ 878.722492] __x64_sys_mount+0x282/0x300 [ 878.723344] ? copy_mnt_ns+0xa00/0xa00 [ 878.724173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.725283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.726376] do_syscall_64+0x33/0x40 [ 878.727164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.728245] RIP: 0033:0x7fbd09823b19 [ 878.729032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.733221] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 878.735219] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 878.736733] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 878.738259] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 878.739767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 878.741269] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:34:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:34:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:34:45 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:34:45 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x125e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:34:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 54) 17:34:45 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x11000000) [ 879.108898] FAULT_INJECTION: forcing a failure. [ 879.108898] name failslab, interval 1, probability 0, space 0, times 0 [ 879.112457] CPU: 1 PID: 6941 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 879.113938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 879.115702] Call Trace: [ 879.116277] dump_stack+0x107/0x167 [ 879.117081] should_fail.cold+0x5/0xa [ 879.117896] ? __kmem_cache_create+0x10e/0x520 [ 879.118871] should_failslab+0x5/0x20 [ 879.119671] kmem_cache_alloc_node+0x55/0x330 [ 879.120629] __kmem_cache_create+0x10e/0x520 [ 879.121577] kmem_cache_create_usercopy+0x1db/0x2f0 [ 879.122648] p9_client_create+0xc6a/0x1230 [ 879.123554] ? p9_client_flush+0x430/0x430 [ 879.124444] ? trace_hardirqs_on+0x5b/0x180 [ 879.125373] ? lockdep_init_map_type+0x2c7/0x780 [ 879.126372] ? __raw_spin_lock_init+0x36/0x110 [ 879.127340] v9fs_session_init+0x1dd/0x1680 [ 879.128253] ? lock_release+0x680/0x680 [ 879.129116] ? kmem_cache_alloc_trace+0x151/0x320 [ 879.130127] ? v9fs_show_options+0x690/0x690 [ 879.131073] ? trace_hardirqs_on+0x5b/0x180 [ 879.131991] ? kasan_unpoison_shadow+0x33/0x50 [ 879.132949] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 879.134024] v9fs_mount+0x79/0x8f0 [ 879.134777] ? v9fs_write_inode+0x60/0x60 [ 879.135649] legacy_get_tree+0x105/0x220 [ 879.136512] vfs_get_tree+0x8e/0x300 [ 879.137309] path_mount+0x1331/0x21c0 [ 879.138115] ? strncpy_from_user+0x9e/0x470 [ 879.139019] ? finish_automount+0xa90/0xa90 [ 879.139929] ? getname_flags.part.0+0x1dd/0x4f0 [ 879.140906] ? _copy_from_user+0xfb/0x1b0 [ 879.141793] __x64_sys_mount+0x282/0x300 [ 879.142650] ? copy_mnt_ns+0xa00/0xa00 [ 879.143471] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 879.144577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 879.145684] do_syscall_64+0x33/0x40 [ 879.146473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 879.147551] RIP: 0033:0x7fbd09823b19 [ 879.148329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 879.152225] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 879.153837] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 879.155342] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 879.156845] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 879.158365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 879.159876] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 879.161644] kmem_cache_create(9p-fcall-cache-41) failed with error -22 [ 879.163088] CPU: 1 PID: 6941 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 879.164522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 879.166276] Call Trace: [ 879.166851] dump_stack+0x107/0x167 [ 879.167624] kmem_cache_create_usercopy.cold+0x17/0x65 [ 879.168733] p9_client_create+0xc6a/0x1230 [ 879.169648] ? p9_client_flush+0x430/0x430 [ 879.170542] ? trace_hardirqs_on+0x5b/0x180 [ 879.171459] ? lockdep_init_map_type+0x2c7/0x780 [ 879.172468] ? __raw_spin_lock_init+0x36/0x110 [ 879.173452] v9fs_session_init+0x1dd/0x1680 [ 879.174357] ? lock_release+0x680/0x680 [ 879.175207] ? kmem_cache_alloc_trace+0x151/0x320 [ 879.176235] ? v9fs_show_options+0x690/0x690 [ 879.177185] ? trace_hardirqs_on+0x5b/0x180 [ 879.178093] ? kasan_unpoison_shadow+0x33/0x50 [ 879.179063] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 879.180129] v9fs_mount+0x79/0x8f0 [ 879.180882] ? v9fs_write_inode+0x60/0x60 [ 879.181765] legacy_get_tree+0x105/0x220 [ 879.182625] vfs_get_tree+0x8e/0x300 [ 879.183406] path_mount+0x1331/0x21c0 [ 879.184209] ? strncpy_from_user+0x9e/0x470 [ 879.185136] ? finish_automount+0xa90/0xa90 [ 879.186047] ? getname_flags.part.0+0x1dd/0x4f0 [ 879.187033] ? _copy_from_user+0xfb/0x1b0 [ 879.187924] __x64_sys_mount+0x282/0x300 [ 879.188778] ? copy_mnt_ns+0xa00/0xa00 [ 879.189617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 879.190727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 879.191831] do_syscall_64+0x33/0x40 [ 879.192616] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 879.193703] RIP: 0033:0x7fbd09823b19 [ 879.194489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 879.198342] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 879.199950] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 879.201471] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 879.202976] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 879.204482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 879.206005] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:35:04 executing program 7: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x11) 17:35:04 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0xffffff7f) 17:35:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 55) 17:35:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:35:04 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800001c00, r0, 0x0, 0x1f, 0x0) 17:35:04 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x125f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:35:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r1) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:35:04 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() [ 897.983124] FAULT_INJECTION: forcing a failure. [ 897.983124] name failslab, interval 1, probability 0, space 0, times 0 [ 897.985559] CPU: 0 PID: 6963 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 897.986960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 897.988642] Call Trace: [ 897.989189] dump_stack+0x107/0x167 [ 897.989940] should_fail.cold+0x5/0xa [ 897.990733] ? create_object.isra.0+0x3a/0xa20 [ 897.991672] should_failslab+0x5/0x20 [ 897.992444] kmem_cache_alloc+0x5b/0x310 [ 897.993278] create_object.isra.0+0x3a/0xa20 [ 897.994170] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 897.995221] kmem_cache_alloc_node+0x169/0x330 [ 897.996394] __kmem_cache_create+0x10e/0x520 [ 897.997313] kmem_cache_create_usercopy+0x1db/0x2f0 [ 897.998341] p9_client_create+0xc6a/0x1230 [ 897.999239] ? p9_client_flush+0x430/0x430 [ 898.000107] ? trace_hardirqs_on+0x5b/0x180 [ 898.000997] ? lockdep_init_map_type+0x2c7/0x780 [ 898.001972] ? __raw_spin_lock_init+0x36/0x110 [ 898.002910] v9fs_session_init+0x1dd/0x1680 [ 898.003794] ? lock_release+0x680/0x680 [ 898.004613] ? kmem_cache_alloc_trace+0x151/0x320 [ 898.005601] ? v9fs_show_options+0x690/0x690 [ 898.006504] ? trace_hardirqs_on+0x5b/0x180 [ 898.007383] ? kasan_unpoison_shadow+0x33/0x50 [ 898.008347] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 898.009392] v9fs_mount+0x79/0x8f0 [ 898.010117] ? v9fs_write_inode+0x60/0x60 [ 898.010955] legacy_get_tree+0x105/0x220 [ 898.011789] vfs_get_tree+0x8e/0x300 [ 898.012555] path_mount+0x1331/0x21c0 [ 898.013342] ? strncpy_from_user+0x9e/0x470 [ 898.014213] ? finish_automount+0xa90/0xa90 [ 898.015089] ? getname_flags.part.0+0x1dd/0x4f0 [ 898.016038] ? _copy_from_user+0xfb/0x1b0 [ 898.016890] __x64_sys_mount+0x282/0x300 [ 898.017729] ? copy_mnt_ns+0xa00/0xa00 [ 898.018547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 898.019625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 898.020671] do_syscall_64+0x33/0x40 [ 898.021441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 898.022477] RIP: 0033:0x7fbd09823b19 [ 898.023243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 898.026987] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 898.028544] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 898.030014] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 898.031477] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 898.032924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 898.034388] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:35:04 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x8000000000000) 17:35:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x40030000000000) 17:35:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 56) 17:35:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r1) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:35:21 executing program 7: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x11) 17:35:21 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800800000, r0, 0x0, 0x1f, 0x0) 17:35:21 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x1260, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:35:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:35:21 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() [ 914.831025] FAULT_INJECTION: forcing a failure. [ 914.831025] name failslab, interval 1, probability 0, space 0, times 0 [ 914.833489] CPU: 0 PID: 6986 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 914.834912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.836881] Call Trace: [ 914.837591] dump_stack+0x107/0x167 [ 914.838530] should_fail.cold+0x5/0xa [ 914.839518] ? create_object.isra.0+0x3a/0xa20 [ 914.840518] should_failslab+0x5/0x20 [ 914.841317] kmem_cache_alloc+0x5b/0x310 [ 914.842379] create_object.isra.0+0x3a/0xa20 [ 914.843301] kmemleak_alloc_percpu+0xa0/0x100 [ 914.844236] pcpu_alloc+0x4e2/0x1240 [ 914.845224] __kmem_cache_create+0x35a/0x520 [ 914.846167] kmem_cache_create_usercopy+0x1db/0x2f0 [ 914.847473] p9_client_create+0xc6a/0x1230 [ 914.848369] ? p9_client_flush+0x430/0x430 [ 914.849531] ? trace_hardirqs_on+0x5b/0x180 [ 914.850441] ? lockdep_init_map_type+0x2c7/0x780 [ 914.851435] ? __raw_spin_lock_init+0x36/0x110 [ 914.852631] v9fs_session_init+0x1dd/0x1680 [ 914.853605] ? lock_release+0x680/0x680 [ 914.854640] ? kmem_cache_alloc_trace+0x151/0x320 [ 914.855692] ? v9fs_show_options+0x690/0x690 [ 914.856845] ? trace_hardirqs_on+0x5b/0x180 [ 914.858098] ? kasan_unpoison_shadow+0x33/0x50 17:35:21 executing program 7: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x11) [ 914.859419] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 914.861001] v9fs_mount+0x79/0x8f0 [ 914.861907] ? v9fs_write_inode+0x60/0x60 [ 914.862894] legacy_get_tree+0x105/0x220 [ 914.863878] vfs_get_tree+0x8e/0x300 [ 914.864777] path_mount+0x1331/0x21c0 [ 914.865668] ? strncpy_from_user+0x9e/0x470 [ 914.866665] ? finish_automount+0xa90/0xa90 [ 914.867725] ? getname_flags.part.0+0x1dd/0x4f0 [ 914.868874] ? _copy_from_user+0xfb/0x1b0 [ 914.869871] __x64_sys_mount+0x282/0x300 [ 914.870808] ? copy_mnt_ns+0xa00/0xa00 17:35:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x100000000000000) [ 914.871763] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 914.873076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 914.874338] do_syscall_64+0x33/0x40 [ 914.875233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 914.876442] RIP: 0033:0x7fbd09823b19 [ 914.877321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 914.881608] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 914.883781] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 914.885456] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 914.887106] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 914.888768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.890439] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:35:21 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x801000000, r0, 0x0, 0x1f, 0x0) 17:35:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:35:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r1) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) 17:35:21 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x1261, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:35:22 executing program 7: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x11) 17:35:22 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x1262, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:35:22 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:35:37 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, 0x0, 0x0, 0x11) 17:35:37 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x1263, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:35:37 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:35:37 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x200000000000000) 17:35:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:35:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 57) 17:35:37 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x810000000, r0, 0x0, 0x1f, 0x0) 17:35:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 930.460128] FAULT_INJECTION: forcing a failure. [ 930.460128] name failslab, interval 1, probability 0, space 0, times 0 [ 930.462573] CPU: 0 PID: 7039 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 930.464030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 930.465791] Call Trace: [ 930.466357] dump_stack+0x107/0x167 [ 930.467134] should_fail.cold+0x5/0xa [ 930.467944] ? create_object.isra.0+0x3a/0xa20 [ 930.468907] should_failslab+0x5/0x20 [ 930.469727] kmem_cache_alloc+0x5b/0x310 [ 930.470600] create_object.isra.0+0x3a/0xa20 [ 930.471544] kmemleak_alloc_percpu+0xa0/0x100 [ 930.472493] pcpu_alloc+0x4e2/0x1240 [ 930.473305] __kmem_cache_create+0x35a/0x520 [ 930.474259] kmem_cache_create_usercopy+0x1db/0x2f0 [ 930.475331] p9_client_create+0xc6a/0x1230 [ 930.476248] ? p9_client_flush+0x430/0x430 [ 930.477153] ? trace_hardirqs_on+0x5b/0x180 [ 930.478081] ? lockdep_init_map_type+0x2c7/0x780 [ 930.479099] ? __raw_spin_lock_init+0x36/0x110 [ 930.480083] v9fs_session_init+0x1dd/0x1680 [ 930.480994] ? lock_release+0x680/0x680 [ 930.481861] ? kmem_cache_alloc_trace+0x151/0x320 [ 930.482880] ? v9fs_show_options+0x690/0x690 [ 930.483836] ? trace_hardirqs_on+0x5b/0x180 [ 930.484760] ? kasan_unpoison_shadow+0x33/0x50 [ 930.485735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 930.486825] v9fs_mount+0x79/0x8f0 [ 930.487580] ? v9fs_write_inode+0x60/0x60 [ 930.488461] legacy_get_tree+0x105/0x220 [ 930.489318] vfs_get_tree+0x8e/0x300 [ 930.490110] path_mount+0x1331/0x21c0 [ 930.490927] ? strncpy_from_user+0x9e/0x470 [ 930.491842] ? finish_automount+0xa90/0xa90 [ 930.492762] ? getname_flags.part.0+0x1dd/0x4f0 [ 930.493760] ? _copy_from_user+0xfb/0x1b0 [ 930.494653] __x64_sys_mount+0x282/0x300 [ 930.495512] ? copy_mnt_ns+0xa00/0xa00 [ 930.496338] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 930.497447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 930.498557] do_syscall_64+0x33/0x40 [ 930.499346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 930.500449] RIP: 0033:0x7fbd09823b19 [ 930.501223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 930.505133] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 930.506755] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 930.508258] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 930.509768] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 930.511278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 930.512803] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:35:37 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x81c000000, r0, 0x0, 0x1f, 0x0) 17:35:37 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:35:37 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, 0x0, 0x0, 0x11) 17:35:37 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x1100000000000000) 17:35:37 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x1264, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:35:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:35:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:35:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 58) 17:35:37 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, 0x0, 0x0, 0x11) 17:35:37 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0xffffff7f00000000) 17:35:37 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x10) 17:35:37 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x1265, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:35:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) [ 931.016799] FAULT_INJECTION: forcing a failure. [ 931.016799] name failslab, interval 1, probability 0, space 0, times 0 [ 931.018916] CPU: 0 PID: 7069 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 931.020135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 931.021489] Call Trace: [ 931.021943] dump_stack+0x107/0x167 [ 931.022557] should_fail.cold+0x5/0xa [ 931.023189] ? create_object.isra.0+0x3a/0xa20 [ 931.023925] should_failslab+0x5/0x20 [ 931.024575] kmem_cache_alloc+0x5b/0x310 [ 931.025263] create_object.isra.0+0x3a/0xa20 [ 931.026006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 931.026844] __kmalloc_track_caller+0x177/0x370 [ 931.027599] ? kstrdup_const+0x53/0x80 [ 931.028260] kstrdup+0x36/0x70 [ 931.028778] kstrdup_const+0x53/0x80 [ 931.029395] kvasprintf_const+0x10c/0x1a0 [ 931.030098] kobject_set_name_vargs+0x56/0x150 [ 931.030847] kobject_init_and_add+0xc9/0x160 [ 931.031583] ? kobject_create_and_add+0xb0/0xb0 [ 931.032354] ? wait_for_completion_io+0x270/0x270 [ 931.033154] ? kernfs_name_hash+0xe7/0x110 [ 931.033871] ? kernfs_find_ns+0x256/0x380 [ 931.034577] sysfs_slab_add+0x172/0x200 [ 931.035248] __kmem_cache_create+0x3db/0x520 [ 931.035990] kmem_cache_create_usercopy+0x1db/0x2f0 [ 931.036821] p9_client_create+0xc6a/0x1230 [ 931.037506] ? p9_client_flush+0x430/0x430 [ 931.038197] ? trace_hardirqs_on+0x5b/0x180 [ 931.038922] ? lockdep_init_map_type+0x2c7/0x780 [ 931.039671] ? __raw_spin_lock_init+0x36/0x110 [ 931.040428] v9fs_session_init+0x1dd/0x1680 [ 931.041128] ? lock_release+0x680/0x680 [ 931.041794] ? kmem_cache_alloc_trace+0x151/0x320 [ 931.042581] ? v9fs_show_options+0x690/0x690 [ 931.043305] ? trace_hardirqs_on+0x5b/0x180 [ 931.044007] ? kasan_unpoison_shadow+0x33/0x50 [ 931.044758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 931.045595] v9fs_mount+0x79/0x8f0 [ 931.046184] ? v9fs_write_inode+0x60/0x60 [ 931.046885] legacy_get_tree+0x105/0x220 [ 931.047550] vfs_get_tree+0x8e/0x300 [ 931.048169] path_mount+0x1331/0x21c0 [ 931.048790] ? strncpy_from_user+0x9e/0x470 [ 931.049513] ? finish_automount+0xa90/0xa90 [ 931.050228] ? getname_flags.part.0+0x1dd/0x4f0 [ 931.050994] ? _copy_from_user+0xfb/0x1b0 [ 931.051660] __x64_sys_mount+0x282/0x300 [ 931.052342] ? copy_mnt_ns+0xa00/0xa00 [ 931.052977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 931.053843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 931.054675] do_syscall_64+0x33/0x40 [ 931.055285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 931.056107] RIP: 0033:0x7fbd09823b19 [ 931.056719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 931.059673] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 931.060929] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 931.062078] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 931.063228] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 931.064376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 931.065516] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:35:51 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740), 0x0, 0x11) 17:35:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:35:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:35:51 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x1267, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:35:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a80)='\f', 0x1}], 0x1}}], 0x1, 0x4000000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, 0x0) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 17:35:51 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x1c) 17:35:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 59) 17:35:51 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() [ 944.729148] FAULT_INJECTION: forcing a failure. [ 944.729148] name failslab, interval 1, probability 0, space 0, times 0 [ 944.731662] CPU: 1 PID: 7106 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 944.733118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.734884] Call Trace: [ 944.735454] dump_stack+0x107/0x167 [ 944.736227] should_fail.cold+0x5/0xa [ 944.737035] should_failslab+0x5/0x20 [ 944.737851] __kmalloc_track_caller+0x79/0x370 [ 944.738812] ? kstrdup_const+0x53/0x80 [ 944.739632] kstrdup+0x36/0x70 [ 944.740306] kstrdup_const+0x53/0x80 [ 944.741090] __kernfs_new_node+0x9d/0x860 [ 944.741995] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 944.743007] ? lock_acquire+0x197/0x470 [ 944.743851] ? perf_trace_lock+0xac/0x490 [ 944.744726] ? __lockdep_reset_lock+0x180/0x180 [ 944.745703] kernfs_new_node+0x18d/0x250 [ 944.746571] kernfs_create_dir_ns+0x49/0x160 [ 944.747503] sysfs_create_dir_ns+0x127/0x290 [ 944.748429] ? sysfs_create_mount_point+0xb0/0xb0 [ 944.749439] ? rwlock_bug.part.0+0x90/0x90 [ 944.750336] ? do_raw_spin_unlock+0x4f/0x220 [ 944.751265] kobject_add_internal+0x25e/0xa30 [ 944.752215] kobject_init_and_add+0x101/0x160 [ 944.753156] ? kobject_create_and_add+0xb0/0xb0 [ 944.754141] ? wait_for_completion_io+0x270/0x270 [ 944.755150] ? kernfs_name_hash+0xe7/0x110 [ 944.756037] ? kernfs_find_ns+0x256/0x380 [ 944.756918] sysfs_slab_add+0x172/0x200 [ 944.757759] __kmem_cache_create+0x3db/0x520 [ 944.758696] kmem_cache_create_usercopy+0x1db/0x2f0 [ 944.759750] p9_client_create+0xc6a/0x1230 [ 944.760652] ? p9_client_flush+0x430/0x430 [ 944.761544] ? trace_hardirqs_on+0x5b/0x180 [ 944.762467] ? lockdep_init_map_type+0x2c7/0x780 [ 944.763465] ? __raw_spin_lock_init+0x36/0x110 [ 944.764428] v9fs_session_init+0x1dd/0x1680 [ 944.765335] ? lock_release+0x680/0x680 [ 944.766188] ? kmem_cache_alloc_trace+0x151/0x320 [ 944.767214] ? v9fs_show_options+0x690/0x690 [ 944.768158] ? trace_hardirqs_on+0x5b/0x180 [ 944.769069] ? kasan_unpoison_shadow+0x33/0x50 [ 944.770051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 944.771120] v9fs_mount+0x79/0x8f0 [ 944.771877] ? v9fs_write_inode+0x60/0x60 [ 944.772748] legacy_get_tree+0x105/0x220 [ 944.773625] vfs_get_tree+0x8e/0x300 [ 944.774416] path_mount+0x1331/0x21c0 [ 944.775240] ? strncpy_from_user+0x9e/0x470 [ 944.776156] ? finish_automount+0xa90/0xa90 [ 944.777080] ? getname_flags.part.0+0x1dd/0x4f0 [ 944.778071] ? _copy_from_user+0xfb/0x1b0 [ 944.778969] __x64_sys_mount+0x282/0x300 [ 944.779818] ? copy_mnt_ns+0xa00/0xa00 [ 944.780645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.781747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.782849] do_syscall_64+0x33/0x40 [ 944.783638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.784722] RIP: 0033:0x7fbd09823b19 [ 944.785522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.789457] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 944.791086] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 944.792603] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 944.794131] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 944.795652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.797166] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 944.800230] kobject_add_internal failed for 9p-fcall-cache-46 (error: -12 parent: slab) [ 944.802549] kmem_cache_create(9p-fcall-cache-46) failed with error -12 [ 944.804007] CPU: 1 PID: 7106 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 944.805445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.807197] Call Trace: [ 944.807755] dump_stack+0x107/0x167 17:35:51 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%\xe6\x00', 0x0) splice(r1, &(0x7f00000007c0)=0x800000000, r0, 0x0, 0x1f, 0x1c00) 17:35:51 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740), 0x0, 0x11) [ 944.808525] kmem_cache_create_usercopy.cold+0x17/0x65 [ 944.809885] p9_client_create+0xc6a/0x1230 [ 944.810799] ? p9_client_flush+0x430/0x430 17:35:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x0) r1 = accept(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x80) clock_gettime(0x0, &(0x7f0000001e40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000001c0)=""/148, 0x94}], 0x2, &(0x7f00000002c0)=""/82, 0x52}, 0x5f3}, {{&(0x7f0000000340)=@ieee802154, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/82, 0x52}], 0x2, &(0x7f0000000500)=""/195, 0xc3}, 0x7}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/194, 0xc2}], 0x1, &(0x7f00000007c0)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/6, 0x6}], 0x2}, 0x40}, {{&(0x7f0000001900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001980)=""/112, 0x70}, {&(0x7f0000001a00)=""/5, 0x5}, {&(0x7f0000001a40)=""/214, 0xd6}, {&(0x7f0000001b40)=""/74, 0x4a}, {&(0x7f0000001bc0)=""/101, 0x65}], 0x5, &(0x7f0000001ec0)=""/5, 0x5}, 0x8}], 0x5, 0x2000, &(0x7f0000001e80)={r2, r3+60000000}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r4, {0xffff}}, './file0\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, 0x0) execveat(r6, &(0x7f0000002280)='./file0\x00', &(0x7f0000002440)=[&(0x7f00000022c0)='\x00', &(0x7f0000002300)='\x00', &(0x7f0000002340)=']\x00', &(0x7f0000002380)='.d-\x00', &(0x7f00000023c0)='%%$[*{\x00', &(0x7f0000002400)='-{(*\x0f\\\x00'], &(0x7f0000002500)=[&(0x7f0000002480)='(]\x00', &(0x7f00000024c0)='.-\'E\xfa-\x00'], 0x400) execveat(r5, &(0x7f0000001f00)='./file0\x00', &(0x7f0000002140)=[&(0x7f0000001f40)=']\x00', &(0x7f0000001f80)='\x00', &(0x7f0000001fc0)='@{)*\x00', &(0x7f0000002000)='.-\'E\xfa-\x00', &(0x7f0000002040)='\'*-(-\x00', &(0x7f0000002080)='\x00', &(0x7f00000020c0)='\x00', &(0x7f0000002100)='@{\x00'], &(0x7f0000002240)=[&(0x7f0000002180)='\x00', &(0x7f00000021c0)='(.\x00', &(0x7f0000002200)='.d-\x00'], 0x100) [ 944.811686] ? trace_hardirqs_on+0x5b/0x180 [ 944.812738] ? lockdep_init_map_type+0x2c7/0x780 [ 944.813727] ? __raw_spin_lock_init+0x36/0x110 [ 944.814696] v9fs_session_init+0x1dd/0x1680 [ 944.815597] ? lock_release+0x680/0x680 [ 944.816444] ? kmem_cache_alloc_trace+0x151/0x320 [ 944.817456] ? v9fs_show_options+0x690/0x690 [ 944.818410] ? trace_hardirqs_on+0x5b/0x180 [ 944.819327] ? kasan_unpoison_shadow+0x33/0x50 [ 944.820276] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 944.821336] v9fs_mount+0x79/0x8f0 [ 944.822129] ? v9fs_write_inode+0x60/0x60 [ 944.822990] legacy_get_tree+0x105/0x220 [ 944.823846] vfs_get_tree+0x8e/0x300 [ 944.824624] path_mount+0x1331/0x21c0 [ 944.825426] ? strncpy_from_user+0x9e/0x470 [ 944.826345] ? finish_automount+0xa90/0xa90 [ 944.827254] ? getname_flags.part.0+0x1dd/0x4f0 [ 944.828229] ? _copy_from_user+0xfb/0x1b0 [ 944.829103] __x64_sys_mount+0x282/0x300 [ 944.829961] ? copy_mnt_ns+0xa00/0xa00 [ 944.830785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.831879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.832961] do_syscall_64+0x33/0x40 [ 944.833739] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.834826] RIP: 0033:0x7fbd09823b19 [ 944.835618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.839471] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 944.841067] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 944.842570] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 944.844073] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 944.845570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.847070] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 17:35:51 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {0x0}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x7fb9, &(0x7f0000000500)={0x0, 0x144, 0x0, 0x2, 0x18f}, &(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 17:35:51 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) 17:35:51 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x1268, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:35:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd700019dcdf25040000000c00018000000800030004000000080002000000000000000000000069c4"], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4000805) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "9755154351ac9a"}) 17:35:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '+#,-\xa2,+-'}}]}}) (fail_nth: 60) 17:35:51 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000006740), 0x0, 0x11) 17:35:51 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) [ 945.153642] FAULT_INJECTION: forcing a failure. [ 945.153642] name failslab, interval 1, probability 0, space 0, times 0 [ 945.156330] CPU: 1 PID: 7132 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 945.157757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 945.159495] Call Trace: [ 945.160057] dump_stack+0x107/0x167 [ 945.160820] should_fail.cold+0x5/0xa [ 945.161624] ? create_object.isra.0+0x3a/0xa20 [ 945.162595] should_failslab+0x5/0x20 [ 945.163388] kmem_cache_alloc+0x5b/0x310 [ 945.164362] create_object.isra.0+0x3a/0xa20 [ 945.165474] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 945.166554] __kmalloc_track_caller+0x177/0x370 [ 945.167518] ? kstrdup_const+0x53/0x80 [ 945.168345] kstrdup+0x36/0x70 [ 945.169013] kstrdup_const+0x53/0x80 [ 945.169806] __kernfs_new_node+0x9d/0x860 [ 945.170686] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 945.171687] ? lock_acquire+0x197/0x470 [ 945.172529] ? perf_trace_lock+0xac/0x490 [ 945.173401] ? __lockdep_reset_lock+0x180/0x180 [ 945.174387] kernfs_new_node+0x18d/0x250 [ 945.175243] kernfs_create_dir_ns+0x49/0x160 [ 945.176169] sysfs_create_dir_ns+0x127/0x290 [ 945.177085] ? sysfs_create_mount_point+0xb0/0xb0 [ 945.178100] ? rwlock_bug.part.0+0x90/0x90 [ 945.178985] ? do_raw_spin_unlock+0x4f/0x220 [ 945.179910] kobject_add_internal+0x25e/0xa30 [ 945.180857] kobject_init_and_add+0x101/0x160 [ 945.181792] ? kobject_create_and_add+0xb0/0xb0 [ 945.182774] ? wait_for_completion_io+0x270/0x270 [ 945.183781] ? kernfs_name_hash+0xe7/0x110 [ 945.184664] ? kernfs_find_ns+0x256/0x380 [ 945.185544] sysfs_slab_add+0x172/0x200 [ 945.186387] __kmem_cache_create+0x3db/0x520 [ 945.187315] kmem_cache_create_usercopy+0x1db/0x2f0 [ 945.188376] p9_client_create+0xc6a/0x1230 [ 945.189277] ? p9_client_flush+0x430/0x430 [ 945.190170] ? trace_hardirqs_on+0x5b/0x180 [ 945.191072] ? lockdep_init_map_type+0x2c7/0x780 [ 945.192083] ? __raw_spin_lock_init+0x36/0x110 [ 945.193044] v9fs_session_init+0x1dd/0x1680 [ 945.193959] ? lock_release+0x680/0x680 [ 945.194800] ? kmem_cache_alloc_trace+0x151/0x320 [ 945.195812] ? v9fs_show_options+0x690/0x690 [ 945.196745] ? trace_hardirqs_on+0x5b/0x180 [ 945.197647] ? kasan_unpoison_shadow+0x33/0x50 [ 945.198606] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 945.199669] v9fs_mount+0x79/0x8f0 [ 945.200415] ? v9fs_write_inode+0x60/0x60 [ 945.201283] legacy_get_tree+0x105/0x220 [ 945.202142] vfs_get_tree+0x8e/0x300 [ 945.202922] path_mount+0x1331/0x21c0 [ 945.203723] ? strncpy_from_user+0x9e/0x470 [ 945.204631] ? finish_automount+0xa90/0xa90 [ 945.205532] ? getname_flags.part.0+0x1dd/0x4f0 [ 945.206512] ? _copy_from_user+0xfb/0x1b0 [ 945.207392] __x64_sys_mount+0x282/0x300 [ 945.208239] ? copy_mnt_ns+0xa00/0xa00 [ 945.209059] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 945.210162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 945.211249] do_syscall_64+0x33/0x40 [ 945.212035] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 945.213106] RIP: 0033:0x7fbd09823b19 [ 945.213895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 945.217765] RSP: 002b:00007fbd06d99188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 945.219379] RAX: ffffffffffffffda RBX: 00007fbd09936f60 RCX: 00007fbd09823b19 [ 945.220880] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 945.222399] RBP: 00007fbd06d991d0 R08: 00000000200005c0 R09: 0000000000000000 [ 945.223902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 945.225394] R13: 00007fff850279ff R14: 00007fbd06d99300 R15: 0000000000022000 [ 960.484557] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800ca32a40 (size 32): comm "syz-executor.0", pid 7106, jiffies 4295611644 (age 23.374s) hex dump (first 32 bytes): 39 70 2d 66 63 61 6c 6c 2d 63 61 63 68 65 2d 34 9p-fcall-cache-4 36 00 a3 0c 80 88 ff ff 19 00 00 00 00 00 00 00 6............... backtrace: [<0000000095f54943>] kstrdup+0x36/0x70 [<0000000024d1b3d8>] kstrdup_const+0x53/0x80 [<00000000a96a9e29>] kvasprintf_const+0x10c/0x1a0 [<000000003ebfa921>] kobject_set_name_vargs+0x56/0x150 [<000000001a509e8f>] kobject_init_and_add+0xc9/0x160 [<00000000475928e7>] sysfs_slab_add+0x172/0x200 [<000000000886dd1e>] __kmem_cache_create+0x3db/0x520 [<000000006eeffb87>] kmem_cache_create_usercopy+0x1db/0x2f0 [<00000000a7c27839>] p9_client_create+0xc6a/0x1230 [<000000006297010c>] v9fs_session_init+0x1dd/0x1680 [<000000005911d5a7>] v9fs_mount+0x79/0x8f0 [<00000000a5ebf553>] legacy_get_tree+0x105/0x220 [<00000000aacadafa>] vfs_get_tree+0x8e/0x300 [<000000002e0d0e50>] path_mount+0x1331/0x21c0 [<000000003ea939ba>] __x64_sys_mount+0x282/0x300 [<000000006d2d6454>] do_syscall_64+0x33/0x40 BUG: leak checking failed VM DIAGNOSIS: 17:36:15 Registers: info registers vcpu 0 RAX=ffffffff83e942d0 RBX=0000000000000000 RCX=ffffffff83e7bf7c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e949e8 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85678988 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e942de RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f79904624d0 CR3=000000000dbc8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004184e60640000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff8131bb99 RDX=ffff888008978000 RSI=ffffffff8131bbb9 RDI=0000000000000006 RBP=ffff88806cf09da0 RSP=ffff88806cf09cd8 R8 =0000000000000001 R9 =0000000000000003 R10=00000000002aa4fe R11=0000000000000001 R12=00000000002aa4fe R13=ffffffffffffffff R14=00000000002ee490 R15=0000000000000000 RIP=ffffffff8140d0de RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc78fa4770 CR3=000000000dbc8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0a64656c69616620676e696b63656863 XMM02=31636e75662e6e75522e6c697475736f XMM03=00000000000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=327830202c7d3172202c64337830202c XMM09=61277b3d656d616e61407b5b7b202c63 XMM10=232b27202c64337830202c27656d616e XMM11=297d7d5d7d7d272d2b2c3261785c2d2c XMM12=0a293036203a68746e5f6c6961662820 XMM13=3030303066377830282628657069700a XMM14=78303e3d30723c7b3d29306331303030 XMM15=66666666666666666666666666666666